<pre><?xml version="1.0" encoding="UTF-8"?> <configuration> <site> <!-- siteName: Name of site used in the page titles. Default: SeedDMS - footNote: Message to display at the bottom of every page - printDisclaimer: if true the disclaimer message the lang.inc files will be print on the bottom of the page - language: default language (name of a subfolder in folder "languages") - theme: default style (name of a subfolder in folder "styles") --> <displaysiteName="SeedDMS"footNote="SeedDMS free document management system - www.seeddms.org"printDisclaimer="true"language="en_GB"theme="bootstrap"previewWidthList="40"previewWidthDetail="100"availablelanguages=""showFullPreview="false"convertToPdf="false"previewWidthMenuList="40"previewWidthDropFolderList="100"maxItemsPerPage="0"incItemsPerPage="0"> </display> <!-- strictFormCheck: Strict form checking. If set to true, then all fields in the form will be checked for a value. If set to false, then (most) comments and keyword fields become optional. Comments are always required when submitting a review or overriding document status. - viewOnlineFileTypes: files with one of the following endings can be viewed online (USE ONLY LOWER CASE CHARACTERS) - enableConverting: enable/disable converting of files - enableEmail: enable/disable automatic email notification - enableUsersView: enable/disable group and user view for all users - enableFullSearch: false to don't use fulltext search - enableLanguageSelector: false to don't show the language selector after login - enableClipboard: false to hide the clipboard - enableFolderTree: false to don't show the folder tree - expandFolderTree: 0 to start with tree hidden - 1 to start with tree shown and first level expanded - 2 to start with tree shown fully expanded - stopWordsFile: path to stop word file for indexer - sortUsersInList: how to sort users in lists ('fullname' or '' (default)) --> <editionstrictFormCheck="false"viewOnlineFileTypes=".txt;.text;.html;.htm;.xml;.pdf;.gif;.png;.jpg;.jpeg"enableConverting="true"enableEmail="true"enableUsersView="true"enableFullSearch="true"enableClipboard="false"enableFolderTree="true"expandFolderTree="1"enableLanguageSelector="true"stopWordsFile=""sortUsersInList=""enableDropUpload="false"enableRecursiveCount="false"maxRecursiveCount="0"enableThemeSelector="false"fullSearchEngine="sqlitefts"sortFoldersDefault="u"editOnlineFileTypes=""enableMenuTasks="false"enableHelp="false"defaultSearchMethod="database"libraryFolder="0"maxSizeForFullText="0"showSingleSearchHit="false"enableSessionList="false"enableDropFolderList="false"enableMultiUpload="false"defaultDocPosition="end"> </edition> <!-- enableCalendar: enable/disable calendar - calendarDefaultView: calendar default view ("w" for week,"m" for month,"y" for year) - firstDayOfWeek: first day of the week (0=sunday, 6=saturday) --> <calendarenableCalendar="true"calendarDefaultView="y"firstDayOfWeek="0"> </calendar> <webdavenableWebdavReplaceDoc="true"/></site> <system> <!-- rootDir: Path to where SeedDMS is located - httpRoot: The relative path in the URL, after the domain part. Do not include the - http:// prefix or the web host name. e.g. If the full URL is - http://www.example.com/seeddms/, set $_httpRoot = "/seeddms/". - If the URL is http://www.example.com/, set $_httpRoot = "/". - contentDir: Where the uploaded files are stored (best to choose a directory that - is not accessible through your web-server) - stagingDir: Where partial file uploads are saved - luceneDir: Where the lucene fulltext index iѕ saved - logFileEnable: set false to disable log system - logFileRotation: the log file rotation (h=hourly, d=daily, m=monthly) - enableLargeFileUpload: support for jumploader - partitionsize: size of chunk uploaded by jumploader - dropFolderDir: where files for document upload are located - cacheDir: where the preview images are saved --> <serverrootDir="/var/www/html/seeddms51x/seeddms/"httpRoot="/seeddms51x/seeddms/"contentDir="/var/www/html/seeddms51x/data/"stagingDir="/var/www/html/seeddms51x/data/staging/"luceneDir="/var/www/html/seeddms51x/data/lucene/"logFileEnable="true"logFileRotation="d"enableLargeFileUpload="false"partitionSize="2000000"cacheDir="/var/www/html/seeddms51x/data/cache/"dropFolderDir=""backupDir=""repositoryUrl=""maxUploadSize=""enableXsendfile="false"> </server> <!-- enableGuestLogin: If you want anybody to login as guest, set the following line to true - note: guest login should be used only in a trusted environment - enablePasswordForgotten: Allow users to reset their password - restricted: Restricted access: only allow users to log in if they have an entry in the local database (irrespective of successful authentication with LDAP). - enableUserImage: enable users images - disableSelfEdit: if true user cannot edit his own profile - passwordStrength: minimum strength of password, set to 0 to disable - passwordExpiration: number of days after password expires - passwordHistory: number of remembered passwords - passwordStrengthAlgorithm: algorithm used to calculate password strenght (simple or advanced) - encryptionKey: arbitrary string used for creating identifiers --> <authenticationenableGuestLogin="false"enablePasswordForgotten="false"restricted="true"enableUserImage="false"disableSelfEdit="false"passwordStrength="0"passwordStrengthAlgorithm="simple"passwordExpiration="10"passwordHistory="0"loginFailure="0"autoLoginUser="0"quota="0"undelUserIds=""encryptionKey="cfecb42d13f2e1666cddde56991a2cbf"cookieLifetime="0"enableGuestAutoLogin="false"defaultAccessDocs="0"> <connectors> <!-- ***** CONNECTOR LDAP ***** - enable: enable/disable connector - type: type of connector ldap / AD - host: hostname of the authentification server - URIs are supported, e.g.: ldaps://ldap.host.com - port: port of the authentification server - baseDN: top level of the LDAP directory tree --> <connectorenable="false"type="ldap"host="ldaps://ldap.host.com"port="389"baseDN=""bindDN=""bindPw=""> </connector> <!-- ***** CONNECTOR Microsoft Active Directory ***** - enable: enable/disable connector - type: type of connector ldap / AD - host: hostname of the authentification server - port: port of the authentification server - baseDN: top level of the LDAP directory tree - accountDomainName: sample: example.com --> <connectorenable="false"type="AD"host="ldap.example.com"port="389"baseDN=""accountDomainName="example.com"bindDN=""bindPw=""> </connector> </connectors> </authentication> <!-- - dbDriver: DB-Driver used by adodb (see adodb-readme) - dbHostname: DB-Server - dbDatabase: database where the tables for seeddms are stored (optional - see adodb-readme) - dbUser: username for database-access - dbPass: password for database-access --> <databasedbDriver="mysql"dbHostname="localhost"dbDatabase="seeddms"dbUser="seeddms"dbPass="ied^ieY6xoquu"doNotCheckVersion="false"> </database> <!-- smtpServer: SMTP Server hostname - smtpPort: SMTP Server port - smtpSendFrom: Send from --> <smtpsmtpServer="localhost"smtpPort="25"smtpSendFrom="seeddms@localhost"smtpUser=""smtpPassword=""/> </system> <advanced> <!-- siteDefaultPage: Default page on login. Defaults to out/out.ViewFolder.php - rootFolderID: ID of root-folder (mostly no need to change) - titleDisplayHack: Workaround for page titles that go over more than 2 lines. --> <displaysiteDefaultPage=""rootFolderID="1"titleDisplayHack="true"showMissingTranslations="false"> </display> <!-- guestID: ID of guest-user used when logged in as guest (mostly no need to change) - adminIP: if enabled admin can login only by specified IP addres, leave empty to avoid the control - NOTE: works only with local autentication (no LDAP) --> <authenticationguestID="2"adminIP=""> </authentication> <!-- enableAdminRevApp: false to don't list administrator as reviewer/approver - versioningFileName: the name of the versioning info file created by the backup tool - workflowMode: 'traditional' or 'advanced' - enableVersionDeletion: allow to delete versions after approval - enableVersionModification: allow to modify versions after approval - enableDuplicateDocNames: allow duplicate names in a folder --> <editionenableAdminRevApp="false"versioningFileName="versioning_info.txt"workflowMode="traditional"enableVersionDeletion="true"enableVersionModification="true"enableDuplicateDocNames="true"enableOwnerRevApp="false"enableSelfRevApp="false"presetExpirationDate=""overrideMimeType="false"initialDocumentStatus="0"enableAcknowledgeWorkflow=""enableRevisionWorkflow=""advancedAcl="false"enableUpdateRevApp="false"removeFromDropFolder="false"allowReviewerOnly="false"> </edition> <!-- enableNotificationAppRev: true to send notifation if a user is added as a reviewer or approver --> <notificationenableNotificationAppRev="true"enableOwnerNotification="false"enableNotificationWorkflow="false"> </notification> <!-- coreDir: Path to SeedDMS_Core (optional) - luceneClassDir: Path to SeedDMS_Lucene (optional) - contentOffsetDir: To work around limitations in the underlying file system, a new - directory structure has been devised that exists within the content - directory ($_contentDir). This requires a base directory from which - to begin. Usually leave this to the default setting, 1048576, but can - be any number or string that does not already exist within $_contentDir. - maxDirID: Maximum number of sub-directories per parent directory. Default: 0, use 31998 (maximum number of dirs in ext3) for a multi level content directory. - updateNotifyTime: users are notified about document-changes that took place within the last "updateNotifyTime" seconds - extraPath: Path to addtional software. This is the directory containing additional software like the adodb directory, or the pear Log package. This path will be added to the php include path --> <servercoreDir=""luceneClassDir=""contentOffsetDir="1048576"maxDirID="0"updateNotifyTime="86400"extraPath="/var/www/html/seeddms51x/pear/"maxExecutionTime="30"cmdTimeout="10"> </server> <converterstarget="fulltext"> <convertermimeType="application/pdf">pdftotext -nopgbrk %s - | sed -e 's/ [a-zA-Z0-9.]\{1\} / /g' -e 's/[0-9.]//g'</converter> <convertermimeType="application/msword">catdoc %s</converter> <convertermimeType="application/vnd.ms-excel">ssconvert -T Gnumeric_stf:stf_csv -S %s fd://1</converter> <convertermimeType="audio/mp3">id3 -l -R %s | egrep '(Title|Artist|Album)' | sed 's/^[^:]*: //g'</converter> <convertermimeType="audio/mpeg">id3 -l -R %s | egrep '(Title|Artist|Album)' | sed 's/^[^:]*: //g'</converter> <convertermimeType="text/plain">cat %s</converter> </converters>
If the file /etc/nologin exists and is readable, login(1) will allow access only to root. Other users will be shown the contents of this file and their logins will be refused. This provides a simple way of temporarily disabling all unprivileged logins.
