gosa-core/include/class_core.inc

   1 <?php
   2
   3
   4 class all extends plugin {
   5     static function plInfo()
   6     {
   7         return (array(
   8                     "plShortName"   => _("All"),
   9                     "plDescription" => _("All objects in this category"),
  10                     "plSelfModify"  => TRUE,
  11                     "plDepends"     => array(),
  12                     "plPriority"    => 0,
  13                     "plSection"     => array("administration"),
  14                     "plCategory"    => array("all" => array("objectClass" => "none", "description" => '*&nbsp;'._("All"))),
  15                     "plProvidedAcls"    => array())
  16                );
  17     }
  18 }
  19
  20 class core extends plugin {
  21     static function plInfo()
  22     {
  23         return (array(
  24                     "plShortName" => _("Core"),
  25                     "plDescription" => _("GOsa core plugin"),
  26                     "plSelfModify"  => FALSE,
  27                     "plDepends"     => array(),
  28                     "plPriority"    => 0,
  29                     "plSection"     => array("administration"),
  30                     "plCategory"    => array("all"),
  31                     "plProperties"  => array(
  32
  33                         array(
  34                             "name"          => "htaccessAuthentication",
  35                             "type"          => "bool",
  36                             "default"       => FALSE,
  37                             "description"   => _("The 'htaccessAuthentication' variable tells GOsa to use either htaccess authentication or LDAP authentication. This can be used if you want to use i.e. kerberos to authenticate the users."),
  38                             "check"         => "gosaProperty::isBool",
  39                             "migrate"       => "",
  40                             "group"         => "authentification",
  41                             "mandatory"     => FALSE),
  42
  43                         array(
  44                             "name"          => "logging",
  45                             "type"          => "bool",
  46                             "default"       => TRUE,
  47                             "description"   => _("The 'logging' statement enables event logging on GOsa side. Setting it to 'true' GOsa will log every action a user performs via syslog. If you use rsyslog and configure it to mysql logging, you can browse all events within GOsa. GOsa will not log anything, if the logging value is empty or set to 'false'."),
  48
  49                             "check"         => "gosaProperty::isBool",
  50                             "migrate"       => "",
  51                             "group"         => "core",
  52                             "mandatory"     => FALSE),
  53
  54                         array(
  55                                 "name"          => "listSummary",
  56                                 "type"          => "bool",
  57                                 "default"       => TRUE,
  58                                 "description"   => _("The 'listSummary' statement determines whether a status bar will be shown on the bottom of GOsa generated lists, displaying a short summary of type and number of elements in the list."),
  59                                 "check"         => "gosaProperty::isBool",
  60                                 "migrate"       => "",
  61                                 "group"         => "visual",
  62                                 "mandatory"     => FALSE),
  63
  64                         array(
  65                                 "name"          => "passwordMinLength",
  66                                 "type"          => "integer",
  67                                 "default"       => "",
  68                                 "description"   => _("The 'passwordMinLength' statement determines whether a newly entered password has to be of a minimum length."),
  69                                 "check"         => "gosaProperty::isInteger",
  70                                 "migrate"       => "",
  71                                 "group"         => "password",
  72                                 "mandatory"     => FALSE),
  73
  74                         array(
  75                                 "name"          => "passwordMinDiffer",
  76                                 "type"          => "integer",
  77                                 "default"       => "",
  78                                 "description"   => _("The 'passwordMinDiffer' statement determines whether a newly entered password has to be checked to have at least n different characters."),
  79                                 "check"         => "gosaProperty::isInteger",
  80                                 "migrate"       => "",
  81                                 "group"         => "password",
  82                                 "mandatory"     => FALSE),
  83
  84                         array(
  85                                 "name"          => "passwordHook",
  86                                 "type"          => "shellCommand",
  87                                 "default"       => "",
  88                                 "description"   =>
  89                                 _("The 'passwordHook' can specify an external script to handle password settings at some other location besides the LDAP.")."&nbsp;".sprintf(_("It will be called this way: %s"),"/path/to/your/script \"username\" \"oldpassword\" \"newpassword\""),
  90                         "check"         => "gosaProperty::isShellCommand",
  91                                 "migrate"       => "",
  92                                 "group"         => "password",
  93                                 "mandatory"     => FALSE),
  94
  95                         array(
  96                                 "name"          => "displayErrors",
  97                                 "type"          => "bool",
  98                                 "default"       => FALSE,
  99                                 "description"   => "The 'displayErrors' statement tells GOsa to show PHP errors in the upper part of the screen. This should be disabled in productive deployments, because there might be some important passwords arround.",
 100                                 "check"         => "gosaProperty::isBool",
 101                                 "migrate"       => "",
 102                                 "group"         => "debug",
 103                                 "mandatory"     => FALSE),
 104
 105                         array(
 106                                 "name"          => "schemaCheck",
 107                                 "type"          => "bool",
 108                                 "default"       => TRUE,
 109                                 "description"   => "The 'schemaCheck' statement enables or disables schema checking during login. It is recommended to switch this on in order to let GOsa handle object creation more efficient.",
 110                                 "check"         => "gosaProperty::isInteger",
 111                                 "migrate"       => "",
 112                                 "group"         => "debug",
 113                                 "mandatory"     => FALSE),
 114
 115                         array(
 116                                 "name"          => "copyPaste",
 117                                 "type"          => "bool",
 118                                 "default"       => FALSE,
 119                                 "description"   => "The 'copyPaste' statement enables copy and paste for LDAP entries managed with GOsa.",
 120                                 "check"         => "gosaProperty::isInteger",
 121                                 "migrate"       => "",
 122                                 "group"         => "copyPaste",
 123                                 "mandatory"     => FALSE),
 124
 125                         array(
 126                                 "name"          => "forceGlobals",
 127                                 "type"          => "bool",
 128                                 "default"       => FALSE,
 129                                 "description"   => "The 'forceGlobals' statement enables PHP security checks to force register_global settings to be switched off.",
 130                                 "check"         => "gosaProperty::isBool",
 131                                 "migrate"       => "",
 132                                 "group"         => "security",
 133                                 "mandatory"     => FALSE),
 134
 135                         array(
 136                                 "name"          => "forceSSL",
 137                                 "type"          => "string",
 138                                 "default"       => FALSE,
 139                                 "description"   => "The 'forceSSL' statement enables PHP security checks to force encrypted access to the web interface. GOsa will try to redirect to the same URL - just with https://",
 140                                 "check"         => "gosaProperty::isBool",
 141                                 "migrate"       => "",
 142                                 "group"         => "security",
 143                                 "mandatory"     => FALSE),
 144
 145                         array(
 146                                 "name"          => "ldapStats",
 147                                 "type"          => "bool",
 148                                 "default"       => FALSE,
 149                                 "description"   => _("Logs information about triggered ldap operations, duration, filter, aso. into syslog."),
 150                                 "check"         => "gosaProperty::isBool",
 151                                 "migrate"       => "",
 152                                 "group"         => "debug",
 153                                 "mandatory"     => FALSE),
 154
 155                         array(
 156                                 "name"          => "warnSSL",
 157                                 "type"          => "bool",
 158                                 "default"       => TRUE,
 159                                 "description"   => "The 'warnSSL' statement enables PHP security checks to detect non encrypted access to the web interface. GOsa will display a warning in this case.",
 160                                 "check"         => "gosaProperty::isBool",
 161                                 "migrate"       => "",
 162                                 "group"         => "security",
 163                                 "mandatory"     => FALSE),
 164
 165                         array(
 166                                 "name"          => "ppdGzip",
 167                                 "type"          => "bool",
 168                                 "default"       => TRUE,
 169                                 "description"   => "The 'ppdGzip' variable enables PPD file compression.",
 170                                 "check"         => "gosaProperty::isBool",
 171                                 "migrate"       => "",
 172                                 "group"         => "ppd",
 173                                 "mandatory"     => FALSE),
 174
 175
 176                         array(
 177                                 "name"          => "ignoreAcl",
 178                                 "type"          => "dn",
 179                                 "default"       => "",
 180                                 "description"   => "The 'ignoreAcl' value tells GOsa to ignore complete ACL sets for the given DN. Add your DN here and you'll be able to restore accidently dropped ACLs.",
 181                                 "check"         => "gosaProperty::isDN",
 182                                 "migrate"       => "",
 183                                 "group"         => "debug",
 184                                 "mandatory"     => FALSE),
 185
 186
 187                         array(
 188                                 "name"          => "ppdPath",
 189                                 "type"          => "path",
 190                                 "default"       => "/var/spool/ppd",
 191                                 "description"   => "The 'ppdPath' variable defines where to store PPD files for the GOto environment plugins.",
 192                                 "check"         => "gosaProperty::isPath",
 193                                 "migrate"       => "",
 194                                 "group"         => "ppd",
 195                                 "mandatory"     => FALSE),
 196
 197                         array(
 198                                 "name"          => "ldapMaxQueryTime",
 199                                 "type"          => "integer",
 200                                 "default"       => "",
 201                                 "description"   => "The 'ldapMaxQueryTime' statement tells GOsa to stop LDAP actions if there is no answer within the specified number of seconds.",
 202                                 "check"         => "gosaProperty::isInteger",
 203                                 "migrate"       => "",
 204                                 "group"         => "debug",
 205                                 "mandatory"     => FALSE),
 206
 207                         array(
 208                                 "name"          => "storeFilterSettings",
 209                                 "type"          => "bool",
 210                                 "default"       => TRUE,
 211                                 "description"   => "The 'storeFilterSettings' statement determines whether GOsa should store filter and plugin settings inside of a cookie.",
 212                                 "check"         => "gosaProperty::isBool",
 213                                 "migrate"       => "",
 214                                 "group"         => "core",
 215                                 "mandatory"     => FALSE),
 216
 217                         array(
 218                                 "name"          => "sendCompressedOutput",
 219                                 "type"          => "bool",
 220                                 "default"       => TRUE,
 221                                 "description"   => "The 'sendCompressedOutput' statement determines whether PHP should send compressed HTML pages to browsers or not. This may increase or decrease the performance, depending on your network.",
 222                                 "check"         => "gosaProperty::isBool",
 223                                 "migrate"       => "",
 224                                 "group"         => "core",
 225                                 "mandatory"     => FALSE),
 226
 227                         array(
 228                                 "name"          => "modificationDetectionAttribute",
 229                                 "type"          => "switch",
 230                                 "default"       => "entryCSN",
 231                                 "defaults"      => "core::getPropertyValues",
 232                                 "description"   => "The 'modificationDetectionAttribute' statement enables GOsa to check if a entry currently being edited has been modified from someone else outside GOsa in the meantime. It will display an informative dialog then. It can be set to 'entryCSN' for OpenLDAP based systems or 'contextCSN' for Sun DS based systems.",
 233                                 "check"         => "",
 234                                 "migrate"       => "",
 235                                 "group"         => "core",
 236                                 "mandatory"     => FALSE),
 237
 238                         array(
 239                                 "name"          => "language",
 240                                 "type"          => "switch",
 241                                 "default"       => "",
 242                                 "defaults"      => "core::getPropertyValues",
 243                                 "description"       => "The 'language' statement defines the default language used by GOsa. Normally GOsa autodetects the language from the browser settings. If this is not working or you want to force the language, just add the language code (i.e. de for german) here.",
 244                                 "check"         => "",
 245                                 "migrate"       => "",
 246                                 "group"         => "core",
 247                                 "mandatory"     => FALSE),
 248
 249                         array(
 250                                 "name"          => "theme",
 251                                 "type"          => "string",
 252                                 "default"       => "default",
 253                                 "defaults"      => "core::getPropertyValues",
 254                                 "description"   => "The 'theme' statement defines what theme is used to display GOsa pages. You can install some corporate identity like theme and/or modify certain templates to fit your needs within themes. Take a look at the GOsa FAQ for more information.",
 255                                 "check"         => "",
 256                                 "migrate"       => "",
 257                                 "group"         => "visual",
 258                                 "mandatory"     => FALSE),
 259
 260                         array(
 261                                 "name"          => "sessionLifetime",
 262                                 "type"          => "integer",
 263                                 "default"       => "",
 264                                 "description"   => "The 'sessionLifetime' value defines when a session will expire in seconds. For Debian systems, this will not work because the sessions will be removed by a cron job instead. Please modify the value inside of your php.ini instead.",
 265                                 "check"         => "gosaProperty::isInteger",
 266                                 "migrate"       => "",
 267                                 "group"         => "security",
 268                                 "mandatory"     => FALSE),
 269
 270                         array(
 271                                 "name"          => "templateCompileDirectory",
 272                                 "type"          => "path",
 273                                 "default"       => "",
 274                                 "description"   => "The 'templateCompileDirectory' statements defines the path, where the PHP templating engins 'smarty' should store its compiled GOsa templates for improved speed. This path needs to be writeable by the user your webserver is running with.",
 275                                 "check"         => "gosaProperty::isExistingPath",
 276                                 "migrate"       => "",
 277                                 "group"         => "core",
 278                                 "mandatory"     => FALSE),
 279
 280                         array(
 281                                 "name"          => "debugLevel",
 282                                 "type"          => "integer",
 283                                 "default"       => 0,
 284                                 "description"   => sprintf(_("The 'debugLevel' value tells GOsa to display certain information on each page load. Value is an AND combination of the following byte values: %s"),
 285 "
 286 DEBUG_TRACE   = 1
 287 DEBUG_LDAP    = 2
 288 DEBUG_MYSQL   = 4
 289 DEBUG_SHELL   = 8
 290 DEBUG_POST    = 16
 291 DEBUG_SESSION = 32
 292 DEBUG_CONFIG  = 64
 293 DEBUG_ACL     = 128
 294 DEBUG_SI      = 256"),
 295                                 "check"         => "gosaProperty::isInteger",
 296                                 "migrate"       => "",
 297                                 "group"         => "debug",
 298                                 "mandatory"     => FALSE),
 299
 300                         array(
 301                                 "name"          => "sambaHashHook",
 302                                 "type"          => "command",
 303                                 "default"       => "",
 304                                 "description"   => sprintf(_("The 'sambaHashHook' statement contains an executable to generate samba hash values. This is required for password synchronization, but not required if you apply gosa-si services. If you don't have mkntpasswd from the samba distribution installed, you can use perl to generate the hash: %s"),"perl -MCrypt::SmbHash -e \"print join(q[:], ntlmgen \\\$ARGV[0]), $/;\""),
 305                                 "check"         => "gosaProperty::isCommand",
 306                                 "migrate"       => "",
 307                                 "group"         => "samba",
 308                                 "mandatory"     => FALSE),
 309
 310                         array(
 311                                 "name"          => "passwordDefaultHash",
 312                                 "type"          => "switch",
 313                                 "default"       => "crypt",
 314                                 "defaults"      => "core::getPropertyValues",
 315                                 "description"   => "The 'passwordDefaultHash' statement defines the default password hash to choose for new accounts.",
 316                                 "check"         => "",
 317                                 "migrate"       => "",
 318                                 "group"         => "password",
 319                                 "mandatory"     => FALSE),
 320
 321                         array(
 322                                 "name"          => "accountPrimaryAttribute",
 323                                 "type"          => "switch",
 324                                 "default"       => "cn",
 325                                 "defaults"      => "core::getPropertyValues",
 326                                 "description"   => "The 'accountPrimaryAttribute' option tells GOsa how to create new accounts. Possible values are 'uid' and 'cn'. In the first case GOsa creates uid style DN entries: 'uid=superuser,ou=staff,dc=example,dc=net'. In the second case, GOsa creates cn style DN entries: 'cn=Foo Bar,ou=staff,dc=example,dc=net'. If you choose \"cn\" to be your 'accountPrimaryAttribute' you can decide whether to include the personal title in your dn by selecting 'personalTitleInDN'.",
 327                                 "check"         => "",
 328                                 "migrate"       => "",
 329                                 "group"         => "security",
 330                                 "mandatory"     => FALSE),
 331
 332                         array(
 333                                 "name"          => "userRDN",
 334                                 "type"          => "rdn",
 335                                 "default"       => "ou=people",
 336                                 "description"   => "The 'userRDN' statement defines the location where new accounts will be created inside of defined departments. The default is 'ou=people'.",
 337                                 "check"         => "gosaProperty::isRdn",
 338                                 "migrate"       => "",
 339                                 "group"         => "user",
 340                                 "mandatory"     => FALSE),
 341
 342                         array(
 343                                 "name"          => "groupRDN",
 344                                 "type"          => "rdn",
 345                                 "default"       => "ou=groups",
 346                                 "description"   => "The 'groupsRDN' statement defines the location where new groups will be created inside of defined departments. The default is 'ou=groups'.",
 347                                 "check"         => "gosaProperty::isRdn",
 348                                 "migrate"       => "",
 349                                 "group"         => "group",
 350                                 "mandatory"     => FALSE),
 351
 352                         array(
 353                                 "name"          => "gidNumberBase",
 354                                 "type"          => "integer",
 355                                 "default"       => "",
 356                                 "description"   => "The 'gidNumberBase' statement defines where to start looking for a new free group id. This should be synced with your 'adduser.conf' to avoid overlapping gidNumber values between local and LDAP based lookups. The gidNumberBase can even be dynamic. Take a look at the 'nextIdHook' definition.",
 357                                 "check"         => "gosaProperty::isInteger",
 358                                 "migrate"       => "",
 359                                 "group"         => "core",
 360                                 "mandatory"     => FALSE),
 361
 362                         array(
 363                                 "name"          => "uidNumberBase",
 364                                 "type"          => "integer",
 365                                 "default"       => "",
 366                                 "description"   => "The 'uidNumberBase' statement defines where to start looking for a new free user id. This should be synced with your 'adduser.conf' to avoid overlapping uidNumber values between local and LDAP based lookups. The uidNumberBase can even be dynamic. Take a look at the 'baseIdHook' definition.",
 367                                 "check"         => "gosaProperty::isInteger",
 368                                 "migrate"       => "",
 369                                 "group"         => "core",
 370                                 "mandatory"     => FALSE),
 371
 372                         array(
 373                                 "name"          => "gosaSupportURI",
 374                                 "type"          => "string",
 375                                 "default"       => "",
 376                                 "description"   => "The 'gosaSupportURI' defines the major gosa-si server host and the password for GOsa to connect to it. It can be used if you want to use i.e. kerberos to authenticate the users. The format is: credentials@host:port",
 377                                 "check"         => "",
 378                                 "migrate"       => "",
 379                                 "group"         => "gosa-si",
 380                                 "mandatory"     => FALSE),
 381
 382                         array(
 383                                 "name"          => "gosaSupportTimeout",
 384                                 "type"          => "integer",
 385                                 "default"       => "15",
 386                                 "description"   => "The 'gosaSupportTimeout' sets a connection timeout for all gosa-si actions. See 'gosaSupportURI' for details.",
 387                                 "check"         => "gosaProperty::isInteger",
 388                                 "migrate"       => "",
 389                                 "group"         => "gosa-si",
 390                                 "mandatory"     => FALSE),
 391
 392                         array(
 393                                 "name"          => "loginAttribute",
 394                                 "type"          => "switch",
 395                                 "default"       => "uid",
 396                                 "defaults"      => "core::getPropertyValues",
 397                                 "description"   => "The 'loginAttribute' statement tells GOsa which LDAP attribute is used as the login name during login. It can be set to 'uid', 'mail' or 'both'",
 398                                 "check"         => "",
 399                                 "migrate"       => "",
 400                                 "group"         => "security",
 401                                 "mandatory"     => FALSE),
 402
 403                         array(
 404                                 "name"          => "timezone",
 405                                 "type"          => "switch",
 406                                 "default"       => "",
 407                                 "defaults"      => "core::getPropertyValues",
 408                                 "description"   => "The 'timezone' statements defines the timezone used inside of GOsa to handle date related tasks, such as password expiery, vacation messages, etc. The 'timezone' value should be a unix conform timezone value like in /etc/timezone.",
 409                                 "check"         => "",
 410                                 "migrate"       => "",
 411                                 "group"         => "core",
 412                                 "mandatory"     => FALSE),
 413
 414                         array(
 415                                 "name"          => "honourUnitTags",
 416                                 "type"          => "bool",
 417                                 "default"       => FALSE,
 418                                 "description"   => "The 'honourUnitTags' statement enables checking of 'unitTag' attributes when using administrative units. If this is set to 'true' GOsa can only see objects inside the administrative unit a user is logged into.",
 419                                 "check"         => "",
 420                                 "migrate"       => "gosaProperty::isBool",
 421                                 "group"         => "core",
 422                                 "mandatory"     => FALSE),
 423
 424                         array(
 425                                 "name"          => "useSaslForKerberos",
 426                                 "type"          => "bool",
 427                                 "default"       => FALSE,
 428                                 "description"   => "The 'useSaslForKerberos' statement defines the way the kerberos realm is stored in the #userPassword' attribute. Set it to 'true' in order to get {sasl}user@REALM.NET, or to 'false' to get {kerberos}user@REALM.NET. The latter is outdated, but may be needed from time to time.",
 429                                 "check"         => "gosaProperty::isBool",
 430                                 "migrate"       => "",
 431                                 "group"         => "password",
 432                                 "mandatory"     => FALSE),
 433
 434                         array(
 435                                 "name"          => "rfc2307bis",
 436                                 "type"          => "bool",
 437                                 "default"       => FALSE,
 438                                 "description"   => "The 'rfc2307bis' statement enables rfc2307bis style groups in GOsa. You can use 'member' attributes instead of memberUid in this case. To make it work on unix systems, you've to adjust your NSS configuration to use rfc2307bis style groups, too",
 439                                 "check"         => "gosaProperty::isBool",
 440                                 "migrate"       => "",
 441                                 "group"         => "core",
 442                                 "mandatory"     => FALSE),
 443
 444                         array(
 445                                 "name"          => "personalTitleInDN",
 446                                 "type"          => "bool",
 447                                 "default"       => FALSE,
 448                                 "description"   => "The 'personalTitleInDN' option tells GOsa to include the personal title in user DNs when #accountPrimaryAttribute' is set to \"cn\".",
 449                                 "check"         => "gosaProperty::isBool",
 450                                 "migrate"       => "",
 451                                 "group"         => "storage location",
 452                                 "mandatory"     => FALSE),
 453
 454                         array(
 455                                 "name"          => "nextIdHook",
 456                                 "type"          => "command",
 457                                 "default"       => "",
 458                                 "description"   => "The 'nextIdHook' statement defines a script to be called for finding the next free id for users or groups externaly. It gets called with the current entry \"dn\" and the attribute to be ID'd. It should return an integer value.",
 459                                 "check"         => "gosaProperty::isCommand",
 460                                 "migrate"       => "",
 461                                 "group"         => "core",
 462                                 "mandatory"     => FALSE),
 463
 464                         array(
 465                                 "name"          => "sambaMachineAccountRDN",
 466                                 "type"          => "rdn",
 467                                 "default"       => "ou=winstations",
 468                                 "description"   => "This statement defines the location where GOsa looks for new samba workstations.",
 469                                 "check"         => "gosaProperty::isRDN",
 470                                 "migrate"       => "",
 471                                 "group"         => "samba",
 472                                 "mandatory"     => FALSE),
 473
 474                         array(
 475                                 "name"          => "idGenerator",
 476                                 "type"          => "string",
 477                                 "default"       => "",
 478                                 "description"   => "The 'idGenerator' statement describes an automatic way to generate new user ids. There are two basic functions supported - which can be combined:
 479
 480  a) using attributes
 481
 482     You can specify LDAP attributes (currently only sn and givenName) in
 483     braces {} and add a percent sign befor it. Optionally you can strip it
 484     down to a number of characters, specified in []. I.e.
 485
 486       idGenerator=\"{%sn}-{%givenName[2-4]}\"
 487
 488     will generate an ID using the full surename, adding a dash, and adding at
 489     least the first two characters of givenName. If this ID is used, it'll
 490     use up to four characters. If no automatic generation is possible, a
 491     input box is shown.
 492
 493  b) using automatic id's
 494
 495     I.e. specifying
 496
 497       idGenerator=\"acct{id:3}\"
 498
 499     will generate a three digits id with the next free entry appended to \"acct\".
 500
 501       idGenerator=\"acct{id!1}\"
 502
 503     will generate a one digit id with the next free entry appended to \"acct\" - if needed.
 504
 505       idGenerator=\"ext{id#3}\"
 506
 507     will generate a three digits random number appended to \"ext\".
 508 ",
 509                                 "check"         => "",
 510                                 "migrate"       => "",
 511                                 "group"         => "core",
 512                                 "mandatory"     => FALSE),
 513
 514                         array(
 515                                 "name"          => "strictNamingRules",
 516                                 "type"          => "bool",
 517                                 "default"       => TRUE,
 518                                 "description"   => "",
 519                                 "check"         => "gosaProperty::isBool",
 520                                 "migrate"       => "The 'strictNamingRules' statement enables strict checking of uids and group names. If you need characters like . or - inside of your accounts, set this to 'false'",
 521                                 "group"         => "core",
 522                                 "mandatory"     => FALSE),
 523
 524                         array(
 525                                 "name"          => "minId",
 526                                 "type"          => "integer",
 527                                 "default"       => "The 'minId' statement defines the minimum assignable user or group id to avoid security leaks with uid 0 accounts. This is used for the 'traditional' method.",
 528                                 "description"   => "",
 529                                 "check"         => "gosaProperty::isInteger",
 530                                 "migrate"       => "",
 531                                 "group"         => "core",
 532                                 "mandatory"     => FALSE),
 533
 534                         array(
 535                                 "name"          => "mailAttribute",
 536                                 "type"          => "switch",
 537                                 "default"       => "",
 538                                 "defaults"      => "core::getPropertyValues",
 539                                 "description"   => "The 'mailAttribute' statement determines which attribute GOsa will use to create accounts. Valid values are 'mail' and 'uid'.",
 540                                 "check"         => "",
 541                                 "migrate"       => "",
 542                                 "group"         => "mail",
 543                                 "mandatory"     => FALSE),
 544
 545                         array(
 546                                 "name"          => "gosaSharedPrefix",
 547                                 "type"          => "string",
 548                                 "default"       => "",
 549                                 "description"   => "This attribute allows to override the prefix used to create shared folders.",
 550                                 "check"         => "",
 551                                 "migrate"       => "",
 552                                 "group"         => "mail",
 553                                 "mandatory"     => FALSE),
 554
 555                         array(
 556                                 "name"          => "mailUserCreation",
 557                                 "type"          => "string",
 558                                 "default"       => "",
 559                                 "description"   => "This attribute allows to override the user account creation syntax, see the 'mailFolderCreation' description for more details.
 560
 561 Examples
 562  mailUserCreation=\"%prefix%%uid%\"           => \"user.foobar\"
 563  mailUserCreation=\"my-prefix.%uid%%domain%\"  => \"my-prefix.foobar@example.com\"
 564 ",
 565                                 "check"         => "",
 566                                 "migrate"       => "",
 567                                 "group"         => "mail",
 568                                 "mandatory"     => FALSE),
 569
 570                         array(
 571                                 "name"          => "mailFolderCreation",
 572                                 "type"          => "string",
 573                                 "default"       => "",
 574                                 "description"   => "Every mail method has its own way to create mail accounts like 'share/development' or 'shared.development@example.com' which is used to identify the accounts, set quotas or add acls.
 575
 576 To override the methods default account creation syntax, you can set the 'mailFolderCreation' option.
 577
 578 Examples
 579
 580  mailFolderCreation=\"%prefix%%cn%\"              => \"shared.development\"
 581  mailFolderCreation=\"my-prefix.%cn%%domain%\"    => \"my-prefix.development@example.com\"
 582
 583  %prefix%    The methods default prefix. (Depends on cyrusUseSlashes=FALSE/TRUE)
 584  %cn%        The groups/users cn.
 585  %uid%       The users uid.
 586  %mail%      The objects mail attribute.
 587  %domain%    The domain part of the objects mail attribute.
 588  %mailpart%  The user address part of the mail address.
 589  %uattrib%   Depends on mailAttribute=\"uid/mail\".
 590 ",
 591                                 "check"         => "",
 592                                 "migrate"       => "",
 593                                 "group"         => "mail",
 594                                 "mandatory"     => FALSE),
 595
 596                         array(
 597                                 "name"          => "imapTimeout",
 598                                 "type"          => "integer",
 599                                 "default"       => 10,
 600                                 "description"   => "The 'imapTimeout' statement sets the connection timeout for imap actions.",
 601                                 "check"         => "gosaProperty::isInteger",
 602                                 "migrate"       => "",
 603                                 "group"         => "mail",
 604                                 "mandatory"     => FALSE),
 605
 606                         array(
 607                                 "name"          => "mailMethod",
 608                                 "type"          => "switch",
 609                                 "default"       => "",
 610                                 "defaults"      => "core::getPropertyValues",
 611                                 "description"   => "The 'mailMethod' statement tells GOsa which mail method the setup should use to communicate with a possible mail server. Leave this undefined if your mail method does not match the predefined ones.",
 612                                 "check"         => "",
 613                                 "migrate"       => "",
 614                                 "group"         => "mail",
 615                                 "mandatory"     => FALSE),
 616
 617                         array(
 618                                 "name"          => "cyrusUseSlashes",
 619                                 "type"          => "bool",
 620                                 "default"       => "",
 621                                 "description"   => "The 'cyrusUseSlashes' statement determines if GOsa should use \"foo/bar\" or \"foo.bar\" namespaces in IMAP. Unix style is with slashes.",
 622                                 "check"         => "gosaProperty::isBool",
 623                                 "migrate"       => "",
 624                                 "group"         => "mail",
 625                                 "mandatory"     => FALSE),
 626
 627                         array(
 628                                 "name"          => "vacationTemplateDirectory",
 629                                 "type"          => "path",
 630                                 "default"       => "",
 631                                 "description"   => "The 'vacationTemplateDirectory' statement sets the path where GOsa will look for vacation message templates. Default is /etc/gosa/vacation.
 632
 633 Example template /etc/gosa/vacation/business.txt:
 634
 635    DESC:Away from desk
 636    Hi, I'm currently away from my desk. You can contact me on
 637    my cell phone via %mobile.
 638
 639    Greetings,
 640    %givenName %sn
 641
 642 ",
 643                                 "check"         => "gosaProperty::isExistingPath",
 644                                 "migrate"       => "",
 645                                 "group"         => "mail",
 646                                 "mandatory"     => FALSE),
 647
 648                         array(
 649                                 "name"          => "ldapTLS",
 650                                 "type"          => "bool",
 651                                 "default"       => "",
 652                                 "description"   => "The 'ldapTLS' statement enables or disables TLS operating on LDAP connections.",
 653                                 "check"         => "gosaProperty::isBool",
 654                                 "migrate"       => "",
 655                                 "group"         => "security",
 656                                 "mandatory"     => FALSE),
 657
 658                         array(
 659                                 "name"          => "honourIvbbAttributes",
 660                                 "type"          => "bool",
 661                                 "default"       => "",
 662                                 "description"   => "The 'honourIvbbAttributes' statement enables the IVBB mode inside of GOsa. You need the ivbb.schema file from used by german authorities.",
 663                                 "check"         => "gosaProperty::isBool",
 664                                 "migrate"       => "",
 665                                 "group"         => "core",
 666                                 "mandatory"     => FALSE),
 667
 668                         array(
 669                                 "name"          => "sambaIdMapping",
 670                                 "type"          => "bool",
 671                                 "default"       => "",
 672                                 "description"   => "The 'sambaIdMapping' statement tells GOsa to maintain sambaIdmapEntry objects. Depending on your setup this can drastically improve the windows login performance.",
 673                                 "check"         => "gosaProperty::isBool",
 674                                 "migrate"       => "",
 675                                 "group"         => "samba",
 676                                 "mandatory"     => FALSE),
 677
 678                         array(
 679                                 "name"          => "handleExpiredAccounts",
 680                                 "type"          => "bool",
 681                                 "default"       => "",
 682                                 "description"   => "The 'handleExpiredAccounts' statement enables shadow attribute tests during the login to the GOsa web interface and forces password renewal or account lockout.",
 683                                 "check"         => "gosaProperty::isBool",
 684                                 "migrate"       => "",
 685                                 "group"         => "core",
 686                                 "mandatory"     => FALSE),
 687
 688                         array(
 689                                 "name"          => "sambaSID",
 690                                 "type"          => "string",
 691                                 "default"       => "",
 692                                 "description"   => "The 'sambaSID' statement defines a samba SID if not available inside of the LDAP. You can retrieve the current sid by net getlocalsid.",
 693                                 "check"         => "",
 694                                 "migrate"       => "",
 695                                 "group"         => "samba",
 696                                 "mandatory"     => FALSE),
 697
 698                         array(
 699                                 "name"          => "sambaRidBase",
 700                                 "type"          => "integer",
 701                                 "default"       => "",
 702                                 "description"   => "The 'sambaRidBase' statement defines the base id to add to ordinary sid calculations - if not available inside of the LDAP.",
 703                                 "check"         => "gosaProperty::isInteger",
 704                                 "migrate"       => "",
 705                                 "group"         => "samba",
 706                                 "mandatory"     => FALSE),
 707
 708                         array(
 709                                 "name"          => "enableSnapshots",
 710                                 "type"          => "bool",
 711                                 "default"       => "",
 712                                 "description"   => "The 'enableSnapshots' statement enables a snapshot mechaism in GOsa. This enables you to save certain states of entries and restore them later on.",
 713                                 "check"         => "gosaProperty::isBool",
 714                                 "migrate"       => "",
 715                                 "group"         => "snapshot",
 716                                 "mandatory"     => FALSE),
 717
 718                         array(
 719                                 "name"          => "snapshotBase",
 720                                 "type"          => "dn",
 721                                 "default"       => "",
 722                                 "description"   => "The 'snapshotBase' statement defines the base where snapshots should be stored inside of the LDAP.",
 723                                 "check"         => "gosaProperty::isDn",
 724                                 "migrate"       => "",
 725                                 "group"         => "snapshot",
 726                                 "mandatory"     => FALSE),
 727
 728                         array(
 729                                 "name"          => "snapshotAdminDn",
 730                                 "type"          => "dn",
 731                                 "default"       => "",
 732                                 "description"   => "The 'snapshotAdminDn' variable defines the user which is used to authenticate when connecting to 'snapshotURI'.",
 733                                 "check"         => "gosaProperty::isDn",
 734                                 "migrate"       => "",
 735                                 "group"         => "snapshot",
 736                                 "mandatory"     => FALSE),
 737
 738                         array(
 739                                 "name"          => "snapshotAdminPassword",
 740                                 "type"          => "string",
 741                                 "default"       => "",
 742                                 "description"   => "The 'snapshotAdminPassword' variable defines the credentials which are used in combination with 'snapshotAdminDn' and 'snapshotURI' in order to authenticate.",
 743                                 "check"         => "",
 744                                 "migrate"       => "",
 745                                 "group"         => "snapshot",
 746                                 "mandatory"     => FALSE),
 747
 748                         array(
 749                                 "name"          => "snapshotURI",
 750                                 "type"          => "uri",
 751                                 "default"       => "",
 752                                 "description"   => "The 'snapshotURI' variable defines the LDAP URI for the server which is used to do object snapshots.",
 753                                 "check"         => "",
 754                                 "migrate"       => "",
 755                                 "group"         => "snapshot",
 756                                 "mandatory"     => FALSE)
 757                             ),
 758
 759                         "plProvidedAcls"    => array(
 760                                 "accessTo"          => _("System trust"),
 761                                 "cn"                => _("Name"),
 762                                 "description"       => _("Description"),
 763                                 "sudoUser"          => _("Users"),
 764                                 "sudoHost"          => _("Host"),
 765                                 "sudoCommand"       => _("Command"),
 766                                 "sudoRunAs"         => _("Run as user"),
 767                                 "trustModel"        => _("Access control list"))
 768                             )
 769                             );
 770     }
 771 }
 772 ?>