From b03d583f88c0faca2f3a0db3e4c2c425d90624a0 Mon Sep 17 00:00:00 2001
From: Michel Decima <michel.decima@orange.com>
Date: Sun, 2 Jan 2022 17:16:14 +0100
Subject: [PATCH] chore: mark some PAM profiles as seen in d/postinst

Mark PAM profiles krb5, sss and yourdev as "seen" in /var/lib/pam so
next execution of command /usr/sbin/pam-auth-update in interactive
mode will ignore the values of 'Default' properties.
This avoids the automatic selection of the sss profile, which conflicts
with the yourdev profile.
---
 debian/postinst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/debian/postinst b/debian/postinst
index e456420..b204e28 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -35,6 +35,10 @@ case "$1" in
 	pam-auth-update --package \
 	    --remove sss krb5 \
 	    --enable yourdev ccreds-check ccreds-save || true
+	for profile in sss krb5 yourdev ; do
+            grep -qw "$profile" /var/lib/pam/seen \
+            || echo "$profile" >> /var/lib/pam/seen || true
+        done
 
         # Fix sssd configuration permissions
         chmod 600 /etc/sssd/sssd.conf || true