[local]
description=Local Users
type=SQL

[htpasswd1]
description=Legacy Source
path=/usr/local/pf/t/data/htpasswd.conf
type=Htpasswd

[htpasswd1 rule admins]
description=All admins
class=administration
match=any
condition0=username,equals,admin
action0=set_access_level=ALL

[htpasswd1 rule user_manager]
description=
class=administration
match=any
condition0=username,equals,user_manager
action0=set_access_level=User Manager

[htpasswd1 rule set_access_duration_test]
description=
class=authentication
match=any
condition0=username,equals,set_access_duration_test
action0=set_role=guest
action1=set_access_duration=1D

[htpasswd1 rule set_unreg_date_test]
description=
class=authentication
match=any
condition0=username,equals,set_unreg_date_test
action0=set_role=default
action1=set_unreg_date=2022-02-02

[htpasswd1 rule match_on_authentication_class_without_rule_class_test]
description=
class=authentication
match=any
condition0=username,equals,match_on_authentication_class_without_rule_class_test
action0=set_role=default
action1=set_unreg_date=2022-02-02

[htpasswd1 rule match_on_administration_class_without_rule_class_test]
description=
class=administration
match=any
condition0=username,equals,match_on_administration_class_without_rule_class_test
action0=mark_as_sponsor=1

[htpasswd1 rule violation_manager]
description=
class=administration
match=all
condition0=username,equals,violation_manager
action0=set_access_level=Violation Manager

[htpasswd1 rule user_domain]
description=
class=administration
match=all
condition0=username,equals,user@domain.com
action0=set_access_level=Violation Manager

[htpasswd1 rule match_action1]
description=
class=administration
match=all
condition0=username,equals,match_action
action0=set_access_level=Violation Manager

[htpasswd1 rule match_action2]
description=
class=administration
match=all
condition0=username,equals,match_action
action0=mark_as_sponsor=1

[htpasswd1 rule test_time_period]
description=
class=administration
match=all
condition0=current_time_period,in_time_period,hr {12}
action0=set_access_level=Violation Manager

[sms]
description=SMS-based registration
sms_carriers=100056,100057,100061,100058,100059,100060,100062,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,100070,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,100079,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,100104,100106,100105,100107,100108,100109,100114,100110,100078
type=SMS

[sms rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email]
description=Email/sponsor-based registration
email_activation_timeout=10m
type=Email
allow_localdomain=1

[email rule catchall_Auth]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email rule catchall_Admin]
description=
class=administration
match=all
action0=mark_as_sponsor=1

[LDAP0]
description=pf-test
password=
scope=sub
binddn=CN=test,DC=inverse,DC=ca
basedn=DC=ldap,DC=inverse,DC=ca
usernameattribute=user
connection_timeout=1
read_timeout=1
encryption=none
port=33389
type=AD
host=127.0.0.1
cache_match=1

[LDAP0 rule Network_Team_Auth]
description=Full Access
class=authentication
match=any
condition0=memberOf,equals,CN=NOC Users,DC=ldap,DC=inverse,DC=ca
action0=set_role=default
action1=set_unreg_date=2022-02-02


[LDAP]
description=pf-test
password=
scope=sub
binddn=CN=test,DC=inverse,DC=ca
basedn=DC=ldap,DC=inverse,DC=ca
usernameattribute=user
connection_timeout=5
encryption=none
port=33389
type=AD
host=127.0.0.1
cache_match=1

[LDAP rule Network_Team_Auth]
description=Full Access
class=authentication
match=any
condition0=memberOf,equals,CN=NOC Users,DC=ldap,DC=inverse,DC=ca
action0=set_role=default
action1=set_unreg_date=2022-02-02

[LDAP rule Network_Team_Admin]
description=Full Access
class=administration
match=any
condition0=memberOf,equals,CN=NOC Users,DC=ldap,DC=inverse,DC=ca
action0=set_access_level=ALL

[LDAP rule Helpdesk_Team_Auth]
description=Violation / Node Manager Access
class=authentication
match=any
condition0=memberOf,equals,CN=helpdeskWCS,DC=ldap,DC=inverse,DC=ca
action0=set_role=default
action1=set_access_duration=1D

[LDAP rule Helpdesk_Team_Admin]
description=Violation / Node Manager Access
class=administration
match=any
condition0=memberOf,equals,CN=helpdeskWCS,DC=ldap,DC=inverse,DC=ca
action0=set_access_level=User Manager,Violation Manager,Node Manager

[LDAP rule Security_Assurance_Auth]
description=Violation Manager Access
class=authentication
match=any
condition0=memberOf,equals,CN=IS_Assurance,DC=ldap,DC=inverse,DC=ca
action0=set_role=default
action1=set_unreg_date=2022-02-02

[LDAP rule Security_Assurance_Admin]
description=Violation Manager Access
class=administration
match=any
condition0=memberOf,equals,CN=IS_Assurance,DC=ldap,DC=inverse,DC=ca
action0=set_access_level=Violation Manager

[LDAP rule catchall]
description=apply default role
match=all
action0=set_role=default
action1=set_access_duration=1D

[tls_all]
description=tls
type=EAPTLS

[tls_all rule first_rule]
description=asa
class=authentication
match=all
action0=set_role=default
action1=set_access_duration=12h
condition0=TLS-Client-Cert-Serial,equals,tls
condition1=SSID,starts,tls

[tls_any]
description=tls
type=EAPTLS

[tls_any rule second_rule]
description=asa
class=authentication
match=any
action0=set_role=default
action1=set_access_duration=12h
condition0=TLS-Client-Cert-Serial,equals,tls
condition1=SSID,starts,tls

[LDAPCACHEMATCH]
description=pf-test
password=
scope=sub
binddn=CN=test,DC=inverse,DC=ca
basedn=DC=ldap,DC=inverse,DC=ca
usernameattribute=user
connection_timeout=5
encryption=none
port=33389
type=AD
host=127.0.0.1
cache_match=1

[LDAPCACHEMATCH_OFF]
description=pf-test
password=
scope=sub
binddn=CN=test,DC=inverse,DC=ca
basedn=DC=ldap,DC=inverse,DC=ca
usernameattribute=user
connection_timeout=5
encryption=none
port=33389
type=AD
host=127.0.0.1
cache_match=0

[htpasswd-stripped]
realms=
set_access_level_action=
path=/usr/local/pf/t/data/htpasswd-stripped.conf
description=htpasswd stripped
type=Htpasswd

[htpasswd-stripped rule lzammit]
action0=set_role=default
condition0=username,equals,lzammit
match=all
class=authentication
action1=set_unreg_date=2038-01-01

[htpasswd-unstripped]
realms=
set_access_level_action=
path=/usr/local/pf/t/data/htpasswd-unstripped.conf
description=htpasswd unstripped
type=Htpasswd

[htpasswd-unstripped rule lzammit]
action0=set_role=default
condition0=username,equals,lzammit@inverse.ca
match=all
class=authentication
action1=set_unreg_date=2038-01-01

