#!/bin/sh
#
# Univention RADIUS Integration
#
# SPDX-FileCopyrightText: 2011-2025 Univention GmbH
# SPDX-License-Identifier: AGPL-3.0-only

# shellcheck source=/dev/null
. /usr/share/univention-lib/base.sh

if [ "$1" = "postchange" ] ; then
	install -o freerad -g freerad -m 0440 /etc/machine.secret /etc/freeradius.secret

	# update ldap query definitions
	ucr commit /etc/freeradius/3.0/mods-available/ldap

	# restart freeradius if already running
	if [ -n "$(pidof freeradius)" ]; then
		echowithtimestamp "restart freeradius after server password change"
		systemctl restart freeradius
	fi
fi
