name: CatDap
default_view: TT

#user_view_skip_attrs: 

Controller::User:
        editable_attrs:
                       - cn
                       - sn
                       - givenName
                       - mail
                       - mobile
                       - roomNumber
                       - secretary
                       - mailForwardingAddress
        uneditable_attrs:
                       - uid
                      # - uidNumber
                      # - gidNumber
                       - homeDirectory
                       - host
                       - manager
                       - krb5PrincipalName
        skip_attrs:
                     - objectClass
                     - krb5Key
                     - sambaMungedDial
                     - sambaPasswordHistory
                     - userPassword
                     - sambaLMPassword
                     - sambaNTPassword
                     - sambaPwdMustChange
                     - sambaSID
                     - sambaPrimaryGroupSID
                     - sambaAcctFlags
                     - sambaPwdCanChange
                     - sambaPwdLastSet
                     - sambaKickOffTime
                     - sambaUserWorkstations
                     - sambaLogonTime
                     - krb5KeyVersionNumber
                     - krb5PasswordEnd
                     - krb5MaxLife
                     - krb5MaxRenew
                     - krb5KDCFlags
                     - shadowLastChange
                     - shadowWarning
                     - shadowMax
                     - shadowMin
                     - shadowInactive
                     - shadowExpire
                     - shadowFlag


Plugin::Captcha:
        new:
                gd_font: giant
                width: 100
                height: 50
                lines: 7

        create: 
                - normal
                - rect

        particle: 
                - 100

        gd_font: giant

Plugin::Session:
        expires: 600

Model::Proxy:
        base: ou=People,dc=mageia,dc=org
        dn: cn=catdap,ou=System Accounts,dc=mageai,dc=org
        password: 
        host: ldap.mageia.org
        start_tls: 1

Model::User:
        base: ou=People,dc=mageia,dc=org
        host: ldap.mageia.org
        start_tls: 1

authentication:
        default_realm: ldap
        realms:
                ldap:
                        credential:
                                class: Password
                                password_field: password
                                password_type: self_check
                        store:
                                class: LDAP
                                ldap_server:     'ldap.mageia.org'
                                start_tls:       1
                                binddn:          cn=xxx
                                bindpw:          xxx
                                user_basedn:    "ou=people,dc=mageia,dc=org"
                                user_filter:    '(&(objectClass=inetOrgPerson)(uid=%s))'
                                user_scope:     'one'
                                user_field:     'uid'
                                use_roles:      1
                                role_basedn:    'ou=group,dc=mageia,dc=org'
                                role_scope:     'one'
                                role_field:     'cn'
                                role_value:     'uid'