#! /bin/sh

### BEGIN INIT INFO
# Provides:          samba-ad-dc
# Required-Start:    $network $local_fs $remote_fs
# Required-Stop:     $network $local_fs $remote_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: start Samba daemons for the AD DC
### END INIT INFO

#
# Start/stops the Samba daemon (samba).
# Adapted from the Samba 3 packages.
#

setglobal PIDDIR = '/var/run/samba'
setglobal SAMBAPID = "$PIDDIR/samba.pid"

# clear conflicting settings from the environment
unset TMPDIR

# See if the daemon and the config file are there
test -x /usr/sbin/samba -a -r /etc/samba/smb.conf || exit 0

source /lib/lsb/init-functions

match $1 {
	with start
		setglobal SERVER_ROLE = $[samba-tool testparm --parameter-name="server role"  !2 >/dev/null | tail -1]
		if test $SERVER_ROLE != "active directory domain controller" {
		    exit 0
		}

		if init_is_upstart {
			exit 1
		}

		# CVE-2013-4475
		setglobal KEYFILE = '/var/lib/samba/private/tls/key.pem'
		if test -e $KEYFILE
		{
				setglobal KEYPERMS = $[stat -c %a $KEYFILE]
				if test $KEYPERMS != "600"
				{
						echo "wrong permission on $KEYFILE, must be 600"
						echo "samba will not start (CVE-2013-4475)"
						echo "Removing all tls .pem files will cause an auto-regeneration with the correct permissions."
						exit 1
				}
		}

		log_daemon_msg "Starting Samba AD DC daemon" "samba"
		# Make sure we have our PIDDIR, even if it's on a tmpfs
		install -o root -g root -m 755 -d $PIDDIR

		if ! start-stop-daemon --start --quiet --oknodo --exec /usr/sbin/samba -- -D {
			log_end_msg 1
			exit 1
		}

		log_end_msg 0
		
	with stop
		if init_is_upstart {
			exit 0
		}
		log_daemon_msg "Stopping Samba AD DC daemon" "samba"

		start-stop-daemon --stop --quiet --pidfile $SAMBAPID
		# Wait a little and remove stale PID file
		sleep 1
		if test -f $SAMBAPID && ! ps h $[cat $SAMBAPID] > /dev/null
		{
			# Stale PID file (samba was succesfully stopped),
			# remove it (should be removed by samba itself IMHO.)
			rm -f $SAMBAPID
		}

		log_end_msg 0

		
	with restart|force-reload
		if init_is_upstart {
			exit 1
		}
		$0 stop
		sleep 1
		$0 start
		
	with status
		status_of_proc -p $SAMBAPID /usr/sbin/samba samba
		exit $?
		
	with *
		echo "Usage: /etc/init.d/samba-ad-dc {start|stop|restart|force-reload|status}"
		exit 1
		
}

exit 0