| 4 |
- |
1 |
##############################################################
|
|
|
2 |
# SERVER SETTINGS
|
|
|
3 |
|
|
|
4 |
# IP Address to bind to (0.0.0.0 for ANY)
|
|
|
5 |
# Set to 127.0.0.1 if connections should only come from localhost
|
|
|
6 |
# and through the webserver proxy
|
|
|
7 |
server_bind = 0.0.0.0
|
|
|
8 |
|
|
|
9 |
# Accept normal TCP connections (not recommended to disable)
|
|
|
10 |
server_tcp_enabled = yes
|
|
|
11 |
|
|
|
12 |
# Port to bind to
|
|
|
13 |
server_tcp_port = 236
|
|
|
14 |
|
|
|
15 |
# Accept unix pipe connections (not recommended to disable)
|
|
|
16 |
server_pipe_enabled = yes
|
|
|
17 |
|
|
|
18 |
# Unix socket location
|
|
|
19 |
server_pipe_name = /var/run/zarafa
|
|
|
20 |
|
|
|
21 |
# Priority unix socket location
|
|
|
22 |
server_pipe_priority = /var/run/zarafa-prio
|
|
|
23 |
|
|
|
24 |
# Name for identifying the server in a multi-server environment
|
|
|
25 |
server_name = Zarafa
|
|
|
26 |
|
|
|
27 |
# Override the hostname of this server, used by Kerberos SSO if enabled
|
|
|
28 |
server_hostname =
|
|
|
29 |
|
|
|
30 |
# Database engine (mysql)
|
|
|
31 |
database_engine = mysql
|
|
|
32 |
|
|
|
33 |
# Allow connections from normal users through the unix socket
|
|
|
34 |
allow_local_users = yes
|
|
|
35 |
|
|
|
36 |
# local admin users who can connect to any store (use this for the zarafa-dagent)
|
|
|
37 |
# field is SPACE separated
|
|
|
38 |
# eg: local_admin_users = root vmail zarafa
|
|
|
39 |
local_admin_users = root zarafa
|
|
|
40 |
|
| 5 |
- |
41 |
# The user has full rights on a folder by default, uncomment the following line to disable this.
|
|
|
42 |
# owner_auto_full_access = false
|
|
|
43 |
owner_auto_full_access = true
|
|
|
44 |
|
| 4 |
- |
45 |
# e-mail address of the Zarafa System user
|
|
|
46 |
system_email_address = postmaster@localhost
|
|
|
47 |
|
|
|
48 |
# drop privileges and run the process as this user
|
|
|
49 |
run_as_user = zarafa
|
|
|
50 |
|
|
|
51 |
# drop privileges and run the process as this group
|
|
|
52 |
run_as_group = zarafa
|
|
|
53 |
|
|
|
54 |
# create a pid file for stopping the service via the init.d scripts
|
|
|
55 |
pid_file = /var/run/zarafa-server.pid
|
|
|
56 |
|
|
|
57 |
# run server in this path (when not using the -F switch)
|
|
|
58 |
running_path = /
|
|
|
59 |
|
|
|
60 |
# create memory coredumps upon crash in the running_path directory
|
|
|
61 |
coredump_enabled = yes
|
|
|
62 |
|
|
|
63 |
# session timeout for clients. Values lower than 300 will be upped to 300
|
|
|
64 |
# automatically. If the server hears nothing from a client in session_timeout
|
|
|
65 |
# seconds, then the session is killed.
|
|
|
66 |
session_timeout = 300
|
|
|
67 |
|
|
|
68 |
# Socket to connect to license server
|
|
|
69 |
license_socket = /var/run/zarafa-licensed
|
|
|
70 |
|
|
|
71 |
# Time (in seconds) to wait for a connection to the license server before
|
|
|
72 |
# terminating the request.
|
|
|
73 |
license_timeout = 10
|
|
|
74 |
|
|
|
75 |
##############################################################
|
|
|
76 |
# LOG SETTINGS
|
|
|
77 |
|
|
|
78 |
# Logging method (syslog, file), syslog facility is 'mail'
|
|
|
79 |
log_method = file
|
|
|
80 |
|
|
|
81 |
# Logfile (for log_method = file, '-' for stderr)
|
|
|
82 |
log_file = /var/log/zarafa/server.log
|
|
|
83 |
|
|
|
84 |
# Loglevel (0=no logging, 5=full logging)
|
|
|
85 |
log_level = 2
|
|
|
86 |
|
|
|
87 |
# Log timestamp - prefix each log line with timestamp in 'file' logging mode
|
|
|
88 |
log_timestamp = 1
|
|
|
89 |
|
|
|
90 |
##############################################################
|
|
|
91 |
# AUDIT LOG SETTINGS
|
|
|
92 |
|
|
|
93 |
# Audit logging is by default not enabled
|
|
|
94 |
audit_log_enabled = no
|
|
|
95 |
|
|
|
96 |
# Audit logging method (syslog, file), syslog facility is 'authpriv'
|
|
|
97 |
audit_log_method = file
|
|
|
98 |
|
|
|
99 |
# Audit logfile (for log_method = file, '-' for stderr)
|
|
|
100 |
audit_log_file = /var/log/zarafa/server.log
|
|
|
101 |
|
|
|
102 |
# Audit loglevel (0=no logging, 1=full logging)
|
|
|
103 |
audit_log_level = 1
|
|
|
104 |
|
|
|
105 |
# Audit log timestamp - prefix each log line with timestamp in 'file' logging mode
|
|
|
106 |
audit_log_timestamp = 1
|
|
|
107 |
|
|
|
108 |
##############################################################
|
|
|
109 |
# MYSQL SETTINGS (for database_engine = mysql)
|
|
|
110 |
|
|
|
111 |
# MySQL hostname to connect to for database access
|
|
|
112 |
mysql_host = localhost
|
|
|
113 |
|
|
|
114 |
# MySQL port to connect with (usually 3306)
|
|
|
115 |
mysql_port = 3306
|
|
|
116 |
|
|
|
117 |
# The user under which we connect with MySQL
|
|
|
118 |
mysql_user = root
|
|
|
119 |
|
|
|
120 |
# The password for the user (leave empty for no password)
|
|
|
121 |
mysql_password = uwe2592
|
|
|
122 |
|
|
|
123 |
# Override the default MySQL socket to access mysql locally
|
|
|
124 |
# Works only if the mysql_host value is empty or 'localhost'
|
|
|
125 |
mysql_socket =
|
|
|
126 |
|
|
|
127 |
# Database to connect to
|
|
|
128 |
mysql_database = zarafa
|
|
|
129 |
|
|
|
130 |
# Where to place attachments. Value can be 'database' or 'files'
|
|
|
131 |
attachment_storage = files
|
|
|
132 |
|
|
|
133 |
# When attachment_storage is 'files', use this path to store the files
|
|
|
134 |
attachment_path = /var/lib/zarafa
|
|
|
135 |
|
|
|
136 |
# Compression level for attachments when attachment_storage is 'files'.
|
|
|
137 |
# Set compression level for attachments disabled=0, max=9
|
|
|
138 |
attachment_compression = 6
|
|
|
139 |
|
|
|
140 |
##############################################################
|
|
|
141 |
# SSL SETTINGS
|
|
|
142 |
|
|
|
143 |
# enable SSL support in server
|
|
|
144 |
server_ssl_enabled = no
|
|
|
145 |
|
|
|
146 |
# Listen for SSL connections on this port
|
|
|
147 |
server_ssl_port = 237
|
|
|
148 |
|
|
|
149 |
# Required Server certificate, contains the certificate and the private key parts
|
|
|
150 |
server_ssl_key_file = /etc/zarafa/ssl/server.pem
|
|
|
151 |
|
|
|
152 |
# Password of Server certificate
|
|
|
153 |
server_ssl_key_pass = replace-with-server-cert-password
|
|
|
154 |
|
|
|
155 |
# Required Certificate Authority of server
|
|
|
156 |
server_ssl_ca_file = /etc/zarafa/ssl/cacert.pem
|
|
|
157 |
|
|
|
158 |
# Path with CA certificates, e.g. /etc/ssl/certs
|
|
|
159 |
server_ssl_ca_path =
|
|
|
160 |
|
| 23 |
- |
161 |
# SSL protocols to use, set to '!SSLv2' for 'server_ssl_enable_v2 = no'
|
|
|
162 |
server_ssl_protocols = !SSLv2
|
| 4 |
- |
163 |
|
| 23 |
- |
164 |
# SSL ciphers to use, set to 'ALL' for backward compatibility
|
|
|
165 |
server_ssl_ciphers = ALL:!LOW:!SSLv2:!EXP:!aNULL
|
|
|
166 |
|
|
|
167 |
# Prefer the server's order of SSL ciphers over client's
|
|
|
168 |
server_ssl_prefer_server_ciphers = no
|
|
|
169 |
|
| 4 |
- |
170 |
# Path of SSL Public keys of clients
|
|
|
171 |
sslkeys_path = /etc/zarafa/sslkeys
|
|
|
172 |
|
|
|
173 |
##############################################################
|
|
|
174 |
# THREAD SETTINGS
|
|
|
175 |
|
|
|
176 |
# Number of server threads
|
|
|
177 |
# default: 8
|
|
|
178 |
threads = 8
|
|
|
179 |
|
|
|
180 |
# Watchdog frequency. The number of watchdog checks per second.
|
|
|
181 |
# default: 1
|
|
|
182 |
watchdog_frequency = 1
|
|
|
183 |
|
|
|
184 |
# Watchdog max age. The maximum age in ms of a task before a
|
|
|
185 |
# new thread is started.
|
|
|
186 |
# default: 500
|
|
|
187 |
watchdog_max_age = 500
|
|
|
188 |
|
|
|
189 |
# Maximum SOAP keep_alive value
|
|
|
190 |
# default: 100
|
|
|
191 |
server_max_keep_alive_requests = 100
|
|
|
192 |
|
|
|
193 |
# SOAP recv timeout value (time between requests)
|
|
|
194 |
# default: 5
|
|
|
195 |
server_recv_timeout = 5
|
|
|
196 |
|
|
|
197 |
# SOAP read timeout value (time during requests)
|
|
|
198 |
# default: 60
|
|
|
199 |
server_read_timeout = 60
|
|
|
200 |
|
|
|
201 |
# SOAP send timeout value
|
|
|
202 |
# default: 60
|
|
|
203 |
server_send_timeout = 60
|
|
|
204 |
|
|
|
205 |
##############################################################
|
|
|
206 |
# OTHER SETTINGS
|
|
|
207 |
|
|
|
208 |
# Softdelete clean cycle (in days) 0=never running
|
|
|
209 |
softdelete_lifetime = 30
|
|
|
210 |
|
|
|
211 |
# Sync lifetime, removes all changes remembered for a client after x days of inactivity
|
|
|
212 |
sync_lifetime = 90
|
|
|
213 |
|
|
|
214 |
# Set to 'yes' if all changes (for synchronization) to messages should be logged to the database
|
|
|
215 |
sync_log_all_changes = yes
|
|
|
216 |
|
|
|
217 |
# Set to 'yes' if you have Kerberos or NTLM correctly configured for single sign-on
|
|
|
218 |
enable_sso = no
|
|
|
219 |
|
|
|
220 |
# Set to 'yes' if you want to show the GAB to your users
|
|
|
221 |
enable_gab = yes
|
|
|
222 |
|
|
|
223 |
# Authentication can be through plugin (default, recommended), pam or kerberos
|
|
|
224 |
auth_method = plugin
|
|
|
225 |
|
|
|
226 |
# If auth_method is set to pam, you should provide the pam service name
|
|
|
227 |
pam_service = passwd
|
|
|
228 |
|
|
|
229 |
|
|
|
230 |
#############################################################
|
|
|
231 |
# CACHE SETTINGS
|
|
|
232 |
#
|
|
|
233 |
# To see the live cache usage, use 'zarafa-stats --system'.
|
|
|
234 |
|
|
|
235 |
# Size in bytes of the 'cell' cache (should be set as high as you can afford to set it)
|
|
|
236 |
cache_cell_size = 256M
|
|
|
237 |
|
|
|
238 |
# Size in bytes of the 'object' cache
|
|
|
239 |
cache_object_size = 5M
|
|
|
240 |
|
|
|
241 |
# Size in bytes of the 'indexed object' cache
|
|
|
242 |
cache_indexedobject_size = 16M
|
|
|
243 |
|
|
|
244 |
# Size in bytes of the userquota details
|
|
|
245 |
cache_quota_size = 1M
|
|
|
246 |
|
|
|
247 |
# Lifetime for userquota details
|
|
|
248 |
cache_quota_lifetime = 1
|
|
|
249 |
|
|
|
250 |
# Size in bytes of the acl cache
|
|
|
251 |
cache_acl_size = 1M
|
|
|
252 |
|
|
|
253 |
# Size in bytes of the store id/guid cache
|
|
|
254 |
cache_store_size = 1M
|
|
|
255 |
|
|
|
256 |
# Size in bytes of the 'user id' cache (this is allocated twice)
|
|
|
257 |
cache_user_size = 1M
|
|
|
258 |
|
|
|
259 |
# Size in bytes of the 'user details' cache
|
|
|
260 |
cache_userdetails_size = 26214400
|
|
|
261 |
|
|
|
262 |
# Lifetime for user details
|
|
|
263 |
cache_userdetails_lifetime = 0
|
|
|
264 |
|
|
|
265 |
# Size in bytes of the server details (multiserver setups only)
|
|
|
266 |
cache_server_size = 1M
|
|
|
267 |
|
|
|
268 |
# Lifetime for server details (multiserver setups only)
|
|
|
269 |
cache_server_lifetime = 30
|
|
|
270 |
|
|
|
271 |
|
|
|
272 |
##############################################################
|
|
|
273 |
# QUOTA SETTINGS
|
|
|
274 |
|
|
|
275 |
# The default Warning Quota Level. Set to 0 to disable this level.
|
|
|
276 |
# The user will receive an email when this level is reached. Value is in Mb. Default value is 0.
|
|
|
277 |
quota_warn = 0
|
|
|
278 |
|
|
|
279 |
# The default Soft Quota Level. Set to 0 to disable this level.
|
|
|
280 |
# The user will still receive mail, but sending new mail is prohibited, until objects are removed from the store.
|
|
|
281 |
# VALUE is in Mb. Default value is 0.
|
|
|
282 |
quota_soft = 0
|
|
|
283 |
|
|
|
284 |
# The default Hard Quota Level. Set to 0 to disable this level.
|
|
|
285 |
# The user can not receive and send mail, until objects are removed from the store.
|
|
|
286 |
# Value is in Mb. Default value is 0.
|
|
|
287 |
quota_hard = 0
|
|
|
288 |
|
|
|
289 |
# The default Warning Quota Level for multitenant public stores. Set to 0 to disable this level.
|
|
|
290 |
# The tenant administrator will receive an email when this level is reached. Value is in Mb. Default value is 0.
|
|
|
291 |
companyquota_warn = 0
|
|
|
292 |
|
|
|
293 |
|
|
|
294 |
##############################################################
|
|
|
295 |
# USER PLUGIN SETTINGS
|
|
|
296 |
|
|
|
297 |
# Name of the plugin that handles users
|
|
|
298 |
# Required, default = db
|
|
|
299 |
# Values: ldap, unix, db, ldapms (available in enterprise license)
|
|
|
300 |
user_plugin = db
|
|
|
301 |
|
|
|
302 |
# configuration file of the user plugin, examples can be found in /usr/share/doc/zarafa/example-config
|
|
|
303 |
user_plugin_config = /etc/zarafa/ldap.cfg
|
|
|
304 |
|
|
|
305 |
# location of the zarafa plugins
|
|
|
306 |
# if you have a 64bit distribution, this probably should be changed to /usr/lib64/zarafa
|
|
|
307 |
plugin_path = /usr/lib64/zarafa
|
|
|
308 |
|
|
|
309 |
# scripts which create stores for users from an external source
|
|
|
310 |
# used for ldap and unix plugins only
|
|
|
311 |
createuser_script = /etc/zarafa/userscripts/createuser
|
|
|
312 |
deleteuser_script = /etc/zarafa/userscripts/deleteuser
|
|
|
313 |
creategroup_script = /etc/zarafa/userscripts/creategroup
|
|
|
314 |
deletegroup_script = /etc/zarafa/userscripts/deletegroup
|
|
|
315 |
createcompany_script = /etc/zarafa/userscripts/createcompany
|
|
|
316 |
deletecompany_script = /etc/zarafa/userscripts/deletecompany
|
|
|
317 |
|
|
|
318 |
# Set this option to 'yes' to skip the creation and deletion of new users
|
|
|
319 |
# The action will be logged, so you can see if your changes to the plugin
|
|
|
320 |
# configuration are correct.
|
|
|
321 |
user_safe_mode = no
|
|
|
322 |
|
|
|
323 |
##############################################################
|
|
|
324 |
# MISC SETTINGS
|
|
|
325 |
|
|
|
326 |
# Thread size in KB, default is 512
|
|
|
327 |
# WARNING: Do not set too small, your server WILL crash
|
|
|
328 |
thread_stacksize = 512
|
|
|
329 |
|
|
|
330 |
# Enable multi-tenancy environment
|
|
|
331 |
# When set to true it is possible to create tenants within the
|
|
|
332 |
# zarafa instance and assign all users and groups to particular
|
|
|
333 |
# tenants.
|
|
|
334 |
# When set to false, the normal single-tenancy environment is created.
|
|
|
335 |
enable_hosted_zarafa = false
|
|
|
336 |
|
|
|
337 |
# Enable multi-server environment
|
|
|
338 |
# When set to true it is possible to place users and tenants on
|
|
|
339 |
# specific servers.
|
|
|
340 |
# When set to false, the normal single-server environment is created.
|
|
|
341 |
enable_distributed_zarafa = false
|
|
|
342 |
|
|
|
343 |
# Display format of store name
|
|
|
344 |
# Allowed variables:
|
|
|
345 |
# %u Username
|
|
|
346 |
# %f Fullname
|
|
|
347 |
# %c Teantname
|
|
|
348 |
# default: %f
|
|
|
349 |
storename_format = %f
|
|
|
350 |
|
|
|
351 |
# Loginname format (for Multi-tenancy installations)
|
|
|
352 |
# When the user does not login through a system-wide unique
|
|
|
353 |
# username (like the email address) a unique name is created
|
|
|
354 |
# by combining the username and the tenantname.
|
|
|
355 |
# With this configuration option you can set how the
|
|
|
356 |
# loginname should be built up.
|
|
|
357 |
#
|
|
|
358 |
# Note: Do not use the = character in the format.
|
|
|
359 |
#
|
|
|
360 |
# Allowed variables:
|
|
|
361 |
# %u Username
|
|
|
362 |
# %c Teantname
|
|
|
363 |
#
|
|
|
364 |
# default: %u
|
|
|
365 |
loginname_format = %u
|
|
|
366 |
|
|
|
367 |
# Set to yes for Windows clients to be able to download the latest
|
|
|
368 |
# Zarafa Outlook client from the Zarafa server
|
|
|
369 |
client_update_enabled = false
|
|
|
370 |
|
|
|
371 |
# Place the correct Zarafa Outlook Client in this directory for
|
|
|
372 |
# Windows clients to download through the Zarafa server
|
|
|
373 |
client_update_path = /var/lib/zarafa/client
|
|
|
374 |
|
|
|
375 |
# Recieve update information from the client (0 = disabled, 1 = only on error, 2 = log always)
|
|
|
376 |
client_update_log_level = 1
|
|
|
377 |
|
|
|
378 |
# Log location for the client auto update files
|
|
|
379 |
client_update_log_path = /var/log/zarafa/autoupdate
|
|
|
380 |
|
|
|
381 |
# Everyone is a special internal group, which contains every user and group
|
|
|
382 |
# You may want to disable this group from the Global Addressbook by setting
|
|
|
383 |
# this option to 'yes'. Administrators will still be able to see the group.
|
|
|
384 |
hide_everyone = no
|
|
|
385 |
|
|
|
386 |
# System is a special internal user, which has super-admin privileges
|
|
|
387 |
# You may want to disable this user from the Global Addressbook by setting
|
|
|
388 |
# this option to 'yes'. Administrators will still be able to see the user.
|
|
|
389 |
hide_system = yes
|
|
|
390 |
|
|
|
391 |
# Use Indexing service for faster searching.
|
|
|
392 |
# Enabling this option requires the zarafa-search service to
|
|
|
393 |
# be running.
|
|
|
394 |
search_enabled = yes
|
|
|
395 |
|
|
|
396 |
# Path to the zarafa-search service, this option is only required
|
|
|
397 |
# if the server is going to make use of the indexing service.
|
|
|
398 |
search_socket = file:///var/run/zarafa-search
|
|
|
399 |
|
|
|
400 |
# Time (in seconds) to wait for a connection to the zarafa-search service
|
|
|
401 |
# before terminating the indexed search request.
|
|
|
402 |
search_timeout = 10
|
|
|
403 |
|
|
|
404 |
# Allow enhanced ICS operations to speedup synchronization with cached profiles.
|
|
|
405 |
# default: yes
|
|
|
406 |
enable_enhanced_ics = yes
|
|
|
407 |
|
|
|
408 |
# SQL Procedures allow for some optimized queries when streaming with enhanced ICS.
|
|
|
409 |
# This is default disabled because you must set 'thread_stack = 256k' in your
|
|
|
410 |
# MySQL server config under the [mysqld] tag and restart your MySQL server.
|
|
|
411 |
enable_sql_procedures = no
|
|
|
412 |
|
|
|
413 |
# Synchronize GAB users on every open of the GAB (otherwise, only on
|
|
|
414 |
# zarafa-admin --sync)
|
|
|
415 |
sync_gab_realtime = yes
|
|
|
416 |
|
|
|
417 |
# Disable features for users. Default all features are disabled. This
|
|
|
418 |
# list is space separated. Currently valid values: imap
|
|
|
419 |
disabled_features = pop3
|
|
|
420 |
|
|
|
421 |
# Maximum number of deferred records in total
|
|
|
422 |
max_deferred_records = 0
|
|
|
423 |
|
|
|
424 |
# Maximum number of deferred records per folder
|
|
|
425 |
max_deferred_records_folder = 20
|
|
|
426 |
|
|
|
427 |
# Restrict the permissions that admins receive to folder permissions only. Please
|
|
|
428 |
# read the server.cfg manpage before enabling this option so you really understand
|
|
|
429 |
# the implications
|
|
|
430 |
restrict_admin_permissions = no
|
|
|
431 |
|
|
|
432 |
# The maximum level of attachment recursion; Defines the number of
|
|
|
433 |
# attachment-in-attachment in-attachment levels are allowed when saving and
|
|
|
434 |
# replicating objects in the database. If you really want a higher level of
|
|
|
435 |
# recursion than about 20, you probably have to increase MySQL's stack_size
|
|
|
436 |
# to allow replication to work properly.
|
|
|
437 |
embedded_attachment_limit = 20
|
|
|
438 |
|
|
|
439 |
# Header to detect whether a connection has been received through a proxy. The
|
|
|
440 |
# value of the header is not inspected. If the header exists then the connection
|
|
|
441 |
# is taken to be received via a proxy. An empty value disables proxy detection
|
|
|
442 |
# and the value of '*' is used to indicate that all connections are proxied
|
|
|
443 |
proxy_header =
|