[local]
description=Local Users
type=SQL

[Radius_Apple]
realms=
options=type = auth+acct
monitor=1
secret=Ad08$15min
port=1812
description=server Radius per dispositivi Apple
host=127.0.0.1
timeout=5
type=RADIUS

[Radius_Apple rule AUTH_SSID]
action0=set_access_duration=1Y
condition0=username,ends,vpn.air-watch.com
match=all
class=authentication
action1=set_role=IPHONE
description=Autenticazione da SSID corretta

[Ad_Users]
read_timeout=10
realms=default,null
password=Alpha01?!
searchattributes=
scope=sub
binddn=CN=packetfence,CN=Users,DC=racing,DC=lc
port=389
description=Ad_Users
write_timeout=5
type=AD
basedn=DC=racing,DC=lc
monitor=1
set_access_level_action=
email_attribute=mail
usernameattribute=sAMAccountName
connection_timeout=1
encryption=none
host=192.168.204.7
cache_match=1

[Ad_Users rule VIP_SPONSOR_Association]
action0=set_access_level=User Manager
condition0=groupMembership,matches regexp,.*WiFi VIP.*
condition1=mail,ends,scuderiaalphatauri.com
match=all
class=administration
action1=mark_as_sponsor=1

[Ad_Users rule Wlan_Users]
action0=set_role=default
condition0=connection_type,is,Wireless-802.11-EAP
condition1=memberOf,matches regexp,.*pf-users.*
match=all
class=authentication
action1=set_access_duration=5D

[Ad_Users rule Wlan_Inline]
action0=set_role=users
condition0=memberOf,matches regexp,.*WiFi Corporate.*
match=all
class=authentication
action1=set_access_duration=1Y

[Ad_Users rule Wlan_inline_vip]
action0=set_role=Vip
condition0=connection_type,is,Inline
condition1=memberOf,matches regexp,.*WiFi VIP.*
match=all
class=authentication
action1=set_access_duration=1Y

[file1]
description=Legacy Source
path=/usr/local/pf/conf/admin.conf
type=Htpasswd
realms=null

[file1 rule admins]
description=All admins
class=administration
match=all
action0=set_access_level=ALL

[Guest_Sponsor]
password_length=8
local_account_logins=0
description=Accesso tramite autorizzazione utente interno abilitato (SPONSOR)
email_activation_timeout=30m
hash_passwords=bcrypt
type=SponsorEmail
set_access_level_action=
create_local_account=yes
validate_sponsor=yes
allow_localdomain=no

[Guest_Sponsor rule Guest_Associated]
action0=set_role=guest
condition0=SSID,contains,SAT-WIFI_Guest
condition1=connection_type,is,Inline
match=all
class=authentication
action1=set_access_duration=1D

[sms]
description=SMS-based registration
sms_carriers=100056,100057,100061,100058,100059,100060,100062,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,100070,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,100079,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,100104,100106,100105,100107,100108,100109,100114,100110,100078,100119,100120,100121,100122,100123,100124,100125,100126,100127,100128
type=SMS
create_local_account=no

[sms rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[email]
description=Email-based registration
email_activation_timeout=10m
type=Email
password_length=8
set_access_level_action=
local_account_logins=0
hash_passwords=bcrypt
create_local_account=yes
allow_localdomain=yes

[email rule catchall]
action0=set_role=guest
match=all
class=authentication
action1=set_access_duration=1D

[sponsor]
description=Sponsor-based registration
type=SponsorEmail
allow_localdomain=yes
create_local_account=no

[sponsor rule catchall]
description=
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[null]
description=Null Source
type=Null
email_required=no

[null rule catchall]
description=catchall
class=authentication
match=all
action0=set_role=guest
action1=set_access_duration=1D

[LDAP_aCCESS]
cache_match=0
read_timeout=10
realms=
basedn=DC=racing,DC=lc
monitor=1
password=Alpha01?!
shuffle=0
searchattributes=
scope=sub
email_attribute=mail
usernameattribute=sAMAccountName
connection_timeout=1
binddn=CN=packetfence,CN=Users,DC=racing,DC=lc
encryption=none
description=internal user ldap
port=389
host=192.168.204.7
write_timeout=5
type=LDAP

[LDAP_aCCESS rule Wlan_Inline]
action0=set_role=users
condition0=memberOf,matches regexp,.*WiFi Corporate.*
match=all
class=authentication
action1=set_access_duration=1Y
description=Normal USER

[LDAP_aCCESS rule Wlan_inline_vip]
action0=set_role=Vip
condition0=memberOf,matches regexp,.*WiFi VIP.*
match=all
class=authentication
action1=set_access_duration=1Y
description=VIP USER

[GUEST_EMAIL]
create_local_account=no
local_account_logins=0
password_length=8
description=Autenticazione accesso guest.
email_activation_timeout=10m
hash_passwords=bcrypt
type=Email
allow_localdomain=no
allowed_domains=*dastech.biz

[GUEST_EMAIL rule GUEST_EMAIL]
action0=set_role=guest
condition0=SSID,contains,Guest
match=all
class=authentication
action1=set_access_duration=1D
