[local]
description=Local Users
type=SQL

[file1]
description=Legacy Source
path=/usr/local/pf/conf/admin.conf
type=Htpasswd
realms=null

[file1 rule admins]
description=All admins
class=administration
match=all
action0=set_access_level=ALL

[sms]
description=SMS-based registration
sms_carriers=100056,100057,100061,100058,100059,100060,100062,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,100070,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,100079,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,100104,100106,100105,100107,100108,100109,100114,100110,100078,100119,100120,100121,100122,100123,100124,100125,100126,100127,100128
type=SMS
create_local_account=no

[sms rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email]
description=Email-based registration
email_activation_timeout=10m
type=Email
allow_localdomain=yes
create_local_account=no

[email rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[sponsor]
description=Sponsor-based registration
type=SponsorEmail
allow_localdomain=yes
create_local_account=no

[sponsor rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[null]
description=Null Source
type=Null
email_required=no

[null rule catchall]
description=catchall
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[MSAD]
cache_match=0
read_timeout=10
realms=sceduroam
basedn=OU=SPFLDCOL,DC=scad,DC=spfldcol,DC=edu
monitor=1
password=<removed>
shuffle=1
searchattributes=
set_access_durations_action=
scope=sub
email_attribute=mail
usernameattribute=sAMAccountName
connection_timeout=1
binddn=uidRADIUSMapping@scad.spfldcol.edu
encryption=ssl
description=Springfield College Active Directory
port=636
host=ad-master.springfield.edu
write_timeout=5
type=AD

[MSAD rule nsi-access]
action0=set_role=nsiteam
condition0=memberOf,is member of,CN=ACL-SC-ITS-NSI-VPN,OU=ACL,OU=Service Groups,OU=SPFLDCOL,DC=scad,DC=spfldcol,DC=edu
match=all
class=authentication
action1=set_access_duration=5D
description=Networks Systems Infrastructure staff access to wireless network

[MSAD rule ITS-WL-Access]
action0=set_role=itsstaff
condition0=memberOf,is member of,CN=ACL-SC-ITS-DEPT-VPN,OU=ACL,OU=Service Groups,OU=SPFLDCOL,DC=scad,DC=spfldcol,DC=edu
match=all
class=authentication
action1=set_access_duration=2D
description=Allow ITS staff access to the Wireless Network

[MSAD rule Students-WL-Access]
action0=set_role=students
condition0=memberOf,is member of,CN=STU-Student,OU=STU,OU=Groups,OU=SPFLDCOL,DC=scad,DC=spfldcol,DC=edu
match=all
class=authentication
action1=set_access_duration=1D
description=Allow Students Access to the Wireless Network

[MSAD rule catchall]
action0=set_role=staff
match=all
class=authentication
action1=set_access_duration=1D
description=Allow all users for now

[US-Eduroam-Servers]
monitor=1
description=United States Eduroam Top Level Radius Servers
radius_secret=<removed>
server2_address=tlrs2.eduroam.us
reject_realm=
server1_address=tlrs1.eduroam.us
server1_port=1812
local_realm=
type=Eduroam
set_access_durations_action=
auth_listening_port=11812
server2_port=1812
