gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75       <plugin acl="rsyslog"  class="rsyslog" />
  76     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  77       <plugin acl="addressbook" class="addressbook" />
  78       <plugin acl="mailqueue" class="mailqueue" />
  79       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  80       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  81       <plugin acl="logview"  class="logview" />
  82       <plugin acl="gotomasses" class="gotomasses" />
  83       <plugin acl="ldapmanager" class="ldif" />
  84     </section>
  85   </menu>
  86
  87
  88
  89   <!-- Tab definitions *******************************************************
  90
  91        Tab definitions define the sub plugins which get included for certain
  92        tabbed dialogs. If you change something here, never (!) remove the
  93        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  94        need a primary plugin.
  95
  96        "*tab" should be looked for by a defined plugin. This one will take
  97        every "tab" defined "class" and will show it inside of a tabbed dialog
  98        with the header defined in "name".
  99    -->
 100
 101   <!-- ACL dialog -->
 102   <aclroletab>
 103     <tab class="aclRole" name="ACL Role" />
 104   </aclroletab>
 105
 106   <!-- User dialog -->
 107   <usertabs>
 108      <tab class="user" name="Generic" />
 109      <tab class="posixAccount" name="Unix" />
 110      <tab class="environment" name="Environment" />
 111      <tab class="mailAccount" name="Mail" />
 112      <tab class="sambaAccount" name="Samba" />
 113      <tab class="netatalk" name="Netatalk" />
 114      <tab class="connectivity" name="Connectivity" />
 115      <tab class="gofaxAccount" name="Fax" />
 116      <tab class="phoneAccount" name="Phone" />
 117      <tab class="scalixAccount" name="Scalix" />
 118      <tab class="nagiosAccount" name="Nagios" />
 119    </usertabs>
 120
 121   <opsiLicenseTabs>
 122     <tab class="licensePoolGeneric" name="Generic"/>
 123     <tab class="licenseUsage" name="Usage"/>
 124   </opsiLicenseTabs>
 125
 126   <!-- Group dialog -->
 127   <grouptabs>
 128     <tab class="group" name="Generic" />
 129     <tab class="environment" name="Environment" />
 130     <tab class="appgroup" name="Applications" />
 131     <tab class="mailgroup" name="Mail" />
 132   </grouptabs>
 133
 134   <!-- Sudo dialog -->
 135   <sudotabs>
 136     <tab class="sudo" name="Generic" />
 137     <tab class="sudoOption" name="Options" />
 138   </sudotabs>
 139
 140   <!-- GOfax plugins -->
 141   <faxblocktabs>
 142     <tab class="blocklistGeneric" name="Generic" />
 143   </faxblocktabs>
 144
 145   <!-- GOfon plugins -->
 146   <conferencetabs>
 147     <tab class="conference" name="Generic" />
 148   </conferencetabs>
 149
 150   <macrotabs>
 151     <tab class="macro" name="Generic" />
 152     <tab class="macroParameter" name="Parameter" />
 153   </macrotabs>
 154
 155   <phonetabs>
 156     <tab class="phoneGeneric" name="Generic" />
 157     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 158   </phonetabs>
 159
 160   <!-- GOto plugins -->
 161   <appstabs>
 162     <tab class="application" name="Generic" />
 163     <tab class="applicationParameters" name="Options" />
 164   </appstabs>
 165
 166   <mimetabs>
 167     <tab class="mimetype" name="Generic" />
 168   </mimetabs>
 169
 170   <devicetabs>
 171     <tab class="deviceGeneric" name="Generic" />
 172   </devicetabs>
 173
 174   <arpnewdevicetabs>
 175     <tab class="ArpNewDevice" name="Generic" />
 176   </arpnewdevicetabs>
 177
 178   <termtabs>
 179      <tab class="termgeneric" name="Generic" />
 180      <tab class="termstartup" name="Startup" />
 181      <tab class="termservice" name="Devices" />
 182      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 183      <!--<tab class="glpiAccount" name="Inventory" /> -->
 184   </termtabs>
 185
 186   <servtabs>
 187      <tab class="servgeneric" name="Generic" />
 188      <tab class="workstartup" name="Startup" />
 189      <tab class="ServerService" name="Services" />
 190      <tab class="faiSummaryTab" name="Deployment summary" />
 191      <tab class="gotoLogView" name="Installation logs" />
 192      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 193      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 194   </servtabs>
 195
 196   <worktabs>
 197      <tab class="workgeneric" name="Generic" />
 198      <tab class="workstartup" name="Startup" />
 199      <tab class="workservice" name="Devices" />
 200      <tab class="printgeneric" name="Printer" />
 201      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 202      <tab class="faiSummaryTab" name="Deployment summary" />
 203      <tab class="gotoLogView" name="Installation logs" />
 204      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 205   </worktabs>
 206
 207   <printtabs>
 208      <tab class="printgeneric" name="Generic" />
 209      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 210   </printtabs>
 211
 212   <componenttabs>
 213      <tab class="componentGeneric" name="Generic" />
 214      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 215   </componenttabs>
 216
 217   <wintabs>
 218      <tab class="wingeneric" name="Generic" />
 219      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 220   </wintabs>
 221
 222   <serverservice>
 223     <tab class="goMailServer" />
 224 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 225     <tab class="servkolab" />
 226 {else}
 227     <!-- <tab class="servkolab" /> -->
 228 {/if}
 229     <tab class="goNtpServer" />
 230     <tab class="servrepository" />
 231     <tab class="goImapServer" />
 232     <tab class="goKrbServer" />
 233     <tab class="goFaxServer" />
 234     <tab class="goFonServer" />
 235     <tab class="goLogDBServer" />
 236     <tab class="goGlpiServer" />
 237     <tab class="goCupsServer" />
 238     <tab class="goKioskService" />
 239     <tab class="goSyslogServer" />
 240     <tab class="goTerminalServer" />
 241     <tab class="goLdapServer" />
 242     <tab class="goShareServer" />
 243     <tab class="gospamserver" />
 244     <tab class="govirusserver" />
 245     <tab class="servdhcp" />
 246     <tab class="servdns" />
 247     <tab class="gosaLogServer" />
 248     <tab class="rSyslogServer" />
 249   </serverservice>
 250
 251   <!-- Department plugin -->
 252   <deptabs>
 253     <tab class="department" name="Generic" />
 254   </deptabs>
 255
 256   <organization_tabs>
 257     <tab class="organization" name="Generic" />
 258   </organization_tabs>
 259
 260   <locality_tabs>
 261     <tab class="locality" name="Generic" />
 262   </locality_tabs>
 263
 264   <country_tabs>
 265     <tab class="country" name="Generic" />
 266   </country_tabs>
 267
 268   <dcobject_tabs>
 269     <tab class="dcObject" name="Generic" />
 270   </dcobject_tabs>
 271
 272   <domain_tabs>
 273     <tab class="domain" name="Generic" />
 274   </domain_tabs>
 275
 276   <!-- Role tabs -->
 277   <roletabs>
 278     <tab class="roleGeneric" name="Generic"/>
 279   </roletabs>
 280
 281   <ogrouptabs>
 282     <tab class="ogroup" name="Generic" />
 283   </ogrouptabs>
 284
 285   <!-- Debian archive management plugin -->
 286   <!--
 287   <dak_tabs>
 288     <tab class="dakrepository" name="Repository" />
 289     <tab class="dakqueue" name="Queue" />
 290     <tab class="dakkeyring" name="Key ring" />
 291   </dak_tabs>
 292   -->
 293
 294   <!-- Connectivity plugins -->
 295   <connectivity>
 296 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 297     <tab class='kolabAccount' />
 298 {else}
 299 <!-- <tab class='kolabAccount' /> -->
 300 {/if}
 301     <tab class="proxyAccount" />
 302     <tab class="pureftpdAccount" />
 303     <tab class="webdavAccount" />
 304     <tab class="phpgwAccount" />
 305     <tab class="intranetAccount" />
 306     <!--
 307     <tab class="opengwAccount"
 308       username="OGo"
 309       password=""
 310       database="OGo"
 311       databaseServer="localhost" />
 312     -->
 313     <tab class="pptpAccount" />
 314     <tab class="phpscheduleitAccount" />
 315     <tab class="oxchangeAccount" />
 316   </connectivity>
 317
 318   <ldiftab>
 319     <tab class="ldifexport" name="Export" />
 320     <tab class="xlsexport" name="Excel Export" />
 321     <tab class="ldifimport" name="Import" />
 322     <tab class="csvimport" name="CSV Import" />
 323   </ldiftab>
 324
 325   <faipartitiontabs>
 326     <tab class="faiPartitionTable" name="Partitions" />
 327   </faipartitiontabs>
 328
 329   <faiscripttabs>
 330     <tab class="faiScript" name="Script" />
 331   </faiscripttabs>
 332
 333   <faihooktabs>
 334     <tab class="faiHook" name="Hooks" />
 335   </faihooktabs>
 336
 337   <faivariabletabs>
 338     <tab class="faiVariable" name="Variables" />
 339   </faivariabletabs>
 340
 341   <faitemplatetabs>
 342     <tab class="faiTemplate" name="Templates" />
 343   </faitemplatetabs>
 344
 345   <faiprofiletabs>
 346     <tab class="faiProfile" name="Profiles" />
 347     <tab class="faiSummaryTab" name="Summary" />
 348   </faiprofiletabs>
 349
 350   <faipackagetabs>
 351     <tab class="faiPackage" name="Packages" />
 352   </faipackagetabs>
 353
 354   <opsitabs>
 355     <tab class="opsiGeneric" name="Opsi" />
 356     <tab class="opsiSoftware" name="Hardware information" />
 357     <tab class="opsiHardware" name="software information" />
 358     <tab class="licenseUsageByHost" name="Usage"/>
 359   </opsitabs>
 360
 361   <opsiprodconfig>
 362     <tab class="opsiProperties" name="Config" />
 363     <tab class="licenseByProduct" name="Usage"/>
 364   </opsiprodconfig>
 365
 366   <!-- Logging plugin -->
 367   <logtabs>
 368       <tab class="logview" name="System logs" />
 369       <tab class="gosa_logview" name="GOsa logs" />
 370   </logtabs>
 371
 372   <!-- rSyslog plugin -->
 373   <rsyslogtabs>
 374       <tab class="rsyslog" name="System logs" />
 375   </rsyslogtabs>
 376
 377   <!-- Main section **********************************************************
 378
 379        The main section defines global settings, which might be overridden by
 380        each location definition inside.
 381
 382        For more information about the configuration parameters, take a look at
 383        the gosa.conf(5) manual page.
 384
 385   -->
 386   <main default="{$cv.location}"
 387 {if $cv.optional.list_summary}
 388         listSummary="true"
 389 {else}
 390         listSummary="false"
 391 {/if}
 392 {if $cv.pwd_rules.pwminlen_active}
 393         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 394 {/if}
 395 {if $cv.pwd_rules.pwdiffer_active}
 396         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 397 {/if}
 398 {if $cv.pwd_rules.externalpwdhook_active}
 399         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 400 {/if}
 401 {if $cv.errorlvl}
 402         displayErrors="true"
 403 {else}
 404         displayErrors="false"
 405 {/if}
 406 {if $cv.enable_schema_check}
 407         schemaCheck="true"
 408 {else}
 409         schemaCheck="false"
 410 {/if}
 411 {if $cv.generic_settings.enableCopyPaste}
 412         copyPaste="true"
 413 {else}
 414         copyPaste="false"
 415 {/if}
 416 {if $cv.optional.forceglobals}
 417         forceGlobals="true"
 418 {else}
 419         forceGlobals="false"
 420 {/if}
 421 {if $cv.optional.forcessl}
 422         forceSSL="true"
 423 {else}
 424         forceSSL="false"
 425 {/if}
 426 {if $cv.optional.ldapstats}
 427         ldapStats="true"
 428 {else}
 429         ldapStats="false"
 430 {/if}
 431 {if $cv.optional.warnssl}
 432         warnSSL="true"
 433 {else}
 434         warnSSL="false"
 435 {/if}
 436 {if $cv.optional.ppd_path_active}
 437         ppdGzip="true"
 438         ppdPath="{$cv.optional.ppd_path}"
 439 {/if}
 440 {if $cv.optional.max_ldap_query_time_active}
 441         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 442 {/if}
 443 {if $cv.optional.noprimarygroup}
 444         primaryGroupFilter="true"
 445 {/if}
 446 {if $cv.optional.mailQueueScriptPath_active}
 447         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 448 {/if}
 449 {if $cv.optional.user_filter_cookie}
 450         storeFilterSettings="true"
 451 {else}
 452         storeFilterSettings="false"
 453 {/if}
 454 {if $cv.compressed}
 455         sendCompressedOutput="true"
 456 {else}
 457         sendCompressedOutput="false"
 458 {/if}
 459 {if $cv.optional.uniq_identifier_active }
 460         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 461 {else}
 462         modificationDetectionAttribute=""
 463 {/if}
 464         language="{$cv.lang_selected}"
 465         theme="{$cv.theme}"
 466         sessionLifetime="{$cv.optional.session_lifetime}"
 467         templateCompileDirectory="{$cv.optional.compile}"
 468         debugLevel="{$cv.optional.debuglevel}"
 469         sambaHashHook='{$cv.samba_settings.smbhash}'
 470     >
 471
 472     <!-- Location definition -->
 473     <location name="{$cv.location}"
 474               passwordDefaultHash="{$cv.encryption}"
 475               accountPrimaryAttribute="{$cv.peopledn}"
 476               userRDN="{$cv.peopleou}"
 477               groupRDN="{$cv.groupou}"
 478               gidNumberBase="{$cv.uidbase}"
 479               uidNumberBase="{$cv.uidbase}"
 480               logging="{$cv.generic_settings.logging}"
 481 {if $cv.optional.sudoou_active}
 482               sudoRDN="{$cv.optional.sudoou}"
 483 {/if}
 484 {if $cv.optional.gosaSupportURI_active}
 485               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 486               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 487 {else}
 488               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 489               disabled_gosaSupportTimeout="15"
 490 {/if}
 491 {if $cv.optional.login_attribute}
 492               loginAttribute="{$cv.optional.login_attribute}"
 493 {else}
 494               loginAttribute="uid"
 495 {/if}
 496 {if $cv.timezone}
 497               timezone="{$cv.timezone}"
 498 {/if}
 499 {if $cv.optional.strict_units}
 500               honourUnitTags="true"
 501 {else}
 502               honourUnitTags="false"
 503 {/if}
 504 {if $cv.krbsasl}
 505               useSaslForKerberos="true"
 506 {else}
 507               useSaslForKerberos="false"
 508 {/if}
 509 {if $cv.rfc2307bis}
 510               rfc2307bis="true"
 511 {else}
 512               rfc2307bis="false"
 513 {/if}
 514 {if $cv.include_personal_title}
 515               personalTitleInDN="true"
 516 {else}
 517               personalTitleInDN="false"
 518 {/if}
 519 {if $cv.base_hook_active}
 520               nextIdHook="{$cv.base_hook}"
 521 {/if}
 522 {if $cv.generic_settings.wws_ou_active}
 523               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 524 {/if}
 525 {if $cv.id_settings.idgen_active}
 526               idGenerator="{$cv.id_settings.idgen}"
 527 {/if}
 528 {if $cv.strict}
 529               strictNamingRules="true"
 530 {else}
 531               strictNamingRules="false"
 532 {/if}
 533 {if $cv.id_settings.minid_active}
 534               minId="{$cv.id_settings.minid}"
 535 {/if}
 536               mailAttribute="{$cv.mail_attrib}"
 537               gosaSharedPrefix=""
 538               mailUserCreation=""
 539               mailFolderCreation=""
 540               imapTimeout="10"
 541 {if $cv.mail != "disabled"}
 542               mailMethod="{$cv.mail}"
 543 {if $cv.cyrusunixstyle}
 544               cyrusUseSlashes="true"
 545 {else}
 546               cyrusUseSlashes="false"
 547 {/if}
 548 {if $cv.mail_settings.vacationdir_active}
 549               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 550 {/if}
 551 {/if}
 552 {if $cv.tls}
 553               ldapTLS="true"
 554 {/if}
 555 {if $cv.governmentmode}
 556               honourIvbbAttributes="true"
 557 {else}
 558               honourIvbbAttributes="false"
 559 {/if}
 560 {if $cv.sambaidmapping}
 561               sambaIdMapping="true"
 562 {/if}
 563 {if $cv.account_expiration}
 564               handleExpiredAccounts="true"
 565 {/if}
 566 {if $cv.samba_settings.samba_sid_active}
 567               sambaSID="{$cv.samba_settings.samba_sid}"
 568 {/if}
 569 {if $cv.samba_settings.samba_rid_active}
 570               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 571 {/if}
 572 {if $cv.generic_settings.snapshot_active}
 573               enableSnapshots="true"
 574               snapshotBase="{$cv.generic_settings.snapshot_base}"
 575               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 576               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 577               snapshotURI="{$cv.generic_settings.snapshot_server}"
 578 {else}
 579               enableSnapshots="false"
 580               snapshotBase="dc=localhost,dc=de"
 581               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 582               snapshotAdminPassword="secret"
 583               snapshotURI="ldap://localhost:389"
 584 {/if}
 585               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 586
 587               <referral URI="{$cv.connection}/{$cv.base}"
 588                         adminDn="{$cv.admin}"
 589                         adminPassword="{$cv.password}" />
 590
 591     </location>
 592   </main>
 593 </conf>