gosa-core/contrib/gosa.conf

   1 {literal}<?xml version="1.0"?>{/literal}
   2 <conf configVersion="{$config_checksum}" >
   3
   4   <!-- GOsa menu definition **************************************************
   5
   6        This tag defines the side and icon menu inside the
   7        interface. Defining an entry here is no guarantie to get it shown,
   8        though. Only entries with matching ACL's get shown.
   9
  10        There are two types of entries inside of the menu: section and plugin
  11
  12        Defining a section:
  13
  14        Open a <section> tag including a "name" attribute. This will show up in
  15        the menu as a new section later on. Own entries are not handled via I18N
  16        by default. Close the </section> tag after your plugin definitions.
  17
  18        Defining a plugin:
  19
  20        Open a <plugin> tag including a "class" attribute. The "class" should be
  21        present inside your GOsa setup - the entry will be ignored if it is not.
  22
  23        Plugins should have an "acl" entry, that allows GOsa to decide wether
  24        a user is allowed to see a plugin or not. The "acl" string matches with
  25        an ACL definition done inside of GOsa -> ACLs.
  26
  27        You can override an icon by specifying the "icon" attribute.
  28
  29        For more information about possible configuration parameters, please take
  30        a look at the gosa.conf(5) manual page.
  31    -->
  32   <menu>
  33
  34     <!-- Section to enable quick self service shortcuts for the logged in user -->
  35     <section name="My account">
  36       <plugin acl="users/user:self" class="user" />
  37       <plugin acl="users/posixAccount:self"  class="posixAccount" />
  38       <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
  39       <plugin acl="users/mailAccount:self" class="mailAccount" />
  40       <plugin acl="users/sambaAccount:self" class="sambaAccount" />
  41       <plugin acl="users/netatalk:self" class="netatalk" />
  42       <plugin acl="users/connectivity:self" class="connectivity" />
  43       <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
  44       <plugin acl="users/phoneAccount:self" class="phoneAccount" />
  45       <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
  46       <plugin acl="users/scalixAccount:self" class="scalixAccount" />
  47       <plugin acl="users/password:self" class="password" />
  48     </section>
  49
  50     <!-- Section to enable administrative services -->
  51     <section name="Administration">
  52       <plugin acl="department" class="departmentManagement" />
  53       <plugin acl="users" class="userManagement" />
  54       <plugin acl="groups" class="groupManagement" />
  55       <plugin acl="roles" class="roleManagement"/>
  56       <plugin acl="ogroups" class="ogroupManagement" />
  57       <plugin acl="application" class="applicationManagement" />
  58       <plugin acl="mimetypes" class="mimetypeManagement" />
  59       <plugin acl="devices" class="deviceManagement" />
  60       <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
  61       <!-- Use 'lockDn'      for dn
  62                'lockName'    for name
  63                'lockType'    for branch/freeze -->
  64       <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
  65       <plugin acl="opsi" class="opsiLicenses"/>
  66       <plugin acl="gofaxlist" class="blocklist" />
  67       <plugin acl="gofonmacro" class="goFonMacro" />
  68       <plugin acl="gofonconference" class="phoneConferenceManagment" />
  69       <plugin acl="acl"  class="aclManagement" />
  70       <plugin acl="sudo" class="sudoManagement" />
  71     </section>
  72
  73     <!-- Section to enable addon plugins -->
  74     <section name="Addons">
  75       <plugin acl="server/rSyslogServer" class="rsyslog" />
  76     <!--  <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
  77       <plugin acl="mailqueue" class="mailqueue" />
  78       <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
  79       <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
  80       <plugin acl="gotomasses" class="gotomasses" />
  81       <plugin acl="ldapmanager" class="ldif" />
  82     </section>
  83   </menu>
  84
  85
  86
  87   <!-- Tab definitions *******************************************************
  88
  89        Tab definitions define the sub plugins which get included for certain
  90        tabbed dialogs. If you change something here, never (!) remove the
  91        primary (the first) "tab" tag which is defined. Most tabbed dialogs
  92        need a primary plugin.
  93
  94        "*tab" should be looked for by a defined plugin. This one will take
  95        every "tab" defined "class" and will show it inside of a tabbed dialog
  96        with the header defined in "name".
  97    -->
  98
  99   <!-- ACL dialog -->
 100   <acltab>
 101     <tab class="acl" name="ACL" />
 102   </acltab>
 103
 104   <aclroletab>
 105     <tab class="aclRole" name="ACL Role" />
 106   </aclroletab>
 107
 108   <!-- User dialog -->
 109   <usertabs>
 110      <tab class="user" name="Generic" />
 111      <tab class="posixAccount" name="Unix" />
 112      <tab class="environment" name="Environment" />
 113      <tab class="mailAccount" name="Mail" />
 114      <tab class="sambaAccount" name="Samba" />
 115      <tab class="netatalk" name="Netatalk" />
 116      <tab class="connectivity" name="Connectivity" />
 117      <tab class="gofaxAccount" name="Fax" />
 118      <tab class="phoneAccount" name="Phone" />
 119      <tab class="scalixAccount" name="Scalix" />
 120      <tab class="nagiosAccount" name="Nagios" />
 121    </usertabs>
 122
 123   <opsiLicenseTabs>
 124     <tab class="licensePoolGeneric" name="Generic"/>
 125     <tab class="licenseUsage" name="Usage"/>
 126   </opsiLicenseTabs>
 127
 128   <!-- Group dialog -->
 129   <grouptabs>
 130     <tab class="group" name="Generic" />
 131     <tab class="environment" name="Environment" />
 132     <tab class="appgroup" name="Applications" />
 133     <tab class="mailgroup" name="Mail" />
 134   </grouptabs>
 135
 136   <!-- Sudo dialog -->
 137   <sudotabs>
 138     <tab class="sudo" name="Generic" />
 139     <tab class="sudoOption" name="Options" />
 140   </sudotabs>
 141
 142   <!-- GOfax plugins -->
 143   <faxblocktabs>
 144     <tab class="blocklistGeneric" name="Generic" />
 145   </faxblocktabs>
 146
 147   <!-- GOfon plugins -->
 148   <conferencetabs>
 149     <tab class="conference" name="Generic" />
 150   </conferencetabs>
 151
 152   <macrotabs>
 153     <tab class="macro" name="Generic" />
 154     <tab class="macroParameter" name="Parameter" />
 155   </macrotabs>
 156
 157   <phonetabs>
 158     <tab class="phoneGeneric" name="Generic" />
 159   </phonetabs>
 160
 161   <!-- GOto plugins -->
 162   <appstabs>
 163     <tab class="application" name="Generic" />
 164     <tab class="applicationParameters" name="Options" />
 165   </appstabs>
 166
 167   <mimetabs>
 168     <tab class="mimetype" name="Generic" />
 169   </mimetabs>
 170
 171   <devicetabs>
 172     <tab class="deviceGeneric" name="Generic" />
 173   </devicetabs>
 174
 175   <arpnewdevicetabs>
 176     <tab class="ArpNewDevice" name="Generic" />
 177   </arpnewdevicetabs>
 178
 179   <termtabs>
 180      <tab class="termgeneric" name="Generic" />
 181      <tab class="termstartup" name="Startup" />
 182      <tab class="termservice" name="Devices" />
 183      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 184   </termtabs>
 185
 186   <servtabs>
 187      <tab class="servgeneric" name="Generic" />
 188      <tab class="workstartup" name="Startup" />
 189      <tab class="ServerService" name="Services" />
 190      <tab class="faiSummaryTab" name="Deployment summary" />
 191      <tab class="gotoLogView" name="Installation logs" />
 192      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 193   </servtabs>
 194
 195   <worktabs>
 196      <tab class="workgeneric" name="Generic" />
 197      <tab class="workstartup" name="Startup" />
 198      <tab class="workservice" name="Devices" />
 199      <tab class="printgeneric" name="Printer" />
 200      <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
 201      <tab class="faiSummaryTab" name="Deployment summary" />
 202      <tab class="gotoLogView" name="Installation logs" />
 203   </worktabs>
 204
 205   <printtabs>
 206      <tab class="printgeneric" name="Generic" />
 207   </printtabs>
 208
 209   <componenttabs>
 210      <tab class="componentGeneric" name="Generic" />
 211   </componenttabs>
 212
 213   <wintabs>
 214      <tab class="wingeneric" name="Generic" />
 215   </wintabs>
 216
 217   <serverservice>
 218     <tab class="goMailServer" />
 219 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 220     <tab class="servkolab" />
 221 {else}
 222     <!-- <tab class="servkolab" /> -->
 223 {/if}
 224     <tab class="goNtpServer" />
 225     <tab class="servrepository" />
 226     <tab class="goImapServer" />
 227     <tab class="goKrbServer" />
 228     <tab class="goFaxServer" />
 229     <tab class="goFonServer" />
 230     <tab class="goCupsServer" />
 231     <tab class="goKioskService" />
 232     <tab class="goTerminalServer" />
 233     <tab class="goLdapServer" />
 234     <tab class="goShareServer" />
 235     <tab class="gospamserver" />
 236     <tab class="govirusserver" />
 237     <tab class="servdhcp" />
 238     <tab class="servdns" />
 239     <tab class="rSyslogServer" />
 240   </serverservice>
 241
 242   <!-- Department plugin -->
 243   <deptabs>
 244     <tab class="department" name="Generic" />
 245   </deptabs>
 246
 247   <organization_tabs>
 248     <tab class="organization" name="Generic" />
 249   </organization_tabs>
 250
 251   <locality_tabs>
 252     <tab class="locality" name="Generic" />
 253   </locality_tabs>
 254
 255   <country_tabs>
 256     <tab class="country" name="Generic" />
 257   </country_tabs>
 258
 259   <dcobject_tabs>
 260     <tab class="dcObject" name="Generic" />
 261   </dcobject_tabs>
 262
 263   <domain_tabs>
 264     <tab class="domain" name="Generic" />
 265   </domain_tabs>
 266
 267   <!-- Role tabs -->
 268   <roletabs>
 269     <tab class="roleGeneric" name="Generic"/>
 270   </roletabs>
 271
 272   <ogrouptabs>
 273     <tab class="ogroup" name="Generic" />
 274   </ogrouptabs>
 275
 276   <!-- Debian archive management plugin -->
 277   <!--
 278   <dak_tabs>
 279     <tab class="dakrepository" name="Repository" />
 280     <tab class="dakqueue" name="Queue" />
 281     <tab class="dakkeyring" name="Key ring" />
 282   </dak_tabs>
 283   -->
 284
 285   <!-- Connectivity plugins -->
 286   <connectivity>
 287 {if $cv.mail == "Kolab" || $cv.mail == "Kolab22"}
 288     <tab class='kolabAccount' />
 289 {else}
 290 <!-- <tab class='kolabAccount' /> -->
 291 {/if}
 292     <tab class="proxyAccount" />
 293     <tab class="pureftpdAccount" />
 294     <tab class="webdavAccount" />
 295     <tab class="phpgwAccount" />
 296     <tab class="intranetAccount" />
 297     <!--
 298     <tab class="opengwAccount"
 299       username="OGo"
 300       password=""
 301       database="OGo"
 302       databaseServer="localhost" />
 303     -->
 304     <tab class="pptpAccount" />
 305     <tab class="phpscheduleitAccount" />
 306     <tab class="oxchangeAccount" />
 307   </connectivity>
 308
 309   <ldiftab>
 310     <tab class="ldifexport" name="Export" />
 311     <tab class="xlsexport" name="Excel Export" />
 312 <!--    <tab class="ldifimport" name="Import" /> -->
 313 <!--    <tab class="csvimport" name="CSV Import" /> -->
 314   </ldiftab>
 315
 316   <faipartitiontabs>
 317     <tab class="faiPartitionTable" name="Partitions" />
 318   </faipartitiontabs>
 319
 320   <faiscripttabs>
 321     <tab class="faiScript" name="Script" />
 322   </faiscripttabs>
 323
 324   <faihooktabs>
 325     <tab class="faiHook" name="Hooks" />
 326   </faihooktabs>
 327
 328   <faivariabletabs>
 329     <tab class="faiVariable" name="Variables" />
 330   </faivariabletabs>
 331
 332   <faitemplatetabs>
 333     <tab class="faiTemplate" name="Templates" />
 334   </faitemplatetabs>
 335
 336   <faiprofiletabs>
 337     <tab class="faiProfile" name="Profiles" />
 338     <tab class="faiSummaryTab" name="Summary" />
 339   </faiprofiletabs>
 340
 341   <faipackagetabs>
 342     <tab class="faiPackage" name="Packages" />
 343   </faipackagetabs>
 344
 345   <opsitabs>
 346     <tab class="opsiGeneric" name="Opsi" />
 347     <tab class="opsiSoftware" name="Hardware information" />
 348     <tab class="opsiHardware" name="software information" />
 349     <tab class="licenseUsageByHost" name="Usage"/>
 350   </opsitabs>
 351
 352   <opsiprodconfig>
 353     <tab class="opsiProperties" name="Config" />
 354     <tab class="licenseByProduct" name="Usage"/>
 355   </opsiprodconfig>
 356
 357   <!-- rSyslog plugin -->
 358   <rsyslogtabs>
 359       <tab class="rsyslog" name="System logs" />
 360   </rsyslogtabs>
 361
 362   <!-- Main section **********************************************************
 363
 364        The main section defines global settings, which might be overridden by
 365        each location definition inside.
 366
 367        For more information about the configuration parameters, take a look at
 368        the gosa.conf(5) manual page.
 369
 370   -->
 371   <main default="{$cv.location}"
 372 {if $cv.generic_settings.logging}
 373         logging="true"
 374 {else}
 375         logging="false"
 376 {/if}
 377 {if $cv.optional.list_summary}
 378         listSummary="true"
 379 {else}
 380         listSummary="false"
 381 {/if}
 382 {if $cv.pwd_rules.pwminlen_active}
 383         passwordMinLength="{$cv.pwd_rules.pwminlen}"
 384 {/if}
 385 {if $cv.pwd_rules.pwdiffer_active}
 386         passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
 387 {/if}
 388 {if $cv.pwd_rules.externalpwdhook_active}
 389         passwordHook="{$cv.pwd_rules.externalpwdhook}"
 390 {/if}
 391 {if $cv.errorlvl}
 392         displayErrors="true"
 393 {else}
 394         displayErrors="false"
 395 {/if}
 396 {if $cv.enable_schema_check}
 397         schemaCheck="true"
 398 {else}
 399         schemaCheck="false"
 400 {/if}
 401 {if $cv.generic_settings.enableCopyPaste}
 402         copyPaste="true"
 403 {else}
 404         copyPaste="false"
 405 {/if}
 406 {if $cv.optional.forceglobals}
 407         forceGlobals="true"
 408 {else}
 409         forceGlobals="false"
 410 {/if}
 411 {if $cv.optional.forcessl}
 412         forceSSL="true"
 413 {else}
 414         forceSSL="false"
 415 {/if}
 416 {if $cv.optional.ldapstats}
 417         ldapStats="true"
 418 {else}
 419         ldapStats="false"
 420 {/if}
 421 {if $cv.optional.warnssl}
 422         warnSSL="true"
 423 {else}
 424         warnSSL="false"
 425 {/if}
 426 {if $cv.optional.ppd_path_active}
 427         ppdGzip="true"
 428         ppdPath="{$cv.optional.ppd_path}"
 429 {/if}
 430 {if $cv.optional.max_ldap_query_time_active}
 431         ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
 432 {/if}
 433 {if $cv.optional.noprimarygroup}
 434         primaryGroupFilter="true"
 435 {/if}
 436 {if $cv.optional.mailQueueScriptPath_active}
 437         mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
 438 {/if}
 439 {if $cv.optional.user_filter_cookie}
 440         storeFilterSettings="true"
 441 {else}
 442         storeFilterSettings="false"
 443 {/if}
 444 {if $cv.compressed}
 445         sendCompressedOutput="true"
 446 {else}
 447         sendCompressedOutput="false"
 448 {/if}
 449 {if $cv.optional.uniq_identifier_active}
 450         modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
 451 {else}
 452         modificationDetectionAttribute=""
 453 {/if}
 454         language="{$cv.lang_selected}"
 455         theme="{$cv.theme}"
 456         sessionLifetime="{$cv.optional.session_lifetime}"
 457         templateCompileDirectory="{$cv.optional.compile}"
 458         debugLevel="{$cv.optional.debuglevel}"
 459         sambaHashHook='{$cv.samba_settings.smbhash}'
 460     >
 461
 462     <!-- Location definition -->
 463     <location name="{$cv.location}"
 464               passwordDefaultHash="{$cv.encryption}"
 465               accountPrimaryAttribute="{$cv.peopledn}"
 466               userRDN="{$cv.peopleou}"
 467               groupRDN="{$cv.groupou}"
 468               gidNumberBase="{$cv.uidbase}"
 469               uidNumberBase="{$cv.uidbase}"
 470 {if $cv.optional.sudoou_active}
 471               sudoRDN="{$cv.optional.sudoou}"
 472 {/if}
 473 {if $cv.optional.gosaSupportURI_active}
 474               gosaSupportURI="{$cv.optional.gosaSupportURI}"
 475               gosaSupportTimeout="{$cv.optional.gosaSupportTimeout}"
 476 {else}
 477               disabled_gosaSupportURI="gosa-si-secret@server:20081"
 478               disabled_gosaSupportTimeout="15"
 479 {/if}
 480 {if $cv.optional.login_attribute}
 481               loginAttribute="{$cv.optional.login_attribute}"
 482 {else}
 483               loginAttribute="uid"
 484 {/if}
 485 {if $cv.timezone}
 486               timezone="{$cv.timezone}"
 487 {/if}
 488 {if $cv.optional.strict_units}
 489               honourUnitTags="true"
 490 {else}
 491               honourUnitTags="false"
 492 {/if}
 493 {if $cv.krbsasl}
 494               useSaslForKerberos="true"
 495 {else}
 496               useSaslForKerberos="false"
 497 {/if}
 498 {if $cv.rfc2307bis}
 499               rfc2307bis="true"
 500 {else}
 501               rfc2307bis="false"
 502 {/if}
 503 {if $cv.include_personal_title}
 504               personalTitleInDN="true"
 505 {else}
 506               personalTitleInDN="false"
 507 {/if}
 508 {if $cv.base_hook_active}
 509               nextIdHook="{$cv.base_hook}"
 510 {/if}
 511 {if $cv.generic_settings.wws_ou_active}
 512               sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
 513 {/if}
 514 {if $cv.id_settings.idgen_active}
 515               idGenerator="{$cv.id_settings.idgen}"
 516 {/if}
 517 {if $cv.strict}
 518               strictNamingRules="true"
 519 {else}
 520               strictNamingRules="false"
 521 {/if}
 522 {if $cv.id_settings.minid_active}
 523               minId="{$cv.id_settings.minid}"
 524 {/if}
 525               mailAttribute="{$cv.mail_attrib}"
 526               gosaSharedPrefix=""
 527               mailUserCreation=""
 528               mailFolderCreation=""
 529               imapTimeout="10"
 530 {if $cv.mail != "disabled"}
 531               mailMethod="{$cv.mail}"
 532 {if $cv.cyrusunixstyle}
 533               cyrusUseSlashes="true"
 534 {else}
 535               cyrusUseSlashes="false"
 536 {/if}
 537 {if $cv.mail_settings.vacationdir_active}
 538               vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
 539 {/if}
 540 {/if}
 541 {if $cv.tls}
 542               ldapTLS="true"
 543 {/if}
 544 {if $cv.governmentmode}
 545               honourIvbbAttributes="true"
 546 {else}
 547               honourIvbbAttributes="false"
 548 {/if}
 549 {if $cv.sambaidmapping}
 550               sambaIdMapping="true"
 551 {/if}
 552 {if $cv.account_expiration}
 553               handleExpiredAccounts="true"
 554 {/if}
 555 {if $cv.samba_settings.samba_sid_active}
 556               sambaSID="{$cv.samba_settings.samba_sid}"
 557 {/if}
 558 {if $cv.samba_settings.samba_rid_active}
 559               sambaRidBase="{$cv.samba_settings.samba_rid_active}"
 560 {/if}
 561 {if $cv.generic_settings.snapshot_active}
 562               enableSnapshots="true"
 563               snapshotBase="{$cv.generic_settings.snapshot_base}"
 564               snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
 565               snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
 566               snapshotURI="{$cv.generic_settings.snapshot_server}"
 567 {else}
 568               enableSnapshots="false"
 569               snapshotBase="dc=localhost,dc=de"
 570               snapshotAdminDn="cn=admin,dc=localhost,dc=de"
 571               snapshotAdminPassword="secret"
 572               snapshotURI="ldap://localhost:389"
 573 {/if}
 574               config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
 575
 576               <referral URI="{$cv.connection}/{$cv.base}"
 577                         adminDn="{$cv.admin}"
 578                         adminPassword="{$cv.password}" />
 579
 580     </location>
 581   </main>
 582 </conf>