if [ "x$AFS_AFSDB" != "x" ] ;then
db_set openafs-client/afsdb $AFS_AFSDB
fi
+if [ "x$AFS_DYNROOT" != "x" ] ; then
+ db_set openafs-client/dynroot $AFS_DYNROOT
+ fi
+db_beginblock
db_input low openafs-client/afsdb ||true
db_input low openafs-client/crypt || true
+db_input medium openafs-client/dynroot || true
+db_endblock
db_go
echo AFS_AFSDB=$RET >>/etc/openafs/afs.conf.client
db_get openafs-client/crypt
echo AFS_CRYPT=$RET >>/etc/openafs/afs.conf.client
-
+db_get openafs-client/dynroot
+echo AFS_DYNROOT=$RET >>/etc/openafs/afs.conf.client
;;
abort-upgrade|abort-remove|abort-deconfigure)
than DES and thus is not sufficient for highly confidential data, it
does provide some confidentiality and is likely to make the job of a
casual attacker significantly more difficult.
+
+Template: openafs-client/dynroot
+Type: boolean
+Default: false
+Description: Dynamically generate the contents of /afs?
+ /afs generally contains an entry for each cell that a client can talk to.
+ Traditionally, these entries were generated by servers in the client's
+ home cell. However, OpenAFS clients can generate the contents of /afs
+ dynamically based on the contents of /etc/openafs/CellServDB and DNS.
+ .
+ If you generate /afs dynamically, you may need to create
+ /etc/openafs/CellAliases to include aliases for common cells.
+ DO NOT SELECT THIS OPTION IF YOU ARE CREATING A NEW CELL.
#!/bin/sh -e
-depmod -a
update-modules
exit 0
AFSDB="-afsdb"
else AFSDB=""
fi
+if [ "x$AFS_DYNROOT" = "xtrue" ] ; then
+ DYNROOT="-dynroot"
+ else DYNROOT=""
+ fi
# Set to "-verbose" for a lot of debugging information from afsd. Only
# useful for debugging as it prints _a lot_ of information.
VERBOSE=
# OPTIONS are the options passed to afsd.
-OPTIONS="$OPTIONS $VERBOSE $AFSDB"
+OPTIONS="$OPTIONS $VERBOSE $DYNROOT $AFSDB"
# Sample server preferences function. Set server preferences using this.