index dcb8abef96f9be0e5b1c4b248860c9bfc8cac326..8ad9d77c6d580dfcc7be4dcc24ad7e2cec574704 100644 (file)
{literal}<?xml version="1.0"?>{/literal}
-<conf config_version="{$config_checksum}" >
+<conf configVersion="{$config_checksum}" >
<!-- GOsa menu definition **************************************************
-->
<menu>
- <!-- Section to enable quick self service shortcuts for the logged in user -->
- <section name="My account">
- <plugin acl="users/user:self" class="user" />
- <plugin acl="users/posixAccount:self" class="posixAccount" />
- <plugin acl="users/environment:self" class="environment" {if $cv.optional.kioskpath_active} kioskpath="{$cv.optional.kioskpath}"{/if} />
- <plugin acl="users/mailAccount:self" class="mailAccount" />
- <plugin acl="users/sambaAccount:self" class="sambaAccount" />
-{if $cv.use_netatalk}
- <plugin acl="users/netatalk:self" class="netatalk" />
-{else}
- <!-- <plugin acl="users/netatalk:self" class="netatalk" /> -->
-{/if}
- <plugin acl="users/connectivity:self" class="connectivity" />
- <plugin acl="users/gofaxAccount:self" class="gofaxAccount" />
- <plugin acl="users/phoneAccount:self" class="phoneAccount" />
- <plugin acl="users/nagiosAccount:self" class="nagiosAccount" />
- <plugin acl="users/scalixAccount:self" class="scalixAccount" />
- <plugin acl="users/password:self" class="password" />
- </section>
-
<!-- Section to enable administrative services -->
<section name="Administration">
<plugin acl="department" class="departmentManagement" />
- <plugin acl="users" class="userManagement" />
+
+ <!-- This long ACL list is required to exclude the users menu entry when only
+ 'viewFaxEntries' permissions are set -->
+ <plugin acl="users/netatalk,users/environment,users/posixAccount,users/kolabAccount,users/phpscheduleitAccount,users/oxchangeAccount,users/proxyAccount,users/connectivity,users/pureftpdAccount,users/phpgwAccount,users/opengwAccount,users/pptpAccount,users/intranetAccount,users/webdavAccount,users/nagiosAccount,users/sambaAccount,users/groupware,users/mailAccount,users/user,users/scalixAccount,users/password,users/gofaxAccount,users/phoneAccount"
+ class="userManagement" />
<plugin acl="groups" class="groupManagement" />
+ <plugin acl="roles" class="roleManagement"/>
+ <plugin acl="acl" class="aclManagement" />
<plugin acl="ogroups" class="ogroupManagement" />
+ <plugin acl="sudo" class="sudoManagement" />
<plugin acl="application" class="applicationManagement" />
-{if $cv.enableMimeType}
<plugin acl="mimetypes" class="mimetypeManagement" />
-{else}
- <!-- <plugin acl="mimetypes" class="mimetypeManagement" /> -->
-{/if}
<plugin acl="devices" class="deviceManagement" />
- <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric" class="systems" />
- <!-- Use 'lock_dn' for dn
- 'lock_name' for name
- 'lock_type' for branch/freeze -->
-{if $cv.enableFAI_management}
- <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" />
-{else}
- <!-- <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile" class="faiManagement" /> -->
-{/if}
+ <plugin acl="terminal/termgeneric,workstation/workgeneric,server/servgeneric,phone/phoneGeneric,printer/printgeneric,component/componentGeneric,winworkstation/wingeneric,opsi/opsiGeneric" class="systemManagement" />
+ <!-- Use 'lockDn' for dn
+ 'lockName' for name
+ 'lockType' for branch/freeze -->
+ <plugin acl="fai/faiScript,fai/faiHook,fai/faiTemplate,fai/faiVariable,fai/faiPartitionTable,fai/faiPackage,fai/faiProfile,fai/faiManagement,opsi/opsiProperties" class="faiManagement" />
+ <plugin acl="opsi" class="opsiLicenses"/>
<plugin acl="gofaxlist" class="blocklist" />
<plugin acl="gofonmacro" class="goFonMacro" />
<plugin acl="gofonconference" class="phoneConferenceManagment" />
- <plugin acl="acl" class="aclManagement" />
- <plugin acl="sudo" class="sudoManagement" />
</section>
<!-- Section to enable addon plugins -->
<section name="Addons">
- <!-- <plugin acl="server/servservrepository,server/dakrepository,server/dakkeyring,server/dakqueue" class="dak_tabs" path="plugins/addons/dak" /> -->
- <plugin acl="addressbook" class="addressbook" />
- <plugin acl="mailqueue" class="mailqueue" />
- <plugin acl="faxreport" class="faxreport" />
- <plugin acl="fonreport" class="fonreport" />
- <plugin acl="logview" class="logview" />
+ <plugin acl="all/all" class="propertyEditor" />
+ <plugin acl="server/rSyslogServer" class="rsyslog" />
+<!-- <plugin acl="mailqueue" class="mailqueue" />-->
+ <plugin acl="users/viewFaxEntries:self,users/viewFaxEntries" class="faxreport" />
+ <plugin acl="users/viewFonEntries:self,users/viewFonEntries" class="fonreport" />
<plugin acl="gotomasses" class="gotomasses" />
<plugin acl="ldapmanager" class="ldif" />
</section>
</menu>
+ <!-- These entries will be rendered on the short-cut menu -->
+ <shortCutMenu>
+ <plugin acl="all" class="welcome" />
+ <!-- <plugin acl="all" class="dashBoard" />-->
+ <!-- <plugin acl="all" class="statistics" />-->
+ </shortCutMenu>
+
+ <!-- These entries will be rendered on the path navigator -->
+ <pathMenu>
+ <plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/groupware, users/user:self,users/scalixAccount:self,users/password:self,users/gofaxAccount:self,users/phoneAccount:self" class="MyAccount" />
+ <plugin acl="users/password:self" class="password" />
+ </pathMenu>
<!-- Tab definitions *******************************************************
-->
<!-- ACL dialog -->
+ <acltab>
+ <tab class="acl" name="ACL" />
+ </acltab>
+
<aclroletab>
- <tab class="aclRole" name="ACL Role" />
+ <tab class="aclrole" name="ACL Role" />
</aclroletab>
<!-- User dialog -->
<usertabs>
<tab class="user" name="Generic" />
- <tab class="posixAccount" name="Unix" />
- <tab class="environment" name="Environment" />
- <tab class="mailAccount" name="Mail" />
+ <tab class="posixAccount" name="POSIX" />
<tab class="sambaAccount" name="Samba" />
-{if $cv.use_netatalk} <tab class="netatalk" name="Netatalk" /> {else}<!-- <tab class="netatalk" name="Netatalk" /> --> {/if}
+ <tab class="netatalk" name="Netatalk" />
+ <tab class="mailAccount" name="Mail" />
+ <tab class="groupware" name="Groupware" />
+ <tab class="scalixAccount" name="Scalix" />
+ <tab class="environment" name="Desktop" />
<tab class="connectivity" name="Connectivity" />
<tab class="gofaxAccount" name="Fax" />
<tab class="phoneAccount" name="Phone" />
- <tab class="scalixAccount" name="Scalix" />
<tab class="nagiosAccount" name="Nagios" />
</usertabs>
+ <!-- User dialog -->
+ <MyAccountTabs>
+ <tab class="user" name="Generic" />
+ <tab class="posixAccount" name="POSIX" />
+ <tab class="sambaAccount" name="Samba" />
+ <tab class="netatalk" name="Netatalk" />
+ <tab class="mailAccount" name="Mail" />
+ <tab class="groupware" name="Groupware" />
+ <tab class="scalixAccount" name="Scalix" />
+ <tab class="environment" name="Desktop" />
+ <tab class="connectivity" name="Connectivity" />
+ <tab class="gofaxAccount" name="Fax" />
+ <tab class="phoneAccount" name="Phone" />
+ <tab class="nagiosAccount" name="Nagios" />
+ </MyAccountTabs>
+
+ <opsiLicenseTabs>
+ <tab class="licensePoolGeneric" name="Generic"/>
+ <tab class="licenseUsage" name="Usage"/>
+ </opsiLicenseTabs>
+
<!-- Group dialog -->
<grouptabs>
<tab class="group" name="Generic" />
- <tab class="environment" name="Environment" />
- <tab class="appgroup" name="Applications" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ <tab class="environment" name="Desktop" />
+ <tab class="appgroup" name="Startmenu" />
<tab class="mailgroup" name="Mail" />
</grouptabs>
<phonetabs>
<tab class="phoneGeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</phonetabs>
<!-- GOto plugins -->
<appstabs>
<tab class="application" name="Generic" />
- <tab class="applicationParameters" name="Options" />
+ <tab class="applicationParameters" name="Parameter" />
</appstabs>
<mimetabs>
<termtabs>
<tab class="termgeneric" name="Generic" />
- <tab class="termstartup" name="Startup" />
+ <tab class="termstartup" name="Recipe" />
<tab class="termservice" name="Devices" />
- <tab class="printgeneric" name="Printer" />
- <tab class="terminfo" name="Information" snmpcommunity="{$cv.optional.snmpcommunity}" />
- <!--<tab class="glpiAccount" name="Inventory" /> -->
+ <tab class="terminfo" name="Information" />
</termtabs>
<servtabs>
<tab class="servgeneric" name="Generic" />
- <tab class="workstartup" name="Startup" />
+ <tab class="workstartup" name="Recipe" />
<tab class="ServerService" name="Services" />
-{if $cv.enableFAI_management}
<tab class="faiSummaryTab" name="Deployment summary" />
- <tab class="goto_log_view" name="Installation logs" />
-{else}
- <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
- <!-- <tab class="goto_log_view" name="Installation logs" /> -->
-{/if}
- <tab class="terminfo" name="Information" snmpcommunity="{$cv.optional.snmpcommunity}" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
+ <tab class="gotoLogView" name="Installation logs" />
+ <tab class="terminfo" name="Information" />
</servtabs>
<worktabs>
<tab class="workgeneric" name="Generic" />
- <tab class="workstartup" name="Startup" />
+ <tab class="workstartup" name="Recipe" />
<tab class="workservice" name="Devices" />
<tab class="printgeneric" name="Printer" />
- <tab class="terminfo" name="Information" snmpcommunity="{$cv.optional.snmpcommunity}" />
-{if $cv.enableFAI_management}
+ <tab class="terminfo" name="Information" />
<tab class="faiSummaryTab" name="Deployment summary" />
- <tab class="goto_log_view" name="Installation logs" />
-{else}
- <!-- <tab class="faiSummaryTab" name="Deployment summary" /> -->
- <!-- <tab class="goto_log_view" name="Installation logs" /> -->
-{/if}
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
+ <tab class="gotoLogView" name="Installation logs" />
</worktabs>
<printtabs>
<tab class="printgeneric" name="Generic" />
- <!-- <tab class="glpiPrinterAccount" name="Inventory" /> -->
</printtabs>
<componenttabs>
<tab class="componentGeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</componenttabs>
<wintabs>
<tab class="wingeneric" name="Generic" />
- <!-- <tab class="glpiAccount" name="Inventory" /> -->
</wintabs>
<serverservice>
<tab class="goMailServer" />
-{if $cv.mail == "kolab"}
<tab class="servkolab" />
-{/if}
<tab class="goNtpServer" />
<tab class="servrepository" />
<tab class="goImapServer" />
<tab class="goKrbServer" />
<tab class="goFaxServer" />
<tab class="goFonServer" />
- <tab class="goLogDBServer" />
- <tab class="goGlpiServer" />
<tab class="goCupsServer" />
<tab class="goKioskService" />
- <tab class="goSyslogServer" />
<tab class="goTerminalServer" />
<tab class="goLdapServer" />
<tab class="goShareServer" />
-{if $cv.generic_settings.enableDHCP}
+ <tab class="gospamserver" />
+ <tab class="govirusserver" />
<tab class="servdhcp" />
-{/if}
-{if $cv.generic_settings.enableDNS}
<tab class="servdns" />
-{/if}
- <tab class="gosaLogServer" />
+ <tab class="rSyslogServer" />
</serverservice>
<!-- Department plugin -->
<deptabs>
<tab class="department" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</deptabs>
<organization_tabs>
<tab class="organization" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</organization_tabs>
<locality_tabs>
<tab class="locality" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</locality_tabs>
<country_tabs>
<tab class="country" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</country_tabs>
<dcobject_tabs>
<tab class="dcObject" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</dcobject_tabs>
+ <domain_tabs>
+ <tab class="domain" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ </domain_tabs>
+
+ <!-- Role tabs -->
+ <roletabs>
+ <tab class="roleGeneric" name="Generic"/>
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
+ </roletabs>
+
<ogrouptabs>
<tab class="ogroup" name="Generic" />
+ <tab class="DynamicLdapGroup" name="Dynamic object" />
</ogrouptabs>
- <!-- Debian archive management plugin -->
- <!--
- <dak_tabs>
- <tab class="dakrepository" name="Repository" />
- <tab class="dakqueue" name="Queue" />
- <tab class="dakkeyring" name="Key ring" />
- </dak_tabs>
- -->
-
<!-- Connectivity plugins -->
<connectivity>
-{if $cv.mail == "kolab"}
- <tab class='kolabAccount' />
-{/if}
+ <tab class='kolabAccount' />
<tab class="proxyAccount" />
<tab class="pureftpdAccount" />
<tab class="webdavAccount" />
<tab class="phpgwAccount" />
<tab class="intranetAccount" />
- <!--
- <tab class="opengwAccount"
- username="OGo"
- password=""
- database="OGo"
- datahost="localhost" />
- -->
<tab class="pptpAccount" />
<tab class="phpscheduleitAccount" />
- <tab class="oxchangeAccount" />
+ <tab class="oxchangeAccount" />
</connectivity>
<ldiftab>
<tab class="ldifexport" name="Export" />
<tab class="xlsexport" name="Excel Export" />
- <tab class="ldifimport" name="Import" />
- <tab class="csvimport" name="CSV Import" />
</ldiftab>
- <!-- FAI plugins -->
-{if $cv.enableFAI_management}
<faipartitiontabs>
<tab class="faiPartitionTable" name="Partitions" />
</faipartitiontabs>
<faiscripttabs>
- <tab class="faiScript" name="Script" />
+ <tab class="faiScript" name="Scripts" />
</faiscripttabs>
<faihooktabs>
<faipackagetabs>
<tab class="faiPackage" name="Packages" />
</faipackagetabs>
-{else}
- <!--
- <faipartitiontabs>
- <tab class="faiPartitionTable" name="Partitions" />
- </faipartitiontabs>
- <faiscripttabs>
- <tab class="faiScript" name="Script" />
- </faiscripttabs>
+ <opsitabs>
+ <tab class="opsiGeneric" name="Generic" />
+ <tab class="opsiSoftware" name="Hardware" />
+ <tab class="opsiHardware" name="Software" />
+ <tab class="licenseUsageByHost" name="License usage"/>
+ </opsitabs>
- <faihooktabs>
- <tab class="faiHook" name="Hooks" />
- </faihooktabs>
+ <opsiprodconfig>
+ <tab class="opsiProperties" name="Properties" />
+ <tab class="licenseByProduct" name="License usage"/>
+ </opsiprodconfig>
- <faivariabletabs>
- <tab class="faiVariable" name="Variables" />
- </faivariabletabs>
-
- <faitemplatetabs>
- <tab class="faiTemplate" name="Templates" />
- </faitemplatetabs>
-
- <faiprofiletabs>
- <tab class="faiProfile" name="Profiles" />
- <tab class="faiSummaryTab" name="Summary" />
- </faiprofiletabs>
-
- <faipackagetabs>
- <tab class="faiPackage" name="Packages" />
- </faipackagetabs>
- -->
-{/if}
-
-
- <!-- Logging plugin -->
- <logtabs>
- <tab class="logview" name="System logs" />
- <tab class="gosa_logview" name="GOsa logs" />
- </logtabs>
-
+ <!-- rSyslog plugin -->
+ <rsyslogtabs>
+ <tab class="rsyslog" name="System logs" />
+ </rsyslogtabs>
<!-- Main section **********************************************************
the gosa.conf(5) manual page.
-->
+ <!-- If you broke your setup using the propertyEditor, then set 'ignoreLdapProperties' to true. -->
<main default="{$cv.location}"
-{if $cv.optional.list_summary}
- list_summary="true"
-{else}
- list_summary="false"
-{/if}
-{if $cv.pwd_rules.pwminlen_active}
- pwminlen="{$cv.pwd_rules.pwminlen}"
-{/if}
-{if $cv.pwd_rules.pwdiffer_active}
- pwdiffer="{$cv.pwd_rules.pwdiffer}"
-{/if}
-{if $cv.pwd_rules.externalpwdhook_active}
- externalpwdhook="{$cv.pwd_rules.externalpwdhook}"
-{/if}
-{if $cv.errorlvl}
- displayerrors="true"
-{else}
- displayerrors="false"
-{/if}
-{if $cv.enable_schema_check}
- schema_check="true"
-{else}
- schema_check="false"
-{/if}
-{if $cv.generic_settings.enableCopyPaste}
- enableCopyPaste="true"
-{else}
- enableCopyPaste="false"
-{/if}
-{if $cv.optional.forceglobals}
- forceglobals="true"
-{else}
- forceglobals="false"
-{/if}
-{if $cv.optional.forcessl}
- forcessl="true"
-{else}
- forcessl="false"
-{/if}
-{if $cv.optional.ldapstats}
- ldapstats="true"
-{else}
- ldapstats="false"
-{/if}
-{if $cv.optional.warnssl}
- warnssl="true"
-{else}
- warnssl="false"
-{/if}
-{if $cv.optional.ppd_path_active}
- ppd_path="{$cv.optional.ppd_path}"
-{/if}
-{if $cv.optional.max_ldap_query_time_active}
- max_ldap_query_time="{$cv.optional.max_ldap_query_time}"
-{/if}
-{if $cv.optional.noprimarygroup}
- noprimarygroup="true"
-{/if}
-{if $cv.optional.mailQueueScriptPath_active}
- mailQueueScriptPath="{$cv.optional.mailQueueScriptPath}"
-{/if}
-{if $cv.optional.user_filter_cookie}
- save_filter="true"
-{else}
- save_filter="false"
-{/if}
-{if $cv.compressed}
- compressed="true"
-{else}
- compressed="false"
-{/if}
-{if $cv.optional.uniq_identifier_active }
- uniq_identifier="{$cv.optional.uniq_identifier}"
-{else}
- uniq_identifier=""
-{/if}
- lang="{$cv.lang_selected}"
- theme="{$cv.theme}"
- session_lifetime="{$cv.optional.session_lifetime}"
- compile="{$cv.optional.compile}"
- debuglevel="{$cv.optional.debuglevel}"
- smbhash='{$cv.samba_settings.smbhash}'
+ warnSSL="true"
+ forceSSL="false"
+ forceGlobals="true"
+ ignoreLdapProperties="false"
>
<!-- Location definition -->
<location name="{$cv.location}"
- hash="{$cv.encryption}"
- dnmode="{$cv.peopledn}"
- server="{$cv.connection}"
- people="{$cv.peopleou}"
- groups="{$cv.groupou}"
- gidbase="{$cv.uidbase}"
- uidbase="{$cv.uidbase}"
- logging="{$cv.generic_settings.logging}"
-{if $cv.optional.sudoou_active}
- sudoou="{$cv.optional.sudoou}"
-{/if}
-{if $cv.optional.login_attribute}
- login_attribute="{$cv.optional.login_attribute}"
-{else}
- login_attribute="uid"
-{/if}
-{if $cv.timezone}
- timezone="{$cv.timezone}"
-{/if}
-{if $cv.optional.strict_units}
- strict_units="true"
-{else}
- strict_units="false"
-{/if}
-{if $cv.krbsasl}
- krbsasl="true"
-{else}
- krbsasl="false"
-{/if}
-{if $cv.rfc2307bis}
- rfc2307bis="true"
-{else}
- rfc2307bis="false"
-{/if}
-{if $cv.include_personal_title}
- include_personal_title="true"
-{else}
- include_personal_title="false"
-{/if}
-{if $cv.base_hook_active}
- base_hook="{$cv.base_hook}"
-{/if}
-{if $cv.generic_settings.wws_ou_active}
- winstations="{$cv.generic_settings.wws_ou}"
-{/if}
-{if $cv.id_settings.idgen_active}
- idgen="{$cv.id_settings.idgen}"
-{/if}
-{if $cv.strict}
- strict="yes"
-{else}
- strict="no"
-{/if}
-{if $cv.id_settings.minid_active}
- minid="{$cv.id_settings.minid}"
-{/if}
-{if $cv.mail != "disabled"}
- mailMethod="{$cv.mail}"
-{if $cv.cyrusunixstyle}
- cyrusunixstyle="true"
-{else}
- cyrusunixstyle="false"
-{/if}
- mail_uattrib="{$cv.mail_attrib}"
-{if $cv.mail_settings.vacationdir_active}
- vacationdir="{$cv.mail_settings.vacationdir}"
-{/if}
-{/if}
-{if $cv.tls}
- tls="true"
-{/if}
-{if $cv.governmentmode}
- governmentmode="true"
-{else}
- governmentmode="false"
-{/if}
-{if $cv.sambaidmapping}
- sambaidmapping="true"
-{/if}
-{if $cv.account_expiration}
- account_expiration="true"
-{/if}
-{if $cv.samba_settings.samba_sid_active}
- SID="{$cv.samba_settings.samba_sid}"
-{/if}
-{if $cv.samba_settings.samba_rid_active}
- RIDBASE="{$cv.samba_settings.samba_rid_active}"
-{/if}
-{if $cv.generic_settings.snapshot_active}
- enable_snapshot="true"
-{if $cv.generic_settings.snapshot_base != ""}
- snapshot_base="{$cv.generic_settings.snapshot_base}"
-{/if}
-{if $cv.generic_settings.snapshot_user != ""}
- snapshot_user="{$cv.generic_settings.snapshot_user}"
-{/if}
-{if $cv.generic_settings.snapshot_password != ""}
- snapshot_password="{$cv.generic_settings.snapshot_password}"
-{/if}
-{if $cv.generic_settings.snapshot_server != ""}
- snapshot_server="{$cv.generic_settings.snapshot_server}"
-{/if}
-{/if}
-{if $cv.samba_version != 0}
- sambaversion="{$cv.samba_version}"
-{/if}
config="ou=gosa,ou=configs,ou=systems,{$cv.base}">
-
- <referral url="{$cv.connection}/{$cv.base}"
- admin="{$cv.admin}"
- password="{$cv.password}" />
-
+ <referral URI="{$cv.connection}/{$cv.base}"
+ adminDn="{$cv.admin}"
+ adminPassword="{$cv.password}" />
</location>
</main>
</conf>