[local]
description=Local Users
type=SQL

[file1]
description=Legacy Source
path=/usr/local/pf/conf/admin.conf
type=Htpasswd
realms=null

[file1 rule admins]
description=All admins
class=administration
match=all
action0=set_access_level=ALL

[sms]
description=SMS-based registration
sms_carriers=100056,100057,100061,100058,100059,100060,100062,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,100070,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,100079,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,100104,100106,100105,100107,100108,100109,100114,100110,100078,100119,100120,100121,100122,100123,100124,100125,100126,100127,100128
type=SMS
create_local_account=no

[sms rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email]
description=Email-based registration
email_activation_timeout=10m
type=Email
allow_localdomain=yes
create_local_account=no

[email rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[sponsor]
description=Sponsor-based registration
type=SponsorEmail
allow_localdomain=yes
create_local_account=no

[sponsor rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[null]
description=Null Source
type=Null
email_required=no

[null rule catchall]
description=catchall
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[Ridgewood_AD]
cache_match=0
read_timeout=10
realms=default,null
basedn=DC=RIDGEWOOD,DC=K12,DC=NJ,DC=US
monitor=1
shuffle=0
searchattributes=
scope=sub
email_attribute=mail
usernameattribute=sAMAccountName
connection_timeout=1
encryption=none
description=Ridgewood_AD
port=389
host=*************
write_timeout=5
type=AD
password=********
binddn=CN=Temp Admin,CN=Users,DC=ridgewood,DC=k12,DC=nj,DC=us

[Ridgewood_AD rule DeviceAdmins]
action0=set_access_level=Device Admins
condition0=memberOf,equals,CN=Domain Admins,CN=Users,DC=ridgewood,DC=k12,DC=nj,DC=us
match=any
class=administration

[Ridgewood_AD rule Unfiltered]
action0=set_role=Unfiltered
condition0=memberOf,equals,CN=UnfilteredUsers,OU=~ 802.1x,DC=ridgewood,DC=k12,DC=nj,DC=us
match=all
class=authentication
action1=set_access_duration=1Y

[Ridgewood_AD rule UnfilteredVisitor]
action0=set_role=UnfilteredGuest
condition0=cn,equals,access
match=all
class=authentication
action1=set_access_duration=12h

[Ridgewood_AD rule Students]
action0=set_role=Student
condition0=memberOf,equals,CN=ES_Students,OU=~ RPS Security Groups,DC=ridgewood,DC=k12,DC=nj,DC=us
match=any
condition1=memberOf,equals,CN=MS_Students,OU=~ RPS Security Groups,DC=ridgewood,DC=k12,DC=nj,DC=us
class=authentication
action1=set_access_duration=5D
condition2=memberOf,equals,CN=HS_Students,OU=~ RPS Security Groups,DC=ridgewood,DC=k12,DC=nj,DC=us

[Ridgewood_AD rule Catchall]
action0=set_role=default
match=all
class=authentication
action1=set_access_duration=1M

[PasswordOfTheWeek]
realms=null
password_length=6
password_email_update=myemail@ridgewood.k12.nj.us
description=Password of the week
password_rotation=24h
type=Potd

[PasswordOfTheWeek rule catchall]
action0=set_role=UnfilteredGuest
match=all
class=authentication
action1=set_access_duration=12h

[presenter]
realms=null
password_length=6
password_email_update=myemail@ridgewood.k12.nj.us
description=account for presenters to login
password_rotation=7D
type=Potd

[presenter rule catchall]
action0=set_role=UnfilteredGuest
match=all
class=authentication
action1=set_access_duration=12h