gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable administrative services -->
  35     <section name="Administration">
  36         <plugin acl="department" class="departmentManagement" />
  37
  38       <!-- This long ACL list is required to exclude the users menu entry when only
  39             'viewFaxEntries' permissions are set -->
  40       <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
  41             class="userManagement" />
  42       <plugin acl="groups" class="groupManagement" />
  43       <plugin acl="roles" class="roleManagement"/>
  44       <plugin acl="ogroups" class="ogroupManagement" />
  45       <plugin acl="application" class="applicationManagement" />
  46       <plugin acl="mimetypes" class="mimetypeManagement" />
  47       <plugin acl="devices" class="deviceManagement" />
  48       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  49       <!-- Use 'lockDn'      for dn
  50                'lockName'    for name
  51                'lockType'    for branch/freeze -->
  52       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  53       <plugin acl="opsi" class="opsiLicenses"/>
  54       <plugin acl="gofaxlist" class="blocklist" />
  55       <plugin acl="gofonmacro" class="goFonMacro" />
  56       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  57       <plugin acl="acl"  class="aclManagement" />
  58       <plugin acl="sudo" class="sudoManagement" />
  59     </section>
  60
  61     <!-- Section to enable addon plugins -->
  62     <section name="Addons">
  63       <plugin acl="server/rSyslogServer" class="rsyslog" />
  64     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  65       <plugin acl="mailqueue" class="mailqueue" />
  66       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  67       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  68       <plugin acl="gotomasses" class="gotomasses" />
  69       <plugin acl="ldapmanager" class="ldif" />
  70     </section>
  71   </menu>
  72
  73
  74
  75   <!-- Tab definitions *******************************************************
  76
  77        Tab definitions define the sub plugins which get included for certain
  78        tabbed dialogs. If you change something here, never (!) remove the
  79        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  80        need a primary plugin.
  81
  82        "*tab" should be looked for by a defined plugin. This one will take
  83        every "tab" defined "class" and will show it inside of a tabbed dialog
  84        with the header defined in "name".
  85    -->
  86
  87   <!-- ACL dialog -->
  88   <acltab>
  89     <tab class="acl" name="ACL" />
  90   </acltab>
  91
  92   <aclroletab>
  93     <tab class="aclRole" name="ACL Role" />
  94   </aclroletab>
  95
  96   <!-- User dialog -->
  97   <usertabs>
  98      <tab class="user" name="Generic" />
  99      <tab class="posixAccount" name="Unix" />
 100      <tab class="environment" name="Environment" />
 101      <tab class="mailAccount" name="Mail" />
 102      <tab class="sambaAccount" name="Samba" />
 103      <tab class="netatalk" name="Netatalk" />
 104      <tab class="connectivity" name="Connectivity" />
 105      <tab class="gofaxAccount" name="Fax" />
 106      <tab class="phoneAccount" name="Phone" />
 107      <tab class="scalixAccount" name="Scalix" />
 108      <tab class="nagiosAccount" name="Nagios" />
 109    </usertabs>
 110
 111   <opsiLicenseTabs>
 112     <tab class="licensePoolGeneric" name="Generic"/>
 113     <tab class="licenseUsage" name="Usage"/>
 114   </opsiLicenseTabs>
 115
 116   <!-- Group dialog -->
 117   <grouptabs>
 118     <tab class="group" name="Generic" />
 119     <tab class="environment" name="Environment" />
 120     <tab class="appgroup" name="Applications" />
 121     <tab class="mailgroup" name="Mail" />
 122   </grouptabs>
 123
 124   <!-- Sudo dialog -->
 125   <sudotabs>
 126     <tab class="sudo" name="Generic" />
 127     <tab class="sudoOption" name="Options" />
 128   </sudotabs>
 129
 130   <!-- GOfax plugins -->
 131   <faxblocktabs>
 132     <tab class="blocklistGeneric" name="Generic" />
 133   </faxblocktabs>
 134
 135   <!-- GOfon plugins -->
 136   <conferencetabs>
 137     <tab class="conference" name="Generic" />
 138   </conferencetabs>
 139
 140   <macrotabs>
 141     <tab class="macro" name="Generic" />
 142     <tab class="macroParameter" name="Parameter" />
 143   </macrotabs>
 144
 145   <phonetabs>
 146     <tab class="phoneGeneric" name="Generic" />
 147   </phonetabs>
 148
 149   <!-- GOto plugins -->
 150   <appstabs>
 151     <tab class="application" name="Generic" />
 152     <tab class="applicationParameters" name="Options" />
 153   </appstabs>
 154
 155   <mimetabs>
 156     <tab class="mimetype" name="Generic" />
 157   </mimetabs>
 158
 159   <devicetabs>
 160     <tab class="deviceGeneric" name="Generic" />
 161   </devicetabs>
 162
 163   <arpnewdevicetabs>
 164     <tab class="ArpNewDevice" name="Generic" />
 165   </arpnewdevicetabs>
 166
 167   <termtabs>
 168      <tab class="termgeneric" name="Generic" />
 169      <tab class="termstartup" name="Startup" />
 170      <tab class="termservice" name="Devices" />
 171      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 172   </termtabs>
 173
 174   <servtabs>
 175      <tab class="servgeneric" name="Generic" />
 176      <tab class="workstartup" name="Startup" />
 177      <tab class="ServerService" name="Services" />
 178      <tab class="faiSummaryTab" name="Deployment summary" />
 179      <tab class="gotoLogView" name="Installation logs" />
 180      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 181   </servtabs>
 182
 183   <worktabs>
 184      <tab class="workgeneric" name="Generic" />
 185      <tab class="workstartup" name="Startup" />
 186      <tab class="workservice" name="Devices" />
 187      <tab class="printgeneric" name="Printer" />
 188      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 189      <tab class="faiSummaryTab" name="Deployment summary" />
 190      <tab class="gotoLogView" name="Installation logs" />
 191   </worktabs>
 192
 193   <printtabs>
 194      <tab class="printgeneric" name="Generic" />
 195   </printtabs>
 196
 197   <componenttabs>
 198      <tab class="componentGeneric" name="Generic" />
 199   </componenttabs>
 200
 201   <wintabs>
 202      <tab class="wingeneric" name="Generic" />
 203   </wintabs>
 204
 205   <serverservice>
 206     <tab class="goMailServer" />
 207 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 208     <tab class="servkolab" />
 209 {else}
 210     <!-- <tab class="servkolab" /> -->
 211 {/if}
 212     <tab class="goNtpServer" />
 213     <tab class="servrepository" />
 214     <tab class="goImapServer" />
 215     <tab class="goKrbServer" />
 216     <tab class="goFaxServer" />
 217     <tab class="goFonServer" />
 218     <tab class="goCupsServer" />
 219     <tab class="goKioskService" />
 220     <tab class="goTerminalServer" />
 221     <tab class="goLdapServer" />
 222     <tab class="goShareServer" />
 223     <tab class="gospamserver" />
 224     <tab class="govirusserver" />
 225     <tab class="servdhcp" />
 226     <tab class="servdns" />
 227     <tab class="rSyslogServer" />
 228   </serverservice>
 229
 230   <!-- Department plugin -->
 231   <deptabs>
 232     <tab class="department" name="Generic" />
 233   </deptabs>
 234
 235   <organization_tabs>
 236     <tab class="organization" name="Generic" />
 237   </organization_tabs>
 238
 239   <locality_tabs>
 240     <tab class="locality" name="Generic" />
 241   </locality_tabs>
 242
 243   <country_tabs>
 244     <tab class="country" name="Generic" />
 245   </country_tabs>
 246
 247   <dcobject_tabs>
 248     <tab class="dcObject" name="Generic" />
 249   </dcobject_tabs>
 250
 251   <domain_tabs>
 252     <tab class="domain" name="Generic" />
 253   </domain_tabs>
 254
 255   <!-- Role tabs -->
 256   <roletabs>
 257     <tab class="roleGeneric" name="Generic"/>
 258   </roletabs>
 259
 260   <ogrouptabs>
 261     <tab class="ogroup" name="Generic" />
 262   </ogrouptabs>
 263
 264   <!-- Debian archive management plugin -->
 265   <!--
 266   <dak_tabs>
 267     <tab class="dakrepository" name="Repository" />
 268     <tab class="dakqueue" name="Queue" />
 269     <tab class="dakkeyring" name="Key ring" />
 270   </dak_tabs>
 271   -->
 272
 273   <!-- Connectivity plugins -->
 274   <connectivity>
 275 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 276     <tab class='kolabAccount' />
 277 {else}
 278 <!-- <tab class='kolabAccount' /> -->
 279 {/if}
 280     <tab class="proxyAccount" />
 281     <tab class="pureftpdAccount" />
 282     <tab class="webdavAccount" />
 283     <tab class="phpgwAccount" />
 284     <tab class="intranetAccount" />
 285     <!--
 286     <tab class="opengwAccount"
 287       username="OGo"
 288       password=""
 289       database="OGo"
 290       databaseServer="localhost" />
 291     -->
 292     <tab class="pptpAccount" />
 293     <tab class="phpscheduleitAccount" />
 294     <tab class="oxchangeAccount" />
 295   </connectivity>
 296
 297   <ldiftab>
 298     <tab class="ldifexport" name="Export" />
 299     <tab class="xlsexport" name="Excel Export" />
 300 <!--    <tab class="ldifimport" name="Import" /> -->
 301 <!--    <tab class="csvimport" name="CSV Import" /> -->
 302   </ldiftab>
 303
 304   <faipartitiontabs>
 305     <tab class="faiPartitionTable" name="Partitions" />
 306   </faipartitiontabs>
 307
 308   <faiscripttabs>
 309     <tab class="faiScript" name="Script" />
 310   </faiscripttabs>
 311
 312   <faihooktabs>
 313     <tab class="faiHook" name="Hooks" />
 314   </faihooktabs>
 315
 316   <faivariabletabs>
 317     <tab class="faiVariable" name="Variables" />
 318   </faivariabletabs>
 319
 320   <faitemplatetabs>
 321     <tab class="faiTemplate" name="Templates" />
 322   </faitemplatetabs>
 323
 324   <faiprofiletabs>
 325     <tab class="faiProfile" name="Profiles" />
 326     <tab class="faiSummaryTab" name="Summary" />
 327   </faiprofiletabs>
 328
 329   <faipackagetabs>
 330     <tab class="faiPackage" name="Packages" />
 331   </faipackagetabs>
 332
 333   <opsitabs>
 334     <tab class="opsiGeneric" name="Opsi" />
 335     <tab class="opsiSoftware" name="Hardware information" />
 336     <tab class="opsiHardware" name="software information" />
 337     <tab class="licenseUsageByHost" name="Usage"/>
 338   </opsitabs>
 339
 340   <opsiprodconfig>
 341     <tab class="opsiProperties" name="Config" />
 342     <tab class="licenseByProduct" name="Usage"/>
 343   </opsiprodconfig>
 344
 345   <!-- rSyslog plugin -->
 346   <rsyslogtabs>
 347       <tab class="rsyslog" name="System logs" />
 348   </rsyslogtabs>
 349
 350   <!-- Main section **********************************************************
 351
 352        The main section defines global settings, which might be overridden by
 353        each location definition inside.
 354
 355        For more information about the configuration parameters, take a look at
 356        the gosa.conf(5) manual page.
 357
 358   -->
 359   <main default="{$cv.location}"
 360 {if $cv.generic_settings.logging}
 361         logging="true"
 362 {else}
 363         logging="false"
 364 {/if}
 365 {if $cv.optional.list_summary}
 366         listSummary="true"
 367 {else}
 368         listSummary="false"
 369 {/if}
 370 {if $cv.pwd_rules.pwminlen_active}
 371         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 372 {/if}
 373 {if $cv.pwd_rules.pwdiffer_active}
 374         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 375 {/if}
 376 {if $cv.pwd_rules.externalpwdhook_active}
 377         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 378 {/if}
 379 {if $cv.errorlvl}
 380         displayErrors="true"
 381 {else}
 382         displayErrors="false"
 383 {/if}
 384 {if $cv.enable_schema_check}
 385         schemaCheck="true"
 386 {else}
 387         schemaCheck="false"
 388 {/if}
 389 {if $cv.generic_settings.enableCopyPaste}
 390         copyPaste="true"
 391 {else}
 392         copyPaste="false"
 393 {/if}
 394 {if $cv.optional.forceglobals}
 395         forceGlobals="true"
 396 {else}
 397         forceGlobals="false"
 398 {/if}
 399 {if $cv.optional.forcessl}
 400         forceSSL="true"
 401 {else}
 402         forceSSL="false"
 403 {/if}
 404 {if $cv.optional.ldapstats}
 405         ldapStats="true"
 406 {else}
 407         ldapStats="false"
 408 {/if}
 409 {if $cv.optional.warnssl}
 410         warnSSL="true"
 411 {else}
 412         warnSSL="false"
 413 {/if}
 414 {if $cv.optional.ppd_path_active}
 415         ppdGzip="true"
 416         ppdPath="{$cv.optional.ppd_path}"
 417 {/if}
 418 {if $cv.optional.max_ldap_query_time_active}
 419         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 420 {/if}
 421 {if $cv.optional.noprimarygroup}
 422         primaryGroupFilter="true"
 423 {/if}
 424 {if $cv.optional.mailQueueScriptPath_active}
 425         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 426 {/if}
 427 {if $cv.optional.user_filter_cookie}
 428         storeFilterSettings="true"
 429 {else}
 430         storeFilterSettings="false"
 431 {/if}
 432 {if $cv.compressed}
 433         sendCompressedOutput="true"
 434 {else}
 435         sendCompressedOutput="false"
 436 {/if}
 437 {if $cv.optional.uniq_identifier_active}
 438         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 439 {else}
 440         modificationDetectionAttribute=""
 441 {/if}
 442         language="{$cv.lang_selected}"
 443         theme="{$cv.theme}"
 444         sessionLifetime="{$cv.optional.session_lifetime}"
 445         templateCompileDirectory="{$cv.optional.compile}"
 446         debugLevel="{$cv.optional.debuglevel}"
 447         sambaHashHook='{$cv.samba_settings.smbhash}'
 448     >
 449
 450     <!-- Location definition -->
 451     <location name="{$cv.location}"
 452               passwordDefaultHash="{$cv.encryption}"
 453               accountPrimaryAttribute="{$cv.peopledn}"
 454               userRDN="{$cv.peopleou}"
 455               groupRDN="{$cv.groupou}"
 456               gidNumberBase="{$cv.uidbase}"
 457               uidNumberBase="{$cv.uidbase}"
 458 {if $cv.optional.sudoou_active}
 459               sudoRDN="{$cv.optional.sudoou}"
 460 {/if}
 461 {if $cv.optional.gosaSupportURI_active}
 462               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 463               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 464 {else}
 465               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 466               disabled_gosaSupportTimeout="15"
 467 {/if}
 468 {if $cv.optional.login_attribute}
 469               loginAttribute="{$cv.optional.login_attribute}"
 470 {else}
 471               loginAttribute="uid"
 472 {/if}
 473 {if $cv.timezone}
 474               timezone="{$cv.timezone}"
 475 {/if}
 476 {if $cv.optional.strict_units}
 477               honourUnitTags="true"
 478 {else}
 479               honourUnitTags="false"
 480 {/if}
 481 {if $cv.krbsasl}
 482               useSaslForKerberos="true"
 483 {else}
 484               useSaslForKerberos="false"
 485 {/if}
 486 {if $cv.rfc2307bis}
 487               rfc2307bis="true"
 488 {else}
 489               rfc2307bis="false"
 490 {/if}
 491 {if $cv.include_personal_title}
 492               personalTitleInDN="true"
 493 {else}
 494               personalTitleInDN="false"
 495 {/if}
 496 {if $cv.base_hook_active}
 497               nextIdHook="{$cv.base_hook}"
 498 {/if}
 499 {if $cv.generic_settings.wws_ou_active}
 500               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 501 {/if}
 502 {if $cv.id_settings.idgen_active}
 503               idGenerator="{$cv.id_settings.idgen}"
 504 {/if}
 505 {if $cv.strict}
 506               strictNamingRules="true"
 507 {else}
 508               strictNamingRules="false"
 509 {/if}
 510 {if $cv.id_settings.minid_active}
 511               minId="{$cv.id_settings.minid}"
 512 {/if}
 513               mailAttribute="{$cv.mail_attrib}"
 514               gosaSharedPrefix=""
 515               mailUserCreation=""
 516               mailFolderCreation=""
 517               imapTimeout="10"
 518 {if $cv.mail != "disabled"}
 519               mailMethod="{$cv.mail}"
 520 {if $cv.cyrusunixstyle}
 521               cyrusUseSlashes="true"
 522 {else}
 523               cyrusUseSlashes="false"
 524 {/if}
 525 {if $cv.mail_settings.vacationdir_active}
 526               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 527 {/if}
 528 {/if}
 529 {if $cv.tls}
 530               ldapTLS="true"
 531 {/if}
 532 {if $cv.governmentmode}
 533               honourIvbbAttributes="true"
 534 {else}
 535               honourIvbbAttributes="false"
 536 {/if}
 537 {if $cv.sambaidmapping}
 538               sambaIdMapping="true"
 539 {/if}
 540 {if $cv.account_expiration}
 541               handleExpiredAccounts="true"
 542 {/if}
 543 {if $cv.samba_settings.samba_sid_active}
 544               sambaSID="{$cv.samba_settings.samba_sid}"
 545 {/if}
 546 {if $cv.samba_settings.samba_rid_active}
 547               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 548 {/if}
 549 {if $cv.generic_settings.snapshot_active}
 550               enableSnapshots="true"
 551               snapshotBase="{$cv.generic_settings.snapshot_base}"
 552               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 553               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 554               snapshotURI="{$cv.generic_settings.snapshot_server}"
 555 {else}
 556               enableSnapshots="false"
 557               snapshotBase="dc=localhost,dc=de"
 558               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 559               snapshotAdminPassword="secret"
 560               snapshotURI="ldap://localhost:389"
 561 {/if}
 562               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 563
 564               <referral URI="{$cv.connection}/{$cv.base}"
 565                         adminDn="{$cv.admin}"
 566                         adminPassword="{$cv.password}" />
 567
 568     </location>
 569   </main>
 570 </conf>