-
Notifications
You must be signed in to change notification settings - Fork 1.1k
/
freeradius-config.postinst
53 lines (43 loc) · 1.92 KB
/
freeradius-config.postinst
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
#! /bin/sh
set -e
case "$1" in
configure)
if [ -z "$2" ]; then
if ! dpkg-statoverride --list | grep -qw /etc/freeradius$; then
dpkg-statoverride --add --update freerad freerad 2751 /etc/freeradius
fi
if ! dpkg-statoverride --list | grep -qw /etc/freeradius/radiusd.conf$; then
dpkg-statoverride --add --update root freerad 0640 /etc/freeradius/radiusd.conf
fi
# Relax permissions on local dictionary - allows radclient to run and should
# not contain secrets. At any rate, only do it on fresh install
if ! dpkg-statoverride --list | grep -qw /etc/freeradius/dictionary$; then
dpkg-statoverride --add --update root freerad 0644 /etc/freeradius/dictionary
fi
# Create snakoil certificates on initial install
make -C /etc/freeradius/certs/
# Create links for default modules
for mod in always attr_filter cache_eap chap \
detail detail.log digest dynamic_clients eap \
eap_inner echo exec expiration expr files linelog logintime \
mschap ntlm_auth pap passwd preprocess radutmp realm \
replicate soh sradutmp unix unpack utf8 ; do
if [ ! -e /etc/freeradius/mods-enabled/$mod ]; then
ln -s ../mods-available/$mod /etc/freeradius/mods-enabled/$mod
fi
done
fi
# Create links for default sites, but only if this is an initial
# install or an upgrade from before there were links; users may
# want to remove them...
if [ -z "$2" ] || dpkg --compare-versions "$2" lt 2.0.4+dfsg-4; then
for site in default inner-tunnel; do
if [ ! -e /etc/freeradius/sites-enabled/$site ]; then
ln -s ../sites-available/$site /etc/freeradius/sites-enabled/$site
fi
done
fi
;;
esac
#DEBHELPER#
exit 0