gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable administrative services -->
  35     <section name="Administration">
  36         <plugin acl="department" class="departmentManagement" />
  37
  38       <!-- This long ACL list is required to exclude the users menu entry when only
  39             'viewFaxEntries' permissions are set -->
  40       <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
  41             class="userManagement" />
  42       <plugin acl="groups" class="groupManagement" />
  43       <plugin acl="roles" class="roleManagement"/>
  44       <plugin acl="ogroups" class="ogroupManagement" />
  45       <plugin acl="application" class="applicationManagement" />
  46       <plugin acl="mimetypes" class="mimetypeManagement" />
  47       <plugin acl="devices" class="deviceManagement" />
  48       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  49       <!-- Use 'lockDn'      for dn
  50                'lockName'    for name
  51                'lockType'    for branch/freeze -->
  52       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  53       <plugin acl="opsi" class="opsiLicenses"/>
  54       <plugin acl="gofaxlist" class="blocklist" />
  55       <plugin acl="gofonmacro" class="goFonMacro" />
  56       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  57       <plugin acl="acl"  class="aclManagement" />
  58       <plugin acl="sudo" class="sudoManagement" />
  59     </section>
  60
  61     <!-- Section to enable addon plugins -->
  62     <section name="Addons">
  63       <plugin acl="server/rSyslogServer" class="rsyslog" />
  64     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  65       <plugin acl="mailqueue" class="mailqueue" />
  66       <plugin acl="users/viewFaxEntries:self,users/viewFaxEntries" class="faxreport" />
  67       <plugin acl="users/viewFonEntries:self,users/viewFonEntries" class="fonreport" />
  68       <plugin acl="gotomasses" class="gotomasses" />
  69       <plugin acl="ldapmanager" class="ldif" />
  70     </section>
  71   </menu>
  72
  73  <!-- These entries will be rendered on the path navigator -->
  74   <pathMenu>
  75       <plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/     phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/              pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/user:self,users/  scalixAccount:self,users/password:self,users/gofaxAccount:self,users/phoneAccount:self" class="MyAccount" />
  76       <plugin acl="users/password:self" class="password" />
  77   </pathMenu>
  78
  79
  80   <!-- Tab definitions *******************************************************
  81
  82        Tab definitions define the sub plugins which get included for certain
  83        tabbed dialogs. If you change something here, never (!) remove the
  84        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  85        need a primary plugin.
  86
  87        "*tab" should be looked for by a defined plugin. This one will take
  88        every "tab" defined "class" and will show it inside of a tabbed dialog
  89        with the header defined in "name".
  90    -->
  91
  92   <!-- ACL dialog -->
  93   <acltab>
  94     <tab class="acl" name="ACL" />
  95   </acltab>
  96
  97   <aclroletab>
  98     <tab class="aclRole" name="ACL Role" />
  99   </aclroletab>
 100
 101   <!-- User dialog -->
 102   <usertabs>
 103      <tab class="user" name="Generic" />
 104      <tab class="posixAccount" name="Unix" />
 105      <tab class="environment" name="Environment" />
 106      <tab class="mailAccount" name="Mail" />
 107      <tab class="sambaAccount" name="Samba" />
 108      <tab class="netatalk" name="Netatalk" />
 109      <tab class="connectivity" name="Connectivity" />
 110      <tab class="gofaxAccount" name="Fax" />
 111      <tab class="phoneAccount" name="Phone" />
 112      <tab class="scalixAccount" name="Scalix" />
 113      <tab class="nagiosAccount" name="Nagios" />
 114    </usertabs>
 115
 116   <opsiLicenseTabs>
 117     <tab class="licensePoolGeneric" name="Generic"/>
 118     <tab class="licenseUsage" name="Usage"/>
 119   </opsiLicenseTabs>
 120
 121   <!-- Group dialog -->
 122   <grouptabs>
 123     <tab class="group" name="Generic" />
 124     <tab class="environment" name="Environment" />
 125     <tab class="appgroup" name="Applications" />
 126     <tab class="mailgroup" name="Mail" />
 127   </grouptabs>
 128
 129   <!-- Sudo dialog -->
 130   <sudotabs>
 131     <tab class="sudo" name="Generic" />
 132     <tab class="sudoOption" name="Options" />
 133   </sudotabs>
 134
 135   <!-- GOfax plugins -->
 136   <faxblocktabs>
 137     <tab class="blocklistGeneric" name="Generic" />
 138   </faxblocktabs>
 139
 140   <!-- GOfon plugins -->
 141   <conferencetabs>
 142     <tab class="conference" name="Generic" />
 143   </conferencetabs>
 144
 145   <macrotabs>
 146     <tab class="macro" name="Generic" />
 147     <tab class="macroParameter" name="Parameter" />
 148   </macrotabs>
 149
 150   <phonetabs>
 151     <tab class="phoneGeneric" name="Generic" />
 152   </phonetabs>
 153
 154   <!-- GOto plugins -->
 155   <appstabs>
 156     <tab class="application" name="Generic" />
 157     <tab class="applicationParameters" name="Options" />
 158   </appstabs>
 159
 160   <mimetabs>
 161     <tab class="mimetype" name="Generic" />
 162   </mimetabs>
 163
 164   <devicetabs>
 165     <tab class="deviceGeneric" name="Generic" />
 166   </devicetabs>
 167
 168   <arpnewdevicetabs>
 169     <tab class="ArpNewDevice" name="Generic" />
 170   </arpnewdevicetabs>
 171
 172   <termtabs>
 173      <tab class="termgeneric" name="Generic" />
 174      <tab class="termstartup" name="Startup" />
 175      <tab class="termservice" name="Devices" />
 176      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 177   </termtabs>
 178
 179   <servtabs>
 180      <tab class="servgeneric" name="Generic" />
 181      <tab class="workstartup" name="Startup" />
 182      <tab class="ServerService" name="Services" />
 183      <tab class="faiSummaryTab" name="Deployment summary" />
 184      <tab class="gotoLogView" name="Installation logs" />
 185      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 186   </servtabs>
 187
 188   <worktabs>
 189      <tab class="workgeneric" name="Generic" />
 190      <tab class="workstartup" name="Startup" />
 191      <tab class="workservice" name="Devices" />
 192      <tab class="printgeneric" name="Printer" />
 193      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 194      <tab class="faiSummaryTab" name="Deployment summary" />
 195      <tab class="gotoLogView" name="Installation logs" />
 196   </worktabs>
 197
 198   <printtabs>
 199      <tab class="printgeneric" name="Generic" />
 200   </printtabs>
 201
 202   <componenttabs>
 203      <tab class="componentGeneric" name="Generic" />
 204   </componenttabs>
 205
 206   <wintabs>
 207      <tab class="wingeneric" name="Generic" />
 208   </wintabs>
 209
 210   <serverservice>
 211     <tab class="goMailServer" />
 212 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 213     <tab class="servkolab" />
 214 {else}
 215     <!-- <tab class="servkolab" /> -->
 216 {/if}
 217     <tab class="goNtpServer" />
 218     <tab class="servrepository" />
 219     <tab class="goImapServer" />
 220     <tab class="goKrbServer" />
 221     <tab class="goFaxServer" />
 222     <tab class="goFonServer" />
 223     <tab class="goCupsServer" />
 224     <tab class="goKioskService" />
 225     <tab class="goTerminalServer" />
 226     <tab class="goLdapServer" />
 227     <tab class="goShareServer" />
 228     <tab class="gospamserver" />
 229     <tab class="govirusserver" />
 230     <tab class="servdhcp" />
 231     <tab class="servdns" />
 232     <tab class="rSyslogServer" />
 233   </serverservice>
 234
 235   <!-- Department plugin -->
 236   <deptabs>
 237     <tab class="department" name="Generic" />
 238   </deptabs>
 239
 240   <organization_tabs>
 241     <tab class="organization" name="Generic" />
 242   </organization_tabs>
 243
 244   <locality_tabs>
 245     <tab class="locality" name="Generic" />
 246   </locality_tabs>
 247
 248   <country_tabs>
 249     <tab class="country" name="Generic" />
 250   </country_tabs>
 251
 252   <dcobject_tabs>
 253     <tab class="dcObject" name="Generic" />
 254   </dcobject_tabs>
 255
 256   <domain_tabs>
 257     <tab class="domain" name="Generic" />
 258   </domain_tabs>
 259
 260   <!-- Role tabs -->
 261   <roletabs>
 262     <tab class="roleGeneric" name="Generic"/>
 263   </roletabs>
 264
 265   <ogrouptabs>
 266     <tab class="ogroup" name="Generic" />
 267   </ogrouptabs>
 268
 269   <!-- Debian archive management plugin -->
 270   <!--
 271   <dak_tabs>
 272     <tab class="dakrepository" name="Repository" />
 273     <tab class="dakqueue" name="Queue" />
 274     <tab class="dakkeyring" name="Key ring" />
 275   </dak_tabs>
 276   -->
 277
 278   <!-- Connectivity plugins -->
 279   <connectivity>
 280 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 281     <tab class='kolabAccount' />
 282 {else}
 283 <!-- <tab class='kolabAccount' /> -->
 284 {/if}
 285     <tab class="proxyAccount" />
 286     <tab class="pureftpdAccount" />
 287     <tab class="webdavAccount" />
 288     <tab class="phpgwAccount" />
 289     <tab class="intranetAccount" />
 290     <!--
 291     <tab class="opengwAccount"
 292       username="OGo"
 293       password=""
 294       database="OGo"
 295       databaseServer="localhost" />
 296     -->
 297     <tab class="pptpAccount" />
 298     <tab class="phpscheduleitAccount" />
 299     <tab class="oxchangeAccount" />
 300   </connectivity>
 301
 302   <ldiftab>
 303     <tab class="ldifexport" name="Export" />
 304     <tab class="xlsexport" name="Excel Export" />
 305 <!--    <tab class="ldifimport" name="Import" /> -->
 306 <!--    <tab class="csvimport" name="CSV Import" /> -->
 307   </ldiftab>
 308
 309   <faipartitiontabs>
 310     <tab class="faiPartitionTable" name="Partitions" />
 311   </faipartitiontabs>
 312
 313   <faiscripttabs>
 314     <tab class="faiScript" name="Script" />
 315   </faiscripttabs>
 316
 317   <faihooktabs>
 318     <tab class="faiHook" name="Hooks" />
 319   </faihooktabs>
 320
 321   <faivariabletabs>
 322     <tab class="faiVariable" name="Variables" />
 323   </faivariabletabs>
 324
 325   <faitemplatetabs>
 326     <tab class="faiTemplate" name="Templates" />
 327   </faitemplatetabs>
 328
 329   <faiprofiletabs>
 330     <tab class="faiProfile" name="Profiles" />
 331     <tab class="faiSummaryTab" name="Summary" />
 332   </faiprofiletabs>
 333
 334   <faipackagetabs>
 335     <tab class="faiPackage" name="Packages" />
 336   </faipackagetabs>
 337
 338   <opsitabs>
 339     <tab class="opsiGeneric" name="Opsi" />
 340     <tab class="opsiSoftware" name="Hardware information" />
 341     <tab class="opsiHardware" name="software information" />
 342     <tab class="licenseUsageByHost" name="Usage"/>
 343   </opsitabs>
 344
 345   <opsiprodconfig>
 346     <tab class="opsiProperties" name="Config" />
 347     <tab class="licenseByProduct" name="Usage"/>
 348   </opsiprodconfig>
 349
 350   <!-- rSyslog plugin -->
 351   <rsyslogtabs>
 352       <tab class="rsyslog" name="System logs" />
 353   </rsyslogtabs>
 354
 355   <!-- Main section **********************************************************
 356
 357        The main section defines global settings, which might be overridden by
 358        each location definition inside.
 359
 360        For more information about the configuration parameters, take a look at
 361        the gosa.conf(5) manual page.
 362
 363   -->
 364   <main default="{$cv.location}"
 365 {if $cv.generic_settings.logging}
 366         logging="true"
 367 {else}
 368         logging="false"
 369 {/if}
 370 {if $cv.optional.list_summary}
 371         listSummary="true"
 372 {else}
 373         listSummary="false"
 374 {/if}
 375 {if $cv.pwd_rules.pwminlen_active}
 376         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 377 {/if}
 378 {if $cv.pwd_rules.pwdiffer_active}
 379         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 380 {/if}
 381 {if $cv.pwd_rules.externalpwdhook_active}
 382         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 383 {/if}
 384 {if $cv.errorlvl}
 385         displayErrors="true"
 386 {else}
 387         displayErrors="false"
 388 {/if}
 389 {if $cv.enable_schema_check}
 390         schemaCheck="true"
 391 {else}
 392         schemaCheck="false"
 393 {/if}
 394 {if $cv.generic_settings.enableCopyPaste}
 395         copyPaste="true"
 396 {else}
 397         copyPaste="false"
 398 {/if}
 399 {if $cv.optional.forceglobals}
 400         forceGlobals="true"
 401 {else}
 402         forceGlobals="false"
 403 {/if}
 404 {if $cv.optional.forcessl}
 405         forceSSL="true"
 406 {else}
 407         forceSSL="false"
 408 {/if}
 409 {if $cv.optional.ldapstats}
 410         ldapStats="true"
 411 {else}
 412         ldapStats="false"
 413 {/if}
 414 {if $cv.optional.warnssl}
 415         warnSSL="true"
 416 {else}
 417         warnSSL="false"
 418 {/if}
 419 {if $cv.optional.ppd_path_active}
 420         ppdGzip="true"
 421         ppdPath="{$cv.optional.ppd_path}"
 422 {/if}
 423 {if $cv.optional.max_ldap_query_time_active}
 424         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 425 {/if}
 426 {if $cv.optional.noprimarygroup}
 427         primaryGroupFilter="true"
 428 {/if}
 429 {if $cv.optional.mailQueueScriptPath_active}
 430         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 431 {/if}
 432 {if $cv.optional.user_filter_cookie}
 433         storeFilterSettings="true"
 434 {else}
 435         storeFilterSettings="false"
 436 {/if}
 437 {if $cv.compressed}
 438         sendCompressedOutput="true"
 439 {else}
 440         sendCompressedOutput="false"
 441 {/if}
 442 {if $cv.optional.uniq_identifier_active}
 443         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 444 {else}
 445         modificationDetectionAttribute=""
 446 {/if}
 447         language="{$cv.lang_selected}"
 448         theme="{$cv.theme}"
 449         sessionLifetime="{$cv.optional.session_lifetime}"
 450         templateCompileDirectory="{$cv.optional.compile}"
 451         debugLevel="{$cv.optional.debuglevel}"
 452         sambaHashHook='{$cv.samba_settings.smbhash}'
 453     >
 454
 455     <!-- Location definition -->
 456     <location name="{$cv.location}"
 457               passwordDefaultHash="{$cv.encryption}"
 458               accountPrimaryAttribute="{$cv.peopledn}"
 459               userRDN="{$cv.peopleou}"
 460               groupRDN="{$cv.groupou}"
 461               gidNumberBase="{$cv.uidbase}"
 462               uidNumberBase="{$cv.uidbase}"
 463 {if $cv.optional.sudoou_active}
 464               sudoRDN="{$cv.optional.sudoou}"
 465 {/if}
 466 {if $cv.optional.gosaSupportURI_active}
 467               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 468               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 469 {else}
 470               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 471               disabled_gosaSupportTimeout="15"
 472 {/if}
 473 {if $cv.optional.login_attribute}
 474               loginAttribute="{$cv.optional.login_attribute}"
 475 {else}
 476               loginAttribute="uid"
 477 {/if}
 478 {if $cv.timezone}
 479               timezone="{$cv.timezone}"
 480 {/if}
 481 {if $cv.optional.strict_units}
 482               honourUnitTags="true"
 483 {else}
 484               honourUnitTags="false"
 485 {/if}
 486 {if $cv.krbsasl}
 487               useSaslForKerberos="true"
 488 {else}
 489               useSaslForKerberos="false"
 490 {/if}
 491 {if $cv.rfc2307bis}
 492               rfc2307bis="true"
 493 {else}
 494               rfc2307bis="false"
 495 {/if}
 496 {if $cv.include_personal_title}
 497               personalTitleInDN="true"
 498 {else}
 499               personalTitleInDN="false"
 500 {/if}
 501 {if $cv.base_hook_active}
 502               nextIdHook="{$cv.base_hook}"
 503 {/if}
 504 {if $cv.generic_settings.wws_ou_active}
 505               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 506 {/if}
 507 {if $cv.id_settings.idgen_active}
 508               idGenerator="{$cv.id_settings.idgen}"
 509 {/if}
 510 {if $cv.strict}
 511               strictNamingRules="true"
 512 {else}
 513               strictNamingRules="false"
 514 {/if}
 515 {if $cv.id_settings.minid_active}
 516               minId="{$cv.id_settings.minid}"
 517 {/if}
 518               mailAttribute="{$cv.mail_attrib}"
 519               gosaSharedPrefix=""
 520               mailUserCreation=""
 521               mailFolderCreation=""
 522               imapTimeout="10"
 523 {if $cv.mail != "disabled"}
 524               mailMethod="{$cv.mail}"
 525 {if $cv.cyrusunixstyle}
 526               cyrusUseSlashes="true"
 527 {else}
 528               cyrusUseSlashes="false"
 529 {/if}
 530 {if $cv.mail_settings.vacationdir_active}
 531               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 532 {/if}
 533 {/if}
 534 {if $cv.tls}
 535               ldapTLS="true"
 536 {/if}
 537 {if $cv.governmentmode}
 538               honourIvbbAttributes="true"
 539 {else}
 540               honourIvbbAttributes="false"
 541 {/if}
 542 {if $cv.sambaidmapping}
 543               sambaIdMapping="true"
 544 {/if}
 545 {if $cv.account_expiration}
 546               handleExpiredAccounts="true"
 547 {/if}
 548 {if $cv.samba_settings.samba_sid_active}
 549               sambaSID="{$cv.samba_settings.samba_sid}"
 550 {/if}
 551 {if $cv.samba_settings.samba_rid_active}
 552               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 553 {/if}
 554 {if $cv.generic_settings.snapshot_active}
 555               enableSnapshots="true"
 556               snapshotBase="{$cv.generic_settings.snapshot_base}"
 557               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 558               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 559               snapshotURI="{$cv.generic_settings.snapshot_server}"
 560 {else}
 561               enableSnapshots="false"
 562               snapshotBase="dc=localhost,dc=de"
 563               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 564               snapshotAdminPassword="secret"
 565               snapshotURI="ldap://localhost:389"
 566 {/if}
 567               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 568
 569               <referral URI="{$cv.connection}/{$cv.base}"
 570                         adminDn="{$cv.admin}"
 571                         adminPassword="{$cv.password}" />
 572
 573     </location>
 574   </main>
 575 </conf>