gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75       <plugin acl="rsyslog"  class="rsyslog" />
  76     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  77       <plugin acl="addressbook" class="addressbook" />
  78       <plugin acl="mailqueue" class="mailqueue" />
  79       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  80       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  81       <plugin acl="gotomasses" class="gotomasses" />
  82       <plugin acl="ldapmanager" class="ldif" />
  83     </section>
  84   </menu>
  85
  86
  87
  88   <!-- Tab definitions *******************************************************
  89
  90        Tab definitions define the sub plugins which get included for certain
  91        tabbed dialogs. If you change something here, never (!) remove the
  92        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  93        need a primary plugin.
  94
  95        "*tab" should be looked for by a defined plugin. This one will take
  96        every "tab" defined "class" and will show it inside of a tabbed dialog
  97        with the header defined in "name".
  98    -->
  99
 100   <!-- ACL dialog -->
 101   <acltab>
 102     <tab class="acl" name="ACL" />
 103   </acltab>
 104
 105   <aclroletab>
 106     <tab class="aclRole" name="ACL Role" />
 107   </aclroletab>
 108
 109   <!-- User dialog -->
 110   <usertabs>
 111      <tab class="user" name="Generic" />
 112      <tab class="posixAccount" name="Unix" />
 113      <tab class="environment" name="Environment" />
 114      <tab class="mailAccount" name="Mail" />
 115      <tab class="sambaAccount" name="Samba" />
 116      <tab class="netatalk" name="Netatalk" />
 117      <tab class="connectivity" name="Connectivity" />
 118      <tab class="gofaxAccount" name="Fax" />
 119      <tab class="phoneAccount" name="Phone" />
 120      <tab class="scalixAccount" name="Scalix" />
 121      <tab class="nagiosAccount" name="Nagios" />
 122    </usertabs>
 123
 124   <opsiLicenseTabs>
 125     <tab class="licensePoolGeneric" name="Generic"/>
 126     <tab class="licenseUsage" name="Usage"/>
 127   </opsiLicenseTabs>
 128
 129   <!-- Group dialog -->
 130   <grouptabs>
 131     <tab class="group" name="Generic" />
 132     <tab class="environment" name="Environment" />
 133     <tab class="appgroup" name="Applications" />
 134     <tab class="mailgroup" name="Mail" />
 135   </grouptabs>
 136
 137   <!-- Sudo dialog -->
 138   <sudotabs>
 139     <tab class="sudo" name="Generic" />
 140     <tab class="sudoOption" name="Options" />
 141   </sudotabs>
 142
 143   <!-- GOfax plugins -->
 144   <faxblocktabs>
 145     <tab class="blocklistGeneric" name="Generic" />
 146   </faxblocktabs>
 147
 148   <!-- GOfon plugins -->
 149   <conferencetabs>
 150     <tab class="conference" name="Generic" />
 151   </conferencetabs>
 152
 153   <macrotabs>
 154     <tab class="macro" name="Generic" />
 155     <tab class="macroParameter" name="Parameter" />
 156   </macrotabs>
 157
 158   <phonetabs>
 159     <tab class="phoneGeneric" name="Generic" />
 160     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 161   </phonetabs>
 162
 163   <!-- GOto plugins -->
 164   <appstabs>
 165     <tab class="application" name="Generic" />
 166     <tab class="applicationParameters" name="Options" />
 167   </appstabs>
 168
 169   <mimetabs>
 170     <tab class="mimetype" name="Generic" />
 171   </mimetabs>
 172
 173   <devicetabs>
 174     <tab class="deviceGeneric" name="Generic" />
 175   </devicetabs>
 176
 177   <arpnewdevicetabs>
 178     <tab class="ArpNewDevice" name="Generic" />
 179   </arpnewdevicetabs>
 180
 181   <termtabs>
 182      <tab class="termgeneric" name="Generic" />
 183      <tab class="termstartup" name="Startup" />
 184      <tab class="termservice" name="Devices" />
 185      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 186      <!--<tab class="glpiAccount" name="Inventory" /> -->
 187   </termtabs>
 188
 189   <servtabs>
 190      <tab class="servgeneric" name="Generic" />
 191      <tab class="workstartup" name="Startup" />
 192      <tab class="ServerService" name="Services" />
 193      <tab class="faiSummaryTab" name="Deployment summary" />
 194      <tab class="gotoLogView" name="Installation logs" />
 195      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 196      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 197   </servtabs>
 198
 199   <worktabs>
 200      <tab class="workgeneric" name="Generic" />
 201      <tab class="workstartup" name="Startup" />
 202      <tab class="workservice" name="Devices" />
 203      <tab class="printgeneric" name="Printer" />
 204      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 205      <tab class="faiSummaryTab" name="Deployment summary" />
 206      <tab class="gotoLogView" name="Installation logs" />
 207      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 208   </worktabs>
 209
 210   <printtabs>
 211      <tab class="printgeneric" name="Generic" />
 212      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 213   </printtabs>
 214
 215   <componenttabs>
 216      <tab class="componentGeneric" name="Generic" />
 217      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 218   </componenttabs>
 219
 220   <wintabs>
 221      <tab class="wingeneric" name="Generic" />
 222      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 223   </wintabs>
 224
 225   <serverservice>
 226     <tab class="goMailServer" />
 227 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 228     <tab class="servkolab" />
 229 {else}
 230     <!-- <tab class="servkolab" /> -->
 231 {/if}
 232     <tab class="goNtpServer" />
 233     <tab class="servrepository" />
 234     <tab class="goImapServer" />
 235     <tab class="goKrbServer" />
 236     <tab class="goFaxServer" />
 237     <tab class="goFonServer" />
 238     <tab class="goGlpiServer" />
 239     <tab class="goCupsServer" />
 240     <tab class="goKioskService" />
 241     <tab class="goTerminalServer" />
 242     <tab class="goLdapServer" />
 243     <tab class="goShareServer" />
 244     <tab class="gospamserver" />
 245     <tab class="govirusserver" />
 246     <tab class="servdhcp" />
 247     <tab class="servdns" />
 248     <tab class="rSyslogServer" />
 249   </serverservice>
 250
 251   <!-- Department plugin -->
 252   <deptabs>
 253     <tab class="department" name="Generic" />
 254   </deptabs>
 255
 256   <organization_tabs>
 257     <tab class="organization" name="Generic" />
 258   </organization_tabs>
 259
 260   <locality_tabs>
 261     <tab class="locality" name="Generic" />
 262   </locality_tabs>
 263
 264   <country_tabs>
 265     <tab class="country" name="Generic" />
 266   </country_tabs>
 267
 268   <dcobject_tabs>
 269     <tab class="dcObject" name="Generic" />
 270   </dcobject_tabs>
 271
 272   <domain_tabs>
 273     <tab class="domain" name="Generic" />
 274   </domain_tabs>
 275
 276   <!-- Role tabs -->
 277   <roletabs>
 278     <tab class="roleGeneric" name="Generic"/>
 279   </roletabs>
 280
 281   <ogrouptabs>
 282     <tab class="ogroup" name="Generic" />
 283   </ogrouptabs>
 284
 285   <!-- Debian archive management plugin -->
 286   <!--
 287   <dak_tabs>
 288     <tab class="dakrepository" name="Repository" />
 289     <tab class="dakqueue" name="Queue" />
 290     <tab class="dakkeyring" name="Key ring" />
 291   </dak_tabs>
 292   -->
 293
 294   <!-- Connectivity plugins -->
 295   <connectivity>
 296 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 297     <tab class='kolabAccount' />
 298 {else}
 299 <!-- <tab class='kolabAccount' /> -->
 300 {/if}
 301     <tab class="proxyAccount" />
 302     <tab class="pureftpdAccount" />
 303     <tab class="webdavAccount" />
 304     <tab class="phpgwAccount" />
 305     <tab class="intranetAccount" />
 306     <!--
 307     <tab class="opengwAccount"
 308       username="OGo"
 309       password=""
 310       database="OGo"
 311       databaseServer="localhost" />
 312     -->
 313     <tab class="pptpAccount" />
 314     <tab class="phpscheduleitAccount" />
 315     <tab class="oxchangeAccount" />
 316   </connectivity>
 317
 318   <ldiftab>
 319     <tab class="ldifexport" name="Export" />
 320     <tab class="xlsexport" name="Excel Export" />
 321     <tab class="ldifimport" name="Import" />
 322     <tab class="csvimport" name="CSV Import" />
 323   </ldiftab>
 324
 325   <faipartitiontabs>
 326     <tab class="faiPartitionTable" name="Partitions" />
 327   </faipartitiontabs>
 328
 329   <faiscripttabs>
 330     <tab class="faiScript" name="Script" />
 331   </faiscripttabs>
 332
 333   <faihooktabs>
 334     <tab class="faiHook" name="Hooks" />
 335   </faihooktabs>
 336
 337   <faivariabletabs>
 338     <tab class="faiVariable" name="Variables" />
 339   </faivariabletabs>
 340
 341   <faitemplatetabs>
 342     <tab class="faiTemplate" name="Templates" />
 343   </faitemplatetabs>
 344
 345   <faiprofiletabs>
 346     <tab class="faiProfile" name="Profiles" />
 347     <tab class="faiSummaryTab" name="Summary" />
 348   </faiprofiletabs>
 349
 350   <faipackagetabs>
 351     <tab class="faiPackage" name="Packages" />
 352   </faipackagetabs>
 353
 354   <opsitabs>
 355     <tab class="opsiGeneric" name="Opsi" />
 356     <tab class="opsiSoftware" name="Hardware information" />
 357     <tab class="opsiHardware" name="software information" />
 358     <tab class="licenseUsageByHost" name="Usage"/>
 359   </opsitabs>
 360
 361   <opsiprodconfig>
 362     <tab class="opsiProperties" name="Config" />
 363     <tab class="licenseByProduct" name="Usage"/>
 364   </opsiprodconfig>
 365
 366   <!-- rSyslog plugin -->
 367   <rsyslogtabs>
 368       <tab class="rsyslog" name="System logs" />
 369   </rsyslogtabs>
 370
 371   <!-- Main section **********************************************************
 372
 373        The main section defines global settings, which might be overridden by
 374        each location definition inside.
 375
 376        For more information about the configuration parameters, take a look at
 377        the gosa.conf(5) manual page.
 378
 379   -->
 380   <main default="{$cv.location}"
 381 {if $cv.generic_settings.logging}
 382         logging="true"
 383 {else}
 384         logging="false"
 385 {/if}
 386 {if $cv.optional.list_summary}
 387         listSummary="true"
 388 {else}
 389         listSummary="false"
 390 {/if}
 391 {if $cv.pwd_rules.pwminlen_active}
 392         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 393 {/if}
 394 {if $cv.pwd_rules.pwdiffer_active}
 395         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 396 {/if}
 397 {if $cv.pwd_rules.externalpwdhook_active}
 398         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 399 {/if}
 400 {if $cv.errorlvl}
 401         displayErrors="true"
 402 {else}
 403         displayErrors="false"
 404 {/if}
 405 {if $cv.enable_schema_check}
 406         schemaCheck="true"
 407 {else}
 408         schemaCheck="false"
 409 {/if}
 410 {if $cv.generic_settings.enableCopyPaste}
 411         copyPaste="true"
 412 {else}
 413         copyPaste="false"
 414 {/if}
 415 {if $cv.optional.forceglobals}
 416         forceGlobals="true"
 417 {else}
 418         forceGlobals="false"
 419 {/if}
 420 {if $cv.optional.forcessl}
 421         forceSSL="true"
 422 {else}
 423         forceSSL="false"
 424 {/if}
 425 {if $cv.optional.ldapstats}
 426         ldapStats="true"
 427 {else}
 428         ldapStats="false"
 429 {/if}
 430 {if $cv.optional.warnssl}
 431         warnSSL="true"
 432 {else}
 433         warnSSL="false"
 434 {/if}
 435 {if $cv.optional.ppd_path_active}
 436         ppdGzip="true"
 437         ppdPath="{$cv.optional.ppd_path}"
 438 {/if}
 439 {if $cv.optional.max_ldap_query_time_active}
 440         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 441 {/if}
 442 {if $cv.optional.noprimarygroup}
 443         primaryGroupFilter="true"
 444 {/if}
 445 {if $cv.optional.mailQueueScriptPath_active}
 446         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 447 {/if}
 448 {if $cv.optional.user_filter_cookie}
 449         storeFilterSettings="true"
 450 {else}
 451         storeFilterSettings="false"
 452 {/if}
 453 {if $cv.compressed}
 454         sendCompressedOutput="true"
 455 {else}
 456         sendCompressedOutput="false"
 457 {/if}
 458 {if $cv.optional.uniq_identifier_active}
 459         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 460 {else}
 461         modificationDetectionAttribute=""
 462 {/if}
 463         language="{$cv.lang_selected}"
 464         theme="{$cv.theme}"
 465         sessionLifetime="{$cv.optional.session_lifetime}"
 466         templateCompileDirectory="{$cv.optional.compile}"
 467         debugLevel="{$cv.optional.debuglevel}"
 468         sambaHashHook='{$cv.samba_settings.smbhash}'
 469     >
 470
 471     <!-- Location definition -->
 472     <location name="{$cv.location}"
 473               passwordDefaultHash="{$cv.encryption}"
 474               accountPrimaryAttribute="{$cv.peopledn}"
 475               userRDN="{$cv.peopleou}"
 476               groupRDN="{$cv.groupou}"
 477               gidNumberBase="{$cv.uidbase}"
 478               uidNumberBase="{$cv.uidbase}"
 479 {if $cv.optional.sudoou_active}
 480               sudoRDN="{$cv.optional.sudoou}"
 481 {/if}
 482 {if $cv.optional.gosaSupportURI_active}
 483               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 484               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 485 {else}
 486               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 487               disabled_gosaSupportTimeout="15"
 488 {/if}
 489 {if $cv.optional.login_attribute}
 490               loginAttribute="{$cv.optional.login_attribute}"
 491 {else}
 492               loginAttribute="uid"
 493 {/if}
 494 {if $cv.timezone}
 495               timezone="{$cv.timezone}"
 496 {/if}
 497 {if $cv.optional.strict_units}
 498               honourUnitTags="true"
 499 {else}
 500               honourUnitTags="false"
 501 {/if}
 502 {if $cv.krbsasl}
 503               useSaslForKerberos="true"
 504 {else}
 505               useSaslForKerberos="false"
 506 {/if}
 507 {if $cv.rfc2307bis}
 508               rfc2307bis="true"
 509 {else}
 510               rfc2307bis="false"
 511 {/if}
 512 {if $cv.include_personal_title}
 513               personalTitleInDN="true"
 514 {else}
 515               personalTitleInDN="false"
 516 {/if}
 517 {if $cv.base_hook_active}
 518               nextIdHook="{$cv.base_hook}"
 519 {/if}
 520 {if $cv.generic_settings.wws_ou_active}
 521               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 522 {/if}
 523 {if $cv.id_settings.idgen_active}
 524               idGenerator="{$cv.id_settings.idgen}"
 525 {/if}
 526 {if $cv.strict}
 527               strictNamingRules="true"
 528 {else}
 529               strictNamingRules="false"
 530 {/if}
 531 {if $cv.id_settings.minid_active}
 532               minId="{$cv.id_settings.minid}"
 533 {/if}
 534               mailAttribute="{$cv.mail_attrib}"
 535               gosaSharedPrefix=""
 536               mailUserCreation=""
 537               mailFolderCreation=""
 538               imapTimeout="10"
 539 {if $cv.mail != "disabled"}
 540               mailMethod="{$cv.mail}"
 541 {if $cv.cyrusunixstyle}
 542               cyrusUseSlashes="true"
 543 {else}
 544               cyrusUseSlashes="false"
 545 {/if}
 546 {if $cv.mail_settings.vacationdir_active}
 547               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 548 {/if}
 549 {/if}
 550 {if $cv.tls}
 551               ldapTLS="true"
 552 {/if}
 553 {if $cv.governmentmode}
 554               honourIvbbAttributes="true"
 555 {else}
 556               honourIvbbAttributes="false"
 557 {/if}
 558 {if $cv.sambaidmapping}
 559               sambaIdMapping="true"
 560 {/if}
 561 {if $cv.account_expiration}
 562               handleExpiredAccounts="true"
 563 {/if}
 564 {if $cv.samba_settings.samba_sid_active}
 565               sambaSID="{$cv.samba_settings.samba_sid}"
 566 {/if}
 567 {if $cv.samba_settings.samba_rid_active}
 568               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 569 {/if}
 570 {if $cv.generic_settings.snapshot_active}
 571               enableSnapshots="true"
 572               snapshotBase="{$cv.generic_settings.snapshot_base}"
 573               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 574               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 575               snapshotURI="{$cv.generic_settings.snapshot_server}"
 576 {else}
 577               enableSnapshots="false"
 578               snapshotBase="dc=localhost,dc=de"
 579               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 580               snapshotAdminPassword="secret"
 581               snapshotURI="ldap://localhost:389"
 582 {/if}
 583               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 584
 585               <referral URI="{$cv.connection}/{$cv.base}"
 586                         adminDn="{$cv.admin}"
 587                         adminPassword="{$cv.password}" />
 588
 589     </location>
 590   </main>
 591 </conf>