#!/bin/bash

#

# kadmind      Start and stop the Kerberos 5 administrative server.

#

# chkconfig:   - 35 65

# description: Kerberos 5 is a trusted third-party authentication system.  \

#	       This script starts and stops the Kerberos 5 administrative \

#              server, which should only be run on the master server for a \

#              realm.

# processname: kadmind

# config: /etc/sysconfig/kadmin

#

# Get config.

. /etc/sysconfig/network

# Check that networking is up.

[ ${NETWORKING} = "no" ] && exit 0

# Get config.

[ -r /etc/sysconfig/kadmin ] && . /etc/sysconfig/kadmin

# Source function library.

. /etc/init.d/functions

prog="Kerberos 5 Admin Server"

kadmind=/usr/kerberos/sbin/kadmind

RETVAL=0

# Shell functions to cut down on useless shell instances.

start() {

  	if [ ! -f /var/kerberos/krb5kdc/principal ] ; then

	    # Make an educated guess -- if they're using kldap somewhere,

	    # then we don't know for sure that this is an error.

  	    if ! grep -q 'db_library.*=.*kldap' /etc/krb5.conf ; then

	        echo $"Error. Default principal database does not exist."

	        exit 0

	    fi

	fi

  	if [ -f /var/kerberos/krb5kdc/kpropd.acl ] ; then

	    echo $"Error. This appears to be a slave server, found kpropd.acl"

	    exit 0

	else

  	    if [ ! -f /var/kerberos/krb5kdc/kadm5.keytab ] ; then

		echo -n $"Extracting kadm5 Service Keys: "

		# This should always work.

		/usr/kerberos/sbin/kadmin.local ${KRB5REALM:+-r $KRB5REALM} -q "ktadd -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/admin${KRB5REALM:+@$KRB5REALM} kadmin/changepw${KRB5REALM:+@$KRB5REALM}" && success || failure

		# It's probably okay if this fails.

		/usr/kerberos/sbin/kadmin.local ${KRB5REALM:+-r $KRB5REALM} -q "ktadd -k /var/kerberos/krb5kdc/kadm5.keytab kadmin/`hostname`${KRB5REALM:+@$KRB5REALM}" 2> /dev/null && success

		echo

	    fi

	fi

	echo -n $"Starting $prog: "

	daemon ${kadmind} ${KRB5REALM:+-r ${KRB5REALM}} $KADMIND_ARGS

	RETVAL=$?

	echo

	[ $RETVAL = 0 ] && touch /var/lock/subsys/kadmin

}

stop() {

	echo -n $"Stopping $prog: "

	killproc ${kadmind}

	RETVAL=$?

	echo

	[ $RETVAL = 0 ] && rm -f /var/lock/subsys/kadmin

}

reload() {

	echo -n $"Reopening $prog log file: "

	killproc ${kadmind} -HUP

	RETVAL=$?

	echo

}

# See how we were called.

case "$1" in

  start)

	start

	;;

  stop)

	stop

	;;

  restart)

	stop

	start

	;;

  status)

	status ${kadmind}

	RETVAL=$?

	;;

  reload)

	reload

	;;

  condrestart)

	if [ -f /var/lock/subsys/kadmin ] ; then

		stop

		start

	fi

	;;

  *)

	echo $"Usage: $0 {start|stop|status|condrestart|reload|restart}"

	RETVAL=1

	;;

esac

exit $RETVAL