sql sql-webmailsso {

	$INCLUDE ${raddbdir}/sql-common-include.conf

        num_sql_socks   = 2

	authcheck_table = "check_webmailsso_staff"
	postauth_table =  "check_webmailsso_staff"

	authorize_check_query = "SELECT '0' AS id, user as username, 'Cleartext-Password' AS attribute, token AS value, ':=' AS op FROM ${authcheck_table} WHERE user='%{SQL-User-Name}' AND token ='%{request:User-Password}'"

	authorize_reply_query = ""

	group_membership_query = ""

	authorize_group_check_query = ""

	authorize_group_reply_query = ""

	postauth_query = "UPDATE check_webmailsso_staff SET timeout = TIMESTAMPADD(HOUR,12,NOW()) WHERE user = '%{User-Name}' AND token ='%{request:User-Password}'"

        # these subsections have no effect, but are needed by FreeRADIUS 3.0
        # adding them now for forward compatibility

        post-auth {
		query = "UPDATE check_webmailsso_staff \
			 SET timeout = TIMESTAMPADD(HOUR,12,NOW()) \
			 WHERE user = '%{User-Name}' \
			 AND token ='%{request:User-Password}'"
        }

        accounting {
        }

}