[local]
description=Local Users
type=SQL

[sms]
description=SMS-based registration
sms_carriers=100056,100057,100061,100058,100059,100060,100062,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,100070,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,100079,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,100104,100106,100105,100107,100108,100109,100114,100110,100078,100122
type=SMS
create_local_account=no

[sms rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email]
description=Email-based registration
email_activation_timeout=10m
type=Email
allow_localdomain=yes
create_local_account=no

[email rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[sponsor]
description=Sponsor-based registration
type=SponsorEmail
allow_localdomain=yes
create_local_account=no

[sponsor rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[null]
description=Null Source
type=Null
email_required=no

[null rule catchall]
description=catchall
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[LDAP_Users]
cache_match=0
read_timeout=10
realms=
password=<password>
scope=sub
binddn=cn=LDAP\, PacketFence,ou=Company Service Accounts,dc=subdomain,dc=Company,dc=com
port=389
description=LDAP Company Users
write_timeout=5
type=LDAP
basedn=ou=Company Users,dc=subdomain,dc=Company,dc=com
monitor=1
set_access_level_action=
shuffle=0
email_attribute=mail
usernameattribute=sAMAccountName
connection_timeout=1
encryption=none
host=company-itdc01.subdomain.Company.com

[LDAP_Users rule Node_Manager]
action0=set_access_level=Node Manager
condition0=department,equals,DES
match=any
class=administration
description=Node Managers

[LDAP_Users rule Administrator]
action0=set_access_level=ALL
condition0=department,equals,NES
match=any
class=administration
action1=mark_as_sponsor=1
description=PF Admins

[LDAP_Users rule Ops]
action0=set_role=ops
condition0=department,equals,NES
match=any
description=Ops
condition1=department,equals,SES
class=authentication
action1=set_access_duration=5D
condition2=department,equals,OPS

[LDAP_Users rule Wireless]
action0=set_role=wireless
condition0=SSID,equals,Company_Employee
match=any
class=authentication
action1=set_access_duration=5D
description=Company_Employee Wifi

[LDAP_Users rule Employees]
action0=set_role=employee
match=all
class=authentication
action1=set_access_duration=5D
description=Company Domain Users(Employees)

[LDAP_Machines]
cache_match=0
read_timeout=10
realms=
password=<password>
scope=sub
binddn=cn=LDAP\, PacketFence,ou=Company Service Accounts,dc=subdomain,dc=Company,dc=com
port=389
description=LDAP Company Computer Accounts
write_timeout=5
type=LDAP
basedn=ou=Company Computers,dc=subdomain,dc=Company,dc=com
monitor=1
set_access_level_action=
shuffle=0
email_attribute=mail
usernameattribute=servicePrincipalName
connection_timeout=1
encryption=none
host=company-itdc01.subdomain.Company.com

[LDAP_Machines rule Wireless]
action0=set_role=wireless
condition0=SSID,equals,Company_Employee
match=any
class=authentication
action1=set_access_duration=5D
description=Company_Employee Wifi

[LDAP_Machines rule Computer]
action0=set_role=employee
match=all
class=authentication
action1=set_access_duration=5D
description=Company Domain Machines(Employees)

[file1]
description=Legacy Source
path=/usr/local/pf/conf/admin.conf
type=Htpasswd
realms=null

[file1 rule admins]
description=All admins
class=administration
match=all
action0=set_access_level=ALL
