* Initial official version.
* Made this software configurable to allow public distribution.
- * Rewrote server part to allow handling of multiple domains
- *
+ * Rewrote server part to allow handling of multiple domains.
+ * Added automagic upgrade script.
-- Maximilan Wilhelm <max@rfc2324.org> Sun, 4 Sep 2005 01:28:00 +0200
#!/bin/sh
#
+# rbm-ssh-keysync-server.postinst
+#
-# User fuer die Verwaltung der Keys anlegen, wenn noch keiner da ist.
+# Create ssh-keysync management user, if not allready there
if ! getent passwd skeysync > /dev/null; then
- useradd -m -d /var/cache/ssh-keysync -c "Schluesselmeister" skeysync
+ useradd -m -d /var/cache/ssh-keysync -c "ssh-keysync Keymaster" skeysync
fi
# set feasible rights
chown skeysync.root /var/cache/ssh-keysync
chmod 755 /var/cache/ssh-keysync
-# create directories for storing the client keys and the generated key file
-mkdir -p /var/cache/ssh-keysync/keys /var/cache/ssh-keysync/pub
-
-# if you have an fai user make him able to write to the keys-dir,
-# to allow an easy and automated update of the keys
-if getent passwd fai > /dev/null; then
- chown fai /var/cache/ssh-keysync/keys
-fi
+# create public directory that will be shared by a webserver (apache by
+# default) to let the clients access the generated ssh_knonw_hosts files.
+mkdir -p /var/cache/ssh-keysync/pub
# let the skeysync user write to the output dir
-#chown skeysync /var/cache/ssh-keysync/pub
+chown skeysync /var/cache/ssh-keysync/pub