gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75       <plugin acl="rsyslog"  class="rsyslog" />
  76     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  77       <plugin acl="addressbook" class="addressbook" />
  78       <plugin acl="mailqueue" class="mailqueue" />
  79       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  80       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  81       <plugin acl="logview"  class="logview" />
  82       <plugin acl="gotomasses" class="gotomasses" />
  83       <plugin acl="ldapmanager" class="ldif" />
  84     </section>
  85   </menu>
  86
  87
  88
  89   <!-- Tab definitions *******************************************************
  90
  91        Tab definitions define the sub plugins which get included for certain
  92        tabbed dialogs. If you change something here, never (!) remove the
  93        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  94        need a primary plugin.
  95
  96        "*tab" should be looked for by a defined plugin. This one will take
  97        every "tab" defined "class" and will show it inside of a tabbed dialog
  98        with the header defined in "name".
  99    -->
 100
 101   <!-- ACL dialog -->
 102   <acltab>
 103     <tab class="acl" name="ACL" />
 104   </acltab>
 105
 106   <aclroletab>
 107     <tab class="aclRole" name="ACL Role" />
 108   </aclroletab>
 109
 110   <!-- User dialog -->
 111   <usertabs>
 112      <tab class="user" name="Generic" />
 113      <tab class="posixAccount" name="Unix" />
 114      <tab class="environment" name="Environment" />
 115      <tab class="mailAccount" name="Mail" />
 116      <tab class="sambaAccount" name="Samba" />
 117      <tab class="netatalk" name="Netatalk" />
 118      <tab class="connectivity" name="Connectivity" />
 119      <tab class="gofaxAccount" name="Fax" />
 120      <tab class="phoneAccount" name="Phone" />
 121      <tab class="scalixAccount" name="Scalix" />
 122      <tab class="nagiosAccount" name="Nagios" />
 123    </usertabs>
 124
 125   <opsiLicenseTabs>
 126     <tab class="licensePoolGeneric" name="Generic"/>
 127     <tab class="licenseUsage" name="Usage"/>
 128   </opsiLicenseTabs>
 129
 130   <!-- Group dialog -->
 131   <grouptabs>
 132     <tab class="group" name="Generic" />
 133     <tab class="environment" name="Environment" />
 134     <tab class="appgroup" name="Applications" />
 135     <tab class="mailgroup" name="Mail" />
 136   </grouptabs>
 137
 138   <!-- Sudo dialog -->
 139   <sudotabs>
 140     <tab class="sudo" name="Generic" />
 141     <tab class="sudoOption" name="Options" />
 142   </sudotabs>
 143
 144   <!-- GOfax plugins -->
 145   <faxblocktabs>
 146     <tab class="blocklistGeneric" name="Generic" />
 147   </faxblocktabs>
 148
 149   <!-- GOfon plugins -->
 150   <conferencetabs>
 151     <tab class="conference" name="Generic" />
 152   </conferencetabs>
 153
 154   <macrotabs>
 155     <tab class="macro" name="Generic" />
 156     <tab class="macroParameter" name="Parameter" />
 157   </macrotabs>
 158
 159   <phonetabs>
 160     <tab class="phoneGeneric" name="Generic" />
 161     <!-- <tab class="glpiAccount" name="Inventory" /> -->
 162   </phonetabs>
 163
 164   <!-- GOto plugins -->
 165   <appstabs>
 166     <tab class="application" name="Generic" />
 167     <tab class="applicationParameters" name="Options" />
 168   </appstabs>
 169
 170   <mimetabs>
 171     <tab class="mimetype" name="Generic" />
 172   </mimetabs>
 173
 174   <devicetabs>
 175     <tab class="deviceGeneric" name="Generic" />
 176   </devicetabs>
 177
 178   <arpnewdevicetabs>
 179     <tab class="ArpNewDevice" name="Generic" />
 180   </arpnewdevicetabs>
 181
 182   <termtabs>
 183      <tab class="termgeneric" name="Generic" />
 184      <tab class="termstartup" name="Startup" />
 185      <tab class="termservice" name="Devices" />
 186      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 187      <!--<tab class="glpiAccount" name="Inventory" /> -->
 188   </termtabs>
 189
 190   <servtabs>
 191      <tab class="servgeneric" name="Generic" />
 192      <tab class="workstartup" name="Startup" />
 193      <tab class="ServerService" name="Services" />
 194      <tab class="faiSummaryTab" name="Deployment summary" />
 195      <tab class="gotoLogView" name="Installation logs" />
 196      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 197      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 198   </servtabs>
 199
 200   <worktabs>
 201      <tab class="workgeneric" name="Generic" />
 202      <tab class="workstartup" name="Startup" />
 203      <tab class="workservice" name="Devices" />
 204      <tab class="printgeneric" name="Printer" />
 205      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 206      <tab class="faiSummaryTab" name="Deployment summary" />
 207      <tab class="gotoLogView" name="Installation logs" />
 208      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 209   </worktabs>
 210
 211   <printtabs>
 212      <tab class="printgeneric" name="Generic" />
 213      <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
 214   </printtabs>
 215
 216   <componenttabs>
 217      <tab class="componentGeneric" name="Generic" />
 218      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 219   </componenttabs>
 220
 221   <wintabs>
 222      <tab class="wingeneric" name="Generic" />
 223      <!-- <tab class="glpiAccount" name="Inventory" /> -->
 224   </wintabs>
 225
 226   <serverservice>
 227     <tab class="goMailServer" />
 228 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 229     <tab class="servkolab" />
 230 {else}
 231     <!-- <tab class="servkolab" /> -->
 232 {/if}
 233     <tab class="goNtpServer" />
 234     <tab class="servrepository" />
 235     <tab class="goImapServer" />
 236     <tab class="goKrbServer" />
 237     <tab class="goFaxServer" />
 238     <tab class="goFonServer" />
 239     <tab class="goLogDBServer" />
 240     <tab class="goGlpiServer" />
 241     <tab class="goCupsServer" />
 242     <tab class="goKioskService" />
 243     <tab class="goSyslogServer" />
 244     <tab class="goTerminalServer" />
 245     <tab class="goLdapServer" />
 246     <tab class="goShareServer" />
 247     <tab class="gospamserver" />
 248     <tab class="govirusserver" />
 249     <tab class="servdhcp" />
 250     <tab class="servdns" />
 251     <tab class="gosaLogServer" />
 252     <tab class="rSyslogServer" />
 253   </serverservice>
 254
 255   <!-- Department plugin -->
 256   <deptabs>
 257     <tab class="department" name="Generic" />
 258   </deptabs>
 259
 260   <organization_tabs>
 261     <tab class="organization" name="Generic" />
 262   </organization_tabs>
 263
 264   <locality_tabs>
 265     <tab class="locality" name="Generic" />
 266   </locality_tabs>
 267
 268   <country_tabs>
 269     <tab class="country" name="Generic" />
 270   </country_tabs>
 271
 272   <dcobject_tabs>
 273     <tab class="dcObject" name="Generic" />
 274   </dcobject_tabs>
 275
 276   <domain_tabs>
 277     <tab class="domain" name="Generic" />
 278   </domain_tabs>
 279
 280   <!-- Role tabs -->
 281   <roletabs>
 282     <tab class="roleGeneric" name="Generic"/>
 283   </roletabs>
 284
 285   <ogrouptabs>
 286     <tab class="ogroup" name="Generic" />
 287   </ogrouptabs>
 288
 289   <!-- Debian archive management plugin -->
 290   <!--
 291   <dak_tabs>
 292     <tab class="dakrepository" name="Repository" />
 293     <tab class="dakqueue" name="Queue" />
 294     <tab class="dakkeyring" name="Key ring" />
 295   </dak_tabs>
 296   -->
 297
 298   <!-- Connectivity plugins -->
 299   <connectivity>
 300 {if $cv.mail == "kolab" || $cv.mail == "kolab22"}
 301     <tab class='kolabAccount' />
 302 {else}
 303 <!-- <tab class='kolabAccount' /> -->
 304 {/if}
 305     <tab class="proxyAccount" />
 306     <tab class="pureftpdAccount" />
 307     <tab class="webdavAccount" />
 308     <tab class="phpgwAccount" />
 309     <tab class="intranetAccount" />
 310     <!--
 311     <tab class="opengwAccount"
 312       username="OGo"
 313       password=""
 314       database="OGo"
 315       databaseServer="localhost" />
 316     -->
 317     <tab class="pptpAccount" />
 318     <tab class="phpscheduleitAccount" />
 319     <tab class="oxchangeAccount" />
 320   </connectivity>
 321
 322   <ldiftab>
 323     <tab class="ldifexport" name="Export" />
 324     <tab class="xlsexport" name="Excel Export" />
 325     <tab class="ldifimport" name="Import" />
 326     <tab class="csvimport" name="CSV Import" />
 327   </ldiftab>
 328
 329   <faipartitiontabs>
 330     <tab class="faiPartitionTable" name="Partitions" />
 331   </faipartitiontabs>
 332
 333   <faiscripttabs>
 334     <tab class="faiScript" name="Script" />
 335   </faiscripttabs>
 336
 337   <faihooktabs>
 338     <tab class="faiHook" name="Hooks" />
 339   </faihooktabs>
 340
 341   <faivariabletabs>
 342     <tab class="faiVariable" name="Variables" />
 343   </faivariabletabs>
 344
 345   <faitemplatetabs>
 346     <tab class="faiTemplate" name="Templates" />
 347   </faitemplatetabs>
 348
 349   <faiprofiletabs>
 350     <tab class="faiProfile" name="Profiles" />
 351     <tab class="faiSummaryTab" name="Summary" />
 352   </faiprofiletabs>
 353
 354   <faipackagetabs>
 355     <tab class="faiPackage" name="Packages" />
 356   </faipackagetabs>
 357
 358   <opsitabs>
 359     <tab class="opsiGeneric" name="Opsi" />
 360     <tab class="opsiSoftware" name="Hardware information" />
 361     <tab class="opsiHardware" name="software information" />
 362     <tab class="licenseUsageByHost" name="Usage"/>
 363   </opsitabs>
 364
 365   <opsiprodconfig>
 366     <tab class="opsiProperties" name="Config" />
 367     <tab class="licenseByProduct" name="Usage"/>
 368   </opsiprodconfig>
 369
 370   <!-- Logging plugin -->
 371   <logtabs>
 372       <tab class="logview" name="System logs" />
 373       <tab class="gosa_logview" name="GOsa logs" />
 374   </logtabs>
 375
 376   <!-- rSyslog plugin -->
 377   <rsyslogtabs>
 378       <tab class="rsyslog" name="System logs" />
 379   </rsyslogtabs>
 380
 381   <!-- Main section **********************************************************
 382
 383        The main section defines global settings, which might be overridden by
 384        each location definition inside.
 385
 386        For more information about the configuration parameters, take a look at
 387        the gosa.conf(5) manual page.
 388
 389   -->
 390   <main default="{$cv.location}"
 391 {if $cv.optional.list_summary}
 392         listSummary="true"
 393 {else}
 394         listSummary="false"
 395 {/if}
 396 {if $cv.pwd_rules.pwminlen_active}
 397         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 398 {/if}
 399 {if $cv.pwd_rules.pwdiffer_active}
 400         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 401 {/if}
 402 {if $cv.pwd_rules.externalpwdhook_active}
 403         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 404 {/if}
 405 {if $cv.errorlvl}
 406         displayErrors="true"
 407 {else}
 408         displayErrors="false"
 409 {/if}
 410 {if $cv.enable_schema_check}
 411         schemaCheck="true"
 412 {else}
 413         schemaCheck="false"
 414 {/if}
 415 {if $cv.generic_settings.enableCopyPaste}
 416         copyPaste="true"
 417 {else}
 418         copyPaste="false"
 419 {/if}
 420 {if $cv.optional.forceglobals}
 421         forceGlobals="true"
 422 {else}
 423         forceGlobals="false"
 424 {/if}
 425 {if $cv.optional.forcessl}
 426         forceSSL="true"
 427 {else}
 428         forceSSL="false"
 429 {/if}
 430 {if $cv.optional.ldapstats}
 431         ldapStats="true"
 432 {else}
 433         ldapStats="false"
 434 {/if}
 435 {if $cv.optional.warnssl}
 436         warnSSL="true"
 437 {else}
 438         warnSSL="false"
 439 {/if}
 440 {if $cv.optional.ppd_path_active}
 441         ppdGzip="true"
 442         ppdPath="{$cv.optional.ppd_path}"
 443 {/if}
 444 {if $cv.optional.max_ldap_query_time_active}
 445         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 446 {/if}
 447 {if $cv.optional.noprimarygroup}
 448         primaryGroupFilter="true"
 449 {/if}
 450 {if $cv.optional.mailQueueScriptPath_active}
 451         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 452 {/if}
 453 {if $cv.optional.user_filter_cookie}
 454         storeFilterSettings="true"
 455 {else}
 456         storeFilterSettings="false"
 457 {/if}
 458 {if $cv.compressed}
 459         sendCompressedOutput="true"
 460 {else}
 461         sendCompressedOutput="false"
 462 {/if}
 463 {if $cv.optional.uniq_identifier_active }
 464         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 465 {else}
 466         modificationDetectionAttribute=""
 467 {/if}
 468         language="{$cv.lang_selected}"
 469         theme="{$cv.theme}"
 470         sessionLifetime="{$cv.optional.session_lifetime}"
 471         templateCompileDirectory="{$cv.optional.compile}"
 472         debugLevel="{$cv.optional.debuglevel}"
 473         sambaHashHook='{$cv.samba_settings.smbhash}'
 474     >
 475
 476     <!-- Location definition -->
 477     <location name="{$cv.location}"
 478               passwordDefaultHash="{$cv.encryption}"
 479               accountPrimaryAttribute="{$cv.peopledn}"
 480               userRDN="{$cv.peopleou}"
 481               groupRDN="{$cv.groupou}"
 482               gidNumberBase="{$cv.uidbase}"
 483               uidNumberBase="{$cv.uidbase}"
 484               logging="{$cv.generic_settings.logging}"
 485 {if $cv.optional.sudoou_active}
 486               sudoRDN="{$cv.optional.sudoou}"
 487 {/if}
 488 {if $cv.optional.gosaSupportURI_active}
 489               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 490               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 491 {else}
 492               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 493               disabled_gosaSupportTimeout="15"
 494 {/if}
 495 {if $cv.optional.login_attribute}
 496               loginAttribute="{$cv.optional.login_attribute}"
 497 {else}
 498               loginAttribute="uid"
 499 {/if}
 500 {if $cv.timezone}
 501               timezone="{$cv.timezone}"
 502 {/if}
 503 {if $cv.optional.strict_units}
 504               honourUnitTags="true"
 505 {else}
 506               honourUnitTags="false"
 507 {/if}
 508 {if $cv.krbsasl}
 509               useSaslForKerberos="true"
 510 {else}
 511               useSaslForKerberos="false"
 512 {/if}
 513 {if $cv.rfc2307bis}
 514               rfc2307bis="true"
 515 {else}
 516               rfc2307bis="false"
 517 {/if}
 518 {if $cv.include_personal_title}
 519               personalTitleInDN="true"
 520 {else}
 521               personalTitleInDN="false"
 522 {/if}
 523 {if $cv.base_hook_active}
 524               nextIdHook="{$cv.base_hook}"
 525 {/if}
 526 {if $cv.generic_settings.wws_ou_active}
 527               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 528 {/if}
 529 {if $cv.id_settings.idgen_active}
 530               idGenerator="{$cv.id_settings.idgen}"
 531 {/if}
 532 {if $cv.strict}
 533               strictNamingRules="true"
 534 {else}
 535               strictNamingRules="false"
 536 {/if}
 537 {if $cv.id_settings.minid_active}
 538               minId="{$cv.id_settings.minid}"
 539 {/if}
 540               mailAttribute="{$cv.mail_attrib}"
 541               gosaSharedPrefix=""
 542               mailUserCreation=""
 543               mailFolderCreation=""
 544               imapTimeout="10"
 545 {if $cv.mail != "disabled"}
 546               mailMethod="{$cv.mail}"
 547 {if $cv.cyrusunixstyle}
 548               cyrusUseSlashes="true"
 549 {else}
 550               cyrusUseSlashes="false"
 551 {/if}
 552 {if $cv.mail_settings.vacationdir_active}
 553               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 554 {/if}
 555 {/if}
 556 {if $cv.tls}
 557               ldapTLS="true"
 558 {/if}
 559 {if $cv.governmentmode}
 560               honourIvbbAttributes="true"
 561 {else}
 562               honourIvbbAttributes="false"
 563 {/if}
 564 {if $cv.sambaidmapping}
 565               sambaIdMapping="true"
 566 {/if}
 567 {if $cv.account_expiration}
 568               handleExpiredAccounts="true"
 569 {/if}
 570 {if $cv.samba_settings.samba_sid_active}
 571               sambaSID="{$cv.samba_settings.samba_sid}"
 572 {/if}
 573 {if $cv.samba_settings.samba_rid_active}
 574               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 575 {/if}
 576 {if $cv.generic_settings.snapshot_active}
 577               enableSnapshots="true"
 578               snapshotBase="{$cv.generic_settings.snapshot_base}"
 579               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 580               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 581               snapshotURI="{$cv.generic_settings.snapshot_server}"
 582 {else}
 583               enableSnapshots="false"
 584               snapshotBase="dc=localhost,dc=de"
 585               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 586               snapshotAdminPassword="secret"
 587               snapshotURI="ldap://localhost:389"
 588 {/if}
 589               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 590
 591               <referral URI="{$cv.connection}/{$cv.base}"
 592                         adminDn="{$cv.admin}"
 593                         adminPassword="{$cv.password}" />
 594
 595     </location>
 596   </main>
 597 </conf>