#!/bin/sh

# PAM check
#----------

CONFIGS="/etc/openvpn/clients.conf /etc/openvpn/clients-tcp.conf"

for CONFIG in $CONFIGS; do
    CHECK=`grep "^plugin[[:space:]].*openvpn-plugin-auth-pam.so" $CONFIG`
    if [ -z "$CHECK" ]; then
        # note: upgrade script will handle lib vs lib64 path
        logger -p local6.notice -t installer "app-openvpn-core - adding plugin path"
        echo "plugin /usr/lib/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn" >> $CONFIG
    fi
done

# Initialize domain name with default
#------------------------------------

/usr/clearos/apps/openvpn/deploy/initialize

# Set default start/boot
#-----------------------

if [ -e /etc/pki/CA/sys-0-cert.pem ]; then
    logger -p local6.notice -t installer "app-openvpn-core - enabling OpenVPN server"
    chkconfig openvpn on >/dev/null 2>&1

    logger -p local6.notice -t installer "app-openvpn-core - starting OpenVPN server"
    service openvpn start >/dev/null 2>&1
fi
