#!/bin/sh

set -e

CONFFILE="/etc/nss-ldapd.conf"

# source debconf library.
. /usr/share/debconf/confmodule
db_version 2.0
db_capb backup

# set title
db_title "Configuring libnss-ldapd"

#
# This is the fist part of the script. In this part an attempt
# is made to get or guess the current configuration. This information
# is used later on to prompt the user and to provide a sensible
# default.
#

# check the system (non-LDAP configuration files) for some
# reasonable defaults
parsesys()
{
  # guess domain based on system information
  domain=`hostname --domain` || true
  [ -z "$domain" ] && domain=`hostname --nis | grep '\.'` || true
  [ -z "$domain" ] && domain=`hostname --fqdn | sed -n 's/^[^.]*\.//p'` || true
  [ -z "$domain" ] && domain=`sed -n 's/^ *\(domain\|search\) *\([^ ]*\) *$/\2/p' /etc/resolv.conf | head -n 1` || true
  db_get libnss-ldapd/ldap-base
  searchbase="$RET"
  # if the ldap-base value doesn't seem to be preseeded, try to use the
  # domain name to build the default base
  if [ -n "$domain" ] && ( [ -z "$searchbase" ] || [ "$searchbase" = "dc=example,dc=net" ] )
  then
    searchbase=`echo "$domain" | sed 's/^/dc=/;s/\./,dc=/'` || true
    db_set libnss-ldapd/ldap-base "$searchbase"
  fi
  # guess ldap server
  server=`getent hosts ldap` || true
  [ -z "$server" ] && server=`getent hosts dirhost` || true
  if [ -n "$domain" ] && [ -z "$server" ]
  then
    server=`getent hosts ldap."$domain"` || true
    [ -z "$server" ] && server=`getent hosts dirhost."$domain"` || true
  fi
  if [ -n "$server" ]
  then
    # extract ip address from host entry and quote ipv6 address
    ip=`echo $server | sed 's/[[:space:]].*//;s/^\(.*:.*\)$/[\1]/'`
    db_set libnss-ldapd/ldap-uris "ldap://$ip/"
  fi
}

# parse a LDAP-like configuration file
parsecfg()
{
  cfgfile="$1"
  # check existance
  [ -f "$cfgfile" ] || return 0
  # find uri/host/port combo
  uris=`sed -n 's/^uri[[:space:]]*//ip' "$cfgfile" | tr '\n' ' '`
  if [ -z "$uris" ]
  then
    hosts=`sed -n 's/^host[[:space:]]*//ip' "$cfgfile"`
    port=`sed -n 's/^port[[:space:]]*//ip' "$cfgfile" | tail -n 1`
    for host in $hosts
    do
      if [ -z "$port" ] || (echo "$host" | grep -q ':' )
      then
        uris="$uris ldap://$host/"
      else
        uris="$uris ldap://$host:$port/"
      fi
    done
  fi
  [ -n "$uris" ] && db_set libnss-ldapd/ldap-uris "$uris"
  # find base config
  searchbase=`sed -n 's/^base[[:space:]]*\([^[:space:]]*\)[[:space:]]*$/\1/ip' "$cfgfile" | tail -n 1`
  [ -n "$searchbase" ] && db_set libnss-ldapd/ldap-base "$searchbase"
  # find binddn
  binddn=`sed -n 's/^binddn[[:space:]]*//ip' "$cfgfile" | tail -n 1`
  db_set libnss-ldapd/ldap-binddn "$binddn"
  # find bindpw
  bindpw=`sed -n 's/^bindpw[[:space:]]*//ip' "$cfgfile" | tail -n 1`
  db_set libnss-ldapd/ldap-bindpw "$bindpw"
  # we're done
  return 0
}

# parse /etc/nsswitch.conf and see which services have ldap specified
parsensswitch()
{
  # find name services that currently use LDAP
  configured=`sed -n 's/^\([a-z]*\):.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p' /etc/nsswitch.conf`
  # separate by commas
  configured=`echo $configured | sed 's/ /, /g'`
  # store configured services
  db_set libnss-ldapd/nsswitch "$configured"
  # we're done
  return 0
}

# clear some settings in case they are not set in the config
db_set libnss-ldapd/ldap-binddn ""
db_set libnss-ldapd/ldap-bindpw ""

# fill our defaults with the current configuration if available
# and fall back to guessing the config from some other system files
if [ -f "$CONFFILE" ]
then
  # parse current configuration
  parsecfg "$CONFFILE"
else
  # newer found values override older values
  parsesys
  parsecfg /etc/ldap/ldap.conf
  parsecfg /etc/pam_ldap.conf
  parsecfg /etc/libnss-ldap.conf
fi
# check /etc/nsswitch.conf
parsensswitch

#
# This is the second part of the script. In this part the configurable
# settings will be presented to the user for approval. The postinst
# will finaly perform the actual modifications.
#

state="server"
while [ "$state" != "done" ]
do
  case "$state" in
  server)
    # ask about server configuration
    db_input high libnss-ldapd/ldap-uris || true
    db_input high libnss-ldapd/ldap-base || true
    # ask the questions, go to the next question or exit
    state="binddn"
    db_go || exit 1
    # TODO: add error checking on options
    ;;
  binddn)
    # ask for login information
    db_input medium libnss-ldapd/ldap-binddn || true
    # ask the question, go to the next question or back
    state="bindpw"
    db_go || state="server"
    ;;
  bindpw)
    # only ask question if we have a binddn
    db_get libnss-ldapd/ldap-binddn
    if [ -n "$RET" ]
    then
      # ask for login information
      db_input medium libnss-ldapd/ldap-bindpw || true
    else
      # clear password
      db_set libnss-ldapd/ldap-bindpw ""
    fi
    # ask the question, go to the next question or back
    state="nsswitch"
    db_go || state="binddn"
    ;;
  nsswitch)
    # ask for which nsswitch options to configure
    db_capb multiselect
    db_input high libnss-ldapd/nsswitch || true
    state="done"
    db_go || state="bindpw"
    ;;
  esac
done

exit 0