@%@UCRWARNING=# @%@

session    required   pam_unix.so
@!@
minimum_uid = int(configRegistry.get('pam/krb5/minimum_uid', 1000))
methods=filter(lambda(x): x in ['krb5', 'ldap', 'winbind'], baseConfig['auth/methods'].split(' '))
if 'winbind' in methods:
	print 'session    optional   pam_winbind.so'
if 'krb5' in methods:
	print 'session    optional   pam_krb5.so minimum_uid=%d' % (minimum_uid,)
@!@
session    required   pam_limits.so
@!@
if baseConfig.is_true('homedir/create', True):
	if baseConfig.is_true('homedir/mount', True):
		homeDirReq = "required"
		if baseConfig.is_false('homedir/mount/required'):
			homeDirReq = "optional"
		print 'session    %s   pam_runasroot.so program=/usr/sbin/univention-mount-homedir' % homeDirReq
	print 'session    required   pam_mkhomedir.so skel=/etc/skel umask=0066'
	print 'session    optional   pam_runasroot.so user program=/usr/bin/univention-skel'

	if baseConfig.is_true('auth/kdeprofile', False):
		print 'session    required   pam_runasroot.so program=/usr/share/univention-kde/univention-set-kdedirs'
		print 'session    required   pam_env.so envfile=$HOME/.univention-environment'
@!@

