#!/bin/sh
set -e

case "$1" in
    configure)
        # enable GDM customization
        if [ -x /usr/bin/dconf ] ; then
            dconf update
        fi

        # Configure NSS for pam-pkcs11
	mkdir -p /etc/pki/nssdb
	orange-certupdate /etc/pki/nssdb || true

        # configure pam-pkcs11
        if [ -d /etc/pam_pkcs11 ] ; then
            # add Orange certificates
            mkdir -p /etc/pam_pkcs11/cacerts
            cp /usr/share/ca-certificates/orange/* /etc/pam_pkcs11/cacerts
            (cd /etc/pam_pkcs11/cacerts && pkcs11_make_hash_link ) || true
            # generate uid mapping from /etc/passwd
            pkcs11_generate_uids || true
            # Note: PAM module pkcs11 cannot be configured using command
            # pam-auth-update because package libpam-pkcs11 does not provide 
            # a config file in dir /usr/share/pam-configs.
        fi

        # Configure PAM for credential cache 
        apt-mark manual libpam-ccreds >/dev/null || true
        if [ -e /usr/share/pam-configs/ccreds-check ] ; then
            pam-auth-update --force --package --enable \
                ccreds-check ccreds-save || true
        fi

        # Configure PAM for Kerberos
        if [ -e /usr/share/pam-configs/krb5 ] ; then
            pam-auth-update --force --package --enable krb5 || true
        fi
    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0