8686a76b06
Debian package for PKI-based session authentication with Orange AD. - Direct PKINIT auth via pam_exec + kinit (bypasses SSSD certmap) - GDM smartcard login with SafeNet eToken / Thales - Automatic Kerberos TGT via PKINIT - Compatible with orange-yourdev-login package
37 lines
857 B
Bash
Executable File
37 lines
857 B
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
case "$1" in
|
|
remove|purge)
|
|
# Remove our GDM smartcard PAM alternative
|
|
if [ -f /etc/pam.d/gdm-smartcard-pkinit ]; then
|
|
update-alternatives --remove gdm-smartcard /etc/pam.d/gdm-smartcard-pkinit 2>/dev/null || true
|
|
fi
|
|
|
|
# Remove our old pam-auth-update profile if lingering
|
|
if command -v pam-auth-update >/dev/null 2>&1; then
|
|
pam-auth-update --package --remove yourdev-smartcard 2>/dev/null || true
|
|
fi
|
|
|
|
# Recompile dconf after removing our override
|
|
if command -v dconf >/dev/null 2>&1; then
|
|
dconf update 2>/dev/null || true
|
|
fi
|
|
|
|
# Restart SSSD
|
|
if command -v systemctl >/dev/null 2>&1; then
|
|
systemctl restart sssd 2>/dev/null || true
|
|
fi
|
|
;;
|
|
|
|
upgrade|failed-upgrade)
|
|
;;
|
|
|
|
*)
|
|
echo "prerm called with unknown argument '$1'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
exit 0
|