![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
index c4d668ce8276f4dc81003bc1eb3541beebb1799b..8ad9d77c6d580dfcc7be4dcc24ad7e2cec574704 100644 (file)
-->
<menu>
- <!-- Section to enable quick self service shortcuts for the logged in user -->
- <section name="My account">
- <plugin acl="users/user:self" class="user" />
- <plugin acl="users/posixAccount:self" class="posixAccount" />
- <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskPath="{$cv.optional.kioskpath}"{/if} />
- <plugin acl="users/mailAccount:self" class="mailAccount" />
- <plugin acl="users/sambaAccount:self" class="sambaAccount" />
-{if $cv.use_netatalk}
- <plugin acl="users/netatalk:self" class="netatalk" />
-{else}
- <!-- <plugin acl="users/netatalk:self" class="netatalk" /> -->
-{/if}
- <plugin acl="users/connectivity:self" class="connectivity" />
- <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
- <plugin acl="users/phoneAccount:self" class="phoneAccount" />
- <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
- <plugin acl="users/scalixAccount:self" class="scalixAccount" />
- <plugin acl="users/password:self" class="password" />
- </section>
-
<!-- Section to enable administrative services -->
<section name="Administration">
<plugin acl="department" class="departmentManagement" />
- <plugin acl="users" class="userManagement" />
+
+ <!-- This long ACL list is required to exclude the users menu entry when only
+ 'viewFaxEntries' permissions are set -->
+ <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/groupware,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
+ class="userManagement" />
<plugin acl="groups" class="groupManagement" />
+ <plugin acl="roles" class="roleManagement"/>
+ <plugin acl="acl" class="aclManagement" />
<plugin acl="ogroups" class="ogroupManagement" />
+ <plugin acl="sudo" class="sudoManagement" />
<plugin acl="application" class="applicationManagement" />
-{if $cv.enableMimeType}
<plugin acl="mimetypes" class="mimetypeManagement" />
-{else}
- <!-- <plugin acl="mimetypes" class="mimetypeManagement" /> -->
-{/if}
<plugin acl="devices" class="deviceManagement" />
- <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systems" />
+ <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
<!-- Use 'lockDn' for dn
'lockName' for name
'lockType' for branch/freeze -->
-{if $cv.enableFAI_management}
<plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
-{else}
- <!-- <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" /> -->
-{/if}
+ <plugin acl="opsi" class="opsiLicenses"/>
<plugin acl="gofaxlist" class="blocklist" />
<plugin acl="gofonmacro" class="goFonMacro" />
<plugin acl="gofonconference" class="phoneConferenceManagment" />
- <plugin acl="acl" class="aclManagement" />
- <plugin acl="sudo" class="sudoManagement" />
</section>
<!-- Section to enable addon plugins -->
<section name="Addons">
- <!-- <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
- <plugin acl="addressbook" class="addressbook" />
- <plugin acl="mailqueue" class="mailqueue" />
- <plugin acl="faxreport/faxreport:self,faxreport" class="faxreport" />
- <plugin acl="fonreport/fonreport:self,fonreport" class="fonreport" />
- <plugin acl="logview" class="logview" />
+ <plugin acl="all/all" class="propertyEditor" />
+ <plugin acl="server/rSyslogServer" class="rsyslog" />
+<!-- <plugin acl="mailqueue" class="mailqueue" />-->
+ <plugin acl="users/viewFaxEntries:self,users/viewFaxEntries" class="faxreport" />
+ <plugin acl="users/viewFonEntries:self,users/viewFonEntries" class="fonreport" />
<plugin acl="gotomasses" class="gotomasses" />
<plugin acl="ldapmanager" class="ldif" />
</section>
</menu>
+ <!-- These entries will be rendered on the short-cut menu -->
+ <shortCutMenu>
+ <plugin acl="all" class="welcome" />
+ <!-- <plugin acl="all" class="dashBoard" />-->
+ <!-- <plugin acl="all" class="statistics" />-->
+ </shortCutMenu>
+
+ <!-- These entries will be rendered on the path navigator -->
+ <pathMenu>
+ <plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/groupware, users/user:self,users/scalixAccount:self,users/password:self,users/gofaxAccount:self,users/phoneAccount:self" class="MyAccount" />
+ <plugin acl="users/password:self" class="password" />
+ </pathMenu>
<!-- Tab definitions *******************************************************
-->
<!-- ACL dialog -->
+ <acltab>
+ <tab class="acl" name="ACL" />
+ </acltab>
+
<aclroletab>
- <tab class="aclRole" name="ACL Role" />
+ <tab class="aclrole" name="ACL Role" />
</aclroletab>
<!-- User dialog -->
<usertabs>
<tab class="user" name="Generic" />
- <tab class="posixAccount" name="Unix" />
- <tab class="environment" name="Environment" />
- <tab class="mailAccount" name="Mail" />
+ <tab class="posixAccount" name="POSIX" />
<tab class="sambaAccount" name="Samba" />
-{if $cv.use_netatalk} <tab class="netatalk" name="Netatalk" /> {else}<!-- <tab class="netatalk" name="Netatalk" /> --> {/if}
+ <tab class="netatalk" name="Netatalk" />
+ <tab class="mailAccount" name="Mail" />
+ <tab class="groupware" name="Groupware" />
+ <tab class="scalixAccount" name="Scalix" />
+ <tab class="environment" name="Desktop" />
<tab class="connectivity" name="Connectivity" />
<tab class="gofaxAccount" name="Fax" />
<tab class="phoneAccount" name="Phone" />
- <tab class="scalixAccount" name="Scalix" />
<tab class="nagiosAccount" name="Nagios" />
</usertabs>
+ <!-- User dialog -->
+ <MyAccountTabs>
+ <tab class="user" name="Generic" />
+ <tab class="posixAccount" name="POSIX" />
+ <tab class="sambaAccount" name="Samba" />
+ <tab class="netatalk" name="Netatalk" />
+ <tab class="mailAccount" name="Mail" />
+ <tab class="groupware" name="Groupware" />
+ <tab class="scalixAccount" name="Scalix" />
+ <tab class="environment" name="Desktop" />
+ <tab class="connectivity" name="Connectivity" />
+ <tab class="gofaxAccount" name="Fax" />
+ <tab class="phoneAccount" name="Phone" />
+ <tab class="nagiosAccount" name="Nagios" />
+ </MyAccountTabs>
+
+ <opsiLicenseTabs>
+ <tab class="licensePoolGeneric" name="Generic"/>
+ <tab class="licenseUsage" name="Usage"/>
+ </opsiLicenseTabs>
+
<!-- Group dialog -->
<grouptabs>
<tab class="group" name="Generic" />
- <tab class="environment" name="Environment" />
- <tab class="appgroup" name="Applications" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ <tab class="environment" name="Desktop" />
+ <tab class="appgroup" name="Startmenu" />
<tab class="mailgroup" name="Mail" />
</grouptabs>
<phonetabs>
<tab class="phoneGeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</phonetabs>
<!-- GOto plugins -->
<appstabs>
<tab class="application" name="Generic" />
- <tab class="applicationParameters" name="Options" />
+ <tab class="applicationParameters" name="Parameter" />
</appstabs>
<mimetabs>
<termtabs>
<tab class="termgeneric" name="Generic" />
- <tab class="termstartup" name="Startup" />
+ <tab class="termstartup" name="Recipe" />
<tab class="termservice" name="Devices" />
- <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
- <!--<tab class="glpiAccount" name="Inventory" /> -->
+ <tab class="terminfo" name="Information" />
</termtabs>
<servtabs>
<tab class="servgeneric" name="Generic" />
- <tab class="workstartup" name="Startup" />
+ <tab class="workstartup" name="Recipe" />
<tab class="ServerService" name="Services" />
-{if $cv.enableFAI_management}
<tab class="faiSummaryTab" name="Deployment summary" />
<tab class="gotoLogView" name="Installation logs" />
-{else}
- <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
- <!-- <tab class="gotoLogView" name="Installation logs" /> -->
-{/if}
- <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
+ <tab class="terminfo" name="Information" />
</servtabs>
<worktabs>
<tab class="workgeneric" name="Generic" />
- <tab class="workstartup" name="Startup" />
+ <tab class="workstartup" name="Recipe" />
<tab class="workservice" name="Devices" />
<tab class="printgeneric" name="Printer" />
- <tab class="terminfo" name="Information" snmpCommunity="{$cv.optional.snmpcommunity}" />
-{if $cv.enableFAI_management}
+ <tab class="terminfo" name="Information" />
<tab class="faiSummaryTab" name="Deployment summary" />
<tab class="gotoLogView" name="Installation logs" />
-{else}
- <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
- <!-- <tab class="gotoLogView" name="Installation logs" /> -->
-{/if}
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</worktabs>
<printtabs>
<tab class="printgeneric" name="Generic" />
- <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
</printtabs>
<componenttabs>
<tab class="componentGeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</componenttabs>
<wintabs>
<tab class="wingeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</wintabs>
<serverservice>
<tab class="goMailServer" />
-{if $cv.mail == "kolab"}
<tab class="servkolab" />
-{/if}
<tab class="goNtpServer" />
<tab class="servrepository" />
<tab class="goImapServer" />
<tab class="goKrbServer" />
<tab class="goFaxServer" />
<tab class="goFonServer" />
- <tab class="goLogDBServer" />
- <tab class="goGlpiServer" />
<tab class="goCupsServer" />
<tab class="goKioskService" />
- <tab class="goSyslogServer" />
<tab class="goTerminalServer" />
<tab class="goLdapServer" />
<tab class="goShareServer" />
<tab class="govirusserver" />
<tab class="servdhcp" />
<tab class="servdns" />
- <tab class="gosaLogServer" />
+ <tab class="rSyslogServer" />
</serverservice>
<!-- Department plugin -->
<deptabs>
<tab class="department" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</deptabs>
<organization_tabs>
<tab class="organization" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</organization_tabs>
<locality_tabs>
<tab class="locality" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</locality_tabs>
<country_tabs>
<tab class="country" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</country_tabs>
<dcobject_tabs>
<tab class="dcObject" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</dcobject_tabs>
+ <domain_tabs>
+ <tab class="domain" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ </domain_tabs>
+
+ <!-- Role tabs -->
+ <roletabs>
+ <tab class="roleGeneric" name="Generic"/>
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ </roletabs>
+
<ogrouptabs>
<tab class="ogroup" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</ogrouptabs>
- <!-- Debian archive management plugin -->
- <!--
- <dak_tabs>
- <tab class="dakrepository" name="Repository" />
- <tab class="dakqueue" name="Queue" />
- <tab class="dakkeyring" name="Key ring" />
- </dak_tabs>
- -->
-
<!-- Connectivity plugins -->
<connectivity>
-{if $cv.mail == "kolab"}
- <tab class='kolabAccount' />
-{else}
-<!--
<tab class='kolabAccount' />
--->
-{/if}
<tab class="proxyAccount" />
<tab class="pureftpdAccount" />
<tab class="webdavAccount" />
<tab class="phpgwAccount" />
<tab class="intranetAccount" />
- <!--
- <tab class="opengwAccount"
- username="OGo"
- password=""
- database="OGo"
- databaseServer="localhost" />
- -->
<tab class="pptpAccount" />
<tab class="phpscheduleitAccount" />
<tab class="oxchangeAccount" />
<ldiftab>
<tab class="ldifexport" name="Export" />
<tab class="xlsexport" name="Excel Export" />
- <tab class="ldifimport" name="Import" />
- <tab class="csvimport" name="CSV Import" />
</ldiftab>
- <!-- FAI plugins -->
-{if $cv.enableFAI_management}
- <faipartitiontabs>
- <tab class="faiPartitionTable" name="Partitions" />
- </faipartitiontabs>
-
- <faiscripttabs>
- <tab class="faiScript" name="Script" />
- </faiscripttabs>
-
- <faihooktabs>
- <tab class="faiHook" name="Hooks" />
- </faihooktabs>
-
- <faivariabletabs>
- <tab class="faiVariable" name="Variables" />
- </faivariabletabs>
-
- <faitemplatetabs>
- <tab class="faiTemplate" name="Templates" />
- </faitemplatetabs>
-
- <faiprofiletabs>
- <tab class="faiProfile" name="Profiles" />
- <tab class="faiSummaryTab" name="Summary" />
- </faiprofiletabs>
-
- <faipackagetabs>
- <tab class="faiPackage" name="Packages" />
- </faipackagetabs>
-
- <opsitabs>
- <tab class="opsiGeneric" name="Opsi" />
- <tab class="opsiSoftware" name="Hardware information" />
- <tab class="opsiHardware" name="software information" />
- </opsitabs>
-
- <opsiprodconfig>
- <tab class="opsiProperties" name="Config" />
- </opsiprodconfig>
-{else}
- <!--
<faipartitiontabs>
<tab class="faiPartitionTable" name="Partitions" />
</faipartitiontabs>
<faiscripttabs>
- <tab class="faiScript" name="Script" />
+ <tab class="faiScript" name="Scripts" />
</faiscripttabs>
<faihooktabs>
</faipackagetabs>
<opsitabs>
- <tab class="opsiGeneric" name="Opsi" />
- <tab class="opsiSoftware" name="Hardware information" />
- <tab class="opsiHardware" name="software information" />
+ <tab class="opsiGeneric" name="Generic" />
+ <tab class="opsiSoftware" name="Hardware" />
+ <tab class="opsiHardware" name="Software" />
+ <tab class="licenseUsageByHost" name="License usage"/>
</opsitabs>
<opsiprodconfig>
- <tab class="opsiProperties" name="Config" />
+ <tab class="opsiProperties" name="Properties" />
+ <tab class="licenseByProduct" name="License usage"/>
</opsiprodconfig>
- -->
-{/if}
-
- <!-- Logging plugin -->
- <logtabs>
- <tab class="logview" name="System logs" />
- <tab class="gosa_logview" name="GOsa logs" />
- </logtabs>
-
+ <!-- rSyslog plugin -->
+ <rsyslogtabs>
+ <tab class="rsyslog" name="System logs" />
+ </rsyslogtabs>
<!-- Main section **********************************************************
the gosa.conf(5) manual page.
-->
+ <!-- If you broke your setup using the propertyEditor, then set 'ignoreLdapProperties' to true. -->
<main default="{$cv.location}"
-{if $cv.optional.list_summary}
- listSummary="true"
-{else}
- listSummary="false"
-{/if}
-{if $cv.pwd_rules.pwminlen_active}
- passwordMinLength="{$cv.pwd_rules.pwminlen}"
-{/if}
-{if $cv.pwd_rules.pwdiffer_active}
- passwordMinDiffer="{$cv.pwd_rules.pwdiffer}"
-{/if}
-{if $cv.pwd_rules.externalpwdhook_active}
- passwordHook="{$cv.pwd_rules.externalpwdhook}"
-{/if}
-{if $cv.errorlvl}
- displayErrors="true"
-{else}
- displayErrors="false"
-{/if}
-{if $cv.enable_schema_check}
- schemaCheck="true"
-{else}
- schemaCheck="false"
-{/if}
-{if $cv.generic_settings.enableCopyPaste}
- copyPaste="true"
-{else}
- copyPaste="false"
-{/if}
-{if $cv.optional.forceglobals}
- forceGlobals="true"
-{else}
- forceGlobals="false"
-{/if}
-{if $cv.optional.forcessl}
- forceSSL="true"
-{else}
- forceSSL="false"
-{/if}
-{if $cv.optional.ldapstats}
- ldapStats="true"
-{else}
- ldapStats="false"
-{/if}
-{if $cv.optional.warnssl}
warnSSL="true"
-{else}
- warnSSL="false"
-{/if}
-{if $cv.optional.ppd_path_active}
- ppdPath="{$cv.optional.ppd_path}"
-{/if}
-{if $cv.optional.max_ldap_query_time_active}
- ldapMaxQueryTime="{$cv.optional.max_ldap_query_time}"
-{/if}
-{if $cv.optional.noprimarygroup}
- primaryGroupFilter="true"
-{/if}
-{if $cv.optional.mailQueueScriptPath_active}
- mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
-{/if}
-{if $cv.optional.user_filter_cookie}
- storeFilterSettings="true"
-{else}
- storeFilterSettings="false"
-{/if}
-{if $cv.compressed}
- sendCompressedOutput="true"
-{else}
- sendCompressedOutput="false"
-{/if}
-{if $cv.optional.uniq_identifier_active }
- modificationDetectionAttribute="{$cv.optional.uniq_identifier}"
-{else}
- modificationDetectionAttribute=""
-{/if}
- language="{$cv.lang_selected}"
- theme="{$cv.theme}"
- sessionLifetime="{$cv.optional.session_lifetime}"
- templateCompileDirectory="{$cv.optional.compile}"
- debugLevel="{$cv.optional.debuglevel}"
- sambaHashHook='{$cv.samba_settings.smbhash}'
+ forceSSL="false"
+ forceGlobals="true"
+ ignoreLdapProperties="false"
>
<!-- Location definition -->
<location name="{$cv.location}"
- passwordDefaultHash="{$cv.encryption}"
- accountPrimaryAttribute="{$cv.peopledn}"
- userRDN="{$cv.peopleou}"
- groupRDN="{$cv.groupou}"
- gidNumberBase="{$cv.uidbase}"
- uidNumberBase="{$cv.uidbase}"
- logging="{$cv.generic_settings.logging}"
-{if $cv.optional.sudoou_active}
- sudoRDN="{$cv.optional.sudoou}"
-{/if}
-{if $cv.optional.login_attribute}
- loginAttribute="{$cv.optional.login_attribute}"
-{else}
- loginAttribute="uid"
-{/if}
-{if $cv.timezone}
- timezone="{$cv.timezone}"
-{/if}
-{if $cv.optional.strict_units}
- honourUnitTags="true"
-{else}
- honourUnitTags="false"
-{/if}
-{if $cv.krbsasl}
- useSaslForKerberos="true"
-{else}
- useSaslForKerberos="false"
-{/if}
-{if $cv.rfc2307bis}
- rfc2307bis="true"
-{else}
- rfc2307bis="false"
-{/if}
-{if $cv.include_personal_title}
- personalTitleInDN="true"
-{else}
- personalTitleInDN="false"
-{/if}
-{if $cv.base_hook_active}
- nextIdHook="{$cv.base_hook}"
-{/if}
-{if $cv.generic_settings.wws_ou_active}
- sambaMachineAccountRDN="{$cv.generic_settings.wws_ou}"
-{/if}
-{if $cv.id_settings.idgen_active}
- idGenerator="{$cv.id_settings.idgen}"
-{/if}
-{if $cv.strict}
- strictNamingRules="true"
-{else}
- strictNamingRules="false"
-{/if}
-{if $cv.id_settings.minid_active}
- minId="{$cv.id_settings.minid}"
-{/if}
- mailAttribute="{$cv.mail_attrib}"
-{if $cv.mail != "disabled"}
- mailMethod="{$cv.mail}"
-{if $cv.cyrusunixstyle}
- cyrusUseSlashes="true"
-{else}
- cyrusUseSlashes="false"
-{/if}
-{if $cv.mail_settings.vacationdir_active}
- vacationTemplateDirectory="{$cv.mail_settings.vacationdir}"
-{/if}
-{/if}
-{if $cv.tls}
- ldapTLS="true"
-{/if}
-{if $cv.governmentmode}
- honourIvbbAttributes="true"
-{else}
- honourIvbbAttributes="false"
-{/if}
-{if $cv.sambaidmapping}
- sambaIdMapping="true"
-{/if}
-{if $cv.account_expiration}
- handleExpiredAccounts="true"
-{/if}
-{if $cv.samba_settings.samba_sid_active}
- sambaSID="{$cv.samba_settings.samba_sid}"
-{/if}
-{if $cv.samba_settings.samba_rid_active}
- sambaRidBase="{$cv.samba_settings.samba_rid_active}"
-{/if}
-{if $cv.generic_settings.snapshot_active}
- enableSnapshots="true"
-{if $cv.generic_settings.snapshot_base != ""}
- snapshotBase="{$cv.generic_settings.snapshot_base}"
-{/if}
-{if $cv.generic_settings.snapshot_user != ""}
- snapshotAdminDn="{$cv.generic_settings.snapshot_user}"
-{/if}
-{if $cv.generic_settings.snapshot_password != ""}
- snapshotAdminPassword="{$cv.generic_settings.snapshot_password}"
-{/if}
-{if $cv.generic_settings.snapshot_server != ""}
- snapshotURI="{$cv.generic_settings.snapshot_server}"
-{/if}
-{/if}
-{if $cv.samba_version != 0}
- sambaVersion="{$cv.samba_version}"
-{else}
- sambaVersion="3"
-{/if}
config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
-
<referral URI="{$cv.connection}/{$cv.base}"
adminDn="{$cv.admin}"
adminPassword="{$cv.password}" />
-
</location>
</main>
</conf>