gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable administrative services -->
  35     <section name="Administration">
  36       <plugin acl="department" class="departmentManagement" />
  37
  38       <!-- This long ACL list is required to exclude the users menu entry when only
  39             'viewFaxEntries' permissions are set -->
  40       <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
  41             class="userManagement" />
  42       <plugin acl="groups" class="groupManagement" />
  43       <plugin acl="roles" class="roleManagement"/>
  44       <plugin acl="acl"  class="aclManagement" />
  45       <plugin acl="ogroups" class="ogroupManagement" />
  46       <plugin acl="sudo" class="sudoManagement" />
  47       <plugin acl="application" class="applicationManagement" />
  48       <plugin acl="mimetypes" class="mimetypeManagement" />
  49       <plugin acl="devices" class="deviceManagement" />
  50       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  51       <!-- Use 'lockDn'      for dn
  52                'lockName'    for name
  53                'lockType'    for branch/freeze -->
  54       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  55       <plugin acl="opsi" class="opsiLicenses"/>
  56       <plugin acl="gofaxlist" class="blocklist" />
  57       <plugin acl="gofonmacro" class="goFonMacro" />
  58       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  59     </section>
  60
  61     <!-- Section to enable addon plugins -->
  62     <section name="Addons">
  63       <plugin acl="all/all"  class="configViewer" />
  64       <plugin acl="server/rSyslogServer" class="rsyslog" />
  65     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  66       <plugin acl="mailqueue" class="mailqueue" />
  67       <plugin acl="users/viewFaxEntries:self,users/viewFaxEntries" class="faxreport" />
  68       <plugin acl="users/viewFonEntries:self,users/viewFonEntries" class="fonreport" />
  69       <plugin acl="gotomasses" class="gotomasses" />
  70       <plugin acl="ldapmanager" class="ldif" />
  71     </section>
  72   </menu>
  73
  74  <!-- These entries will be rendered on the path navigator -->
  75   <pathMenu>
  76       <plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/     phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/              pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/user:self,users/  scalixAccount:self,users/password:self,users/gofaxAccount:self,users/phoneAccount:self" class="MyAccount" />
  77       <plugin acl="users/password:self" class="password" />
  78   </pathMenu>
  79
  80
  81   <!-- Tab definitions *******************************************************
  82
  83        Tab definitions define the sub plugins which get included for certain
  84        tabbed dialogs. If you change something here, never (!) remove the
  85        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  86        need a primary plugin.
  87
  88        "*tab" should be looked for by a defined plugin. This one will take
  89        every "tab" defined "class" and will show it inside of a tabbed dialog
  90        with the header defined in "name".
  91    -->
  92
  93   <!-- ACL dialog -->
  94   <acltab>
  95     <tab class="acl" name="ACL" />
  96   </acltab>
  97
  98   <aclroletab>
  99     <tab class="aclRole" name="ACL Role" />
 100   </aclroletab>
 101
 102   <!-- User dialog -->
 103   <usertabs>
 104      <tab class="user" name="Generic" />
 105      <tab class="posixAccount" name="POSIX" />
 106      <tab class="sambaAccount" name="Samba" />
 107      <tab class="netatalk" name="Netatalk" />
 108      <tab class="mailAccount" name="Mail" />
 109      <tab class="scalixAccount" name="Scalix" />
 110      <tab class="environment" name="Desktop" />
 111      <tab class="connectivity" name="Connectivity" />
 112      <tab class="gofaxAccount" name="Fax" />
 113      <tab class="phoneAccount" name="Phone" />
 114      <tab class="nagiosAccount" name="Nagios" />
 115    </usertabs>
 116
 117   <!-- User dialog -->
 118   <MyAccountTabs>
 119      <tab class="user" name="Generic" />
 120      <tab class="posixAccount" name="POSIX" />
 121      <tab class="sambaAccount" name="Samba" />
 122      <tab class="netatalk" name="Netatalk" />
 123      <tab class="mailAccount" name="Mail" />
 124      <tab class="scalixAccount" name="Scalix" />
 125      <tab class="environment" name="Desktop" />
 126      <tab class="connectivity" name="Connectivity" />
 127      <tab class="gofaxAccount" name="Fax" />
 128      <tab class="phoneAccount" name="Phone" />
 129      <tab class="nagiosAccount" name="Nagios" />
 130    </MyAccountTabs>
 131
 132   <opsiLicenseTabs>
 133     <tab class="licensePoolGeneric" name="Generic"/>
 134     <tab class="licenseUsage" name="Usage"/>
 135   </opsiLicenseTabs>
 136
 137   <!-- Group dialog -->
 138   <grouptabs>
 139     <tab class="group" name="Generic" />
 140     <tab class="environment" name="Desktop" />
 141     <tab class="appgroup" name="Startmenu" />
 142     <tab class="mailgroup" name="Mail" />
 143   </grouptabs>
 144
 145   <!-- Sudo dialog -->
 146   <sudotabs>
 147     <tab class="sudo" name="Generic" />
 148     <tab class="sudoOption" name="Options" />
 149   </sudotabs>
 150
 151   <!-- GOfax plugins -->
 152   <faxblocktabs>
 153     <tab class="blocklistGeneric" name="Generic" />
 154   </faxblocktabs>
 155
 156   <!-- GOfon plugins -->
 157   <conferencetabs>
 158     <tab class="conference" name="Generic" />
 159   </conferencetabs>
 160
 161   <macrotabs>
 162     <tab class="macro" name="Generic" />
 163     <tab class="macroParameter" name="Parameter" />
 164   </macrotabs>
 165
 166   <phonetabs>
 167     <tab class="phoneGeneric" name="Generic" />
 168   </phonetabs>
 169
 170   <!-- GOto plugins -->
 171   <appstabs>
 172     <tab class="application" name="Generic" />
 173     <tab class="applicationParameters" name="Parameter" />
 174   </appstabs>
 175
 176   <mimetabs>
 177     <tab class="mimetype" name="Generic" />
 178   </mimetabs>
 179
 180   <devicetabs>
 181     <tab class="deviceGeneric" name="Generic" />
 182   </devicetabs>
 183
 184   <arpnewdevicetabs>
 185     <tab class="ArpNewDevice" name="Generic" />
 186   </arpnewdevicetabs>
 187
 188   <termtabs>
 189      <tab class="termgeneric" name="Generic" />
 190      <tab class="termstartup" name="Recipe" />
 191      <tab class="termservice" name="Devices" />
 192      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 193   </termtabs>
 194
 195   <servtabs>
 196      <tab class="servgeneric" name="Generic" />
 197      <tab class="workstartup" name="Recipe" />
 198      <tab class="ServerService" name="Services" />
 199      <tab class="faiSummaryTab" name="Deployment summary" />
 200      <tab class="gotoLogView" name="Installation logs" />
 201      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 202   </servtabs>
 203
 204   <worktabs>
 205      <tab class="workgeneric" name="Generic" />
 206      <tab class="workstartup" name="Recipe" />
 207      <tab class="workservice" name="Devices" />
 208      <tab class="printgeneric" name="Printer" />
 209      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 210      <tab class="faiSummaryTab" name="Deployment summary" />
 211      <tab class="gotoLogView" name="Installation logs" />
 212   </worktabs>
 213
 214   <printtabs>
 215      <tab class="printgeneric" name="Generic" />
 216   </printtabs>
 217
 218   <componenttabs>
 219      <tab class="componentGeneric" name="Generic" />
 220   </componenttabs>
 221
 222   <wintabs>
 223      <tab class="wingeneric" name="Generic" />
 224   </wintabs>
 225
 226   <serverservice>
 227     <tab class="goMailServer" />
 228 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 229     <tab class="servkolab" />
 230 {else}
 231     <!-- <tab class="servkolab" /> -->
 232 {/if}
 233     <tab class="goNtpServer" />
 234     <tab class="servrepository" />
 235     <tab class="goImapServer" />
 236     <tab class="goKrbServer" />
 237     <tab class="goFaxServer" />
 238     <tab class="goFonServer" />
 239     <tab class="goCupsServer" />
 240     <tab class="goKioskService" />
 241     <tab class="goTerminalServer" />
 242     <tab class="goLdapServer" />
 243     <tab class="goShareServer" />
 244     <tab class="gospamserver" />
 245     <tab class="govirusserver" />
 246     <tab class="servdhcp" />
 247     <tab class="servdns" />
 248     <tab class="rSyslogServer" />
 249   </serverservice>
 250
 251   <!-- Department plugin -->
 252   <deptabs>
 253     <tab class="department" name="Generic" />
 254   </deptabs>
 255
 256   <organization_tabs>
 257     <tab class="organization" name="Generic" />
 258   </organization_tabs>
 259
 260   <locality_tabs>
 261     <tab class="locality" name="Generic" />
 262   </locality_tabs>
 263
 264   <country_tabs>
 265     <tab class="country" name="Generic" />
 266   </country_tabs>
 267
 268   <dcobject_tabs>
 269     <tab class="dcObject" name="Generic" />
 270   </dcobject_tabs>
 271
 272   <domain_tabs>
 273     <tab class="domain" name="Generic" />
 274   </domain_tabs>
 275
 276   <!-- Role tabs -->
 277   <roletabs>
 278     <tab class="roleGeneric" name="Generic"/>
 279   </roletabs>
 280
 281   <ogrouptabs>
 282     <tab class="ogroup" name="Generic" />
 283   </ogrouptabs>
 284
 285   <!-- Debian archive management plugin -->
 286   <!--
 287   <dak_tabs>
 288     <tab class="dakrepository" name="Repository" />
 289     <tab class="dakqueue" name="Queue" />
 290     <tab class="dakkeyring" name="Key ring" />
 291   </dak_tabs>
 292   -->
 293
 294   <!-- Connectivity plugins -->
 295   <connectivity>
 296 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 297     <tab class='kolabAccount' />
 298 {else}
 299 <!-- <tab class='kolabAccount' /> -->
 300 {/if}
 301     <tab class="proxyAccount" />
 302     <tab class="pureftpdAccount" />
 303     <tab class="webdavAccount" />
 304     <tab class="phpgwAccount" />
 305     <tab class="intranetAccount" />
 306     <!--
 307     <tab class="opengwAccount"
 308       username="OGo"
 309       password=""
 310       database="OGo"
 311       databaseServer="localhost" />
 312     -->
 313     <tab class="pptpAccount" />
 314     <tab class="phpscheduleitAccount" />
 315     <tab class="oxchangeAccount" />
 316   </connectivity>
 317
 318   <ldiftab>
 319     <tab class="ldifexport" name="Export" />
 320     <tab class="xlsexport" name="Excel Export" />
 321 <!--    <tab class="ldifimport" name="Import" /> -->
 322 <!--    <tab class="csvimport" name="CSV Import" /> -->
 323   </ldiftab>
 324
 325   <faipartitiontabs>
 326     <tab class="faiPartitionTable" name="Partitions" />
 327   </faipartitiontabs>
 328
 329   <faiscripttabs>
 330     <tab class="faiScript" name="Scripts" />
 331   </faiscripttabs>
 332
 333   <faihooktabs>
 334     <tab class="faiHook" name="Hooks" />
 335   </faihooktabs>
 336
 337   <faivariabletabs>
 338     <tab class="faiVariable" name="Variables" />
 339   </faivariabletabs>
 340
 341   <faitemplatetabs>
 342     <tab class="faiTemplate" name="Templates" />
 343   </faitemplatetabs>
 344
 345   <faiprofiletabs>
 346     <tab class="faiProfile" name="Profiles" />
 347     <tab class="faiSummaryTab" name="Summary" />
 348   </faiprofiletabs>
 349
 350   <faipackagetabs>
 351     <tab class="faiPackage" name="Packages" />
 352   </faipackagetabs>
 353
 354   <opsitabs>
 355     <tab class="opsiGeneric" name="Generic" />
 356     <tab class="opsiSoftware" name="Hardware" />
 357     <tab class="opsiHardware" name="Software" />
 358     <tab class="licenseUsageByHost" name="License usage"/>
 359   </opsitabs>
 360
 361   <opsiprodconfig>
 362     <tab class="opsiProperties" name="Properties" />
 363     <tab class="licenseByProduct" name="License usage"/>
 364   </opsiprodconfig>
 365
 366   <!-- rSyslog plugin -->
 367   <rsyslogtabs>
 368       <tab class="rsyslog" name="System logs" />
 369   </rsyslogtabs>
 370
 371   <!-- Main section **********************************************************
 372
 373        The main section defines global settings, which might be overridden by
 374        each location definition inside.
 375
 376        For more information about the configuration parameters, take a look at
 377        the gosa.conf(5) manual page.
 378
 379   -->
 380   <main default="{$cv.location}"
 381 {if $cv.generic_settings.logging}
 382         logging="true"
 383 {else}
 384         logging="false"
 385 {/if}
 386 {if $cv.optional.list_summary}
 387         listSummary="true"
 388 {else}
 389         listSummary="false"
 390 {/if}
 391 {if $cv.pwd_rules.pwminlen_active}
 392         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 393 {/if}
 394 {if $cv.pwd_rules.pwdiffer_active}
 395         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 396 {/if}
 397 {if $cv.pwd_rules.externalpwdhook_active}
 398         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 399 {/if}
 400 {if $cv.errorlvl}
 401         displayErrors="true"
 402 {else}
 403         displayErrors="false"
 404 {/if}
 405 {if $cv.enable_schema_check}
 406         schemaCheck="true"
 407 {else}
 408         schemaCheck="false"
 409 {/if}
 410 {if $cv.generic_settings.enableCopyPaste}
 411         copyPaste="true"
 412 {else}
 413         copyPaste="false"
 414 {/if}
 415 {if $cv.optional.forceglobals}
 416         forceGlobals="true"
 417 {else}
 418         forceGlobals="false"
 419 {/if}
 420 {if $cv.optional.forceSSL}
 421         forceSSL="true"
 422 {else}
 423         forceSSL="false"
 424 {/if}
 425 {if $cv.optional.ldapstats}
 426         ldapStats="true"
 427 {else}
 428         ldapStats="false"
 429 {/if}
 430 {if $cv.optional.warnSSL}
 431         warnSSL="true"
 432 {else}
 433         warnSSL="false"
 434 {/if}
 435 {if $cv.optional.ppd_path_active}
 436         ppdGzip="true"
 437         ppdPath="{$cv.optional.ppd_path}"
 438 {/if}
 439 {if $cv.optional.max_ldap_query_time_active}
 440         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 441 {/if}
 442 {if $cv.optional.noprimarygroup}
 443         primaryGroupFilter="true"
 444 {/if}
 445 {if $cv.optional.user_filter_cookie}
 446         storeFilterSettings="true"
 447 {else}
 448         storeFilterSettings="false"
 449 {/if}
 450 {if $cv.compressed}
 451         sendCompressedOutput="true"
 452 {else}
 453         sendCompressedOutput="false"
 454 {/if}
 455 {if $cv.optional.uniq_identifier_active}
 456         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 457 {else}
 458         modificationDetectionAttribute=""
 459 {/if}
 460         language="{$cv.lang_selected}"
 461         theme="{$cv.theme}"
 462         sessionLifetime="{$cv.optional.session_lifetime}"
 463         templateCompileDirectory="{$cv.optional.templateCompileDirectory}"
 464         debugLevel="{$cv.optional.debugLevel}"
 465         sambaHashHook='{$cv.samba_settings.smbhash}'
 466     >
 467
 468     <!-- Location definition -->
 469     <location name="{$cv.location}"
 470               passwordDefaultHash="{$cv.encryption}"
 471               accountPrimaryAttribute="{$cv.peopledn}"
 472               userRDN="{$cv.peopleou}"
 473               groupRDN="{$cv.groupou}"
 474               gidNumberBase="{$cv.uidbase}"
 475               uidNumberBase="{$cv.uidbase}"
 476 {if $cv.optional.sudoou_active}
 477               sudoRDN="{$cv.optional.sudoou}"
 478 {/if}
 479 {if $cv.optional.gosaSupportURI_active}
 480               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 481               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 482 {else}
 483               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 484               disabled_gosaSupportTimeout="15"
 485 {/if}
 486 {if $cv.optional.login_attribute}
 487               loginAttribute="{$cv.optional.login_attribute}"
 488 {else}
 489               loginAttribute="uid"
 490 {/if}
 491 {if $cv.timezone}
 492               timezone="{$cv.timezone}"
 493 {/if}
 494 {if $cv.optional.strict_units}
 495               honourUnitTags="true"
 496 {else}
 497               honourUnitTags="false"
 498 {/if}
 499 {if $cv.krbsasl}
 500               useSaslForKerberos="true"
 501 {else}
 502               useSaslForKerberos="false"
 503 {/if}
 504 {if $cv.rfc2307bis}
 505               rfc2307bis="true"
 506 {else}
 507               rfc2307bis="false"
 508 {/if}
 509 {if $cv.include_personal_title}
 510               personalTitleInDN="true"
 511 {else}
 512               personalTitleInDN="false"
 513 {/if}
 514 {if $cv.base_hook_active}
 515               nextIdHook="{$cv.base_hook}"
 516 {/if}
 517 {if $cv.generic_settings.wws_ou_active}
 518               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 519 {/if}
 520 {if $cv.id_settings.idgen_active}
 521               idGenerator="{$cv.id_settings.idgen}"
 522 {/if}
 523 {if $cv.strict}
 524               strictNamingRules="true"
 525 {else}
 526               strictNamingRules="false"
 527 {/if}
 528 {if $cv.id_settings.minid_active}
 529               minId="{$cv.id_settings.minid}"
 530 {/if}
 531               mailAttribute="{$cv.mail_attrib}"
 532               gosaSharedPrefix=""
 533               mailUserCreation=""
 534               mailFolderCreation=""
 535               imapTimeout="10"
 536 {if $cv.mail != "disabled"}
 537               mailMethod="{$cv.mail}"
 538 {if $cv.cyrusunixstyle}
 539               cyrusUseSlashes="true"
 540 {else}
 541               cyrusUseSlashes="false"
 542 {/if}
 543 {if $cv.mail_settings.vacationdir_active}
 544               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 545 {/if}
 546 {/if}
 547 {if $cv.tls}
 548               ldapTLS="true"
 549 {/if}
 550 {if $cv.governmentmode}
 551               honourIvbbAttributes="true"
 552 {else}
 553               honourIvbbAttributes="false"
 554 {/if}
 555 {if $cv.sambaidmapping}
 556               sambaIdMapping="true"
 557 {/if}
 558 {if $cv.account_expiration}
 559               handleExpiredAccounts="true"
 560 {/if}
 561 {if $cv.samba_settings.samba_sid_active}
 562               sambaSID="{$cv.samba_settings.samba_sid}"
 563 {/if}
 564 {if $cv.samba_settings.samba_rid_active}
 565               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 566 {/if}
 567 {if $cv.generic_settings.snapshot_active}
 568               enableSnapshots="true"
 569               snapshotBase="{$cv.generic_settings.snapshot_base}"
 570               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 571               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 572               snapshotURI="{$cv.generic_settings.snapshot_server}"
 573 {else}
 574               enableSnapshots="false"
 575               snapshotBase="dc=localhost,dc=de"
 576               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 577               snapshotAdminPassword="secret"
 578               snapshotURI="ldap://localhost:389"
 579 {/if}
 580               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 581
 582               <referral URI="{$cv.connection}/{$cv.base}"
 583                         adminDn="{$cv.admin}"
 584                         adminPassword="{$cv.password}" />
 585
 586     </location>
 587   </main>
 588 </conf>