gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable administrative services -->
  35     <section name="Administration">
  36       <plugin acl="department" class="departmentManagement" />
  37
  38       <!-- This long ACL list is required to exclude the users menu entry when only
  39             'viewFaxEntries' permissions are set -->
  40       <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
  41             class="userManagement" />
  42       <plugin acl="groups" class="groupManagement" />
  43       <plugin acl="roles" class="roleManagement"/>
  44       <plugin acl="acl"  class="aclManagement" />
  45       <plugin acl="ogroups" class="ogroupManagement" />
  46       <plugin acl="sudo" class="sudoManagement" />
  47       <plugin acl="application" class="applicationManagement" />
  48       <plugin acl="mimetypes" class="mimetypeManagement" />
  49       <plugin acl="devices" class="deviceManagement" />
  50       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  51       <!-- Use 'lockDn'      for dn
  52                'lockName'    for name
  53                'lockType'    for branch/freeze -->
  54       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  55       <plugin acl="opsi" class="opsiLicenses"/>
  56       <plugin acl="gofaxlist" class="blocklist" />
  57       <plugin acl="gofonmacro" class="goFonMacro" />
  58       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  59     </section>
  60
  61     <!-- Section to enable addon plugins -->
  62     <section name="Addons">
  63       <plugin acl="server/rSyslogServer" class="rsyslog" />
  64     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  65       <plugin acl="mailqueue" class="mailqueue" />
  66       <plugin acl="users/viewFaxEntries:self,users/viewFaxEntries" class="faxreport" />
  67       <plugin acl="users/viewFonEntries:self,users/viewFonEntries" class="fonreport" />
  68       <plugin acl="gotomasses" class="gotomasses" />
  69       <plugin acl="ldapmanager" class="ldif" />
  70     </section>
  71   </menu>
  72
  73  <!-- These entries will be rendered on the path navigator -->
  74   <pathMenu>
  75       <plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/     phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/              pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/user:self,users/  scalixAccount:self,users/password:self,users/gofaxAccount:self,users/phoneAccount:self" class="MyAccount" />
  76       <plugin acl="users/password:self" class="password" />
  77   </pathMenu>
  78
  79
  80   <!-- Tab definitions *******************************************************
  81
  82        Tab definitions define the sub plugins which get included for certain
  83        tabbed dialogs. If you change something here, never (!) remove the
  84        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  85        need a primary plugin.
  86
  87        "*tab" should be looked for by a defined plugin. This one will take
  88        every "tab" defined "class" and will show it inside of a tabbed dialog
  89        with the header defined in "name".
  90    -->
  91
  92   <!-- ACL dialog -->
  93   <acltab>
  94     <tab class="acl" name="ACL" />
  95   </acltab>
  96
  97   <aclroletab>
  98     <tab class="aclRole" name="ACL Role" />
  99   </aclroletab>
 100
 101   <!-- User dialog -->
 102   <usertabs>
 103      <tab class="user" name="Generic" />
 104      <tab class="posixAccount" name="POSIX" />
 105      <tab class="sambaAccount" name="Samba" />
 106      <tab class="netatalk" name="Netatalk" />
 107      <tab class="mailAccount" name="Mail" />
 108      <tab class="scalixAccount" name="Scalix" />
 109      <tab class="environment" name="Desktop" />
 110      <tab class="connectivity" name="Connectivity" />
 111      <tab class="gofaxAccount" name="Fax" />
 112      <tab class="phoneAccount" name="Phone" />
 113      <tab class="nagiosAccount" name="Nagios" />
 114    </usertabs>
 115
 116   <!-- User dialog -->
 117   <MyAccountTabs>
 118      <tab class="user" name="Generic" />
 119      <tab class="posixAccount" name="POSIX" />
 120      <tab class="sambaAccount" name="Samba" />
 121      <tab class="netatalk" name="Netatalk" />
 122      <tab class="mailAccount" name="Mail" />
 123      <tab class="scalixAccount" name="Scalix" />
 124      <tab class="environment" name="Desktop" />
 125      <tab class="connectivity" name="Connectivity" />
 126      <tab class="gofaxAccount" name="Fax" />
 127      <tab class="phoneAccount" name="Phone" />
 128      <tab class="nagiosAccount" name="Nagios" />
 129    </MyAccountTabs>
 130
 131   <opsiLicenseTabs>
 132     <tab class="licensePoolGeneric" name="Generic"/>
 133     <tab class="licenseUsage" name="Usage"/>
 134   </opsiLicenseTabs>
 135
 136   <!-- Group dialog -->
 137   <grouptabs>
 138     <tab class="group" name="Generic" />
 139     <tab class="environment" name="Desktop" />
 140     <tab class="appgroup" name="Startmenu" />
 141     <tab class="mailgroup" name="Mail" />
 142   </grouptabs>
 143
 144   <!-- Sudo dialog -->
 145   <sudotabs>
 146     <tab class="sudo" name="Generic" />
 147     <tab class="sudoOption" name="Options" />
 148   </sudotabs>
 149
 150   <!-- GOfax plugins -->
 151   <faxblocktabs>
 152     <tab class="blocklistGeneric" name="Generic" />
 153   </faxblocktabs>
 154
 155   <!-- GOfon plugins -->
 156   <conferencetabs>
 157     <tab class="conference" name="Generic" />
 158   </conferencetabs>
 159
 160   <macrotabs>
 161     <tab class="macro" name="Generic" />
 162     <tab class="macroParameter" name="Parameter" />
 163   </macrotabs>
 164
 165   <phonetabs>
 166     <tab class="phoneGeneric" name="Generic" />
 167   </phonetabs>
 168
 169   <!-- GOto plugins -->
 170   <appstabs>
 171     <tab class="application" name="Generic" />
 172     <tab class="applicationParameters" name="Parameter" />
 173   </appstabs>
 174
 175   <mimetabs>
 176     <tab class="mimetype" name="Generic" />
 177   </mimetabs>
 178
 179   <devicetabs>
 180     <tab class="deviceGeneric" name="Generic" />
 181   </devicetabs>
 182
 183   <arpnewdevicetabs>
 184     <tab class="ArpNewDevice" name="Generic" />
 185   </arpnewdevicetabs>
 186
 187   <termtabs>
 188      <tab class="termgeneric" name="Generic" />
 189      <tab class="termstartup" name="Recipe" />
 190      <tab class="termservice" name="Devices" />
 191      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 192   </termtabs>
 193
 194   <servtabs>
 195      <tab class="servgeneric" name="Generic" />
 196      <tab class="workstartup" name="Recipe" />
 197      <tab class="ServerService" name="Services" />
 198      <tab class="faiSummaryTab" name="Deployment summary" />
 199      <tab class="gotoLogView" name="Installation logs" />
 200      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 201   </servtabs>
 202
 203   <worktabs>
 204      <tab class="workgeneric" name="Generic" />
 205      <tab class="workstartup" name="Recipe" />
 206      <tab class="workservice" name="Devices" />
 207      <tab class="printgeneric" name="Printer" />
 208      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 209      <tab class="faiSummaryTab" name="Deployment summary" />
 210      <tab class="gotoLogView" name="Installation logs" />
 211   </worktabs>
 212
 213   <printtabs>
 214      <tab class="printgeneric" name="Generic" />
 215   </printtabs>
 216
 217   <componenttabs>
 218      <tab class="componentGeneric" name="Generic" />
 219   </componenttabs>
 220
 221   <wintabs>
 222      <tab class="wingeneric" name="Generic" />
 223   </wintabs>
 224
 225   <serverservice>
 226     <tab class="goMailServer" />
 227 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 228     <tab class="servkolab" />
 229 {else}
 230     <!-- <tab class="servkolab" /> -->
 231 {/if}
 232     <tab class="goNtpServer" />
 233     <tab class="servrepository" />
 234     <tab class="goImapServer" />
 235     <tab class="goKrbServer" />
 236     <tab class="goFaxServer" />
 237     <tab class="goFonServer" />
 238     <tab class="goCupsServer" />
 239     <tab class="goKioskService" />
 240     <tab class="goTerminalServer" />
 241     <tab class="goLdapServer" />
 242     <tab class="goShareServer" />
 243     <tab class="gospamserver" />
 244     <tab class="govirusserver" />
 245     <tab class="servdhcp" />
 246     <tab class="servdns" />
 247     <tab class="rSyslogServer" />
 248   </serverservice>
 249
 250   <!-- Department plugin -->
 251   <deptabs>
 252     <tab class="department" name="Generic" />
 253   </deptabs>
 254
 255   <organization_tabs>
 256     <tab class="organization" name="Generic" />
 257   </organization_tabs>
 258
 259   <locality_tabs>
 260     <tab class="locality" name="Generic" />
 261   </locality_tabs>
 262
 263   <country_tabs>
 264     <tab class="country" name="Generic" />
 265   </country_tabs>
 266
 267   <dcobject_tabs>
 268     <tab class="dcObject" name="Generic" />
 269   </dcobject_tabs>
 270
 271   <domain_tabs>
 272     <tab class="domain" name="Generic" />
 273   </domain_tabs>
 274
 275   <!-- Role tabs -->
 276   <roletabs>
 277     <tab class="roleGeneric" name="Generic"/>
 278   </roletabs>
 279
 280   <ogrouptabs>
 281     <tab class="ogroup" name="Generic" />
 282   </ogrouptabs>
 283
 284   <!-- Debian archive management plugin -->
 285   <!--
 286   <dak_tabs>
 287     <tab class="dakrepository" name="Repository" />
 288     <tab class="dakqueue" name="Queue" />
 289     <tab class="dakkeyring" name="Key ring" />
 290   </dak_tabs>
 291   -->
 292
 293   <!-- Connectivity plugins -->
 294   <connectivity>
 295 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 296     <tab class='kolabAccount' />
 297 {else}
 298 <!-- <tab class='kolabAccount' /> -->
 299 {/if}
 300     <tab class="proxyAccount" />
 301     <tab class="pureftpdAccount" />
 302     <tab class="webdavAccount" />
 303     <tab class="phpgwAccount" />
 304     <tab class="intranetAccount" />
 305     <!--
 306     <tab class="opengwAccount"
 307       username="OGo"
 308       password=""
 309       database="OGo"
 310       databaseServer="localhost" />
 311     -->
 312     <tab class="pptpAccount" />
 313     <tab class="phpscheduleitAccount" />
 314     <tab class="oxchangeAccount" />
 315   </connectivity>
 316
 317   <ldiftab>
 318     <tab class="ldifexport" name="Export" />
 319     <tab class="xlsexport" name="Excel Export" />
 320 <!--    <tab class="ldifimport" name="Import" /> -->
 321 <!--    <tab class="csvimport" name="CSV Import" /> -->
 322   </ldiftab>
 323
 324   <faipartitiontabs>
 325     <tab class="faiPartitionTable" name="Partitions" />
 326   </faipartitiontabs>
 327
 328   <faiscripttabs>
 329     <tab class="faiScript" name="Scripts" />
 330   </faiscripttabs>
 331
 332   <faihooktabs>
 333     <tab class="faiHook" name="Hooks" />
 334   </faihooktabs>
 335
 336   <faivariabletabs>
 337     <tab class="faiVariable" name="Variables" />
 338   </faivariabletabs>
 339
 340   <faitemplatetabs>
 341     <tab class="faiTemplate" name="Templates" />
 342   </faitemplatetabs>
 343
 344   <faiprofiletabs>
 345     <tab class="faiProfile" name="Profiles" />
 346     <tab class="faiSummaryTab" name="Summary" />
 347   </faiprofiletabs>
 348
 349   <faipackagetabs>
 350     <tab class="faiPackage" name="Packages" />
 351   </faipackagetabs>
 352
 353   <opsitabs>
 354     <tab class="opsiGeneric" name="Generic" />
 355     <tab class="opsiSoftware" name="Hardware" />
 356     <tab class="opsiHardware" name="Software" />
 357     <tab class="licenseUsageByHost" name="License usage"/>
 358   </opsitabs>
 359
 360   <opsiprodconfig>
 361     <tab class="opsiProperties" name="Properties" />
 362     <tab class="licenseByProduct" name="License usage"/>
 363   </opsiprodconfig>
 364
 365   <!-- rSyslog plugin -->
 366   <rsyslogtabs>
 367       <tab class="rsyslog" name="System logs" />
 368   </rsyslogtabs>
 369
 370   <!-- Main section **********************************************************
 371
 372        The main section defines global settings, which might be overridden by
 373        each location definition inside.
 374
 375        For more information about the configuration parameters, take a look at
 376        the gosa.conf(5) manual page.
 377
 378   -->
 379   <main default="{$cv.location}"
 380 {if $cv.generic_settings.logging}
 381         logging="true"
 382 {else}
 383         logging="false"
 384 {/if}
 385 {if $cv.optional.list_summary}
 386         listSummary="true"
 387 {else}
 388         listSummary="false"
 389 {/if}
 390 {if $cv.pwd_rules.pwminlen_active}
 391         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 392 {/if}
 393 {if $cv.pwd_rules.pwdiffer_active}
 394         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 395 {/if}
 396 {if $cv.pwd_rules.externalpwdhook_active}
 397         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 398 {/if}
 399 {if $cv.errorlvl}
 400         displayErrors="true"
 401 {else}
 402         displayErrors="false"
 403 {/if}
 404 {if $cv.enable_schema_check}
 405         schemaCheck="true"
 406 {else}
 407         schemaCheck="false"
 408 {/if}
 409 {if $cv.generic_settings.enableCopyPaste}
 410         copyPaste="true"
 411 {else}
 412         copyPaste="false"
 413 {/if}
 414 {if $cv.optional.forceglobals}
 415         forceGlobals="true"
 416 {else}
 417         forceGlobals="false"
 418 {/if}
 419 {if $cv.optional.forcessl}
 420         forceSSL="true"
 421 {else}
 422         forceSSL="false"
 423 {/if}
 424 {if $cv.optional.ldapstats}
 425         ldapStats="true"
 426 {else}
 427         ldapStats="false"
 428 {/if}
 429 {if $cv.optional.warnssl}
 430         warnSSL="true"
 431 {else}
 432         warnSSL="false"
 433 {/if}
 434 {if $cv.optional.ppd_path_active}
 435         ppdGzip="true"
 436         ppdPath="{$cv.optional.ppd_path}"
 437 {/if}
 438 {if $cv.optional.max_ldap_query_time_active}
 439         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 440 {/if}
 441 {if $cv.optional.noprimarygroup}
 442         primaryGroupFilter="true"
 443 {/if}
 444 {if $cv.optional.mailQueueScriptPath_active}
 445         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 446 {/if}
 447 {if $cv.optional.user_filter_cookie}
 448         storeFilterSettings="true"
 449 {else}
 450         storeFilterSettings="false"
 451 {/if}
 452 {if $cv.compressed}
 453         sendCompressedOutput="true"
 454 {else}
 455         sendCompressedOutput="false"
 456 {/if}
 457 {if $cv.optional.uniq_identifier_active}
 458         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 459 {else}
 460         modificationDetectionAttribute=""
 461 {/if}
 462         language="{$cv.lang_selected}"
 463         theme="{$cv.theme}"
 464         sessionLifetime="{$cv.optional.session_lifetime}"
 465         templateCompileDirectory="{$cv.optional.compile}"
 466         debugLevel="{$cv.optional.debuglevel}"
 467         sambaHashHook='{$cv.samba_settings.smbhash}'
 468     >
 469
 470     <!-- Location definition -->
 471     <location name="{$cv.location}"
 472               passwordDefaultHash="{$cv.encryption}"
 473               accountPrimaryAttribute="{$cv.peopledn}"
 474               userRDN="{$cv.peopleou}"
 475               groupRDN="{$cv.groupou}"
 476               gidNumberBase="{$cv.uidbase}"
 477               uidNumberBase="{$cv.uidbase}"
 478 {if $cv.optional.sudoou_active}
 479               sudoRDN="{$cv.optional.sudoou}"
 480 {/if}
 481 {if $cv.optional.gosaSupportURI_active}
 482               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 483               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 484 {else}
 485               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 486               disabled_gosaSupportTimeout="15"
 487 {/if}
 488 {if $cv.optional.login_attribute}
 489               loginAttribute="{$cv.optional.login_attribute}"
 490 {else}
 491               loginAttribute="uid"
 492 {/if}
 493 {if $cv.timezone}
 494               timezone="{$cv.timezone}"
 495 {/if}
 496 {if $cv.optional.strict_units}
 497               honourUnitTags="true"
 498 {else}
 499               honourUnitTags="false"
 500 {/if}
 501 {if $cv.krbsasl}
 502               useSaslForKerberos="true"
 503 {else}
 504               useSaslForKerberos="false"
 505 {/if}
 506 {if $cv.rfc2307bis}
 507               rfc2307bis="true"
 508 {else}
 509               rfc2307bis="false"
 510 {/if}
 511 {if $cv.include_personal_title}
 512               personalTitleInDN="true"
 513 {else}
 514               personalTitleInDN="false"
 515 {/if}
 516 {if $cv.base_hook_active}
 517               nextIdHook="{$cv.base_hook}"
 518 {/if}
 519 {if $cv.generic_settings.wws_ou_active}
 520               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 521 {/if}
 522 {if $cv.id_settings.idgen_active}
 523               idGenerator="{$cv.id_settings.idgen}"
 524 {/if}
 525 {if $cv.strict}
 526               strictNamingRules="true"
 527 {else}
 528               strictNamingRules="false"
 529 {/if}
 530 {if $cv.id_settings.minid_active}
 531               minId="{$cv.id_settings.minid}"
 532 {/if}
 533               mailAttribute="{$cv.mail_attrib}"
 534               gosaSharedPrefix=""
 535               mailUserCreation=""
 536               mailFolderCreation=""
 537               imapTimeout="10"
 538 {if $cv.mail != "disabled"}
 539               mailMethod="{$cv.mail}"
 540 {if $cv.cyrusunixstyle}
 541               cyrusUseSlashes="true"
 542 {else}
 543               cyrusUseSlashes="false"
 544 {/if}
 545 {if $cv.mail_settings.vacationdir_active}
 546               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 547 {/if}
 548 {/if}
 549 {if $cv.tls}
 550               ldapTLS="true"
 551 {/if}
 552 {if $cv.governmentmode}
 553               honourIvbbAttributes="true"
 554 {else}
 555               honourIvbbAttributes="false"
 556 {/if}
 557 {if $cv.sambaidmapping}
 558               sambaIdMapping="true"
 559 {/if}
 560 {if $cv.account_expiration}
 561               handleExpiredAccounts="true"
 562 {/if}
 563 {if $cv.samba_settings.samba_sid_active}
 564               sambaSID="{$cv.samba_settings.samba_sid}"
 565 {/if}
 566 {if $cv.samba_settings.samba_rid_active}
 567               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 568 {/if}
 569 {if $cv.generic_settings.snapshot_active}
 570               enableSnapshots="true"
 571               snapshotBase="{$cv.generic_settings.snapshot_base}"
 572               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 573               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 574               snapshotURI="{$cv.generic_settings.snapshot_server}"
 575 {else}
 576               enableSnapshots="false"
 577               snapshotBase="dc=localhost,dc=de"
 578               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 579               snapshotAdminPassword="secret"
 580               snapshotURI="ldap://localhost:389"
 581 {/if}
 582               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 583
 584               <referral URI="{$cv.connection}/{$cv.base}"
 585                         adminDn="{$cv.admin}"
 586                         adminPassword="{$cv.password}" />
 587
 588     </location>
 589   </main>
 590 </conf>