#!/bin/bash

#

# krb524       Start and stop the krb524 service.

#

# chkconfig:   - 35 65

# description: Kerberos 5 is a trusted third-party authentication system.  \

#	       This script starts and stops krb524d, which converts \

#              Kerberos 5 credentials to Kerberos IV credentials.

# processname: krb524d

# config: /etc/sysconfig/krb524

#

# Get config.

. /etc/sysconfig/network

# Get config.

[ -r /etc/sysconfig/krb524 ] && . /etc/sysconfig/krb524

# Source function library.

. /etc/rc.d/init.d/functions

RETVAL=0

prog="Kerberos 5-to-4 Server"

krb524d=/usr/kerberos/sbin/krb524d

# Shell functions to cut down on unnecessary shell invocations.

start() {

  	if [ ! -f /var/kerberos/krb5kdc/principal ] ; then

	    # Make an educated guess -- if they're using kldap somewhere,

	    # then we don't know for sure that this is an error.

  	    if ! grep -q 'db_library.*=.*kldap' /etc/krb5.conf ; then

	        echo $"Error. Default principal database does not exist."

	        exit 6

	    fi

	fi

	[ -x $krb524d ] || exit 5

	echo -n $"Starting $prog: "

	daemon ${krb524d} ${KRB524D_ARGS:--m}

	RETVAL=$?

	echo

	[ $RETVAL = 0 ] && touch /var/lock/subsys/krb524

}

stop() {

	echo -n $"Stopping $prog: "

	killproc ${krb524d}

	RETVAL=$?

	echo

	[ $RETVAL = 0 ] && rm -f /var/lock/subsys/krb524

}

# See how we were called.

case "$1" in

  start)

	start

	;;

  stop)

	stop

	;;

  restart)

	stop

	start

	;;

  status)

	status ${krb524d}

	;;

  condrestart)

	if [ -f /var/lock/subsys/krb524 ] ; then

		stop

		start

	fi

	;;

  *)

	echo $"Usage: $0 {start|stop|status|restart|condrestart}"

	RETVAL=2

	;;

esac

exit $RETVAL