-# Some config file directives set options which may be different at
-# different points in the file. The most-recently-seen value is used
-# at each point:
-#
-# uidmin <min>
-# uidmax <max>
-# homebase <pathname>
-# When an account is to be created, a uid/gid will be chosen
-# which is one higher than the highest currently in use (except
-# that ids outside the range <min>-<max> are ignored and will
-# never be used). The default home directory location is
-# <pathname>/<username>.
-#
-# sameuid
-# nosameuid
-# Specifies whether uids are supposed to match. The default is
-# nosameuid. When sameuid is on, it is an error for the uid or
-# gid of a local account not to match the corresponding remote
-# account, and new local accounts will get the remote accounts'
-# ids.
-#
-# usergroups
-# nousergroups
-# defaultgid <gid>
-# Specifies whether local accounts are supposed to have
-# corresponding groups, or all be part of a particular group. If
-# usergroups is set, when a new account is created, the
-# corresponding per-user group will be created as well, and
-# per-user groups are created for existing accounts if necessary
-# (if account creation is enabled). If the gid or group name for
-# a per-user group is already taken for a different group name or
-# gid this will be logged, and processing of that account will be
-# inhibited, but it is not a fatal error. If defaultgid is used,
-# then newly-created accounts will be made a part of that group,
-# and the groups of existing accounts will be left alone. If
-# nousergroups is specified then no new accounts can be created,
-# and existing accounts' groups will be left alone. The default
-# is `usergroups'.
-#
-# createuser
-# createuser <commandname>
-# nocreateuser
-# Specifies whether accounts found on the remote host should be
-# created if necessary, and what command to run to do the
-# creation (eg, setup of home directory). The default is
-# nocreateuser. If createuser is specified without a commandname
-# then sync-accounts-createuser is used. The command is found on
-# the PATH if necessary. Either sameuid, or both uidmin and
-# uidmax, must be specified, if accounts are to be created.
-#
-# The command (which will be run with sh -c) must at least create
-# the new account's home directory. The passwd and group entries
-# will not have been set up. The following environment variables
-# will be set, giving details about the account to be created:
-# SYNCACCOUNT_CREATE_USER
-# SYNCACCOUNT_CREATE_UID
-# SYNCACCOUNT_CREATE_GID
-# SYNCACCOUNT_CREATE_COMMENT
-# SYNCACCOUNT_CREATE_HOME
-# SYNCACCOUNT_CREATE_SHELL
-# If it chooses, the script may modify the password entry which
-# will be added to the system, by outputting a replacement
-# password file entry. (The password field of that is ignored.)
-# If the script outputs a line which does not contain a : then
-# the account will not be created after all.
-#
-# group <glob-pattern>
-# nogroup <glob-pattern>
-# Specifies that the membership of the local groups specified
-# should be adjusted or not adjusted whenever account data for a
-# particular user is copied, so that the account will be a member
-# of the affected group locally iff it is a member of the same
-# group on the remote host. The most recently-encountered
-# glob-pattern for a particular group takes effect. The default
-# is `nogroups *'.
-#
-# Some config file directives are per-host, and should appear before
-# any directives which actually modify accounts:
-#
-# host <shorthostname>
-# Starts a host's section. This resets the per-host parameters
-# to the defaults. The shorthostname need not be the host's
-# official name in any sense. If sync-accounts is invoked with
-# host names on the command line they are compared with the
-# shorthostnames.
-#
-# getpasswd <command>
-# getgroup <command>
-# Commands to run on the local host to get the passwd, shadow and
-# group data for the host in question. getpasswd must be
-# specified if user data is to be transferred; getgroup must be
-# specified if group data is to be transferred.
-#
-# getshadow <command>
-# Specifies that shadow file data is to be used (by default,
-# password information is found from the output of getpasswd).
-# The command should emit shadow data in the format specified by
-# shadow(5) on Linux. getshadow should not be specified without
-# getpasswd.
-#
-# Some configuration file directives specify that account data is to
-# transferred from the current host. They should appear as the last
-# thing(s) in a host section:
-#
-# user <username> [remote=<remoteusername>]
-# Specifies that account data should be copied for local user
-# <username> from the remote account <remoteusername> (assumed to
-# be the same as <username> if not specified). The account
-# password, comment field, and shell will be copied
-# unconditionally. If sameuid is specified the uid will be
-# checked.
-#
-# users <ruidmin>-<ruidmax>
-# Specifies that all remote users whose uid is in the given range
-# are to be copied to corresponding local user accounts.
-#
-# nouser <username>
-# Specifies that data for <username> is _not_ to be copied, even
-# if subsequent user or users directives suggest that it should
-# be.
-#
-# (A note is made when a `user', `users' or `nouser' directive is
-# encountered for a particular account, and no subsequent directives
-# for that account will take effect.)
-#
-# addhere
-# This directive has no effect on `sync-accounts'. However, it
-# is used as a placeholder by `grab-account': new accounts for
-# creation are inserted just before `addhere'.
-#
-# Finally, the config file must finish with:
-#
-# end