Initial commit: yourdev-session-pki package

Debian package for PKI-based session authentication with Orange AD.
- Direct PKINIT auth via pam_exec + kinit (bypasses SSSD certmap)
- GDM smartcard login with SafeNet eToken / Thales
- Automatic Kerberos TGT via PKINIT
- Compatible with orange-yourdev-login package

debian-pkg/yourdev-session-pki_1.0_all/DEBIAN/prerm

@@ -0,0 +1,36 @@
+#!/bin/sh
+set -e
+
+case "$1" in
+  remove|purge)
+    # Remove our GDM smartcard PAM alternative
+    if [ -f /etc/pam.d/gdm-smartcard-pkinit ]; then
+      update-alternatives --remove gdm-smartcard /etc/pam.d/gdm-smartcard-pkinit 2>/dev/null || true
+    fi
+
+    # Remove our old pam-auth-update profile if lingering
+    if command -v pam-auth-update >/dev/null 2>&1; then
+      pam-auth-update --package --remove yourdev-smartcard 2>/dev/null || true
+    fi
+
+    # Recompile dconf after removing our override
+    if command -v dconf >/dev/null 2>&1; then
+      dconf update 2>/dev/null || true
+    fi
+
+    # Restart SSSD
+    if command -v systemctl >/dev/null 2>&1; then
+      systemctl restart sssd 2>/dev/null || true
+    fi
+    ;;
+
+  upgrade|failed-upgrade)
+    ;;
+
+  *)
+    echo "prerm called with unknown argument '$1'" >&2
+    exit 1
+    ;;
+esac
+
+exit 0