summaryrefslogtreecommitdiff
path: root/debian/libnss-mapuser.postinst
diff options
context:
space:
mode:
Diffstat (limited to 'debian/libnss-mapuser.postinst')
-rw-r--r--debian/libnss-mapuser.postinst8
1 files changed, 8 insertions, 0 deletions
diff --git a/debian/libnss-mapuser.postinst b/debian/libnss-mapuser.postinst
index 2e9b04f..ee6a70d 100644
--- a/debian/libnss-mapuser.postinst
+++ b/debian/libnss-mapuser.postinst
@@ -19,11 +19,19 @@ case "$1" in
-e '/^passwd:/s/\s\s*/&mapuid /' \
-e '/^passwd:.*#/s/#.*/ mapname &/' \
-e '/^passwd:[^#]*$/s/$/ mapname &/' \
+ -e '/^group:.*#/s/#.*/ mapname &/' \
+ -e '/^group:[^#]*$/s/: */& mapname /' \
/etc/nsswitch.conf
fi
addgroup --quiet $rgroup 2>&1 | grep -v 'already exists'
adduser --quiet --firstuid 1000 --disabled-login --ingroup $rgroup \
--gecos "radius user" radius_user 2>&1 | grep -v 'already exists'
+ adduser --quiet --firstuid 1000 --disabled-login --ingroup $rgroup \
+ --gecos "radius privileged user" radius_priv_user 2>&1 | grep -v 'already exists'
+ # regular radius logins can run net show commands
+ adduser --quiet radius_user netshow
+ # privileged radius logins can run net config commands, as well as show
+ adduser --quiet radius_priv_user netedit
exit 0
)
;;