LoadModule "FileLogger"

LoadModule "AuthBackendChallengeResponse"
LoadModule "AuthBackendPassword"
LoadModule "AuthProviderFile"

LoadModule "SystemBackendPosix"
LoadModule "SystemBackendProc"

LoadModule "UserDBBackendMysql"
LoadModule "UserConfigBackendHome"
LoadModule "UserConfigBackendKrb5"

Log Console {
  Level "verbose"
}

Log File "mad-server.log"


Listen 127.0.0.1


X509TrustFile ../Cert/ca-cert.pem
#X509CrlFile ../Cert/crl.pem
X509CertFile ../Cert/cert.pem
X509KeyFile ../Cert/key.pem

AuthProviderFile {
  Hash "SHA1"
  File "users"
}

UserManager {
  MinUid 1000
  MaxUid 29999
  
  MinGid 1000
  MaxGid 29999
  
  HomeDir "/tmp/home"
  Skeleton "/tmp/skel"
  UserDirMode 0700
  
  Mysql {
    Username test
    Password test
    Database test
    
    Queries {
      ListUsers "SELECT id, gid, username, fullname FROM users"
      ListGroups "SELECT id, name FROM groups"
      ListUserGroups "SELECT gid FROM usergroups WHERE uid = {UID}"
      ListGroupUsers "SELECT uid FROM usergroups WHERE gid = {GID}"
      
      UserById "SELECT id, gid, username, fullname FROM users WHERE id = {UID}"
      UserByName "SELECT id, gid, username, fullname FROM users WHERE username = {USER}"
      GroupById "SELECT id, name FROM groups WHERE id = {GID}"
      GroupByName "SELECT id, name FROM groups WHERE name = {GROUP}"
      UserGroupTable "SELECT uid, gid FROM usergroups"
      
      AddUser "INSERT INTO users (id, gid, username, fullname) VALUES ({UID}, {GID}, {USER}, {FULL_NAME})"
      UpdateUser "UPDATE users SET id = {UID}, gid = {GID}, username = {USER}, fullname = {FULL_NAME} WHERE id = {ORIG_UID}"
      DeleteUser "DELETE FROM users WHERE id = {UID}"
      
      AddGroup "INSERT INTO groups (id, name) VALUES ({GID}, {GROUP})"
      UpdateGroup "UPDATE groups SET id = {GID}, name = {GROUP} WHERE id = {ORIG_GID}"
      DeleteGroup "DELETE FROM groups WHERE id = {GID}"
      
      AddUserToGroup "INSERT INTO usergroups (uid, gid) VALUES ({UID}, {GID})"
      DeleteUserFromGroup "DELETE FROM usergroups WHERE uid = {UID} AND gid = {GID}"
    }
  }
  
  Krb5 {
    Principal "root/admin"
    Password "test"
  }
}

Daemon test {
  IpAddress 127.0.0.1
}