Code

Updated setup, sambaMachineAccountRDN closes #621
[gosa.git] / gosa-core / contrib / gosa.conf
1 {literal}<?xml version="1.0"?>{/literal}
2 <conf configVersion="{$config_checksum}" >
4   <!-- GOsa menu definition **************************************************
6        This tag defines the side and icon menu inside the
7        interface. Defining an entry here is no guarantie to get it shown,
8        though. Only entries with matching ACL's get shown.
10        There are two types of entries inside of the menu: section and plugin
12        Defining a section:
14        Open a <section> tag including a "name" attribute. This will show up in
15        the menu as a new section later on. Own entries are not handled via I18N
16        by default. Close the </section> tag after your plugin definitions.
18        Defining a plugin:
20        Open a <plugin> tag including a "class" attribute. The "class" should be
21        present inside your GOsa setup - the entry will be ignored if it is not.
23        Plugins should have an "acl" entry, that allows GOsa to decide wether
24        a user is allowed to see a plugin or not. The "acl" string matches with
25        an ACL definition done inside of GOsa -> ACLs.
27        You can override an icon by specifying the "icon" attribute.
29        For more information about possible configuration parameters, please take
30        a look at the gosa.conf(5) manual page.
31    -->
32   <menu>
34     <!-- Section to enable quick self service shortcuts for the logged in user -->
35     <section name="My account">
36       <plugin acl="users/user:self" class="user" />
37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
39       <plugin acl="users/mailAccount:self" class="mailAccount" />
40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
41 {if $cv.use_netatalk}
42       <plugin acl="users/netatalk:self" class="netatalk" />
43 {else}
44       <!--  <plugin acl="users/netatalk:self" class="netatalk" />  -->
45 {/if}
46       <plugin acl="users/connectivity:self" class="connectivity" />
47       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
48       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
49       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
50       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
51       <plugin acl="users/password:self" class="password" />
52     </section>
53     
54     <!-- Section to enable administrative services -->
55     <section name="Administration">
56       <plugin acl="department" class="departmentManagement" />
57       <plugin acl="users" class="userManagement" />
58       <plugin acl="groups" class="groupManagement" />
59       <plugin acl="ogroups" class="ogroupManagement" />
60       <plugin acl="application" class="applicationManagement" />
61 {if $cv.enableMimeType}
62       <plugin acl="mimetypes" class="mimetypeManagement" />
63 {else}
64       <!--  <plugin acl="mimetypes"  class="mimetypeManagement" /> -->
65 {/if}
66       <plugin acl="devices" class="deviceManagement" />
67       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
68       <!-- Use 'lockDn'      for dn
69                'lockName'    for name
70                'lockType'    for branch/freeze -->
71 {if $cv.enableFAI_management}
72       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
73 {else}
74       <!--  <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" /> -->
75 {/if}
76       <plugin acl="gofaxlist" class="blocklist" />
77       <plugin acl="gofonmacro" class="goFonMacro" />
78       <plugin acl="gofonconference" class="phoneConferenceManagment" />
79       <plugin acl="acl"  class="aclManagement" />
80       <plugin acl="sudo" class="sudoManagement" />
81     </section>
83     <!-- Section to enable addon plugins -->
84     <section name="Addons">
85     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
86       <plugin acl="addressbook" class="addressbook" />
87       <plugin acl="mailqueue" class="mailqueue" />
88       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
89       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
90       <plugin acl="logview"  class="logview" />
91       <plugin acl="gotomasses" class="gotomasses" />
92       <plugin acl="ldapmanager" class="ldif" />
93     </section>
94   </menu>
98   <!-- Tab definitions *******************************************************
100        Tab definitions define the sub plugins which get included for certain
101        tabbed dialogs. If you change something here, never (!) remove the
102        primary (the first) "tab" tag which is defined. Most tabbed dialogs
103        need a primary plugin.
105        "*tab" should be looked for by a defined plugin. This one will take
106        every "tab" defined "class" and will show it inside of a tabbed dialog
107        with the header defined in "name".
108    -->
110   <!-- ACL dialog -->
111   <aclroletab>
112     <tab class="aclRole" name="ACL Role" />
113   </aclroletab>
115   <!-- User dialog -->
116   <usertabs>
117      <tab class="user" name="Generic" />
118      <tab class="posixAccount" name="Unix" />
119      <tab class="environment" name="Environment" />
120      <tab class="mailAccount" name="Mail" />
121      <tab class="sambaAccount" name="Samba" />
122 {if $cv.use_netatalk}     <tab class="netatalk" name="Netatalk" /> {else}<!-- <tab class="netatalk" name="Netatalk" /> --> {/if}
123      <tab class="connectivity" name="Connectivity" />
124      <tab class="gofaxAccount" name="Fax" />
125      <tab class="phoneAccount" name="Phone" />
126      <tab class="scalixAccount" name="Scalix" />
127      <tab class="nagiosAccount" name="Nagios" /> 
128    </usertabs>
130   <!-- Group dialog -->
131   <grouptabs>
132     <tab class="group" name="Generic" />
133     <tab class="environment" name="Environment" />
134     <tab class="appgroup" name="Applications" />
135     <tab class="mailgroup" name="Mail" />
136   </grouptabs>
138   <!-- Sudo dialog -->
139   <sudotabs>
140     <tab class="sudo" name="Generic" />
141     <tab class="sudoOption" name="Options" />
142   </sudotabs>
144   <!-- GOfax plugins -->
145   <faxblocktabs>
146     <tab class="blocklistGeneric" name="Generic" />
147   </faxblocktabs>
149   <!-- GOfon plugins -->
150   <conferencetabs>
151     <tab class="conference" name="Generic" />
152   </conferencetabs>
154   <macrotabs>
155     <tab class="macro" name="Generic" />
156     <tab class="macroParameter" name="Parameter" />
157   </macrotabs>
159   <phonetabs>
160     <tab class="phoneGeneric" name="Generic" />
161     <!-- <tab class="glpiAccount" name="Inventory" /> -->
162   </phonetabs>
164   <!-- GOto plugins -->
165   <appstabs>
166     <tab class="application" name="Generic" />
167     <tab class="applicationParameters" name="Options" />
168   </appstabs>
170   <mimetabs>
171     <tab class="mimetype" name="Generic" />
172   </mimetabs>
174   <devicetabs>
175     <tab class="deviceGeneric" name="Generic" />
176   </devicetabs>
178   <arpnewdevicetabs>
179     <tab class="ArpNewDevice" name="Generic" />
180   </arpnewdevicetabs>
182   <termtabs>
183      <tab class="termgeneric" name="Generic" />
184      <tab class="termstartup" name="Startup" />
185      <tab class="termservice" name="Devices" />
186      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
187      <!--<tab class="glpiAccount" name="Inventory" /> -->
188   </termtabs>
190   <servtabs>
191      <tab class="servgeneric" name="Generic" />
192      <tab class="workstartup" name="Startup" />
193      <tab class="ServerService" name="Services" />
194 {if $cv.enableFAI_management}
195      <tab class="faiSummaryTab" name="Deployment summary" />
196      <tab class="gotoLogView" name="Installation logs" />
197 {else}
198      <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
199      <!-- <tab class="gotoLogView" name="Installation logs" /> -->
200 {/if}
201      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
202      <!-- <tab class="glpiAccount" name="Inventory" /> -->
203   </servtabs>
205   <worktabs>
206      <tab class="workgeneric" name="Generic" />
207      <tab class="workstartup" name="Startup" />
208      <tab class="workservice" name="Devices" />
209      <tab class="printgeneric" name="Printer" />
210      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
211 {if $cv.enableFAI_management}
212      <tab class="faiSummaryTab" name="Deployment summary" />
213      <tab class="gotoLogView" name="Installation logs" />
214 {else}
215      <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
216      <!-- <tab class="gotoLogView" name="Installation logs" /> -->
217 {/if}
218      <!-- <tab class="glpiAccount" name="Inventory" /> -->
219   </worktabs>
221   <printtabs>
222      <tab class="printgeneric" name="Generic" />
223      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
224   </printtabs>
226   <componenttabs>
227      <tab class="componentGeneric" name="Generic" />
228      <!-- <tab class="glpiAccount" name="Inventory" /> -->
229   </componenttabs>
231   <wintabs>
232      <tab class="wingeneric" name="Generic" />
233      <!-- <tab class="glpiAccount" name="Inventory" /> -->
234   </wintabs>
236   <serverservice>
237     <tab class="goMailServer" />
238 {if $cv.mail == "kolab"}
239     <tab class="servkolab" />
240 {/if}
241     <tab class="goNtpServer" />
242     <tab class="servrepository" />
243     <tab class="goImapServer" />
244     <tab class="goKrbServer" />
245     <tab class="goFaxServer" />
246     <tab class="goFonServer" />
247     <tab class="goLogDBServer" />
248     <tab class="goGlpiServer" />
249     <tab class="goCupsServer" />
250     <tab class="goKioskService" />
251     <tab class="goSyslogServer" />
252     <tab class="goTerminalServer" />
253     <tab class="goLdapServer" />
254     <tab class="goShareServer" />
255     <tab class="gospamserver" />
256     <tab class="govirusserver" />
257 {if $cv.generic_settings.enableDHCP}
258     <tab class="servdhcp" />
259 {/if}
260 {if $cv.generic_settings.enableDNS}
261     <tab class="servdns" />
262 {/if}
263     <tab class="gosaLogServer" />
264   </serverservice>
266   <!-- Department plugin -->
267   <deptabs>
268     <tab class="department" name="Generic" />
269   </deptabs>
271   <organization_tabs>
272     <tab class="organization" name="Generic" />
273   </organization_tabs>
275   <locality_tabs>
276     <tab class="locality" name="Generic" />
277   </locality_tabs>
279   <country_tabs>
280     <tab class="country" name="Generic" />
281   </country_tabs>
283   <dcobject_tabs>
284     <tab class="dcObject" name="Generic" />
285   </dcobject_tabs>
287   <ogrouptabs>
288     <tab class="ogroup" name="Generic" />
289   </ogrouptabs>
291   <!-- Debian archive management plugin -->
292   <!--
293   <dak_tabs>
294     <tab class="dakrepository" name="Repository" />
295     <tab class="dakqueue" name="Queue" />
296     <tab class="dakkeyring" name="Key ring" />
297   </dak_tabs>
298   -->
300   <!-- Connectivity plugins -->
301   <connectivity>
302 {if $cv.mail == "kolab"}
303     <tab class='kolabAccount' />
304 {else}
305 <!--
306     <tab class='kolabAccount' />
307 -->
308 {/if}
309     <tab class="proxyAccount" />
310     <tab class="pureftpdAccount" />
311     <tab class="webdavAccount" />
312     <tab class="phpgwAccount" />
313     <tab class="intranetAccount" />
314     <!--
315     <tab class="opengwAccount"
316       username="OGo"
317       password=""
318       database="OGo"
319       databaseServer="localhost" />
320     -->
321     <tab class="pptpAccount" /> 
322     <tab class="phpscheduleitAccount" /> 
323     <tab class="oxchangeAccount" />
324   </connectivity>
326   <ldiftab>
327     <tab class="ldifexport" name="Export" />
328     <tab class="xlsexport" name="Excel Export" />
329     <tab class="ldifimport" name="Import" />
330     <tab class="csvimport" name="CSV Import" />
331   </ldiftab>
333   <!-- FAI plugins -->
334 {if $cv.enableFAI_management}
335   <faipartitiontabs>
336     <tab class="faiPartitionTable" name="Partitions" />
337   </faipartitiontabs>
339   <faiscripttabs>
340     <tab class="faiScript" name="Script" />
341   </faiscripttabs>
343   <faihooktabs>
344     <tab class="faiHook" name="Hooks" />
345   </faihooktabs>
347   <faivariabletabs>
348     <tab class="faiVariable" name="Variables" />
349   </faivariabletabs>
351   <faitemplatetabs>
352     <tab class="faiTemplate" name="Templates" />
353   </faitemplatetabs>
355   <faiprofiletabs>
356     <tab class="faiProfile" name="Profiles" />
357     <tab class="faiSummaryTab" name="Summary" />
358   </faiprofiletabs>
360   <faipackagetabs>
361     <tab class="faiPackage" name="Packages" />
362   </faipackagetabs>
364   <opsitabs>
365     <tab class="opsiGeneric" name="Opsi" />
366     <tab class="opsiSoftware" name="Hardware information" />
367     <tab class="opsiHardware" name="software information" />
368   </opsitabs>
370   <opsiprodconfig>
371     <tab class="opsiProperties" name="Config" />
372   </opsiprodconfig>
373 {else}
374   <!-- 
375   <faipartitiontabs>
376     <tab class="faiPartitionTable" name="Partitions" />
377   </faipartitiontabs>
379   <faiscripttabs>
380     <tab class="faiScript" name="Script" />
381   </faiscripttabs>
383   <faihooktabs>
384     <tab class="faiHook" name="Hooks" />
385   </faihooktabs>
387   <faivariabletabs>
388     <tab class="faiVariable" name="Variables" />
389   </faivariabletabs>
391   <faitemplatetabs>
392     <tab class="faiTemplate" name="Templates" />
393   </faitemplatetabs>
395   <faiprofiletabs>
396     <tab class="faiProfile" name="Profiles" />
397     <tab class="faiSummaryTab" name="Summary" />
398   </faiprofiletabs>
400   <faipackagetabs>
401     <tab class="faiPackage" name="Packages" />
402   </faipackagetabs>
404   <opsitabs>
405     <tab class="opsiGeneric" name="Opsi" />
406     <tab class="opsiSoftware" name="Hardware information" />
407     <tab class="opsiHardware" name="software information" />
408   </opsitabs>
410   <opsiprodconfig>
411     <tab class="opsiProperties" name="Config" />
412   </opsiprodconfig>
413   -->
414 {/if}
417   <!-- Logging plugin -->
418   <logtabs>
419       <tab class="logview" name="System logs" />
420       <tab class="gosa_logview" name="GOsa logs" />
421   </logtabs>
422   
424   <!-- Main section **********************************************************
426        The main section defines global settings, which might be overridden by
427        each location definition inside.
429        For more information about the configuration parameters, take a look at
430        the gosa.conf(5) manual page.
432   -->
433   <main default="{$cv.location}"
434 {if $cv.optional.list_summary}
435         listSummary="true"
436 {else}
437         listSummary="false"
438 {/if}
439 {if $cv.pwd_rules.pwminlen_active}
440         passwordMinLength="{$cv.pwd_rules.pwminlen}"
441 {/if}
442 {if $cv.pwd_rules.pwdiffer_active}
443         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
444 {/if}
445 {if $cv.pwd_rules.externalpwdhook_active}
446         passwordHook="{$cv.pwd_rules.externalpwdhook}"
447 {/if}
448 {if $cv.errorlvl}
449         displayErrors="true"
450 {else}
451         displayErrors="false"
452 {/if}
453 {if $cv.enable_schema_check}
454         schemaCheck="true"
455 {else}
456         schemaCheck="false"
457 {/if}
458 {if $cv.generic_settings.enableCopyPaste}
459         copyPaste="true"
460 {else}
461         copyPaste="false"
462 {/if}
463 {if $cv.optional.forceglobals}
464         forceGlobals="true"
465 {else}
466         forceGlobals="false"
467 {/if}
468 {if $cv.optional.forcessl}
469         forceSSL="true"
470 {else}
471         forceSSL="false"
472 {/if}
473 {if $cv.optional.ldapstats}
474         ldapStats="true"
475 {else}
476         ldapStats="false"
477 {/if}
478 {if $cv.optional.warnssl}
479         warnSSL="true"
480 {else}
481         warnSSL="false"
482 {/if}
483 {if $cv.optional.ppd_path_active}
484         ppdPath="{$cv.optional.ppd_path}"
485 {/if}
486 {if $cv.optional.max_ldap_query_time_active}  
487         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
488 {/if}
489 {if $cv.optional.noprimarygroup}
490         primaryGroupFilter="true"
491 {/if}
492 {if $cv.optional.mailQueueScriptPath_active}
493         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
494 {/if}
495 {if $cv.optional.user_filter_cookie}
496         storeFilterSettings="true"
497 {else}
498         storeFilterSettings="false"
499 {/if}
500 {if $cv.compressed}
501         sendCompressedOutput="true"
502 {else}
503         sendCompressedOutput="false"
504 {/if}
505 {if $cv.optional.uniq_identifier_active }
506         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
507 {else}
508         modificationDetectionAttribute=""
509 {/if}
510         language="{$cv.lang_selected}"
511         theme="{$cv.theme}"
512         sessionLifetime="{$cv.optional.session_lifetime}"
513         templateCompileDirectory="{$cv.optional.compile}"
514         debugLevel="{$cv.optional.debuglevel}"
515         sambaHashHook='{$cv.samba_settings.smbhash}'
516     >
518     <!-- Location definition -->
519     <location name="{$cv.location}"
520               passwordDefaultHash="{$cv.encryption}"
521               accountPrimaryAttribute="{$cv.peopledn}"
522               userRDN="{$cv.peopleou}"
523               groupRDN="{$cv.groupou}"
524               gidNumberBase="{$cv.uidbase}"
525               uidNumberBase="{$cv.uidbase}"
526               logging="{$cv.generic_settings.logging}"
527 {if $cv.optional.sudoou_active}
528               sudoRDN="{$cv.optional.sudoou}"
529 {/if}
530 {if $cv.optional.login_attribute}
531               loginAttribute="{$cv.optional.login_attribute}"
532 {else}
533               loginAttribute="uid"
534 {/if}
535 {if $cv.timezone}
536               timezone="{$cv.timezone}"
537 {/if}
538 {if $cv.optional.strict_units}
539               honourUnitTags="true"
540 {else}
541               honourUnitTags="false"
542 {/if}
543 {if $cv.krbsasl}
544               useSaslForKerberos="true"
545 {else}
546               useSaslForKerberos="false"
547 {/if}
548 {if $cv.rfc2307bis}
549               rfc2307bis="true"
550 {else}
551               rfc2307bis="false"
552 {/if}
553 {if $cv.include_personal_title}
554               personalTitleInDN="true"
555 {else}
556               personalTitleInDN="false"
557 {/if}
558 {if $cv.base_hook_active}
559               nextIdHook="{$cv.base_hook}"
560 {/if}
561 {if $cv.generic_settings.wws_ou_active}
562               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
563 {/if}
564 {if $cv.id_settings.idgen_active}
565               idGenerator="{$cv.id_settings.idgen}"
566 {/if}
567 {if $cv.strict}
568               strictNamingRules="true"
569 {else}
570               strictNamingRules="false"
571 {/if}
572 {if $cv.id_settings.minid_active}
573               minId="{$cv.id_settings.minid}"
574 {/if}
575               mailAttribute="{$cv.mail_attrib}"
576 {if $cv.mail != "disabled"}
577               mailMethod="{$cv.mail}"
578 {if $cv.cyrusunixstyle}
579               cyrusUseSlashes="true"
580 {else}
581               cyrusUseSlashes="false"
582 {/if}
583 {if $cv.mail_settings.vacationdir_active}
584               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
585 {/if}
586 {/if}
587 {if $cv.tls}
588               ldapTLS="true"
589 {/if}
590 {if $cv.governmentmode}
591               honourIvbbAttributes="true"
592 {else}
593               honourIvbbAttributes="false"
594 {/if}
595 {if $cv.sambaidmapping}
596               sambaIdMapping="true"
597 {/if}
598 {if $cv.account_expiration}
599               handleExpiredAccounts="true"
600 {/if}
601 {if $cv.samba_settings.samba_sid_active}
602               sambaSID="{$cv.samba_settings.samba_sid}"
603 {/if}
604 {if $cv.samba_settings.samba_rid_active}
605               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
606 {/if}
607 {if $cv.generic_settings.snapshot_active}  
608               enableSnapshots="true"
609 {if $cv.generic_settings.snapshot_base != ""}
610               snapshotBase="{$cv.generic_settings.snapshot_base}"
611 {/if}
612 {if $cv.generic_settings.snapshot_user != ""}
613               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
614 {/if}
615 {if $cv.generic_settings.snapshot_password != ""}
616               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
617 {/if}
618 {if $cv.generic_settings.snapshot_server != ""}
619               snapshotURI="{$cv.generic_settings.snapshot_server}"
620 {/if}
621 {/if}
622 {if $cv.samba_version != 0}
623               sambaVersion="{$cv.samba_version}"
624 {else}
625               sambaVersion="3"
626 {/if}
627               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
629               <referral URI="{$cv.connection}/{$cv.base}"
630                         adminDn="{$cv.admin}"
631                         adminPassword="{$cv.password}" />
633     </location>
634   </main>
635 </conf>