if[$1-gt1];then
# Has the client been configured?restore=0
test-f'/var/lib/ipa-client/sysrestore/sysrestore.index'&&restore=$(wc-l'/var/lib/ipa-client/sysrestore/sysrestore.index'|awk'{print $1}')||:
if[-f'/etc/sssd/sssd.conf'-a$restore-ge2];then
if!grep-E-q'/var/lib/sss/pubconf/krb5.include.d/'/etc/krb5.conf2>/dev/null;then
echo"includedir /var/lib/sss/pubconf/krb5.include.d/">/etc/krb5.conf.ipanew
cat/etc/krb5.conf>>/etc/krb5.conf.ipanew
mv-Z/etc/krb5.conf.ipanew/etc/krb5.conf
fi
fi
if[$restore-ge2];then
ifgrep-E-q'\s*pkinit_anchors = FILE:/etc/ipa/ca.crt$'/etc/krb5.conf2>/dev/null;then
sed-E's|(\s*)pkinit_anchors = FILE:/etc/ipa/ca.crt$|\1pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem\n\1pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem|'/etc/krb5.conf>/etc/krb5.conf.ipanew
mv-Z/etc/krb5.conf.ipanew/etc/krb5.conf
cp/etc/ipa/ca.crt/var/lib/ipa-client/pki/kdc-ca-bundle.pem
cp/etc/ipa/ca.crt/var/lib/ipa-client/pki/ca-bundle.pem
fi
/usr/bin/python3-c'from ipaclient.install.client import configure_krb5_snippet; configure_krb5_snippet()'>>/var/log/ipaupgrade.log2>&1
fi
if[$restore-ge2];then
/usr/bin/python3-c'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()'>/var/log/ipaupgrade.log2>&1
fi
if[$restore-ge2];then
sed-E--in-place=.orig's/^(HostKeyAlgorithms ssh-rsa,ssh-dss)$/# disabled by ipa-client update\n# \1/'/etc/openssh/ssh_config||:
fi
fi