blob: b21df19ece82a3db3a50905358ca5cd3be298e39 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
#!/bin/sh
set -e
# remove NSS lookups though LDAP for the specified service
nss_disable()
{
name="$1"
# these functions also remove the lookup result handling part
# of the ldap entry (see nsswitch.conf(5))
if grep -q '^'$name':.*ldap.*' /etc/nsswitch.conf
then
echo "/etc/nsswitch.conf: disable LDAP lookups for $name" >&2
if [ -n "`sed -n '/^'$name':[[:space:]]*ldap[[:space:]]*\(\[[^]]*\]\)*[[:space:]]*$/p' /etc/nsswitch.conf`" ]
then
# the name service only maps to ldap, remove the whole line
sed -i '/^'$name':[[:space:]]*ldap[[:space:]]*\(\[[^]]*\]\)*[[:space:]]*$/d' /etc/nsswitch.conf
else
# remove ldap part from existing line, keeping other methods intact
# TODO: remove trailing space
sed -i 's/^\('$name':.*\)ldap[[:space:]]*\(\[[^]]*\]\)*[[:space:]]*\(.*\)$/\1\3/' /etc/nsswitch.conf
fi
fi
# we're done
return 0
}
# offer to remove ldap from nsswitch.conf
if ( [ "$1" = "remove" ] || [ "$1" = "purge" ] )
then
# check which naming services are configured
configured=`sed -n 's/^\([a-z]*\):.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p' /etc/nsswitch.conf`
if [ -n "$configured" ]
then
# if we have debconf, use debconf to ask, otherwise just shout
if [ -e /usr/share/debconf/confmodule ]
then
# ask with debconf
. /usr/share/debconf/confmodule
db_title "Removing libnss-ldapd"
db_subst libnss-ldapd/clean_nsswitch services "`echo $configured | sed 's/ /, /g'`"
db_fset libnss-ldapd/clean_nsswitch seen false
if db_input high libnss-ldapd/clean_nsswitch
then
db_go
db_get libnss-ldapd/clean_nsswitch
if [ "$RET" = "true" ]
then
for n in $configured
do
nss_disable $n
done
fi
fi
# re-check which services are left enabled
configured=`sed -n 's/^\([a-z]*\):.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p' /etc/nsswitch.conf`
fi
# check if ldap is still configured
if [ -n "$configured" ]
then
echo "WARNING: LDAP is still configured in /etc/nsswitch.conf" >&2
fi
fi
fi
# call ldconfig to signal the removal of our NSS library
if [ "$1" = "remove" ]
then
ldconfig
fi
#DEBHELPER#
|