#!/bin/sh

#=======================================================
InsertSection "check the ssh gssapi"

#-----------------set the GSSAPI----------------
IS_EXIST=`egrep -v '^#|^$' /etc/ssh/sshd_config | grep '^GSSAPIAuthentication' |wc -l`
if [ ${IS_EXIST} -gt 0 ] ; then
    if [[ $(egrep -v '^#|^$' /etc/ssh/sshd_config | grep '^GSSAPIAuthentication' | cut -d ' ' -f 2) != "no"  ]];then
    #sed -i 's/^GSSAPIAuthentication.*/GSSAPIAuthentication no/' /etc/ssh/sshd_config
        echo "c12" >> $RESULT_FILE
        echo "" >> $RESULT_FILE
        logtext "WRN_C12_01: $(loadtext TXT_WRN_C12_01)"
        logtext "Suggestion: $(loadtext TXT_SUG_C12)"
        Display --indent 2 --text "- Wrong ssh gssapi config set... " --result WARNING --color RED
        AddHP 0 1
    else
        logtext "Has ssh gssapi set, checking ok"
        Display --indent 2 --text "- Check the ssh gssapi... " --result OK --color GREEN
        AddHP 1 1
    fi
else
    #echo "  " >> /etc/ssh/sshd_config
    #echo "GSSAPIAuthentication no" >> /etc/ssh/sshd_config
    echo "c12" >> $RESULT_FILE
    echo "" >> $RESULT_FILE
    logtext "WRN_C12_02: $(loadtext TXT_WRN_C12_02)"
    logtext "Suggestion: $(loadtext TXT_SUG_C12)"
    Display --indent 2 --text "- No ssh gssapi config set... " --result WARNING --color RED
    AddHP 0 1
fi