#!/bin/ksh93 -p
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#

#
# Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
#

# Run this command as root to set up for sasl testsuite
# creates a standard set of sasl users and makes them principals
# -- create/recreate the KDC principal DB
# -- create a sasldb


export THIRTYTWO
case `uname -p` in
	i386)
		THIRTYTWO="i86"
		;;

	sparc)	THIRTYTWO="sparcv7"
		;;

	*)  	echo "Architecture unknown"
		exit 1
		;;
esac


# realm used as default, edit if a different realm is desired.
export realm="SASLTEST.NET"
# realm for cross-realm auth.
crossrealm=

# password for all principals not added to keytab
export passwd="1234"

# Set this to the ID that is allowed to run kadmin
# Be default you would do: "kadmin -p kdc/admin" and use the passwd above.
admin_princ="kdc/admin"

# used to determine if in
# batch/non-intera/home/willf/app_support/etc/krb5/templates/db2ctive mode
force='false'
check_leaks='false'

# keytab config file
kt_config_file=
num_keytabs=0
set -A kt_transfer_command

# should be null if seting up master kdc
master_kdc=

# get the base script name
me=${0##*/}

function usage {
	cat >&2 <<EOF

	-f: Force answer yes (non-interactive mode).  Use with caution as
		this script will delete existing KDB.

	-?: This help message.

EOF
	exit 1
}

function ask {
	trap - ERR
	# ask question, set global answer
	typeset question=$1 default_answer=$2
	if [ -z "$default_answer" ]; then
		print "$question \c"
	else
		print "$question [$default_answer]: \c"
	fi
	read answer
	[ -z "$answer" ] && answer="$default_answer"
}

function yesno {
	trap - ERR
	typeset question="$1"
	# answer is a global set by ask
	answer=
	while [ -z "$answer" ]; do
		ask "$question" 'n'
		case $answer in
			y|yes)	answer=yes;;
			n|no)	answer=no;;
			*)	answer=;;
		esac
	done
}

function ok_to_proceed {
	trap - ERR
	yesno "$@"
	if [[ "$answer" == 'no' ]]; then
		echo "Exiting, no action performed"
		exit 1
	fi
}


################################ Start of Main script #########################

while getopts f flag
do
	case "$flag" in
		f) force=true ;;
		\?) usage ;;
		*) usage ;;
	esac
done
shift $((OPTIND - 1))

if [ -n "$1" ] ; then
	echo "'$1'" = $1
	usage
fi

if [[ -f .setup ]]
then
	print -u2 "Notice: $me already run"
	exit 0
fi

if [[ "$(/usr/bin/id -un)" != "root" ]]
then
	print -u2 "Error: $me must be run as root. aborting..."
	exit 1
fi

#  Check for the testsuites we need
if [[ ! -e ./testsuite || ! -e $THIRTYTWO/testsuite ]] 
then
	print -u2 \
	 "Error: testsuite and $THIRTYTWO/testsuite must be in the local \
directory, Aborting..."
	exit 1
fi
ln -s $THIRTYTWO 32

export SASL_PACKAGES_NEEDED="system/library/security/sasl/crammd5 \
	system/library/security/sasl/digestmd5 \
	system/library/security/sasl/anonymous "


export MYLOC=`pwd`
if [[ ! -f /etc/sasl2/TestSuite.conf ]] ; then
	(cd /etc/sasl2 && ln -s $MYLOC/TestSuite.conf . )
else
	print -u2 "Please rename /etc/sasl2/TestSuite.conf and try again"
	exit 1
fi

if [[ ! -f /etc/resolv.conf ]]
then
	print -u2 "Error: need to configure /etc/resolv.conf."
	exit 1
fi

if [[ -n "$fqdn" ]]
then
	host=$fqdn
else
	host=$(uname -n)
fi

if [[ -x /usr/sbin/nslookup ]]
then
	/usr/sbin/nslookup $host 2>/dev/null | grep '^Name:' |\
		tr '[:upper:]' '[:lower:]' | read j fqdn
elif [[ -x /usr/sbin/dig ]]
then
	/usr/sbin/dig +noall +search +answer $host 2>/dev/null |\
		tr '[:upper:]' '[:lower:]' | read fqdn j
	fqdn=${fqdn%.}
fi

if ! ping $fqdn >/dev/null
then
    print -u2 "Error: ping full hostname ${fqdn} failed. Aborting..."
    exit 1
fi

# get time and DNS running

if [[ ! -f /etc/inet/ntp.conf && -f /etc/inet/ntp.client ]]
then
	cp /etc/inet/ntp.client /etc/inet/ntp.conf
fi
if [[ -f /etc/inet/ntp.conf ]]
then
	svcadm enable -s svc:/network/ntp:default
fi

export KMODE="mit"
set -A MEDIATOR `pkg mediator -H kerberos5`

case ${MEDIATOR[3]} in

	"solaris" )   # old kerberos configured
		KMODE="seam"
		;;

	*)	# "MIT" or mediator does not exist
		KMODE="mit"
		;;
esac

. ./setup-for-$KMODE
if (( $? != 0 ))
then
        print -u2 "Setup failed"
        exit 1
fi


print "$passwd" | kinit ken
touch .setup