gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  76       <plugin acl="addressbook" class="addressbook" />
  77       <plugin acl="mailqueue" class="mailqueue" />
  78       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  79       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  80       <plugin acl="logview"  class="logview" />
  81       <plugin acl="gotomasses" class="gotomasses" />
  82       <plugin acl="ldapmanager" class="ldif" />
  83     </section>
  84   </menu>
  85
  86
  87
  88   <!-- Tab definitions *******************************************************
  89
  90        Tab definitions define the sub plugins which get included for certain
  91        tabbed dialogs. If you change something here, never (!) remove the
  92        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  93        need a primary plugin.
  94
  95        "*tab" should be looked for by a defined plugin. This one will take
  96        every "tab" defined "class" and will show it inside of a tabbed dialog
  97        with the header defined in "name".
  98    -->
  99
 100   <!-- ACL dialog -->
 101   <aclroletab>
 102     <tab class="aclRole" name="ACL Role" />
 103   </aclroletab>
 104
 105   <!-- User dialog -->
 106   <usertabs>
 107      <tab class="user" name="Generic" />
 108      <tab class="posixAccount" name="Unix" />
 109      <tab class="environment" name="Environment" />
 110      <tab class="mailAccount" name="Mail" />
 111      <tab class="sambaAccount" name="Samba" />
 112      <tab class="netatalk" name="Netatalk" />
 113      <tab class="connectivity" name="Connectivity" />
 114      <tab class="gofaxAccount" name="Fax" />
 115      <tab class="phoneAccount" name="Phone" />
 116      <tab class="scalixAccount" name="Scalix" />
 117      <tab class="nagiosAccount" name="Nagios" />
 118    </usertabs>
 119
 120   <opsiLicenseTabs>
 121     <tab class="licensePoolGeneric" name="Generic"/>
 122     <tab class="licenseUsage" name="Usage"/>
 123   </opsiLicenseTabs>
 124
 125   <!-- Group dialog -->
 126   <grouptabs>
 127     <tab class="group" name="Generic" />
 128     <tab class="environment" name="Environment" />
 129     <tab class="appgroup" name="Applications" />
 130     <tab class="mailgroup" name="Mail" />
 131   </grouptabs>
 132
 133   <!-- Sudo dialog -->
 134   <sudotabs>
 135     <tab class="sudo" name="Generic" />
 136     <tab class="sudoOption" name="Options" />
 137   </sudotabs>
 138
 139   <!-- GOfax plugins -->
 140   <faxblocktabs>
 141     <tab class="blocklistGeneric" name="Generic" />
 142   </faxblocktabs>
 143
 144   <!-- GOfon plugins -->
 145   <conferencetabs>
 146     <tab class="conference" name="Generic" />
 147   </conferencetabs>
 148
 149   <macrotabs>
 150     <tab class="macro" name="Generic" />
 151     <tab class="macroParameter" name="Parameter" />
 152   </macrotabs>
 153
 154   <phonetabs>
 155     <tab class="phoneGeneric" name="Generic" />
 156     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 157   </phonetabs>
 158
 159   <!-- GOto plugins -->
 160   <appstabs>
 161     <tab class="application" name="Generic" />
 162     <tab class="applicationParameters" name="Options" />
 163   </appstabs>
 164
 165   <mimetabs>
 166     <tab class="mimetype" name="Generic" />
 167   </mimetabs>
 168
 169   <devicetabs>
 170     <tab class="deviceGeneric" name="Generic" />
 171   </devicetabs>
 172
 173   <arpnewdevicetabs>
 174     <tab class="ArpNewDevice" name="Generic" />
 175   </arpnewdevicetabs>
 176
 177   <termtabs>
 178      <tab class="termgeneric" name="Generic" />
 179      <tab class="termstartup" name="Startup" />
 180      <tab class="termservice" name="Devices" />
 181      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 182      <!--<tab class="glpiAccount" name="Inventory" /> -->
 183   </termtabs>
 184
 185   <servtabs>
 186      <tab class="servgeneric" name="Generic" />
 187      <tab class="workstartup" name="Startup" />
 188      <tab class="ServerService" name="Services" />
 189      <tab class="faiSummaryTab" name="Deployment summary" />
 190      <tab class="gotoLogView" name="Installation logs" />
 191      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 192      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 193   </servtabs>
 194
 195   <worktabs>
 196      <tab class="workgeneric" name="Generic" />
 197      <tab class="workstartup" name="Startup" />
 198      <tab class="workservice" name="Devices" />
 199      <tab class="printgeneric" name="Printer" />
 200      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 201      <tab class="faiSummaryTab" name="Deployment summary" />
 202      <tab class="gotoLogView" name="Installation logs" />
 203      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 204   </worktabs>
 205
 206   <printtabs>
 207      <tab class="printgeneric" name="Generic" />
 208      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 209   </printtabs>
 210
 211   <componenttabs>
 212      <tab class="componentGeneric" name="Generic" />
 213      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 214   </componenttabs>
 215
 216   <wintabs>
 217      <tab class="wingeneric" name="Generic" />
 218      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 219   </wintabs>
 220
 221   <serverservice>
 222     <tab class="goMailServer" />
 223 {if $cv.mail == "kolab"}
 224     <tab class="servkolab" />
 225 {/if}
 226     <tab class="goNtpServer" />
 227     <tab class="servrepository" />
 228     <tab class="goImapServer" />
 229     <tab class="goKrbServer" />
 230     <tab class="goFaxServer" />
 231     <tab class="goFonServer" />
 232     <tab class="goLogDBServer" />
 233     <tab class="goGlpiServer" />
 234     <tab class="goCupsServer" />
 235     <tab class="goKioskService" />
 236     <tab class="goSyslogServer" />
 237     <tab class="goTerminalServer" />
 238     <tab class="goLdapServer" />
 239     <tab class="goShareServer" />
 240     <tab class="gospamserver" />
 241     <tab class="govirusserver" />
 242     <tab class="servdhcp" />
 243     <tab class="servdns" />
 244     <tab class="gosaLogServer" />
 245   </serverservice>
 246
 247   <!-- Department plugin -->
 248   <deptabs>
 249     <tab class="department" name="Generic" />
 250   </deptabs>
 251
 252   <organization_tabs>
 253     <tab class="organization" name="Generic" />
 254   </organization_tabs>
 255
 256   <locality_tabs>
 257     <tab class="locality" name="Generic" />
 258   </locality_tabs>
 259
 260   <country_tabs>
 261     <tab class="country" name="Generic" />
 262   </country_tabs>
 263
 264   <dcobject_tabs>
 265     <tab class="dcObject" name="Generic" />
 266   </dcobject_tabs>
 267
 268   <!-- Role tabs -->
 269   <roletabs>
 270     <tab class="roleGeneric" name="Generic"/>
 271   </roletabs>
 272
 273   <ogrouptabs>
 274     <tab class="ogroup" name="Generic" />
 275   </ogrouptabs>
 276
 277   <!-- Debian archive management plugin -->
 278   <!--
 279   <dak_tabs>
 280     <tab class="dakrepository" name="Repository" />
 281     <tab class="dakqueue" name="Queue" />
 282     <tab class="dakkeyring" name="Key ring" />
 283   </dak_tabs>
 284   -->
 285
 286   <!-- Connectivity plugins -->
 287   <connectivity>
 288 {if $cv.mail == "kolab"}
 289     <tab class='kolabAccount' />
 290 {else}
 291 <!--
 292     <tab class='kolabAccount' />
 293 -->
 294 {/if}
 295     <tab class="proxyAccount" />
 296     <tab class="pureftpdAccount" />
 297     <tab class="webdavAccount" />
 298     <tab class="phpgwAccount" />
 299     <tab class="intranetAccount" />
 300     <!--
 301     <tab class="opengwAccount"
 302       username="OGo"
 303       password=""
 304       database="OGo"
 305       databaseServer="localhost" />
 306     -->
 307     <tab class="pptpAccount" />
 308     <tab class="phpscheduleitAccount" />
 309     <tab class="oxchangeAccount" />
 310   </connectivity>
 311
 312   <ldiftab>
 313     <tab class="ldifexport" name="Export" />
 314     <tab class="xlsexport" name="Excel Export" />
 315     <tab class="ldifimport" name="Import" />
 316     <tab class="csvimport" name="CSV Import" />
 317   </ldiftab>
 318
 319   <faipartitiontabs>
 320     <tab class="faiPartitionTable" name="Partitions" />
 321   </faipartitiontabs>
 322
 323   <faiscripttabs>
 324     <tab class="faiScript" name="Script" />
 325   </faiscripttabs>
 326
 327   <faihooktabs>
 328     <tab class="faiHook" name="Hooks" />
 329   </faihooktabs>
 330
 331   <faivariabletabs>
 332     <tab class="faiVariable" name="Variables" />
 333   </faivariabletabs>
 334
 335   <faitemplatetabs>
 336     <tab class="faiTemplate" name="Templates" />
 337   </faitemplatetabs>
 338
 339   <faiprofiletabs>
 340     <tab class="faiProfile" name="Profiles" />
 341     <tab class="faiSummaryTab" name="Summary" />
 342   </faiprofiletabs>
 343
 344   <faipackagetabs>
 345     <tab class="faiPackage" name="Packages" />
 346   </faipackagetabs>
 347
 348   <opsitabs>
 349     <tab class="opsiGeneric" name="Opsi" />
 350     <tab class="opsiSoftware" name="Hardware information" />
 351     <tab class="opsiHardware" name="software information" />
 352     <tab class="licenseUsageByHost" name="Usage"/>
 353   </opsitabs>
 354
 355   <opsiprodconfig>
 356     <tab class="opsiProperties" name="Config" />
 357     <tab class="licenseByProduct" name="Usage"/>
 358   </opsiprodconfig>
 359
 360   <!-- Logging plugin -->
 361   <logtabs>
 362       <tab class="logview" name="System logs" />
 363       <tab class="gosa_logview" name="GOsa logs" />
 364   </logtabs>
 365
 366
 367   <!-- Main section **********************************************************
 368
 369        The main section defines global settings, which might be overridden by
 370        each location definition inside.
 371
 372        For more information about the configuration parameters, take a look at
 373        the gosa.conf(5) manual page.
 374
 375   -->
 376   <main default="{$cv.location}"
 377 {if $cv.optional.list_summary}
 378         listSummary="true"
 379 {else}
 380         listSummary="false"
 381 {/if}
 382 {if $cv.pwd_rules.pwminlen_active}
 383         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 384 {/if}
 385 {if $cv.pwd_rules.pwdiffer_active}
 386         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 387 {/if}
 388 {if $cv.pwd_rules.externalpwdhook_active}
 389         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 390 {/if}
 391 {if $cv.errorlvl}
 392         displayErrors="true"
 393 {else}
 394         displayErrors="false"
 395 {/if}
 396 {if $cv.enable_schema_check}
 397         schemaCheck="true"
 398 {else}
 399         schemaCheck="false"
 400 {/if}
 401 {if $cv.generic_settings.enableCopyPaste}
 402         copyPaste="true"
 403 {else}
 404         copyPaste="false"
 405 {/if}
 406 {if $cv.optional.forceglobals}
 407         forceGlobals="true"
 408 {else}
 409         forceGlobals="false"
 410 {/if}
 411 {if $cv.optional.forcessl}
 412         forceSSL="true"
 413 {else}
 414         forceSSL="false"
 415 {/if}
 416 {if $cv.optional.ldapstats}
 417         ldapStats="true"
 418 {else}
 419         ldapStats="false"
 420 {/if}
 421 {if $cv.optional.warnssl}
 422         warnSSL="true"
 423 {else}
 424         warnSSL="false"
 425 {/if}
 426 {if $cv.optional.ppd_path_active}
 427         ppdGzip="true"
 428         ppdPath="{$cv.optional.ppd_path}"
 429 {/if}
 430 {if $cv.optional.max_ldap_query_time_active}
 431         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 432 {/if}
 433 {if $cv.optional.noprimarygroup}
 434         primaryGroupFilter="true"
 435 {/if}
 436 {if $cv.optional.mailQueueScriptPath_active}
 437         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 438 {/if}
 439 {if $cv.optional.user_filter_cookie}
 440         storeFilterSettings="true"
 441 {else}
 442         storeFilterSettings="false"
 443 {/if}
 444 {if $cv.compressed}
 445         sendCompressedOutput="true"
 446 {else}
 447         sendCompressedOutput="false"
 448 {/if}
 449 {if $cv.optional.uniq_identifier_active }
 450         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 451 {else}
 452         modificationDetectionAttribute=""
 453 {/if}
 454         language="{$cv.lang_selected}"
 455         theme="{$cv.theme}"
 456         sessionLifetime="{$cv.optional.session_lifetime}"
 457         templateCompileDirectory="{$cv.optional.compile}"
 458         debugLevel="{$cv.optional.debuglevel}"
 459         sambaHashHook='{$cv.samba_settings.smbhash}'
 460     >
 461
 462     <!-- Location definition -->
 463     <location name="{$cv.location}"
 464               passwordDefaultHash="{$cv.encryption}"
 465               accountPrimaryAttribute="{$cv.peopledn}"
 466               userRDN="{$cv.peopleou}"
 467               groupRDN="{$cv.groupou}"
 468               gidNumberBase="{$cv.uidbase}"
 469               uidNumberBase="{$cv.uidbase}"
 470               logging="{$cv.generic_settings.logging}"
 471 {if $cv.optional.sudoou_active}
 472               sudoRDN="{$cv.optional.sudoou}"
 473 {/if}
 474 {if $cv.optional.gosaSupportURI_active}
 475               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 476               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 477 {else}
 478               disabled_gosaSupportURI="gosa-si-secret@server:20081}"
 479               disabled_gosaSupportTimeout="15"
 480 {/if}
 481 {if $cv.optional.login_attribute}
 482               loginAttribute="{$cv.optional.login_attribute}"
 483 {else}
 484               loginAttribute="uid"
 485 {/if}
 486 {if $cv.timezone}
 487               timezone="{$cv.timezone}"
 488 {/if}
 489 {if $cv.optional.strict_units}
 490               honourUnitTags="true"
 491 {else}
 492               honourUnitTags="false"
 493 {/if}
 494 {if $cv.krbsasl}
 495               useSaslForKerberos="true"
 496 {else}
 497               useSaslForKerberos="false"
 498 {/if}
 499 {if $cv.rfc2307bis}
 500               rfc2307bis="true"
 501 {else}
 502               rfc2307bis="false"
 503 {/if}
 504 {if $cv.include_personal_title}
 505               personalTitleInDN="true"
 506 {else}
 507               personalTitleInDN="false"
 508 {/if}
 509 {if $cv.base_hook_active}
 510               nextIdHook="{$cv.base_hook}"
 511 {/if}
 512 {if $cv.generic_settings.wws_ou_active}
 513               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 514 {/if}
 515 {if $cv.id_settings.idgen_active}
 516               idGenerator="{$cv.id_settings.idgen}"
 517 {/if}
 518 {if $cv.strict}
 519               strictNamingRules="true"
 520 {else}
 521               strictNamingRules="false"
 522 {/if}
 523 {if $cv.id_settings.minid_active}
 524               minId="{$cv.id_settings.minid}"
 525 {/if}
 526               mailAttribute="{$cv.mail_attrib}"
 527               gosaSharedPrefix=""
 528               mailUserCreation=""
 529               mailFolderCreation=""
 530               imapTimeout="10"
 531 {if $cv.mail != "disabled"}
 532               mailMethod="{$cv.mail}"
 533 {if $cv.cyrusunixstyle}
 534               cyrusUseSlashes="true"
 535 {else}
 536               cyrusUseSlashes="false"
 537 {/if}
 538 {if $cv.mail_settings.vacationdir_active}
 539               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 540 {/if}
 541 {/if}
 542 {if $cv.tls}
 543               ldapTLS="true"
 544 {/if}
 545 {if $cv.governmentmode}
 546               honourIvbbAttributes="true"
 547 {else}
 548               honourIvbbAttributes="false"
 549 {/if}
 550 {if $cv.sambaidmapping}
 551               sambaIdMapping="true"
 552 {/if}
 553 {if $cv.account_expiration}
 554               handleExpiredAccounts="true"
 555 {/if}
 556 {if $cv.samba_settings.samba_sid_active}
 557               sambaSID="{$cv.samba_settings.samba_sid}"
 558 {/if}
 559 {if $cv.samba_settings.samba_rid_active}
 560               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 561 {/if}
 562 {if $cv.generic_settings.snapshot_active}
 563               enableSnapshots="true"
 564 {if $cv.generic_settings.snapshot_base != ""}
 565               snapshotBase="{$cv.generic_settings.snapshot_base}"
 566 {/if}
 567 {if $cv.generic_settings.snapshot_user != ""}
 568               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 569 {/if}
 570 {if $cv.generic_settings.snapshot_password != ""}
 571               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 572 {/if}
 573 {if $cv.generic_settings.snapshot_server != ""}
 574               snapshotURI="{$cv.generic_settings.snapshot_server}"
 575 {/if}
 576 {/if}
 577 {if $cv.samba_version != 0}
 578               sambaVersion="{$cv.samba_version}"
 579 {else}
 580               sambaVersion="3"
 581 {/if}
 582               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 583
 584               <referral URI="{$cv.connection}/{$cv.base}"
 585                         adminDn="{$cv.admin}"
 586                         adminPassword="{$cv.password}" />
 587
 588     </location>
 589   </main>
 590 </conf>