gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75       <plugin acl="rsyslog"  class="rsyslog" />
  76     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  77       <plugin acl="addressbook" class="addressbook" />
  78       <plugin acl="mailqueue" class="mailqueue" />
  79       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  80       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  81       <plugin acl="gotomasses" class="gotomasses" />
  82       <plugin acl="ldapmanager" class="ldif" />
  83     </section>
  84   </menu>
  85
  86
  87
  88   <!-- Tab definitions *******************************************************
  89
  90        Tab definitions define the sub plugins which get included for certain
  91        tabbed dialogs. If you change something here, never (!) remove the
  92        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  93        need a primary plugin.
  94
  95        "*tab" should be looked for by a defined plugin. This one will take
  96        every "tab" defined "class" and will show it inside of a tabbed dialog
  97        with the header defined in "name".
  98    -->
  99
 100   <!-- ACL dialog -->
 101   <acltab>
 102     <tab class="acl" name="ACL" />
 103   </acltab>
 104
 105   <aclroletab>
 106     <tab class="aclRole" name="ACL Role" />
 107   </aclroletab>
 108
 109   <!-- User dialog -->
 110   <usertabs>
 111      <tab class="user" name="Generic" />
 112      <tab class="posixAccount" name="Unix" />
 113      <tab class="environment" name="Environment" />
 114      <tab class="mailAccount" name="Mail" />
 115      <tab class="sambaAccount" name="Samba" />
 116      <tab class="netatalk" name="Netatalk" />
 117      <tab class="connectivity" name="Connectivity" />
 118      <tab class="gofaxAccount" name="Fax" />
 119      <tab class="phoneAccount" name="Phone" />
 120      <tab class="scalixAccount" name="Scalix" />
 121      <tab class="nagiosAccount" name="Nagios" />
 122    </usertabs>
 123
 124   <opsiLicenseTabs>
 125     <tab class="licensePoolGeneric" name="Generic"/>
 126     <tab class="licenseUsage" name="Usage"/>
 127   </opsiLicenseTabs>
 128
 129   <!-- Group dialog -->
 130   <grouptabs>
 131     <tab class="group" name="Generic" />
 132     <tab class="environment" name="Environment" />
 133     <tab class="appgroup" name="Applications" />
 134     <tab class="mailgroup" name="Mail" />
 135   </grouptabs>
 136
 137   <!-- Sudo dialog -->
 138   <sudotabs>
 139     <tab class="sudo" name="Generic" />
 140     <tab class="sudoOption" name="Options" />
 141   </sudotabs>
 142
 143   <!-- GOfax plugins -->
 144   <faxblocktabs>
 145     <tab class="blocklistGeneric" name="Generic" />
 146   </faxblocktabs>
 147
 148   <!-- GOfon plugins -->
 149   <conferencetabs>
 150     <tab class="conference" name="Generic" />
 151   </conferencetabs>
 152
 153   <macrotabs>
 154     <tab class="macro" name="Generic" />
 155     <tab class="macroParameter" name="Parameter" />
 156   </macrotabs>
 157
 158   <phonetabs>
 159     <tab class="phoneGeneric" name="Generic" />
 160     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 161   </phonetabs>
 162
 163   <!-- GOto plugins -->
 164   <appstabs>
 165     <tab class="application" name="Generic" />
 166     <tab class="applicationParameters" name="Options" />
 167   </appstabs>
 168
 169   <mimetabs>
 170     <tab class="mimetype" name="Generic" />
 171   </mimetabs>
 172
 173   <devicetabs>
 174     <tab class="deviceGeneric" name="Generic" />
 175   </devicetabs>
 176
 177   <arpnewdevicetabs>
 178     <tab class="ArpNewDevice" name="Generic" />
 179   </arpnewdevicetabs>
 180
 181   <termtabs>
 182      <tab class="termgeneric" name="Generic" />
 183      <tab class="termstartup" name="Startup" />
 184      <tab class="termservice" name="Devices" />
 185      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 186      <!--<tab class="glpiAccount" name="Inventory" /> -->
 187   </termtabs>
 188
 189   <servtabs>
 190      <tab class="servgeneric" name="Generic" />
 191      <tab class="workstartup" name="Startup" />
 192      <tab class="ServerService" name="Services" />
 193      <tab class="faiSummaryTab" name="Deployment summary" />
 194      <tab class="gotoLogView" name="Installation logs" />
 195      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 196      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 197   </servtabs>
 198
 199   <worktabs>
 200      <tab class="workgeneric" name="Generic" />
 201      <tab class="workstartup" name="Startup" />
 202      <tab class="workservice" name="Devices" />
 203      <tab class="printgeneric" name="Printer" />
 204      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 205      <tab class="faiSummaryTab" name="Deployment summary" />
 206      <tab class="gotoLogView" name="Installation logs" />
 207      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 208   </worktabs>
 209
 210   <printtabs>
 211      <tab class="printgeneric" name="Generic" />
 212      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 213   </printtabs>
 214
 215   <componenttabs>
 216      <tab class="componentGeneric" name="Generic" />
 217      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 218   </componenttabs>
 219
 220   <wintabs>
 221      <tab class="wingeneric" name="Generic" />
 222      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 223   </wintabs>
 224
 225   <serverservice>
 226     <tab class="goMailServer" />
 227 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 228     <tab class="servkolab" />
 229 {else}
 230     <!-- <tab class="servkolab" /> -->
 231 {/if}
 232     <tab class="goNtpServer" />
 233     <tab class="servrepository" />
 234     <tab class="goImapServer" />
 235     <tab class="goKrbServer" />
 236     <tab class="goFaxServer" />
 237     <tab class="goFonServer" />
 238     <tab class="goGlpiServer" />
 239     <tab class="goCupsServer" />
 240     <tab class="goKioskService" />
 241     <tab class="goTerminalServer" />
 242     <tab class="goLdapServer" />
 243     <tab class="goShareServer" />
 244     <tab class="gospamserver" />
 245     <tab class="govirusserver" />
 246     <tab class="servdhcp" />
 247     <tab class="servdns" />
 248     <tab class="rSyslogServer" />
 249   </serverservice>
 250
 251   <!-- Department plugin -->
 252   <deptabs>
 253     <tab class="department" name="Generic" />
 254   </deptabs>
 255
 256   <organization_tabs>
 257     <tab class="organization" name="Generic" />
 258   </organization_tabs>
 259
 260   <locality_tabs>
 261     <tab class="locality" name="Generic" />
 262   </locality_tabs>
 263
 264   <country_tabs>
 265     <tab class="country" name="Generic" />
 266   </country_tabs>
 267
 268   <dcobject_tabs>
 269     <tab class="dcObject" name="Generic" />
 270   </dcobject_tabs>
 271
 272   <domain_tabs>
 273     <tab class="domain" name="Generic" />
 274   </domain_tabs>
 275
 276   <!-- Role tabs -->
 277   <roletabs>
 278     <tab class="roleGeneric" name="Generic"/>
 279   </roletabs>
 280
 281   <ogrouptabs>
 282     <tab class="ogroup" name="Generic" />
 283   </ogrouptabs>
 284
 285   <!-- Debian archive management plugin -->
 286   <!--
 287   <dak_tabs>
 288     <tab class="dakrepository" name="Repository" />
 289     <tab class="dakqueue" name="Queue" />
 290     <tab class="dakkeyring" name="Key ring" />
 291   </dak_tabs>
 292   -->
 293
 294   <!-- Connectivity plugins -->
 295   <connectivity>
 296 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 297     <tab class='kolabAccount' />
 298 {else}
 299 <!-- <tab class='kolabAccount' /> -->
 300 {/if}
 301     <tab class="proxyAccount" />
 302     <tab class="pureftpdAccount" />
 303     <tab class="webdavAccount" />
 304     <tab class="phpgwAccount" />
 305     <tab class="intranetAccount" />
 306     <!--
 307     <tab class="opengwAccount"
 308       username="OGo"
 309       password=""
 310       database="OGo"
 311       databaseServer="localhost" />
 312     -->
 313     <tab class="pptpAccount" />
 314     <tab class="phpscheduleitAccount" />
 315     <tab class="oxchangeAccount" />
 316   </connectivity>
 317
 318   <ldiftab>
 319     <tab class="ldifexport" name="Export" />
 320     <tab class="xlsexport" name="Excel Export" />
 321     <tab class="ldifimport" name="Import" />
 322     <tab class="csvimport" name="CSV Import" />
 323   </ldiftab>
 324
 325   <faipartitiontabs>
 326     <tab class="faiPartitionTable" name="Partitions" />
 327   </faipartitiontabs>
 328
 329   <faiscripttabs>
 330     <tab class="faiScript" name="Script" />
 331   </faiscripttabs>
 332
 333   <faihooktabs>
 334     <tab class="faiHook" name="Hooks" />
 335   </faihooktabs>
 336
 337   <faivariabletabs>
 338     <tab class="faiVariable" name="Variables" />
 339   </faivariabletabs>
 340
 341   <faitemplatetabs>
 342     <tab class="faiTemplate" name="Templates" />
 343   </faitemplatetabs>
 344
 345   <faiprofiletabs>
 346     <tab class="faiProfile" name="Profiles" />
 347     <tab class="faiSummaryTab" name="Summary" />
 348   </faiprofiletabs>
 349
 350   <faipackagetabs>
 351     <tab class="faiPackage" name="Packages" />
 352   </faipackagetabs>
 353
 354   <opsitabs>
 355     <tab class="opsiGeneric" name="Opsi" />
 356     <tab class="opsiSoftware" name="Hardware information" />
 357     <tab class="opsiHardware" name="software information" />
 358     <tab class="licenseUsageByHost" name="Usage"/>
 359   </opsitabs>
 360
 361   <opsiprodconfig>
 362     <tab class="opsiProperties" name="Config" />
 363     <tab class="licenseByProduct" name="Usage"/>
 364   </opsiprodconfig>
 365
 366   <!-- rSyslog plugin -->
 367   <rsyslogtabs>
 368       <tab class="rsyslog" name="System logs" />
 369   </rsyslogtabs>
 370
 371   <!-- Main section **********************************************************
 372
 373        The main section defines global settings, which might be overridden by
 374        each location definition inside.
 375
 376        For more information about the configuration parameters, take a look at
 377        the gosa.conf(5) manual page.
 378
 379   -->
 380   <main default="{$cv.location}"
 381 {if $cv.optional.list_summary}
 382         listSummary="true"
 383 {else}
 384         listSummary="false"
 385 {/if}
 386 {if $cv.pwd_rules.pwminlen_active}
 387         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 388 {/if}
 389 {if $cv.pwd_rules.pwdiffer_active}
 390         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 391 {/if}
 392 {if $cv.pwd_rules.externalpwdhook_active}
 393         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 394 {/if}
 395 {if $cv.errorlvl}
 396         displayErrors="true"
 397 {else}
 398         displayErrors="false"
 399 {/if}
 400 {if $cv.enable_schema_check}
 401         schemaCheck="true"
 402 {else}
 403         schemaCheck="false"
 404 {/if}
 405 {if $cv.generic_settings.enableCopyPaste}
 406         copyPaste="true"
 407 {else}
 408         copyPaste="false"
 409 {/if}
 410 {if $cv.optional.forceglobals}
 411         forceGlobals="true"
 412 {else}
 413         forceGlobals="false"
 414 {/if}
 415 {if $cv.optional.forcessl}
 416         forceSSL="true"
 417 {else}
 418         forceSSL="false"
 419 {/if}
 420 {if $cv.optional.ldapstats}
 421         ldapStats="true"
 422 {else}
 423         ldapStats="false"
 424 {/if}
 425 {if $cv.optional.warnssl}
 426         warnSSL="true"
 427 {else}
 428         warnSSL="false"
 429 {/if}
 430 {if $cv.optional.ppd_path_active}
 431         ppdGzip="true"
 432         ppdPath="{$cv.optional.ppd_path}"
 433 {/if}
 434 {if $cv.optional.max_ldap_query_time_active}
 435         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 436 {/if}
 437 {if $cv.optional.noprimarygroup}
 438         primaryGroupFilter="true"
 439 {/if}
 440 {if $cv.optional.mailQueueScriptPath_active}
 441         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 442 {/if}
 443 {if $cv.optional.user_filter_cookie}
 444         storeFilterSettings="true"
 445 {else}
 446         storeFilterSettings="false"
 447 {/if}
 448 {if $cv.compressed}
 449         sendCompressedOutput="true"
 450 {else}
 451         sendCompressedOutput="false"
 452 {/if}
 453 {if $cv.optional.uniq_identifier_active }
 454         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 455 {else}
 456         modificationDetectionAttribute=""
 457 {/if}
 458         language="{$cv.lang_selected}"
 459         theme="{$cv.theme}"
 460         sessionLifetime="{$cv.optional.session_lifetime}"
 461         templateCompileDirectory="{$cv.optional.compile}"
 462         debugLevel="{$cv.optional.debuglevel}"
 463         sambaHashHook='{$cv.samba_settings.smbhash}'
 464     >
 465
 466     <!-- Location definition -->
 467     <location name="{$cv.location}"
 468               passwordDefaultHash="{$cv.encryption}"
 469               accountPrimaryAttribute="{$cv.peopledn}"
 470               userRDN="{$cv.peopleou}"
 471               groupRDN="{$cv.groupou}"
 472               gidNumberBase="{$cv.uidbase}"
 473               uidNumberBase="{$cv.uidbase}"
 474 {if $cv.optional.sudoou_active}
 475               sudoRDN="{$cv.optional.sudoou}"
 476 {/if}
 477 {if $cv.optional.gosaSupportURI_active}
 478               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 479               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 480 {else}
 481               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 482               disabled_gosaSupportTimeout="15"
 483 {/if}
 484 {if $cv.optional.login_attribute}
 485               loginAttribute="{$cv.optional.login_attribute}"
 486 {else}
 487               loginAttribute="uid"
 488 {/if}
 489 {if $cv.timezone}
 490               timezone="{$cv.timezone}"
 491 {/if}
 492 {if $cv.optional.strict_units}
 493               honourUnitTags="true"
 494 {else}
 495               honourUnitTags="false"
 496 {/if}
 497 {if $cv.krbsasl}
 498               useSaslForKerberos="true"
 499 {else}
 500               useSaslForKerberos="false"
 501 {/if}
 502 {if $cv.rfc2307bis}
 503               rfc2307bis="true"
 504 {else}
 505               rfc2307bis="false"
 506 {/if}
 507 {if $cv.include_personal_title}
 508               personalTitleInDN="true"
 509 {else}
 510               personalTitleInDN="false"
 511 {/if}
 512 {if $cv.base_hook_active}
 513               nextIdHook="{$cv.base_hook}"
 514 {/if}
 515 {if $cv.generic_settings.wws_ou_active}
 516               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 517 {/if}
 518 {if $cv.id_settings.idgen_active}
 519               idGenerator="{$cv.id_settings.idgen}"
 520 {/if}
 521 {if $cv.strict}
 522               strictNamingRules="true"
 523 {else}
 524               strictNamingRules="false"
 525 {/if}
 526 {if $cv.id_settings.minid_active}
 527               minId="{$cv.id_settings.minid}"
 528 {/if}
 529               mailAttribute="{$cv.mail_attrib}"
 530               gosaSharedPrefix=""
 531               mailUserCreation=""
 532               mailFolderCreation=""
 533               imapTimeout="10"
 534 {if $cv.mail != "disabled"}
 535               mailMethod="{$cv.mail}"
 536 {if $cv.cyrusunixstyle}
 537               cyrusUseSlashes="true"
 538 {else}
 539               cyrusUseSlashes="false"
 540 {/if}
 541 {if $cv.mail_settings.vacationdir_active}
 542               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 543 {/if}
 544 {/if}
 545 {if $cv.tls}
 546               ldapTLS="true"
 547 {/if}
 548 {if $cv.governmentmode}
 549               honourIvbbAttributes="true"
 550 {else}
 551               honourIvbbAttributes="false"
 552 {/if}
 553 {if $cv.sambaidmapping}
 554               sambaIdMapping="true"
 555 {/if}
 556 {if $cv.account_expiration}
 557               handleExpiredAccounts="true"
 558 {/if}
 559 {if $cv.samba_settings.samba_sid_active}
 560               sambaSID="{$cv.samba_settings.samba_sid}"
 561 {/if}
 562 {if $cv.samba_settings.samba_rid_active}
 563               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 564 {/if}
 565 {if $cv.generic_settings.snapshot_active}
 566               enableSnapshots="true"
 567               snapshotBase="{$cv.generic_settings.snapshot_base}"
 568               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 569               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 570               snapshotURI="{$cv.generic_settings.snapshot_server}"
 571 {else}
 572               enableSnapshots="false"
 573               snapshotBase="dc=localhost,dc=de"
 574               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 575               snapshotAdminPassword="secret"
 576               snapshotURI="ldap://localhost:389"
 577 {/if}
 578               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 579
 580               <referral URI="{$cv.connection}/{$cv.base}"
 581                         adminDn="{$cv.admin}"
 582                         adminPassword="{$cv.password}" />
 583
 584     </location>
 585   </main>
 586 </conf>