gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  76       <plugin acl="addressbook" class="addressbook" />
  77       <plugin acl="mailqueue" class="mailqueue" />
  78       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  79       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  80       <plugin acl="logview"  class="logview" />
  81       <plugin acl="gotomasses" class="gotomasses" />
  82       <plugin acl="ldapmanager" class="ldif" />
  83     </section>
  84   </menu>
  85
  86
  87
  88   <!-- Tab definitions *******************************************************
  89
  90        Tab definitions define the sub plugins which get included for certain
  91        tabbed dialogs. If you change something here, never (!) remove the
  92        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  93        need a primary plugin.
  94
  95        "*tab" should be looked for by a defined plugin. This one will take
  96        every "tab" defined "class" and will show it inside of a tabbed dialog
  97        with the header defined in "name".
  98    -->
  99
 100   <!-- ACL dialog -->
 101   <aclroletab>
 102     <tab class="aclRole" name="ACL Role" />
 103   </aclroletab>
 104
 105   <!-- User dialog -->
 106   <usertabs>
 107      <tab class="user" name="Generic" />
 108      <tab class="posixAccount" name="Unix" />
 109      <tab class="environment" name="Environment" />
 110      <tab class="mailAccount" name="Mail" />
 111      <tab class="sambaAccount" name="Samba" />
 112      <tab class="netatalk" name="Netatalk" />
 113      <tab class="connectivity" name="Connectivity" />
 114      <tab class="gofaxAccount" name="Fax" />
 115      <tab class="phoneAccount" name="Phone" />
 116      <tab class="scalixAccount" name="Scalix" />
 117      <tab class="nagiosAccount" name="Nagios" />
 118    </usertabs>
 119
 120   <opsiLicenseTabs>
 121     <tab class="licensePoolGeneric" name="Generic"/>
 122     <tab class="licenseUsage" name="Usage"/>
 123   </opsiLicenseTabs>
 124
 125   <!-- Group dialog -->
 126   <grouptabs>
 127     <tab class="group" name="Generic" />
 128     <tab class="environment" name="Environment" />
 129     <tab class="appgroup" name="Applications" />
 130     <tab class="mailgroup" name="Mail" />
 131   </grouptabs>
 132
 133   <!-- Sudo dialog -->
 134   <sudotabs>
 135     <tab class="sudo" name="Generic" />
 136     <tab class="sudoOption" name="Options" />
 137   </sudotabs>
 138
 139   <!-- GOfax plugins -->
 140   <faxblocktabs>
 141     <tab class="blocklistGeneric" name="Generic" />
 142   </faxblocktabs>
 143
 144   <!-- GOfon plugins -->
 145   <conferencetabs>
 146     <tab class="conference" name="Generic" />
 147   </conferencetabs>
 148
 149   <macrotabs>
 150     <tab class="macro" name="Generic" />
 151     <tab class="macroParameter" name="Parameter" />
 152   </macrotabs>
 153
 154   <phonetabs>
 155     <tab class="phoneGeneric" name="Generic" />
 156     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 157   </phonetabs>
 158
 159   <!-- GOto plugins -->
 160   <appstabs>
 161     <tab class="application" name="Generic" />
 162     <tab class="applicationParameters" name="Options" />
 163   </appstabs>
 164
 165   <mimetabs>
 166     <tab class="mimetype" name="Generic" />
 167   </mimetabs>
 168
 169   <devicetabs>
 170     <tab class="deviceGeneric" name="Generic" />
 171   </devicetabs>
 172
 173   <arpnewdevicetabs>
 174     <tab class="ArpNewDevice" name="Generic" />
 175   </arpnewdevicetabs>
 176
 177   <termtabs>
 178      <tab class="termgeneric" name="Generic" />
 179      <tab class="termstartup" name="Startup" />
 180      <tab class="termservice" name="Devices" />
 181      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 182      <!--<tab class="glpiAccount" name="Inventory" /> -->
 183   </termtabs>
 184
 185   <servtabs>
 186      <tab class="servgeneric" name="Generic" />
 187      <tab class="workstartup" name="Startup" />
 188      <tab class="ServerService" name="Services" />
 189      <tab class="faiSummaryTab" name="Deployment summary" />
 190      <tab class="gotoLogView" name="Installation logs" />
 191      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 192      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 193   </servtabs>
 194
 195   <worktabs>
 196      <tab class="workgeneric" name="Generic" />
 197      <tab class="workstartup" name="Startup" />
 198      <tab class="workservice" name="Devices" />
 199      <tab class="printgeneric" name="Printer" />
 200      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 201      <tab class="faiSummaryTab" name="Deployment summary" />
 202      <tab class="gotoLogView" name="Installation logs" />
 203      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 204   </worktabs>
 205
 206   <printtabs>
 207      <tab class="printgeneric" name="Generic" />
 208      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 209   </printtabs>
 210
 211   <componenttabs>
 212      <tab class="componentGeneric" name="Generic" />
 213      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 214   </componenttabs>
 215
 216   <wintabs>
 217      <tab class="wingeneric" name="Generic" />
 218      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 219   </wintabs>
 220
 221   <serverservice>
 222     <tab class="goMailServer" />
 223 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 224     <tab class="servkolab" />
 225 {else}
 226     <!-- <tab class="servkolab" /> -->
 227 {/if}
 228     <tab class="goNtpServer" />
 229     <tab class="servrepository" />
 230     <tab class="goImapServer" />
 231     <tab class="goKrbServer" />
 232     <tab class="goFaxServer" />
 233     <tab class="goFonServer" />
 234     <tab class="goLogDBServer" />
 235     <tab class="goGlpiServer" />
 236     <tab class="goCupsServer" />
 237     <tab class="goKioskService" />
 238     <tab class="goSyslogServer" />
 239     <tab class="goTerminalServer" />
 240     <tab class="goLdapServer" />
 241     <tab class="goShareServer" />
 242     <tab class="gospamserver" />
 243     <tab class="govirusserver" />
 244     <tab class="servdhcp" />
 245     <tab class="servdns" />
 246     <tab class="gosaLogServer" />
 247   </serverservice>
 248
 249   <!-- Department plugin -->
 250   <deptabs>
 251     <tab class="department" name="Generic" />
 252   </deptabs>
 253
 254   <organization_tabs>
 255     <tab class="organization" name="Generic" />
 256   </organization_tabs>
 257
 258   <locality_tabs>
 259     <tab class="locality" name="Generic" />
 260   </locality_tabs>
 261
 262   <country_tabs>
 263     <tab class="country" name="Generic" />
 264   </country_tabs>
 265
 266   <dcobject_tabs>
 267     <tab class="dcObject" name="Generic" />
 268   </dcobject_tabs>
 269
 270   <domain_tabs>
 271     <tab class="domain" name="Generic" />
 272   </domain_tabs>
 273
 274   <!-- Role tabs -->
 275   <roletabs>
 276     <tab class="roleGeneric" name="Generic"/>
 277   </roletabs>
 278
 279   <ogrouptabs>
 280     <tab class="ogroup" name="Generic" />
 281   </ogrouptabs>
 282
 283   <!-- Debian archive management plugin -->
 284   <!--
 285   <dak_tabs>
 286     <tab class="dakrepository" name="Repository" />
 287     <tab class="dakqueue" name="Queue" />
 288     <tab class="dakkeyring" name="Key ring" />
 289   </dak_tabs>
 290   -->
 291
 292   <!-- Connectivity plugins -->
 293   <connectivity>
 294 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 295     <tab class='kolabAccount' />
 296 {else}
 297 <!-- <tab class='kolabAccount' /> -->
 298 {/if}
 299     <tab class="proxyAccount" />
 300     <tab class="pureftpdAccount" />
 301     <tab class="webdavAccount" />
 302     <tab class="phpgwAccount" />
 303     <tab class="intranetAccount" />
 304     <!--
 305     <tab class="opengwAccount"
 306       username="OGo"
 307       password=""
 308       database="OGo"
 309       databaseServer="localhost" />
 310     -->
 311     <tab class="pptpAccount" />
 312     <tab class="phpscheduleitAccount" />
 313     <tab class="oxchangeAccount" />
 314   </connectivity>
 315
 316   <ldiftab>
 317     <tab class="ldifexport" name="Export" />
 318     <tab class="xlsexport" name="Excel Export" />
 319     <tab class="ldifimport" name="Import" />
 320     <tab class="csvimport" name="CSV Import" />
 321   </ldiftab>
 322
 323   <faipartitiontabs>
 324     <tab class="faiPartitionTable" name="Partitions" />
 325   </faipartitiontabs>
 326
 327   <faiscripttabs>
 328     <tab class="faiScript" name="Script" />
 329   </faiscripttabs>
 330
 331   <faihooktabs>
 332     <tab class="faiHook" name="Hooks" />
 333   </faihooktabs>
 334
 335   <faivariabletabs>
 336     <tab class="faiVariable" name="Variables" />
 337   </faivariabletabs>
 338
 339   <faitemplatetabs>
 340     <tab class="faiTemplate" name="Templates" />
 341   </faitemplatetabs>
 342
 343   <faiprofiletabs>
 344     <tab class="faiProfile" name="Profiles" />
 345     <tab class="faiSummaryTab" name="Summary" />
 346   </faiprofiletabs>
 347
 348   <faipackagetabs>
 349     <tab class="faiPackage" name="Packages" />
 350   </faipackagetabs>
 351
 352   <opsitabs>
 353     <tab class="opsiGeneric" name="Opsi" />
 354     <tab class="opsiSoftware" name="Hardware information" />
 355     <tab class="opsiHardware" name="software information" />
 356     <tab class="licenseUsageByHost" name="Usage"/>
 357   </opsitabs>
 358
 359   <opsiprodconfig>
 360     <tab class="opsiProperties" name="Config" />
 361     <tab class="licenseByProduct" name="Usage"/>
 362   </opsiprodconfig>
 363
 364   <!-- Logging plugin -->
 365   <logtabs>
 366       <tab class="logview" name="System logs" />
 367       <tab class="gosa_logview" name="GOsa logs" />
 368   </logtabs>
 369
 370
 371   <!-- Main section **********************************************************
 372
 373        The main section defines global settings, which might be overridden by
 374        each location definition inside.
 375
 376        For more information about the configuration parameters, take a look at
 377        the gosa.conf(5) manual page.
 378
 379   -->
 380   <main default="{$cv.location}"
 381 {if $cv.optional.list_summary}
 382         listSummary="true"
 383 {else}
 384         listSummary="false"
 385 {/if}
 386 {if $cv.pwd_rules.pwminlen_active}
 387         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 388 {/if}
 389 {if $cv.pwd_rules.pwdiffer_active}
 390         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 391 {/if}
 392 {if $cv.pwd_rules.externalpwdhook_active}
 393         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 394 {/if}
 395 {if $cv.errorlvl}
 396         displayErrors="true"
 397 {else}
 398         displayErrors="false"
 399 {/if}
 400 {if $cv.enable_schema_check}
 401         schemaCheck="true"
 402 {else}
 403         schemaCheck="false"
 404 {/if}
 405 {if $cv.generic_settings.enableCopyPaste}
 406         copyPaste="true"
 407 {else}
 408         copyPaste="false"
 409 {/if}
 410 {if $cv.optional.forceglobals}
 411         forceGlobals="true"
 412 {else}
 413         forceGlobals="false"
 414 {/if}
 415 {if $cv.optional.forcessl}
 416         forceSSL="true"
 417 {else}
 418         forceSSL="false"
 419 {/if}
 420 {if $cv.optional.ldapstats}
 421         ldapStats="true"
 422 {else}
 423         ldapStats="false"
 424 {/if}
 425 {if $cv.optional.warnssl}
 426         warnSSL="true"
 427 {else}
 428         warnSSL="false"
 429 {/if}
 430 {if $cv.optional.ppd_path_active}
 431         ppdGzip="true"
 432         ppdPath="{$cv.optional.ppd_path}"
 433 {/if}
 434 {if $cv.optional.max_ldap_query_time_active}
 435         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 436 {/if}
 437 {if $cv.optional.noprimarygroup}
 438         primaryGroupFilter="true"
 439 {/if}
 440 {if $cv.optional.mailQueueScriptPath_active}
 441         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 442 {/if}
 443 {if $cv.optional.user_filter_cookie}
 444         storeFilterSettings="true"
 445 {else}
 446         storeFilterSettings="false"
 447 {/if}
 448 {if $cv.compressed}
 449         sendCompressedOutput="true"
 450 {else}
 451         sendCompressedOutput="false"
 452 {/if}
 453 {if $cv.optional.uniq_identifier_active }
 454         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 455 {else}
 456         modificationDetectionAttribute=""
 457 {/if}
 458         language="{$cv.lang_selected}"
 459         theme="{$cv.theme}"
 460         sessionLifetime="{$cv.optional.session_lifetime}"
 461         templateCompileDirectory="{$cv.optional.compile}"
 462         debugLevel="{$cv.optional.debuglevel}"
 463         sambaHashHook='{$cv.samba_settings.smbhash}'
 464     >
 465
 466     <!-- Location definition -->
 467     <location name="{$cv.location}"
 468               passwordDefaultHash="{$cv.encryption}"
 469               accountPrimaryAttribute="{$cv.peopledn}"
 470               userRDN="{$cv.peopleou}"
 471               groupRDN="{$cv.groupou}"
 472               gidNumberBase="{$cv.uidbase}"
 473               uidNumberBase="{$cv.uidbase}"
 474               logging="{$cv.generic_settings.logging}"
 475 {if $cv.optional.sudoou_active}
 476               sudoRDN="{$cv.optional.sudoou}"
 477 {/if}
 478 {if $cv.optional.gosaSupportURI_active}
 479               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 480               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 481 {else}
 482               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 483               disabled_gosaSupportTimeout="15"
 484 {/if}
 485 {if $cv.optional.login_attribute}
 486               loginAttribute="{$cv.optional.login_attribute}"
 487 {else}
 488               loginAttribute="uid"
 489 {/if}
 490 {if $cv.timezone}
 491               timezone="{$cv.timezone}"
 492 {/if}
 493 {if $cv.optional.strict_units}
 494               honourUnitTags="true"
 495 {else}
 496               honourUnitTags="false"
 497 {/if}
 498 {if $cv.krbsasl}
 499               useSaslForKerberos="true"
 500 {else}
 501               useSaslForKerberos="false"
 502 {/if}
 503 {if $cv.rfc2307bis}
 504               rfc2307bis="true"
 505 {else}
 506               rfc2307bis="false"
 507 {/if}
 508 {if $cv.include_personal_title}
 509               personalTitleInDN="true"
 510 {else}
 511               personalTitleInDN="false"
 512 {/if}
 513 {if $cv.base_hook_active}
 514               nextIdHook="{$cv.base_hook}"
 515 {/if}
 516 {if $cv.generic_settings.wws_ou_active}
 517               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 518 {/if}
 519 {if $cv.id_settings.idgen_active}
 520               idGenerator="{$cv.id_settings.idgen}"
 521 {/if}
 522 {if $cv.strict}
 523               strictNamingRules="true"
 524 {else}
 525               strictNamingRules="false"
 526 {/if}
 527 {if $cv.id_settings.minid_active}
 528               minId="{$cv.id_settings.minid}"
 529 {/if}
 530               mailAttribute="{$cv.mail_attrib}"
 531               gosaSharedPrefix=""
 532               mailUserCreation=""
 533               mailFolderCreation=""
 534               imapTimeout="10"
 535 {if $cv.mail != "disabled"}
 536               mailMethod="{$cv.mail}"
 537 {if $cv.cyrusunixstyle}
 538               cyrusUseSlashes="true"
 539 {else}
 540               cyrusUseSlashes="false"
 541 {/if}
 542 {if $cv.mail_settings.vacationdir_active}
 543               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 544 {/if}
 545 {/if}
 546 {if $cv.tls}
 547               ldapTLS="true"
 548 {/if}
 549 {if $cv.governmentmode}
 550               honourIvbbAttributes="true"
 551 {else}
 552               honourIvbbAttributes="false"
 553 {/if}
 554 {if $cv.sambaidmapping}
 555               sambaIdMapping="true"
 556 {/if}
 557 {if $cv.account_expiration}
 558               handleExpiredAccounts="true"
 559 {/if}
 560 {if $cv.samba_settings.samba_sid_active}
 561               sambaSID="{$cv.samba_settings.samba_sid}"
 562 {/if}
 563 {if $cv.samba_settings.samba_rid_active}
 564               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 565 {/if}
 566 {if $cv.generic_settings.snapshot_active}
 567               enableSnapshots="true"
 568               snapshotBase="{$cv.generic_settings.snapshot_base}"
 569               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 570               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 571               snapshotURI="{$cv.generic_settings.snapshot_server}"
 572 {else}
 573               enableSnapshots="false"
 574               snapshotBase="dc=localhost,dc=de"
 575               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 576               snapshotAdminPassword="secret"
 577               snapshotURI="ldap://localhost:389"
 578 {/if}
 579               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 580
 581               <referral URI="{$cv.connection}/{$cv.base}"
 582                         adminDn="{$cv.admin}"
 583                         adminPassword="{$cv.password}" />
 584
 585     </location>
 586   </main>
 587 </conf>