@%@UCRWARNING=# @%@

# this allows authentication using the E-Mail Address

auth    sufficient    pam_unix.so
auth	requisite     pam_univentionmailcyrus.so ldap_host=@%@ldap/server/name@%@ ldap_base=@%@ldap/base@%@ from_attr=mailPrimaryAddress to_attr=uid
@!@
if baseConfig.has_key('mail/cyrus/imap/quota') and baseConfig['mail/cyrus/imap/quota'] == "yes":
	print "auth    [success=1 default=ignore]    pam_ldap.so use_first_pass config=/etc/imapd/pam_ldap_imap.conf"
	print "auth    [success=ok default=die]      pam_krb5.so use_first_pass"
	print "auth    required  	  pam_runasroot.so program=/usr/sbin/univention-cyrus-set-quota"
else:
	print "auth    sufficient pam_ldap.so use_first_pass config=/etc/imapd/pam_ldap_imap.conf"
	print "auth    required pam_krb5.so use_first_pass"
@!@

account  sufficient   pam_unix.so
account  required     pam_ldap.so config=/etc/imapd/pam_ldap_imap.conf

