# $Cambridge: hermes/src/prayer/accountd/accountd-canvas.cf,v 1.7 2008/09/16 09:59:54 dpc22 Exp $
# Prayer - a Webmail Interface
#
# Copyright (c) University of Cambridge 2000 - 2002
# See the file NOTICE for conditions of use and distribution.
#
# Accountd configuration suitable for Solaris

##
## General options
##

# Name of staging file to generate Exim filter file
msforward_name      = ".MSforward"

# Name of Exim filter file in users home directory
forward_name        = ".forward"

# List of aliases for user account for vacation purposes.
# (currently no interface to this through Webmail interface)
aliases_name        = "vacation.aliases"

# Mail filtering restricted to "mail/" directory by .MSforward file
# (Only need this on Hermes where we have some history to contend with)
filter_restricted   = FALSE

# Connections to child processes should time out after this long (0 => never)
child_timeout       = 30m

# Authtype options:
# PAM (preferred where available)
# pwd        :: Passwords accessed via getpwnam(), old fashioned crypt
# pwd_md5    :: Passwords accessed via getpwnam(), GNU md5 crypt
# shadow     :: Passwords accessed via getspnam(), old fashioned crypt
# shadow_md5 :: Passwords accessed via getspnam(), GNU md5 crypt
#
authtype = pam

# Allow Raven WLS credentials on Hermes
raven_enable   = T
raven_key_path = "/opt/accountd/raven_keys"

##
## Password changing - Hermes
##
pwd_cmdline         = "/opt/passwd/bin/minipasswd"
pwd_pty             = false
pwd_script =                           \
  sendline "$old"                      \
  sendline "$new"                      \
  expect "OK"

##
## Fullname checking
##
checkfull_cmdline = "/opt/passwd/bin/minipasswd -s"
checkfull_pty     = false
checkfull_script  =         \
  result

##
## Fullname changing
##
full_cmdline = "/opt/passwd/bin/minipasswd -g"
full_pty     = false
full_script =              \
  sendline "$newname"      \
  expect "OK"

##
## Quota check
##
quota_cmdline        = "/opt/quota/bin/chkquota_accountd"
#
# quota_cmdline should generate a series of "key: value" pairs on one
# or more lines to list the current block and inode use. Something like:
#
#  bused: 2523  blimit: 10000
#  iused: 13    ilimit: 1000
#
quota_hermes = FALSE
#
# quota_hermes is a hack to automatically parse output from the quota
# program on the big central mail system here in Cambridge (unsuprisingly
# named Hermes...) which looks something like the following:
#
#  User dpc99 (uid=28090) on /homes/1
#                current  quota  limit    timeleft
#       KBytes:     8284  20000  20000        -   
#        Files:       77   1500   1500        -   
#
# It exists simply because I was too lazy to write a 10 line Perl script to
# translate the output of our quota program into the cannonical form for
# accountd when I already had some code in accountd which was specific to
# Hermes.

# SSL configuration, if required in accountd
#use_ssl             = T
#ssl_cert_file       = "/usr/local/prayer/certs/prayer.pem"
#ssl_dh_file         = "/usr/local/prayer/certs/prayer.pem"
#ssl_rsakey_lifespan = 10m
#egd_socket          = "/var/prngd/urandom"

