fusiondirectory.conf: Fusiondirectory configuration file

DESCRIPTION

The fusiondirectory.conf file is a \s-1XML\s0 style configuration file. It is parsed by FusionDirectory during log in. The file may contain extra tabs and newlines for formatting purposes. Tag keywords in the file are case-insensitive. Comments should be placed outside of \s-1XML\s0 tags and should be encapsulated inside of  tags.

The fusiondirectory.conf file can be used to configure the access control of the FusionDirectory webinterface.

Configuration layout

The configuration has to be specified inside of the <conf> tags. It is composed by a main configuration - including information about several locations.

Layout example:

<?xml version=\*(L"1.0\*(R"?>

   <conf configVersion="...." >

     <!-- Global setup -->
     <main>

        <!-- Location specific setups -->
        <location name="">
    ...
        </location>

     </main>

   </conf>

Main section

The main section defines global settings, which might be overridden by each location definition inside of this global definition.

Example layout:

<location name="Example Net" logging="TRUE" forceSSL="TRUE" ...

</location>

</main>

Main section options

forceSSL bool: The forceSSL statement enables \s-1PHP\s0 security checks to force encrypted access to the web interface. FusionDirectory will try to redirect to the same \s-1URL\s0 just with https://.
logging bool: The logging statement enables event logging on FusionDirectory side. Setting it to true, FusionDirectory will log every action a user performs via syslog. If you use rsyslog and configure it to mysql logging, you can browse all events within FusionDirectory. FusionDirectory will not log anything, if the logging value is empty or set to false.
templateCompileDirectory path: The templateCompileDirectory statements defines the path, where the \s-1PHP\s0 templating engins smarty should store its compiled FusionDirectory templates for improved speed. This path needs to be writeable by the user your webserver is running with.
ignoreAcl dn: The ignoreAcl value tells FusionDirectory to ignore complete \s-1ACL\s0 sets for the given \s-1DN\s0. Add your \s-1DN\s0 here and you'll be able to restore accidently dropped ACLs.
displayerrors bool: The displayerrors statement tells FusionDirectory to show \s-1PHP\s0 errors in the upper part of the screen. This should be disabled in productive deployments, because there might be some important passwords arround.

Location section options

name string: The name of this location section that will appear in the dropdown on FusionDirectory homepage
config dn: The config statement defines the \s-1LDAP\s0 base, where FusionDirectory stores management information, such as site wide locking and user notifications.
debuglevel integer: The debuglevel value tells FusionDirectory to display certain information on each page load. Value is an \s-1OR\s0 combination of the following byte values : \s-1DEBUG_TRACE\s0 = 1 \s-1DEBUG_LDAP\s0 = 2 \s-1DEBUG_DB\s0 = 4 \s-1DEBUG_SHELL\s0 = 8 \s-1DEBUG_POST\s0 = 16 \s-1DEBUG_SESSION\s0 = 32 \s-1DEBUG_CONFIG\s0 = 64 \s-1DEBUG_ACL\s0 = 128 \s-1DEBUG_ARGONAUT\s0 = 256 \s-1DEBUG_MAIL\s0 = 512

\s-1LDAP\s0 options

ldapTLS bool: The ldapTLS statement enables or disables \s-1TLS\s0 operating on \s-1LDAP\s0 connections.
ldapFollowReferrals bool: The ldapFollowReferrals statement tells FusionDirectory to follow \s-1LDAP\s0 referrals.

\s-1LDAP\s0 resource definition

For every location you define inside your fusiondirectory.conf, you need at least one entry of the type referral. These entries define the way how to connect to some directory service.

Example:

uri is a valid \s-1LDAP\s0 uri extendet by the base this referral is responsible for. admin is the \s-1DN\s0 which has the permission to write \s-1LDAP\s0 entries. And password is the corresponding password for this \s-1DN\s0. You can define a set of referrals if you have several server to connect to.

fusiondirectory.conf (1)