X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=gosa-core%2Fcontrib%2Fgosa.conf.5;h=b67d8c96fecf576dab35a5b3513ebc87fc8a9f5e;hb=011352b53a4a94edff989cdda58fffd4720fc44e;hp=e028667625ff6aa05af98856839c2086b1a42e08;hpb=de499d6de1b048d292431325c6457bec959f1114;p=gosa.git diff --git a/gosa-core/contrib/gosa.conf.5 b/gosa-core/contrib/gosa.conf.5 index e02866762..b67d8c96f 100644 --- a/gosa-core/contrib/gosa.conf.5 +++ b/gosa-core/contrib/gosa.conf.5 @@ -27,7 +27,7 @@ information about several locations. .nf - + ... @@ -91,7 +91,7 @@ attribute. For every plugin, you can provide at least four additional hooks: .I postcreate, -.I postdelete, +.I postremove, .I postmodify and .I check. @@ -172,15 +172,15 @@ each location definition inside of this global definition. .nf
@@ -194,38 +194,38 @@ each location definition inside of this global definition. .B Generic options .PP -.B forceglobals +.B forceGlobals .I bool .PP The -.I forceglobals +.I forceGlobals statement enables PHP security checks to force register_global settings to be switched off. .PP -.B forcessl +.B forceSSL .I bool .PP The -.I forceglobals +.I forceSSL statement enables PHP security checks to force encrypted access to the web interface. GOsa will try to redirect to the same URL - just with https://. .PP -.B warnssl +.B warnSSL .I bool .PP The -.I warnssl +.I warnSSL statement enables PHP security checks to detect non encrypted access to the web interface. GOsa will display a warning in this case. .PP -.B uniq_identifier +.B modificationDetectionAttribute .I string .PP The -.I uniq_identifier +.I modificationDetectionAttribute statement enables GOsa to check if a entry currently being edited has been modified from someone else outside GOsa in the meantime. It will display an informative dialog then. It can be set to @@ -251,11 +251,11 @@ list. GOsa will not log anything, if the logging value is empty. .PP -.B login_attribute +.B loginAttribute .I string .PP The -.I login_attribute +.I loginAttribute statement tells GOsa which LDAP attribute is used as the login name during login. It can be set to .I uid, mail @@ -263,60 +263,60 @@ or .I both. .PP -.B enableCopyPaste +.B copyPaste .I bool .PP The -.I enableCopyPaste +.I copyPaste statement enables copy and paste for LDAP entries managed with GOsa. .PP -.B enable_snapshot +.B snapshots .I bool .PP The -.I enable_snapshot +.I snapshots statement enables a snapshot mechaism in GOsa. This enables you to save certain states of entries and restore them later on. .PP -.B snapshot_base +.B snapshotBase .I dn .PP The -.I snapshot_base +.I snapshotBase statement defines the base where snapshots should be stored inside of the LDAP. .PP -.B snapshot_server -.I url +.B snapshotURI +.I uri .PP The -.I snapshot_server -variable defines the LDAP URL for the server which is used to do object +.I snapshotURI +variable defines the LDAP URI for the server which is used to do object snapshots. .PP -.B snapshot_user +.B snapshotAdminDn .I dn .PP The -.I snapshot_user +.I snapshotAdminDn variable defines the user which is used to authenticate when connecting to -.I snapshot_server. +.I snapshotURI. .PP -.B snapshot_password +.B snapshotAdminPassword .I string .PP The -.I snapshot_password +.I snapshotAdminPassword variable defines the credentials which are used in combination with -.I snapshot_user +.I snapshotAdminDn and -.I snapshot_server +.I snapshotURI in order to authenticate. .PP @@ -329,11 +329,11 @@ statement defines the LDAP base, where GOsa stores management information, such as site wide locking and user notifications. .PP -.B compile +.B templateCompileDirectory .I path .PP The -.I compile +.I templateCompileDirectory statements defines the path, where the PHP templating engins .I smarty should store its compiled GOsa templates for improved speed. This path @@ -352,30 +352,30 @@ The value should be a unix conform timezone value like in /etc/timezone. .PP -.B governmentmode +.B honourIvbbAttributes .I bool .PP The -.I governmentmode +.I honourIvbbAttributes statement enables the IVBB mode inside of GOsa. You need the ivbb.schema file from used by german authorities. .PP -.B strict +.B strictNamingRules .I bool .PP The -.I strict +.I strictNamingRules statement enables strict checking of uids and group names. If you need characters like . or - inside of your accounts, set this to .I false. .PP -.B strict_units +.B honourUnitTags .I bool .PP The -.I strict_units +.I honourUnitTags statement enables checking of .I unitTag attributes when using administrative units. If this is set to @@ -396,11 +396,11 @@ on unix systems, you've to adjust your NSS configuration to use rfc2307bis style groups, too. .PP -.B ppd_path +.B ppdPath .I path .PP The -.I ppd_path +.I ppdPath variable defines where to store PPD files for the GOto environment plugins. .PP @@ -408,25 +408,25 @@ variable defines where to store PPD files for the GOto environment plugins. .I path .PP The -.I pppd_pathpd_path +.I resolutions variable defines a plain text file which contains additional resolutions to be shown in the environment and system plugins. .PP -.B htaccess_auth +.B htaccessAuthentication .I bool .PP The -.I htaccess_auth +.I htaccessAuthentication variable tells GOsa to use either htaccess authentication or LDAP authentication. This can be used if you want to use i.e. kerberos to authenticate the users. .PP -.B gosa_si -.I bool +.B gosaSupportURI +.I URI .PP The -.I gosa_si +.I gosaSupportURI defines the major gosa-si server host and the password for GOsa to connect to it. can be used if you want to use i.e. kerberos to authenticate the users. @@ -440,11 +440,11 @@ credentials@host:port .B Browser and display options -.B list_summary +.B listSummary .I true/false .PP The -.I list_summary +.I listSummary statement determines whether a status bar will be shown on the bottom of GOsa generated lists, displaying a short summary of type and number of elements in the list. @@ -459,30 +459,30 @@ statement sets the icon size in the main menu. Its value should be something like 48x48. .PP -.B compressed +.B sendCompressedOutput .I true/false .PP The -.I compressed +.I sendCompressedOutput statement determines whether PHP should send compressed HTML pages to browsers or not. This may increase or decrease the performance, depending on your network. .PP -.B save_filter +.B storeFilterSettings .I true/false .PP The -.I save_filter +.I storeFilterSettings statement determines whether GOsa should store filter and plugin settings inside of a cookie. .PP -.B lang +.B language .I string .PP The -.I lang +.I language statement defines the default language used by GOsa. Normally GOsa autodetects the language from the browser settings. If this is not working or you want to force the language, just add the language code (i.e. de for german) here. @@ -500,21 +500,21 @@ within themes. Take a look at the GOsa for more information. .PP -.B session_lifetime +.B sessionLifetime .I int .PP The -.I session_lifetime +.I sessionLifetime value defines when a session will expire in seconds. For Debian systems, this will not work because the sessions will be removed by a cron job instead. Please modify the value inside of your php.ini instead. .PP -.B noprimarygroup +.B primaryGroupFilter .I bool .PP The -.I noprimarygroup +.I primaryGroupFilter variable enables or disables the group filter to show primary user groups. It is time consuming to evaluate which groups are primary and which are not. So you may want to set it to @@ -522,11 +522,11 @@ want to set it to if your group plugin is slow. .PP -.B ie_png_workaround +.B iePngWorkaround .I bool .PP The -.I ie_png_workaround +.I iePngWorkaround variable enables or disables a workaround for IE < 7 in order to display transparent PNG files correctly. This drastically slows down browsing. Please use Firefox or Opera instead. @@ -536,29 +536,29 @@ instead. .B Password options .PP -.B pwminlen +.B passwordMinLength .I integer .PP The -.I pwminlen +.I passwordMinLength statement determines whether a newly entered password has to be of a minimum length. .PP -.B pwdiffer +.B passwordMinDiffer .I integer .PP The -.I pwdiffer +.I passwordMinDiffer statement determines whether a newly entered password has to be checked to have at least n different characters. .PP -.B externalpwdhook +.B passwordHook .I path .PP The -.I externalpwdhook +.I passwordHook can specify an external script to handle password settings at some other location besides the LDAP. It will be called this way: @@ -566,20 +566,20 @@ location besides the LDAP. It will be called this way: /path/to/your/script "username" "oldpassword" "newpassword" .fi -.B account_expiration +.B handleExpiredAccounts .I bool .PP The -.I account_expiration +.I handleExpiredAccounts statement enables shadow attribute tests during the login to the GOsa web interface and forces password renewal or account lockout. .PP -.B krbsasl +.B useSaslForKerberos .I bool .PP The -.I krbsasl +.I useSaslForKerberos statement defines the way the kerberos realm is stored in the .I userPassword attribute. Set it to @@ -594,37 +594,37 @@ needed from time to time. .B LDAP options .PP -.B max_ldap_query_time +.B ldapMaxQueryTime .I integer .PP The -.I max_ldap_query_time +.I ldapMaxQueryTime statement tells GOsa to stop LDAP actions if there is no answer within the specified number of seconds. .PP -.B schema_check +.B schemaCheck .I bool .PP The -.I schema_check +.I schemaCheck statement enables or disables schema checking during login. It is recommended to switch this on in order to let GOsa handle object creation more efficient. .PP -.B tls +.B ldapTLS .I bool .PP The -.I tls +.I ldapTLS statement enables or disables TLS operating on LDAP connections. .PP -.B dnmode +.B accountPrimaryAttribute .I cn/uid .PP The -.I dnmode +.I accountPrimaryAttribute option tells GOsa how to create new accounts. Possible values are .I uid and @@ -638,58 +638,77 @@ In the second case, GOsa creates cn style DN entries: cn=Foo Bar,ou=staff,dc=example,dc=net .fi If you choose "cn" to be your -.I dnmode +.I accountPrimaryAttribute you can decide whether to include the personal title in your dn by selecting -.I include_personal_title. +.I personalTitleInDN. +.PP + +.B accountRDN +.I pattern .PP +The +.I accountRDN +option tells GOsa to use a placeholder pattern for generating account +RDNs. A pattern can include attribute names prefaced by a % and normal +text: +.nf +accountRDN="cn=%sn %givenName" +.fi +This will generate a RDN consisting of cn=.... filled with surname and +given name of the edited account. This option disables the use of +.I accountPrimaryAttribute +and +.I personalTitleInDn +in your config. The latter attributes are maintained for compatibility. + -.B include_personal_title +.B personalTitleInDN .I bool .PP The -.I include_personal_title +.I personalTitleInDN option tells GOsa to include the personal title in user DNs when -.I dnmode +.I accountPrimaryAttribute is set to "cn". -.B people +.B userRDN .I string .PP The -.I people +.I userRDN statement defines the location where new accounts will be created inside of defined departments. The default is .I ou=people. .PP -.B groups +.B groupsRDN .I string .PP The -.I groups +.I groupsRDN statement defines the location where new groups will be created inside of defined departments. The default is .I ou=groups. .PP -.B sudoou +.B sudoRDN .I string .PP The -.I sudoou +.I sudoRDN statement defines the location where new groups will be created inside of defined departments. The default is .I ou=groups. .PP -.B winstations +.B sambaMachineAccountRDN .I string .PP This statement defines the location where GOsa looks for new samba workstations. .PP -.B ogroupou +.B ogroupRDN .I string .PP This statement defines the location where GOsa creates new object groups inside of defined @@ -697,7 +716,7 @@ departments. Default is .I ou=groups. .PP -.B serverou +.B serverRDN .I string .PP This statement defines the location where GOsa creates new servers inside of defined @@ -705,7 +724,7 @@ departments. Default is .I ou=servers. .PP -.B terminalou +.B terminalRDN .I string .PP This statement defines the location where GOsa creates new terminals inside of defined @@ -713,7 +732,7 @@ departments. Default is .I ou=terminals. .PP -.B workstationou +.B workstationRDN .I string .PP This statement defines the location where GOsa creates new workstations inside of defined @@ -721,7 +740,7 @@ departments. Default is .I ou=workstations. .PP -.B printerou +.B printerRDN .I string .PP This statement defines the location where GOsa creates new printers inside of defined @@ -729,7 +748,7 @@ departments. Default is .I ou=printers. .PP -.B componentou +.B componentRDN .I string .PP This statement defines the location where GOsa creates new network components inside of defined @@ -737,7 +756,7 @@ departments. Default is .I ou=components. .PP -.B phoneou +.B phoneRDN .I string .PP This statement defines the location where GOsa creates new phones inside of defined @@ -745,7 +764,7 @@ departments. Default is .I ou=phones. .PP -.B conferenceou +.B phoneConferenceRDN .I string .PP This statement defines the location where GOsa creates new phone conferences inside of defined @@ -753,7 +772,7 @@ departments. Default is .I ou=conferences. .PP -.B blocklistou +.B faxBlocklistRDN .I string .PP This statement defines the location where GOsa creates new fax blocklists inside of defined @@ -761,7 +780,7 @@ departments. Default is .I ou=blocklists. .PP -.B incomingou +.B systemIncomingRDN .I string .PP This statement defines the location where GOsa looks for new systems to be joined to the LDAP. @@ -769,7 +788,7 @@ Default is .I ou=incoming. .PP -.B systemsou +.B systemRDN .I string .PP This statement defines the base location for servers, workstations, terminals, phones and @@ -777,11 +796,77 @@ components. Default is .I ou=systems. .PP -.B ldap_filter_nesting_limit +.B ogroupRDN +.I string +.PP +This statement defines the location where GOsa looks for object groups. +Default is +.I ou=groups. +.PP + +.B aclRoleRDN +.I string +.PP +This statement defines the location where GOsa stores ACL role definitions. +Default is +.I ou=aclroles. +.PP + +.B phoneMacroRDN +.I string +.PP +This statement defines the location where GOsa stores phone macros for use with the Asterisk +phone server. +Default is +.I ou=macros,ou=asterisk,ou=configs,ou=systems. +.PP + +.B faiBaseRDN +.I string +.PP +This statement defines the location where GOsa looks for FAI settings. +Default is +.I ou=fai,ou=configs,ou=systems. +.PP + +.B faiScriptRDN, faiHookRDN, faiTemplateRDN, faiVariableRDN, faiProfileRDN, faiPackageRDN, faiPartitionRDN +.I string +.PP +These statement define the location where GOsa stores FAI classes. The complete base for the +corresponding class is an additive of +.B faiBaseRDN +an and this value. +.PP + +.B deviceRDN +.I string +.PP +This statement defines the location where GOsa looks for devices. +Default is +.I ou=devices. +.PP + +.B mimetypeRDN +.I string +.PP +This statement defines the location where GOsa stores mime type definitions. +Default is +.I ou=mimetypes. +.PP + +.B applicationRDN +.I string +.PP +This statement defines the location where GOsa stores application definitions. +Default is +.I ou=apps. +.PP + +.B ldapFilterNestingLimit .I integer .PP The -.I ldap_filter_nesting_limit +.I ldapFilterNestingLimit statement can be used to speed up group handling for groups with several hundreds of members. The default behaviour is, that GOsa will resolv the memberUid values in a group to real names. To achieve this, it writes a single filter to minimize searches. Some LDAP servers (namely @@ -789,20 +874,20 @@ Sun DS) simply crash when the filter gets too big. You can set a member limit, w stop to do these lookups. .PP -.B sizelimit +.B ldapSizelimit .I integer .PP The -.I sizelimit +.I ldapSizelimit statement tells GOsa to retrieve the specified maximum number of results. The user will get a warning, that not all entries were shown. .PP -.B recursive +.B ldapFollowReferrals .I bool .PP The -.I recursive +.I ldapFollowReferrals statement tells GOsa to follow LDAP referrals. .PP .PP @@ -810,48 +895,85 @@ statement tells GOsa to follow LDAP referrals. .B Account creation options .PP -.B uidbase +.B uidNumberBase .I integer .PP The -.I uidbase +.I uidNumberBase statement defines where to start looking for a new free user id. This should be synced with your .I adduser.conf -to avoid overlapping uidNumber values between local and LDAP based lookups. The uidbase +to avoid overlapping uidNumber values between local and LDAP based lookups. The uidNumberBase can even be dynamic. Take a look at the -.I base_hook +.I baseIdHook definition below. .PP -.B gidbase +.B gidNumberBase .I integer .PP The -.I gidbase +.I gidNumberBase statement defines where to start looking for a new free group id. This should be synced with your .I adduser.conf -to avoid overlapping gidNumber values between local and LDAP based lookups. The gidbase +to avoid overlapping gidNumber values between local and LDAP based lookups. The gidNumberBase can even be dynamic. Take a look at the -.I base_hook +.I nextIdHook definition below. .PP -.B minid +.B idAllocationMethod +.I traditional/pool +.PP +The +.I idAllocationMethod +statement defines how GOsa generates numeric user and group id values. If it is set to +.I traditional +GOsa will do create a lock and perform a search for the next free ID. The lock will be +removed after the procedure completes. +.I pool +will use the sambaUnixIdPool objectclass settings inside your LDAP. This one is unsafe, +because it does not check for concurrent LDAP access and already used IDs in this range. +On the other hand it is much faster. +.PP + +.B minId .I integer .PP The -.I minid +.I minId statement defines the minimum assignable user or group id to avoid security leaks with -uid 0 accounts. +uid 0 accounts. This is used for the +.I traditional +method +.PP + +.B uidNumberPoolMin/gidNumberPoolMin +.I integer +.PP +The +.I uidNumberPoolMin/gidNumberPoolMin +statement defines the minimum assignable user/group id for use with the +.I pool +method. +.PP + +.B uidNumberPoolMax/gidNumberPoolMax +.I integer +.PP +The +.I uidNumberPoolMin/gidNumberPoolMin +statement defines the highest assignable user/group id for use with the +.I pool +method. .PP -.B base_hook +.B nextIdHook .I path .PP The -.I base_hook +.I nextIdHook statement defines a script to be called for finding the next free id for users or groups externaly. It gets called with the current entry "dn" and the attribute to be ID'd. It should return an integer value. @@ -869,11 +991,11 @@ and These values will be overridden when using templates. .PP -.B idgen +.B idGenerator .I string .PP The -.I idgen +.I idGenerator statement describes an automatic way to generate new user ids. There are two basic functions supported - which can be combined: @@ -884,7 +1006,7 @@ functions supported - which can be combined: down to a number of characters, specified in []. I.e. .nf - idgen="{%sn}-{%givenName[2-4]}" + idGenerator="{%sn}-{%givenName[2-4]}" .fi will generate an ID using the full surename, adding a dash, and adding at @@ -897,14 +1019,21 @@ functions supported - which can be combined: I.e. specifying .nf - idgen="acct{id:3}" + idGenerator="acct{id:3}" .fi will generate a three digits id with the next free entry appended to "acct". .nf - idgen="ext{id#3}" + idGenerator="acct{id!1}" +.fi + + will generate a one digit id with the next free entry appended to + "acct" - if needed. + +.nf + idGenerator="ext{id#3}" .fi will generate a three digits random number appended to "ext". @@ -914,39 +1043,30 @@ functions supported - which can be combined: .B Samba options .PP -.B sid +.B sambaSID .I string .PP The -.I sid +.I sambaSID statement defines a samba SID if not available inside of the LDAP. You can retrieve the current sid by .I net getlocalsid. .PP -.B ridbase +.B sambaRidBase .I integer .PP The -.I ridbase +.I sambaRidBase statement defines the base id to add to ordinary sid calculations - if not available inside of the LDAP. .PP -.B sambaversion -.I 2/3 -.PP -The -.I sambaversion -statement defines the version of samba you want to write LDAP entries for. Be sure -to include the correct schema in this case. Valid values are 2 and 3. -.PP - -.B smbhash +.B sambaHashHook .I path .PP The -.I smbhash +.I sambaHashHook statement contains an executable to generate samba hash values. This is required for password synchronization, but not required if you apply gosa-si services. If you don't have mkntpasswd from the samba distribution installed, you can use @@ -969,16 +1089,16 @@ setup this can drastically improve the windows login performance. .B Asterisk options .PP -.B ctihook +.B ctiHook .I path .PP The -.I ctihook +.I ctiHook statement defines a script to be executed if someone clicks on a phone number inside of the addressbook plugin. It gets called with two parameters: .nf -ctihook $source_number $destination_number +ctiHook $source_number $destination_number .fi This script can be used to do automatted dialing from the addressbook. @@ -988,7 +1108,7 @@ This script can be used to do automatted dialing from the addressbook. .B Mail options .PP .B mailMethod -.I cyrus/kolab/golab/sendmail +.I Cyrus/SendmailCyrus/Kolab/Kolab22 .PP The .I mailMethod @@ -996,54 +1116,113 @@ statement tells GOsa which mail method the setup should use to communicate with a possible mail server. Leave this undefined if your mail method does not match the predefined ones. -.I cyrus +.I Cyrus maintains accounts and sieve scripts in cyrus servers. -.I kolab +.I Kolab/Kolab22 is like cyrus, but lets the kolab daemon maintain the accounts. -.I golab is like cyrus - just with kolab attributes. -.I sendmail just disables everything which is IMAP dependent. +.I SendmailCyrus is based on sendmail LDAP attributes. .PP -.B cyrusunixstyle +.B cyrusUseSlashes .I bool .PP The -.I cyrusunixstyle +.I cyrusUseSlashes statement determines if GOsa should use "foo/bar" or "foo.bar" namespaces in IMAP. Unix style is with slashes. -.B additionalrestrictionfilters +.B cyrusDeleteMailbox +.I bool +.PP +The +.I cyrusDeleteMailbox +statement determines if GOsa should remove the mailbox from your IMAP +server or keep it after the account is deleted in LDAP. + +.B postfixRestrictionFilters .I path .PP The -.I additionalrestrictionfilters +.I postfixRestrictionFilters statement defines a file to include for the postfix module in order to display user defined restriction filters. -.B additionalprotocols +.B postfixProtocols .I path .PP The -.I additionalprotocols +.I postfixProtocols statement defines a file to include for the postfix module in order to display user defined protocols. -.B mail_attrib +.B mailAttribute .I mail/uid .PP The -.I mail_attrib +.I mailAttribute statement determines which attribute GOsa will use to create accounts. Valid values are .I mail and .I uid. -.B vacationdir +.B imapTimeout +.I Integer (default 10) +.PP +The +.I imapTimeout +statement sets the connection timeout for imap actions. + +.B mailFolderCreation +Every mail method has its own way to create mail accounts like +.I share/development +or +.I shared.development@example.com +which is used to identify the accounts, set quotas or add acls. + +To override the methods default account creation syntax, you can set the +.I mailFolderCreation +option. + +.I Examples + +.nf + mailFolderCreation="%prefix%%cn%" => "shared.development" + mailFolderCreation="my-prefix.%cn%%domain%" => "my-prefix.development@example.com"> +.fi + +.I Placeholders + +.nf + %prefix% The methods default prefix. (Depends on cyrusUseSlashes=FALSE/TRUE) + %cn% The groups/users cn. + %uid% The users uid. + %mail% The objects mail attribute. + %domain% The domain part of the objects mail attribute. + %mailpart% The user address part of the mail address. + %uattrib% Depends on mailAttribute="uid/mail". +.fi + + +.B mailUserCreation +This attribute allows to override the user account creation syntax, see +the +.I mailFolderCreation +description for more details. + +.I Examples + +.nf + mailUserCreation="%prefix%%uid%" => "user.foobar" + mailUserCreation=my-prefix.%uid%%domain%" => "my-prefix.foobar@example.com" +.fi + + +.B vacationTemplateDirectory .I path .PP The -.I vacationdir +.I vacationTemplateDirectory statement sets the path where GOsa will look for vacation message templates. Default is /etc/gosa/vacation. @@ -1070,7 +1249,7 @@ The statement tells GOsa to show PHP errors in the upper part of the screen. This should be disabled in productive deployments, because there might be some important passwords arround. -.pp +.PP .B ldapstats .I bool @@ -1079,16 +1258,16 @@ The .I ldapstats statement tells GOsa to track LDAP timing statistics to the syslog. This may help to find indexing problems or bad search filters. -.pp +.PP -.B ignore_acl +.B ignoreAcl .I dn .PP The -.I ignore_acl +.I ignoreAcl value tells GOsa to ignore complete ACL sets for the given DN. Add your DN here and you'll be able to restore accidently dropped ACLs. -.pp +.PP .B debuglevel .I integer @@ -1113,7 +1292,11 @@ DEBUG_SESSION = 32 DEBUG_CONFIG = 64 DEBUG_ACL = 128 -.pp + +DEBUG_SI = 256 + +DEBUG_MAIL = 512 +.PP .SH LDAP resource definition @@ -1126,13 +1309,13 @@ These entries define the way how to connect to some directory service. .B Example: .nf - .fi -.I url -is a valid LDAP url extendet by the base this referral is responsible for. +.I uri +is a valid LDAP uri extendet by the base this referral is responsible for. .I admin is the DN which has the permission to write LDAP entries. And .I password @@ -1141,6 +1324,103 @@ is the corresponding password for this DN. You can define a set of referrals if you have several server to connect to. +.SH Settings for the environment plugin + +In order to make full use of the environment plugin, you may want +to define the location where kiosk profiles will be stored on the +servers harddisk. + +This is done by the +.I kioskPath +keyword defined within the +.I environment +class definition inside your gosa.conf. + +.B Example: + +.nf + +.fi + +Make sure, that this path is writeable by GOsa. + +.SH Settings for the FAI plugin + +The FAI plugin can be used in a way that it generates branched or +freezed releases inside your repository. Specifying the +.I postcreate +and +.I postmodify +keywords in the +.I servrepository +definition, calls the provided script as a hook when adding or +removing branches. This script should do the rest inside of your +repository. + +.B Example: + +.nf +