#!/bin/sh -e
#
# Univention Directory Notifier
#  Replicate one DN
#
# Like what you see? Join us!
# https://www.univention.com/about-us/careers/vacancies/
#
# Copyright 2012-2024 Univention GmbH
#
# https://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <https://www.gnu.org/licenses/>.

eval "$(ucr shell)"

usage()
{
	echo "Usage: $0 --dn <ldap dn>"
	echo
	echo "The given LDAP DN will be re-replicated by the Univention Directory Notifier to all UCS systems in this UCS domain. This tool must be run on the Primary Directory Node."
	echo
	echo "Warning: This tool will stop the OpenLDAP and the Notifier daemon."
	echo
}

if [ "$server_role" != "domaincontroller_master" ]; then
	echo "Abort: This tool must be run on the Primary Directory Node!" >&2
	exit 1
fi

if [ ! -e /var/lib/univention-ldap/notify/transaction ]; then
	echo "Abort: /var/lib/univention-ldap/notify/transaction was not found." >&2
	exit 1
fi

if [ "$#" != 2 ] || [ "$1" != "--dn" ]; then
	usage >&2
	exit 1
fi

dn="$2"

RESTART_NOTIFIER=0
if pidof univention-directory-notifier >/dev/null ; then
	echo -n "Stopping notifier: "
	RESTART_NOTIFIER=1
	systemctl stop univention-directory-notifier
	sleep 1
	if pidof univention-directory-notifier >/dev/null ; then
		echo "failed"
		echo "Abort: Failed to stop the notifier daemon. Please check stop the daemon manually and try again." >&2
		exit 1
	fi
	echo "done"
fi

RESTART_SLAPD=0
if pidof slapd >/dev/null ; then
	echo -n "Stopping slapd: "
	RESTART_SLAPD=1
	/etc/init.d/slapd stop >/dev/null
	sleep 1
	if pidof slapd >/dev/null ; then
		echo "failed"
		echo "Abort: Failed to stop the OpenLDAP daemon. Please check stop the daemon manually and try again." >&2
		exit 1
	fi
	echo "done"
fi


echo -n "Write $dn to listener file: "
id="$(tail -n 1 /var/lib/univention-ldap/notify/transaction | awk '{print $1}')"

last_line="$(tail -n 1 /var/lib/univention-ldap/listener/listener)"
if [ -n "$last_line" ]; then
	id_listener="$(tail -n 1 /var/lib/univention-ldap/listener/listener | awk '{print $1}')"
fi

if [ -n "$id_listener" ] && [ "$id_listener" -gt "$id" ]; then
	nextid=$((id_listener+1))
else
	nextid=$((id+1))
fi

echo "$nextid $dn m" >>/var/lib/univention-ldap/listener/listener
echo -n "$nextid" >/var/lib/univention-ldap/last_id
echo "done"

rc=0

if [ "$RESTART_NOTIFIER" = 1 ]; then
	echo -n "Starting notifier: "
	systemctl start univention-directory-notifier >/dev/null || rc=1
	echo "done"
fi

if [ "$RESTART_SLAPD" = 1 ]; then
	echo -n "Starting slapd: "
	/etc/init.d/slapd start >/dev/null || rc=1
	echo "done"
fi

exit $rc
