Code

Updated gosa.conf ACL tag for systems
[gosa.git] / gosa-core / contrib / gosa.conf
1 {literal}<?xml version="1.0"?>{/literal}
2 <conf config_version="{$config_checksum}" >
3         <menu>
4                 <section name="My account">
5                         <plugin acl="users/user:self"           class="user" />
6                         <plugin acl="users/posixAccount:self"   class="posixAccount" />
7                         <plugin acl="users/environment:self"    class="environment" 
8 {if $cv.optional.kioskpath_active}                              kioskpath="{$cv.optional.kioskpath}"{/if}/>
9                         <plugin acl="users/mailAccount:self"    class="mailAccount" />
10                         <plugin acl="users/sambaAccount:self"   class="sambaAccount" />
11 {if $cv.use_netatalk}
12                         <plugin acl="users/netatalk:self"               class="netatalk" />
13 {else}
14 <!--            <plugin acl="users/netatalk:self"               class="netatalk" />     -->
15 {/if}
16                         <plugin acl="users/connectivity:self"   class="connectivity" />
17                         <plugin acl="users/gofaxAccount:self"   class="gofaxAccount" />
18                         <plugin acl="users/phoneAccount:self"   class="phoneAccount" />
19 <!--            <plugin acl="users/nagiosAccount:self"  class="nagiosAccount" /> -->
20                         <plugin acl="users/password:self"               class="password" />
21                 </section>
22                 
23                 <section name="Administration">
24                         <plugin acl="department"                class="departmentManagement" />
25                         <plugin acl="users"                     class="userManagement" />
26                         <plugin acl="groups"                    class="groupManagement" />
27                         <plugin acl="ogroups"                   class="ogroupManagement" />
28                         <plugin acl="application"               class="applicationManagement" />
29 {if $cv.enableMimeType}
30                         <plugin acl="mimetypes"                 class="mimetypeManagement" />
31 {else}
32 <!--            <plugin acl="mimetypes"                 class="mimetypeManagement" /> -->
33 {/if}
34                         <plugin acl="devices"                   class="deviceManagement" />
35                         <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,
36                                 phone/phoneGeneric,printer/printgeneric,component/componentGeneric,
37                                 winworkstation/wingeneric" class="systems" />
38                         <!-- Use 'lock_dn'      for dn
39                                 'lock_name'    for name
40                                 'lock_type'    for branch/freeze -->
41 {if $cv.enableFAI_management}
42                         <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" />
43 {else}
44 <!--            <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" /> -->
45 {/if}
46                         <plugin acl="gofaxlist"                 class="blocklist" />
47                         <plugin acl="gofonmacro"                class="goFonMacro" />
48                         <plugin acl="gofonconference"   class="phoneConferenceManagment" />
49                         <plugin acl="acl"                               class="aclManagement" />
50                         <plugin acl="sudo"                              class="sudoManagement" />
51                 </section>
53                 <section name="Addons">
54 <!--            <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
55                         <plugin acl="addressbook"               class="addressbook" />
56                         <plugin acl="mailqueue"                 class="mailqueue" />
57                         <plugin acl="faxreport"                 class="faxreport" />
58                         <plugin acl="fonreport"                 class="fonreport" />
59                         <plugin acl="logview"                   class="logview" />
60                         <plugin acl="gotomasses"                class="gotomasses" />
61                         <plugin acl="ldapmanager"               class="ldif" />
62                 </section>
63         </menu>
65         <aclroletab>
66                 <tab class="aclRole" name="ACL Role" />
67         </aclroletab>
69         <sudotabs>
70                 <tab class="sudo" name="Generic" />
71                 <tab class="sudoOption" name="Options" />
72         </sudotabs>
74         <usertabs>
75                 <tab class="user" name="Generic" />
76                 <tab class="posixAccount" name="Unix" />
77                 <tab class="environment" name="Environment" />
78                 <tab class="mailAccount" name="Mail" />
79                 <tab class="sambaAccount" name="Samba" />
80 {if $cv.use_netatalk}
81                 <tab class="netatalk" name="Netatalk" />
82 {else}
83 <!--
84                 <tab class="netatalk" name="Netatalk" />
85 -->
86 {/if}
87                 <tab class="connectivity" name="Connectivity" />
88                 <tab class="gofaxAccount" name="Fax" />
89                 <tab class="phoneAccount" name="Phone" />
90 <!--
91                 <tab class="scalixAccount" name="Scalix" />
92 -->
93 <!--            
94                 <tab class="nagiosAccount" name="Nagios" /> 
95 -->
96         </usertabs>
98         <faxblocktabs>
99                 <tab class="blocklistGeneric" name="Generic" />
100         </faxblocktabs>
102         <mimetabs>
103                 <tab class="mimetype" name="Generic" />
104         </mimetabs>
106         <devicetabs>
107                 <tab class="deviceGeneric" name="Generic" />
108         </devicetabs>
111         <grouptabs>
112                 <tab class="group" name="Generic" />
113                 <tab class="environment" name="Environment" />
114                 <tab class="appgroup" name="Applications" />
115                 <tab class="mailgroup" name="Mail" />
116         </grouptabs>
118         <appstabs>
119                 <tab class="application" name="Generic" />
120                 <tab class="applicationParameters" name="Options" />
121         </appstabs>
123         <conferencetabs>
124                 <tab class="conference" name="Generic" />
125         </conferencetabs>
127         <macrotabs>
128                 <tab class="macro" name="Generic" />
129                 <tab class="macroParameter" name="Parameter" />
130         </macrotabs>
132         <termtabs>
133                 <tab class="termgeneric" name="Generic" />
134                 <tab class="termstartup" name="Startup" />
135                 <tab class="termservice" name="Devices" />
136                 <tab class="printgeneric" name="Printer" />
137                 <tab class="terminfo" name="Information" 
138                         snmpcommunity="{$cv.optional.snmpcommunity}" />
139 <!--            <tab class="glpiAccount" name="Inventory" /> -->
140         </termtabs>
142         <servtabs>
143                 <tab class="servgeneric" name="Generic" />
144                 <tab class="workstartup" name="Startup" />
145                 <tab class="ServerService" name="Services" />
146 {if $cv.enableFAI_management}
147                 <tab class="faiSummaryTab" name="Deployment summary" />
148                 <tab class="goto_log_view" name="Installation logs" />
149 {else}
150 <!--  <tab class="faiSummaryTab" name="Deployment summary" /> -->
151 <!--    <tab class="goto_log_view" name="Installation logs" /> -->
152 {/if}
153                 <tab class="terminfo" name="Information" 
154                         snmpcommunity="{$cv.optional.snmpcommunity}" />
155 <!--            <tab class="glpiAccount" name="Inventory" /> -->
156         </servtabs>
158         <worktabs>
159                 <tab class="workgeneric" name="Generic" />
160                 <tab class="workstartup" name="Startup" />
161                 <tab class="workservice" name="Devices" />
162                 <tab class="printgeneric" name="Printer" />
163                 <tab class="terminfo" name="Information" 
164                         snmpcommunity="{$cv.optional.snmpcommunity}" />
165 {if $cv.enableFAI_management}
166                 <tab class="faiSummaryTab" name="Deployment summary" />
167                 <tab class="goto_log_view" name="Installation logs" />
168 {else}
169 <!--    <tab class="faiSummaryTab" name="Deployment summary" /> -->
170 <!--    <tab class="goto_log_view" name="Installation logs" /> -->
171 {/if}
172 <!--            <tab class="glpiAccount" name="Inventory" /> -->
173         
174         </worktabs>
176         <printtabs>
177                 <tab class="printgeneric" name="Generic" />
178 <!--            <tab class="glpiPrinterAccount" name="Inventory" /> -->
179         </printtabs>
181         <phonetabs>
182                 <tab class="phoneGeneric" name="Generic" />
183 <!--            <tab class="glpiAccount" name="Inventory" /> -->
184         </phonetabs>
186         <componenttabs>
187                 <tab class="componentGeneric" name="Generic" />
188 <!--            <tab class="glpiAccount" name="Inventory" /> -->
189         </componenttabs>
191         <wintabs>
192                 <tab class="wingeneric" name="Generic" />
193 <!--            <tab class="glpiAccount" name="Inventory" /> -->
194         </wintabs>
196         <serverservice>
197                 <tab class="goMailServer" />
198 {if $cv.mail == "kolab"}
199                 <tab class="servkolab" />
200 {/if}
201                 <tab class="goNtpServer" />
202                 <tab class="servrepository" />
203                 <tab class="goImapServer" />
204                 <tab class="goKrbServer" />
205                 <tab class="goFaxServer" />
206                 <tab class="goFonServer" />
207                 <tab class="goLogDBServer" />
208                 <tab class="goGlpiServer" />
209                 <tab class="goCupsServer" />
210                 <tab class="goKioskService" />
211                 <tab class="goSyslogServer" />
212                 <tab class="goTerminalServer" />
213                 <tab class="goLdapServer" />
214                 <tab class="goShareServer" />
215 {if $cv.generic_settings.enableDHCP}
216                 <tab class="servdhcp" />
217 {/if}
218 {if $cv.generic_settings.enableDNS}
219                 <tab class="servdns" />
220 {/if}
221                 <tab class="gosaLogServer" />
222         </serverservice>
224         <deptabs>
225                 <tab class="department" name="Generic" />
226         </deptabs>
228         <organization_tabs>
229                 <tab class="organization" name="Generic" />
230         </organization_tabs>
232         <locality_tabs>
233                 <tab class="locality" name="Generic" />
234         </locality_tabs>
236         <country_tabs>
237                 <tab class="country" name="Generic" />
238         </country_tabs>
240         <dcobject_tabs>
241                 <tab class="dcObject" name="Generic" />
242         </dcobject_tabs>
244         <ogrouptabs>
245                 <tab class="ogroup" name="Generic" />
246         </ogrouptabs>
248 <!--
249         <dak_tabs>
250                 <tab class="dakrepository" name="Repository" />
251                 <tab class="dakqueue" name="Queue" />
252                 <tab class="dakkeyring" name="Key ring" />
253         </dak_tabs>
254 -->
256         <connectivity>
257 {if $cv.mail == "kolab"}
258                 <tab class='kolabAccount' /> 
259 {/if}
260                 <tab class="proxyAccount" />
261                 <tab class="pureftpdAccount" />
262                 <tab class="webdavAccount" />
263                 <tab class="phpgwAccount" />
264                 <tab class="intranetAccount" />
265 <!--
266                 <tab class="opengwAccount"
267                         username="OGo"
268                         password=""
269                         database="OGo"
270                         datahost="localhost" />
271 -->
272                 <tab class="pptpAccount" /> 
273                 <tab class="phpscheduleitAccount" /> 
274         <tab class="oxchangeAccount" />
275         </connectivity>
277         <ldiftab>
278                 <tab class="ldifexport" name="Export" />
279                 <tab class="xlsexport" name="Excel Export" />
280                 <tab class="ldifimport" name="Import" />
281                 <tab class="csvimport" name="CSV Import" />
282         </ldiftab>
284         <arpnewdevicetabs>
285                 <tab class="ArpNewDevice" name="Generic" />
286         </arpnewdevicetabs>
288 {if $cv.enableFAI_management}
289         <faipartitiontabs>
290                 <tab class="faiPartitionTable" name="Partitions" />
291         </faipartitiontabs>
293         <faiscripttabs>
294                 <tab class="faiScript" name="Script" />
295         </faiscripttabs>
297         <faihooktabs>
298                 <tab class="faiHook" name="Hooks" />
299         </faihooktabs>
301         <faivariabletabs>
302                 <tab class="faiVariable" name="Variables" />
303         </faivariabletabs>
305         <faitemplatetabs>
306                 <tab class="faiTemplate" name="Templates" />
307         </faitemplatetabs>
309         <faiprofiletabs>
310                 <tab class="faiProfile" name="Profiles" />
311                 <tab class="faiSummaryTab" name="Summary" />
312         </faiprofiletabs>
314         <faipackagetabs>
315                 <tab class="faiPackage" name="Packages" />
316         </faipackagetabs>
317 {else}
318 <!-- 
319         <faipartitiontabs>
320                 <tab class="faiPartitionTable" name="Partitions" />
321         </faipartitiontabs>
323         <faiscripttabs>
324                 <tab class="faiScript" name="Script" />
325         </faiscripttabs>
327         <faihooktabs>
328                 <tab class="faiHook" name="Hooks" />
329         </faihooktabs>
331         <faivariabletabs>
332                 <tab class="faiVariable" name="Variables" />
333         </faivariabletabs>
335         <faitemplatetabs>
336                 <tab class="faiTemplate" name="Templates" />
337         </faitemplatetabs>
339         <faiprofiletabs>
340                 <tab class="faiProfile" name="Profiles" />
341                 <tab class="faiSummaryTab" name="Summary" />
342         </faiprofiletabs>
344         <faipackagetabs>
345                 <tab class="faiPackage" name="Packages" />
346         </faipackagetabs>
347 -->
348 {/if}
350         <sudotabs>
351                 <tab class="sudo" name="Generic" />
352                 <tab class="sudoOption" name="Options" />
353         </sudotabs>
355         <logtabs>
356                         <tab class="logview" name="System logs" />
357                         <tab class="gosa_logview" name="GOsa logs" />
358         </logtabs>
359         
360         <main default="{$cv.location}"
361 {if $cv.optional.list_summary}
362                 list_summary="true"
363 {else}
364                 list_summary="false"
365 {/if}
366 {if $cv.pwd_rules.pwminlen_active}
367                 pwminlen="{$cv.pwd_rules.pwminlen}"
368 {/if}
369 {if $cv.pwd_rules.pwdiffer_active}
370                 pwdiffer="{$cv.pwd_rules.pwdiffer}"
371 {/if}
372 {if $cv.pwd_rules.externalpwdhook_active}
373                 externalpwdhook="{$cv.pwd_rules.externalpwdhook}"
374 {/if}
375 {if $cv.errorlvl}
376                 displayerrors="true"
377 {else}
378                 displayerrors="false"
379 {/if}
380 {if $cv.enable_schema_check}
381                 schema_check="true"
382 {else}
383                 schema_check="false"
384 {/if}
385 {if $cv.generic_settings.enableCopyPaste}
386                 enableCopyPaste="true"
387 {else}
388                 enableCopyPaste="false"
389 {/if}
390 {if $cv.optional.forceglobals}
391                 forceglobals="true"
392 {else}
393                 forceglobals="false"
394 {/if}
395 {if $cv.optional.forcessl}
396                 forcessl="true"
397 {else}
398                 forcessl="false"
399 {/if}
400 {if $cv.optional.ldapstats}
401                 ldapstats="true"
402 {else}
403                 ldapstats="false"
404 {/if}
405 {if $cv.optional.warnssl}
406                 warnssl="true"
407 {else}
408                 warnssl="false"
409 {/if}
410 {if $cv.optional.ppd_path_active}
411                 ppd_path="{$cv.optional.ppd_path}"
412 {/if}
413 {if $cv.optional.max_ldap_query_time_active}    
414                 max_ldap_query_time="{$cv.optional.max_ldap_query_time}"
415 {/if}
416 {if $cv.optional.noprimarygroup}
417                 noprimarygroup="true"
418 {/if}
419 {if $cv.optional.mailQueueScriptPath_active}
420                 mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
421 {/if}
422 {if $cv.optional.auto_network_hook_active}
423                 auto_network_hook="{$cv.optional.auto_network_hook} "
424 {/if}
425 {if $cv.optional.user_filter_cookie}
426                 save_filter="true"
427 {else}
428                 save_filter="false"
429 {/if}
430 {if $cv.compressed}
431                 compressed="true"
432 {else}
433                 compressed="false"
434 {/if}
435 {if $cv.optional.uniq_identifier_active }
436                 uniq_identifier="{$cv.optional.uniq_identifier}"
437 {else}
438                 uniq_identifier=""
439 {/if}
440                 lang="{$cv.lang_selected}"
441                 theme="{$cv.theme}"
442                 session_lifetime="{$cv.optional.session_lifetime}"
443                 compile="{$cv.optional.compile}"
444                 debuglevel="{$cv.optional.debuglevel}"
445                 smbhash='{$cv.samba_settings.smbhash}'
446                 >
448                 <location name="{$cv.location}"
449                         hash="{$cv.encryption}"
450                         dnmode="{$cv.peopledn}"
451                         server="{$cv.connection}"
452                         people="{$cv.peopleou}"
453                         groups="{$cv.groupou}"
454                         gidbase="{$cv.uidbase}"
455                         uidbase="{$cv.uidbase}"
456                         logging="{$cv.generic_settings.logging}"
457 {if $cv.optional.sudoou_active}
458                         sudoou="{$cv.optional.sudoou}"
459 {/if}
460 {if $cv.optional.login_attribute}
461                         login_attribute="{$cv.optional.login_attribute}"
462 {else}
463                         login_attribute="uid"
464 {/if}
465 {if $cv.timezone}
466                         timezone="{$cv.timezone}"
467 {/if}
468 {if $cv.optional.strict_units}
469                         strict_units="true"
470 {else}
471                         strict_units="false"
472 {/if}
473 {if $cv.krbsasl}
474                         krbsasl="true"
475 {else}
476                         krbsasl="false"
477 {/if}
478 {if $cv.rfc2307bis}
479                         rfc2307bis="true"
480 {else}
481                         rfc2307bis="false"
482 {/if}
483 {if $cv.include_personal_title}
484                         include_personal_title="true"
485 {else}
486                         include_personal_title="false"
487 {/if}
488 {if $cv.optional.notifydir_active }
489                         notifydir="{$cv.optional.notifydir}"
490 {/if}
491 {if $cv.base_hook_active}
492                         base_hook="{$cv.base_hook}"
493 {/if}
494 {if $cv.generic_settings.wws_ou_active}
495                         winstations="{$cv.generic_settings.wws_ou}"
496 {/if}
497 {if $cv.id_settings.idgen_active}
498                         idgen="{$cv.id_settings.idgen}"
499 {/if}
500 {if $cv.strict}
501                         strict="yes"
502 {else}
503                         strict="no"
504 {/if}
505 {if $cv.id_settings.minid_active}
506                         minid="{$cv.id_settings.minid}"
507 {/if}
508 {if $cv.mail != "disabled"}
509                         mailMethod="{$cv.mail}"
510 {if $cv.cyrusunixstyle}
511                         cyrusunixstyle="true"
512 {else}
513                         cyrusunixstyle="false"
514 {/if}
515                         mail_uattrib="{$cv.mail_attrib}"
516 {if $cv.mail_settings.vacationdir_active}
517                         vacationdir="{$cv.mail_settings.vacationdir}"
518 {/if}
519 {/if}
520 {if $cv.tls}
521                         tls="true"
522 {/if}
523 {if $cv.governmentmode}
524                         governmentmode="true"
525 {else}
526                         governmentmode="false"
527 {/if}
528 {if $cv.sambaidmapping}
529                         sambaidmapping="true"
530 {/if}
531 {if $cv.account_expiration}
532                         account_expiration="true"
533 {/if}
534 {if $cv.samba_settings.samba_sid_active}
535                         SID="{$cv.samba_settings.samba_sid}"
536 {/if}
537 {if $cv.samba_settings.samba_rid_active}
538                         RIDBASE="{$cv.samba_settings.samba_rid_active}"
539 {/if}
540 {if $cv.generic_settings.snapshot_active}       
541                         enable_snapshot="true"
542 {if $cv.generic_settings.snapshot_base != ""}
543                         snapshot_base="{$cv.generic_settings.snapshot_base}"
544 {/if}
545 {if $cv.generic_settings.snapshot_user != ""}
546                         snapshot_user="{$cv.generic_settings.snapshot_user}"
547 {/if}
548 {if $cv.generic_settings.snapshot_password != ""}
549                         snapshot_password="{$cv.generic_settings.snapshot_password}"
550 {/if}
551 {if $cv.generic_settings.snapshot_server != ""}
552                         snapshot_server="{$cv.generic_settings.snapshot_server}"
553 {/if}
554 {/if}
555 {if $cv.samba_version != 0}
556                         sambaversion="{$cv.samba_version}"
557 {/if}
558                         config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
560                         <referral url="{$cv.connection}/{$cv.base}"
561                                 admin="{$cv.admin}"
562                                 password="{$cv.password}" />
563                 </location>
564         </main>
565 </conf>