#!/bin/bash
#
# Univention System Activation
#
# Copyright 2015-2021 Univention GmbH
#
# https://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <https://www.gnu.org/licenses/>.

function has_activated_license {
	/usr/bin/univention-ldapsearch -LLL '(&(objectClass=univentionLicense)(univentionLicenseKeyID=*))' dn | grep -q 'dn:'
}

role="$(ucr get server/role)"
if [ "$role" == "domaincontroller_master" ]; then
	/usr/sbin/univention-system-activation start
elif has_activated_license; then
	# Installing an App Appliance as Non-Primary Directory Node without activated license in the domain
	# is restricted by system-setup and not handled here

	# lift root restrictions set by univention-system-activation.postinst on Non-Primary Directory Node
	# roles because system-activation is not started there
	/usr/sbin/univention-system-activation allow-root
fi
exit 0
