-# Some config file directives set options which may be different at
-# different points in the file. The most-recently-seen value is used
-# at each point:
-#
-# uidmin <min>
-# uidmax <max>
-# homebase <pathname>
-# When an account is to be created, a uid/gid will be chosen
-# which is one higher than the highest currently in use (except
-# that ids outside the range <min>-<max> are ignored and will
-# never be used). The default home directory location is
-# <pathname>/<username>.
-#
-# sameuid
-# nosameuid
-# Specifies whether uids are supposed to match. The default is
-# nosameuid. When sameuid is on, it is an error for the uid or
-# gid of a local account not to match the corresponding remote
-# account, and new local accounts will get the remote accounts'
-# ids.
-#
-# createuser
-# createuser <commandname>
-# nocreateuser
-# Specifies whether accounts found on the remote host should be
-# created if necessary, and what command to run to do the
-# creation (eg, setup of home directory). The default is
-# nocreateuser. If createuser is specified without a commandname
-# then sync-accounts-createuser is used. The command is found on
-# the PATH if necessary. Either sameuid, or both uidmin and
-# uidmax, must be specified, if accounts are to be created.
-#
-# groups [!]<glob-pattern> ...
-# Specifies that the membership of the local groups specified
-# should be adjusted whenever account data for a particular user
-# is copied, so that the account will be a member of the affected
-# group locally iff it is a member of the same group on the
-# remote host. The specification is read from left to right,
-# until a match on a glob pattern is found. Then, the membership
-# is adjusted iff the glob pattern was not preceded by `!'.
-# THIS FEATURE IS NOT YET IMPLEMENTED.
-#
-# Some config file directives are per-host, and should appear before
-# any directives which actually modify accounts:
-#
-# host <shorthostname>
-# Starts a host's section. This resets the per-host parameters
-# to the defaults. The shorthostname need not be the host's
-# official name in any sense. If sync-accounts is invoked with
-# host names on the command line they are compared with the
-# shorthostnames.
-#
-# getpasswd <command>
-# getgroup <command>
-# Commands to run on the local host to get the passwd, shadow and
-# group data for the host in question. getpasswd must be
-# specified if user data is to be transferred; getgroup must be
-# specified if group data is to be transferred.
-#
-# getshadow <command>
-# Specifies that shadow file data is to be used (by default,
-# password information is found from the output of getpasswd).
-# The command should emit shadow data in the format specified by
-# shadow(5) on Linux. getshadow should not be specified without
-# getpasswd.
-#
-# Some configuration file directives specify that account or group
-# data is to transferred from the current host. They should appear as
-# the last thing(s) in a host section:
-#
-# user <username> [remote=<remoteusername>]
-# Specifies that account data should be copied for local user
-# <username> from the remote account <remoteusername> (assumed to
-# be the same as <username> if not specified). The account
-# password, comment field, and shell will be copied
-# unconditionally. If sameuid is specified the uid will be
-# checked.
-#
-# users <ruidmin>-<ruidmax>
-# Specifies that all remote users whose uid is in the given range
-# are to be copied to corresponding local user accounts.