#!/usr/bin/make -f

DEB_PYTHON_SYSTEM=pysupport
DEB_DIVERT_EXTENSION = .invirt
# Stolen from Debathena
DEB_CHECK_FILES_SOURCE_/etc/krb5.conf.invirt = \
        /usr/share/kerberos-configs/krb5.conf.template
DEB_TRANSFORM_FILES_invirt-base += \
        /etc/krb5.conf.invirt
DEB_DIVERT_FILES_invirt-base += \
        /etc/ssh/sshd_config.invirt

include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/class/python-distutils.mk
include /usr/share/cdbs/1/rules/config-package.mk

binary-fixup/invirt-base::
	mv $(DEB_DESTDIR)usr/bin/invirt-reload $(DEB_DESTDIR)usr/sbin/invirt-reload

common-build-indep:: debian/sshd_config.invirt

# Stolen from Debathena
debian/sshd_config.invirt-orig: /var/lib/dpkg/info/openssh-server.postinst
	perl -0pe 's/^.*<<EOF[^\n]*\n(.*\n)EOF\n.*$$/$$1/s or die;' $< > $@

# Stolen from Debathena
debian/sshd_config.invirt: debian/sshd_config.invirt-orig
	perl -0pe '# Debathena rules (from debathena-ssh-server-config) \
s/^#?GSSAPIAuthentication .*$$/GSSAPIAuthentication yes\nGSSAPIKeyExchange yes\nGSSAPIStrictAcceptorCheck no/m and \
s/^#?GSSAPICleanupCredentials .*$$/GSSAPICleanupCredentials yes/m and \
s/^#?ChallengeResponseAuthentication .*$$/ChallengeResponseAuthentication yes/m and \
## In Debathena, privilege separation is configurable. \
s/^#?UsePrivilegeSeparation .*$$/UsePrivilegeSeparation yes/m and \
s/^#?PasswordAuthentication .*$$/PasswordAuthentication no/m or die;' $< > $@

clean::
	rm -rf python/invirt.egg-info
