#
# Copyright (c) 1996-1999 by Sun Microsystems, Inc.
# All rights reserved.
#
#pragma ident  "@(#)postinstall 1.2     99/07/22 SMI"
#

PATH="/usr/bin:/usr/sbin:${PATH}"
export PATH

	# Cleanup kerberos V4 line
	NFSSEC_CONF="$BASEDIR/etc/nfssec.conf"
	grep -s "^[#	 ]*krb4[	 ]" $NFSSEC_CONF >/dev/null 2>&1
	if [ $? -eq 0 ]
	then
		grep -vs "^[#	 ]*krb4[	 ]" $NFSSEC_CONF >/tmp/pi.$$
		cp /tmp/pi.$$ $NFSSEC_CONF
		rm /tmp/pi.$$
	fi

	# Add privacy line to nfssec.conf
	grep -s "^[#	 ]*krb5p[	 ]" $NFSSEC_CONF >/dev/null 2>&1
	if [ $? -ne 0 ]
	then
		echo "krb5p	390005	kerberos_v5	default	privacy	# $PKGINST" >> $NFSSEC_CONF
	fi

	# Add privacy line to qop
	QOP="$BASEDIR/etc/gss/qop"

	grep -s "^[#	 ]*GSS_KRB5_CONF_C_QOP_DES[	 ]" $QOP >/dev/null 2>&1
	if [ $? -ne 0 ]
	then
		echo "GSS_KRB5_CONF_C_QOP_DES		0		kerberos_v5	# $PKGINST" >> $QOP
	fi

	# Add to kerberos V5 privacy mechanism to list replacing bundled
	# non-privacy supporting mechanism.
	MECH="$BASEDIR/etc/gss/mech"

	grep -s "do_kmech_krb5" $MECH >/dev/null 2>&1
	if [ $? -ne 0 ]
	then
		# Since an existing kerberos_v5 mechanism exists that uses
		# gl_kmech_krb5 and if so lets comment it out.
		grep -s "^[	 ]*kerberos_v5" $MECH >/dev/null 2>&1
		if [ $? -eq 0 ]
		then
			sed "s/^kerberos_v5/# kerberos_v5/" < $MECH > /tmp/pi.$$
			cp /tmp/pi.$$ $MECH
			rm /tmp/pi.$$
		fi

		echo "kerberos_v5		1.2.840.113554.1.2.2	do/mech_krb5.so do_kmech_krb5	# $PKGINST" >> $MECH
	fi

exit 0
