From cbb5fa29392d26b59aab9c2eb57e8eff60176261 Mon Sep 17 00:00:00 2001
From: Timo Aaltonen <tjaalton@debian.org>
Date: Tue, 5 Jan 2016 10:03:46 +0200
Subject: [PATCH] Split freeipa-server-dns from server.

---
 debian/changelog                   |  1 +
 debian/control                     | 20 ++++++++++++++++++--
 debian/freeipa-server-dns.install  |  3 +++
 debian/freeipa-server-dns.postinst |  8 ++++++++
 debian/freeipa-server.install      |  2 --
 debian/freeipa-server.postinst     |  1 -
 6 files changed, 30 insertions(+), 5 deletions(-)
 create mode 100644 debian/freeipa-server-dns.install
 create mode 100644 debian/freeipa-server-dns.postinst

diff --git a/debian/changelog b/debian/changelog
index 2c35aaa90..8cfa46acf 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -30,6 +30,7 @@ freeipa (4.3.0-1) UNRELEASED; urgency=medium
   * control: Bump 389-ds-base* deps.
   * control, rules: Add support for kdcproxy.
   * control, server: Migrate to mod-auth-gssapi.
+  * Split freeipa-server-dns from server.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Sat, 03 Oct 2015 08:56:31 +0300
 
diff --git a/debian/control b/debian/control
index 0810bc300..7e565101f 100644
--- a/debian/control
+++ b/debian/control
@@ -72,8 +72,6 @@ Depends:
  389-ds-base (>= 1.3.4.0),
  acl,
  apache2,
- bind9,
- bind9-dyndb-ldap (>= 6.0-4~),
  certmonger (>= 0.78),
  fonts-font-awesome,
  freeipa-admintools (= ${binary:Version}),
@@ -115,6 +113,24 @@ Description: FreeIPA centralized identity framework -- server
  .
  This is the server package.
 
+Package: freeipa-server-dns
+Architecture: all
+Breaks: freeipa-server (<< 4.3.0-1)
+Replaces: freeipa-server (<< 4.3.0-1)
+Depends:
+ freeipa-server (= ${binary:Version}),
+ bind9,
+ bind9-dyndb-ldap (>= 6.0-4~),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: FreeIPA centralized identity framework -- IPA DNS integration
+ FreeIPA is an integrated solution to provide centrally managed Identity
+ (machine, user, virtual machines, groups, authentication credentials), Policy
+ (configuration settings, access control information) and Audit (events,
+ logs, analysis thereof).
+ .
+ This package adds DNS integration with BIND 9.
+
 Package: freeipa-server-trust-ad
 Architecture: any
 Depends:
diff --git a/debian/freeipa-server-dns.install b/debian/freeipa-server-dns.install
new file mode 100644
index 000000000..d56badee4
--- /dev/null
+++ b/debian/freeipa-server-dns.install
@@ -0,0 +1,3 @@
+usr/sbin/ipa-dns-install
+usr/share/man/man1/ipa-dns-install.1*
+
diff --git a/debian/freeipa-server-dns.postinst b/debian/freeipa-server-dns.postinst
new file mode 100644
index 000000000..0db77ee74
--- /dev/null
+++ b/debian/freeipa-server-dns.postinst
@@ -0,0 +1,8 @@
+#!/bin/sh
+set -e
+
+if [ "$1" = configure ]; then
+    chown root:bind /var/cache/bind/data
+fi
+
+#DEBHELPER#
diff --git a/debian/freeipa-server.install b/debian/freeipa-server.install
index 07760a0e0..bf4b66ac1 100644
--- a/debian/freeipa-server.install
+++ b/debian/freeipa-server.install
@@ -30,7 +30,6 @@ usr/sbin/ipa-ca-install
 usr/sbin/ipa-cacert-manage
 usr/sbin/ipa-compat-manage
 usr/sbin/ipa-csreplica-manage
-usr/sbin/ipa-dns-install
 usr/sbin/ipa-kra-install
 usr/sbin/ipa-ldap-updater
 usr/sbin/ipa-managed-entries
@@ -71,7 +70,6 @@ usr/share/man/man1/ipa-ca-install.1*
 usr/share/man/man1/ipa-cacert-manage.1*
 usr/share/man/man1/ipa-compat-manage.1*
 usr/share/man/man1/ipa-csreplica-manage.1*
-usr/share/man/man1/ipa-dns-install.1*
 usr/share/man/man1/ipa-kra-install.1*
 usr/share/man/man1/ipa-ldap-updater.1*
 usr/share/man/man1/ipa-managed-entries.1*
diff --git a/debian/freeipa-server.postinst b/debian/freeipa-server.postinst
index 44df501a6..b3b54be10 100644
--- a/debian/freeipa-server.postinst
+++ b/debian/freeipa-server.postinst
@@ -26,7 +26,6 @@ if [ "$1" = configure ]; then
             apache2_invoke enmod rewrite || exit $?
         fi
     fi
-    chown root:bind /var/cache/bind/data
 
     # check if IPA is set up
     is_configured=`python2 -c 'from ipaserver.install import installutils; print "yes" if installutils.is_ipa_configured() else "no";'`