Blame | Last modification | View Log | RSS feed
################################################################################## OCS Inventory NG Communication Server Perl Module Setup## Copyleft 2006 Pascal DANEK# Web: http://www.ocsinventory-ng.org## This code is open source and may be copied and modified as long as the source# code is always made freely available.# Please refer to the General Public Licence http://www.gnu.org/ or Licence.txt################################################################################# Which version of mod_perl we are using# For mod_perl <= 1.999_21, replace 2 by 1# For mod_perl > 1.999_21, replace 2 by 2PerlSetEnv OCS_MODPERL_VERSION 2# Master Database settings# Replace localhost by hostname or ip of MySQL server for WRITEPerlSetEnv OCS_DB_HOST localhost# Replace 3306 by port where running MySQL server, generally 3306PerlSetEnv OCS_DB_PORT 3306# Name of databasePerlSetEnv OCS_DB_NAME ocswebPerlSetEnv OCS_DB_LOCAL ocsweb# User allowed to connect to databasePerlSetEnv OCS_DB_USER ocs# Password for userPerlSetVar OCS_DB_PWD ocs# Slave Database settings# Replace localhost by hostname or ip of MySQL server for READ# Useful if you handle mysql slave databases# PerlSetEnv OCS_DB_SL_HOST localhost# Replace 3306 by port where running MySQL server, generally 3306# PerlSetEnv OCS_DB_SL_PORT_SLAVE 3306# User allowed to connect to database# PerlSetEnv OCS_DB_SL_USER ocs# Name of the database# PerlSetEnv OCS_DB_SL_NAME ocsweb# Password for user# PerlSetVar OCS_DB_SL_PWD ocs# Path to log directory (must be writeable)PerlSetEnv OCS_OPT_LOGPATH "/var/log/ocsinventory-server"# If you need to specify a mysql socket that the client's built-in#PerlSetVar OCS_OPT_DBI_MYSQL_SOCKET "path/to/mysql/unix/socket"# DBI verbosityPerlSetEnv OCS_OPT_DBI_PRINT_ERROR 0# Unicode supportPerlSetEnv OCS_OPT_UNICODE_SUPPORT 1# If you are using a multi server architecture,# Put the ip addresses of the slaves on the master# (This is read as perl regular expressions)PerlAddVar OCS_OPT_TRUSTED_IP 127.0.0.1#PerlAddVar OCS_OPT_TRUSTED_IP XXX.XXX.XXX.XXX# ===== WEB SERVICE (SOAP) SETTINGS =====PerlSetEnv OCS_OPT_WEB_SERVICE_ENABLED 0PerlSetEnv OCS_OPT_WEB_SERVICE_RESULTS_LIMIT 100# PerlSetEnv OCS_OPT_WEB_SERVICE_PRIV_MODS_CONF "WEBSERV_PRIV_MOD_CONF_FILE"# Be careful: you must restart apache to make settings taking effects# Configure engine to use the settings from this filePerlSetEnv OCS_OPT_OPTIONS_NOT_OVERLOADED 0# Try to use other compress algorythm than raw zlib# GUNZIP and clear XML are supportedPerlSetEnv OCS_OPT_COMPRESS_TRY_OTHERS 1############################################################### ===== OPTIONS BELOW ARE OVERLOADED IF YOU USE OCS GUI =====################################################################ NOTE: IF YOU WANT TO USE THIS CONFIG FILE INSTEAD, set OCS_OPT_OPTIONS_NOT_OVERLOADED to '1'# ===== MAIN SETTINGS =====# Enable engine logs (see LOGPATH setting)PerlSetEnv OCS_OPT_LOGLEVEL 0# Specify agent's prolog frequencyPerlSetEnv OCS_OPT_PROLOG_FREQ 12# Configure the duplicates detection systemPerlSetEnv OCS_OPT_AUTO_DUPLICATE_LVL 15# Futur security improvementsPerlSetEnv OCS_OPT_SECURITY_LEVEL 0# Validity of a computer's lockPerlSetEnv OCS_OPT_LOCK_REUSE_TIME 600# Enable the history tracking system (useful for external data synchronisationPerlSetEnv OCS_OPT_TRACE_DELETED 0# ===== INVENTORY SETTINGS =====# Specify the validity of inventory dataPerlSetEnv OCS_OPT_FREQUENCY 0# Configure engine to update inventory regarding to CHECKSUM agent value (lower DB backend load)PerlSetEnv OCS_OPT_INVENTORY_DIFF 1# Make engine consider an inventory as a transaction (lower concurency, better disk usage)PerlSetEnv OCS_OPT_INVENTORY_TRANSACTION 1# Configure engine to make a differential update of inventory sections (row level). Lower DB backend load, higher frontend loadPerlSetEnv OCS_OPT_INVENTORY_WRITE_DIFF 1# Enable some stuff to improve DB queries, especially for GUI multicriteria searching systemPerlSetEnv OCS_OPT_INVENTORY_CACHE_ENABLED 1# Specify when the engine will clean the inventory cache structuresPerlSetEnv OCS_OPT_INVENTORY_CACHE_REVALIDATE 7# Enable you to keep trace of every elements encountered in db lifePerlSetEnv OCS_OPT_INVENTORY_CACHE_KEEP 1# ===== SOFTWARES DEPLOYMENT SETTINGS =====# Enable this featurePerlSetEnv OCS_OPT_DOWNLOAD 0# Package wich have a priority superior than this value will not be downloadedPerlSetEnv OCS_OPT_DOWNLOAD_PERIOD_LENGTH 10# Time between two download cycles (bandwidth control)PerlSetEnv OCS_OPT_DOWNLOAD_CYCLE_LATENCY 60# Time between two fragment downloads (bandwidth control)PerlSetEnv OCS_OPT_DOWNLOAD_FRAG_LATENCY 60# Specify if you want to track packages affected to a group on computer's levelPerlSetEnv OCS_OPT_DOWNLOAD_GROUPS_TRACE_EVENTS 1# Time between two download periods (bandwidth control)PerlSetEnv OCS_OPT_DOWNLOAD_PERIOD_LATENCY 60# Agents will send ERR_TIMEOUT event and clean the package it is older than this settingPerlSetEnv OCS_OPT_DOWNLOAD_TIMEOUT 7# Number of cycle within a period# Enable ocs engine to deliver agent's files (deprecated)PerlSetEnv OCS_OPT_DEPLOY 0# Enable the softwares deployment capacity (bandwidth control)# ===== GROUPS SETTINGS =====# Enable the computer\s groups featurePerlSetEnv OCS_OPT_ENABLE_GROUPS 1# Random number computed in the defined range. Designed to avoid computing many groups in the same processPerlSetEnv OCS_OPT_GROUPS_CACHE_OFFSET 600# Specify the validity of computer's groups (default: 10 minutes - see offset)PerlSetEnv OCS_OPT_GROUPS_CACHE_REVALIDATE 600# ===== IPDISCOVER SETTINGS =====# Specify how much agent per LAN will discovered connected peripherals (0 to disable)PerlSetEnv OCS_OPT_IPDISCOVER 2# Specify the minimal difference to replace an ipdiscover agentPerlSetEnv OCS_OPT_IPDISCOVER_BETTER_THRESHOLD 1# Time between 2 arp requests (mini: 10 ms)PerlSetEnv OCS_OPT_IPDISCOVER_LATENCY 100# Specify when to remove a computer when it has not come until this periodPerlSetEnv OCS_OPT_IPDISCOVER_MAX_ALIVE 14# Disable the time before a first election (not recommended)PerlSetEnv OCS_OPT_IPDISCOVER_NO_POSTPONE 0# Enable groups for ipdiscover (for example, you might want to prevent some groups to be ipdiscover agents)PerlSetEnv OCS_OPT_IPDISCOVER_USE_GROUPS 1# ===== INVENTORY FILES MAPPING SETTINGS =====# Use with ocsinventory-injector, enable the multi entities featurePerlSetEnv OCS_OPT_GENERATE_OCS_FILES 0# Generate either compressed file or clear XML textPerlSetEnv OCS_OPT_OCS_FILES_FORMAT OCS# Specify if you want to keep trace of all inventory between to synchronisation with the higher level serverPerlSetEnv OCS_OPT_OCS_FILES_OVERWRITE 0# Path to ocs files directory (must be writeable)PerlSetEnv OCS_OPT_OCS_FILES_PATH /tmp# ===== FILTER SETTINGS =====# Enable prolog filter stackPerlSetEnv OCS_OPT_PROLOG_FILTER_ON 0# Enable core filter system to modify some things "on the fly"PerlSetEnv OCS_OPT_INVENTORY_FILTER_ENABLED 0# Enable inventory flooding filter. A dedicated ipaddress ia allowed to send a new computer only once in this periodPerlSetEnv OCS_OPT_INVENTORY_FILTER_FLOOD_IP 0# Period definition for INVENTORY_FILTER_FLOOD_IPPerlSetEnv OCS_OPT_INVENTORY_FILTER_FLOOD_IP_CACHE_TIME 300# Enable inventory filter stackPerlSetEnv OCS_OPT_INVENTORY_FILTER_ON 0# ===== REGISTRY SETTINGS =====# Enable the registry capacityPerlSetEnv OCS_OPT_REGISTRY 1# ===== SESSION SETTINGS =====# Not yet in GUI# Validity of a session (prolog=>postinventory)PerlSetEnv OCS_OPT_SESSION_VALIDITY_TIME 600# Consider a session obsolete if it is older thant this valuePerlSetEnv OCS_OPT_SESSION_CLEAN_TIME 86400# Accept an inventory only if required by server#( Refuse "forced" inventory)PerlSetEnv OCS_OPT_INVENTORY_SESSION_ONLY 0# ===== TAG =====# The default behavior of the server is to ignore TAG changes from the# agent.PerlSetEnv OCS_OPT_ACCEPT_TAG_UPDATE_FROM_CLIENT 0# ===== DEPRECATED =====# Set the proxy cache validity in http headers when sending a filePerlSetEnv OCS_OPT_PROXY_REVALIDATE_DELAY 3600# DeprecatedPerlSetEnv OCS_OPT_UPDATE 0############ DO NOT MODIFY BELOW ! ######################## External modulesPerlModule Apache::DBIPerlModule Compress::ZlibPerlModule XML::Simple# OcsPerlModule Apache::OcsinventoryPerlModule Apache::Ocsinventory::Server::ConstantsPerlModule Apache::Ocsinventory::Server::SystemPerlModule Apache::Ocsinventory::Server::CommunicationPerlModule Apache::Ocsinventory::Server::InventoryPerlModule Apache::Ocsinventory::Server::Duplicate# CapacitiesPerlModule Apache::Ocsinventory::Server::Capacities::RegistryPerlModule Apache::Ocsinventory::Server::Capacities::UpdatePerlModule Apache::Ocsinventory::Server::Capacities::IpdiscoverPerlModule Apache::Ocsinventory::Server::Capacities::DownloadPerlModule Apache::Ocsinventory::Server::Capacities::Notify# This module guides you through the module creation# PerlModule Apache::Ocsinventory::Server::Capacities::Example# This module adds some rules to filter some request sent to ocs server in the prolog and inventory stages# PerlModule Apache::Ocsinventory::Server::Capacities::Filter# PerlTaintCheck On# SSL apache settings#SSLEngine "SSL_ENABLE"#SSLCertificateFile "SSL_CERTIFICATE_FILE"#SSLCertificateKeyFile "SSL_CERTIFICATE_KEY_FILE"#SSLCACertificateFile "SSL_CERTIFICATE_FILE"#SSLCACertificatePath "SSL_CERTIFICATE_PATH"#SSLVerifyClient "SSL_VALIDATE_CLIENT"# Engine apache settings# "Virtual" directory for handling OCS Inventory NG agents communications# Be careful, do not create such directory into your web server root document !<Location /ocsinventory>order deny,allowallow from allSatisfy Any# If you protect this area you have to deal with http_auth_* agent's parameters# AuthType Basic# AuthName "OCS Inventory agent area"# AuthUserFile "APACHE_AUTH_USER_FILE"# require valid-userSetHandler perl-scriptPerlHandler Apache::Ocsinventory</Location># Web service apache settingsPerlModule Apache::Ocsinventory::SOAP<location /ocsinterface>SetHandler perl-scriptPerlHandler "Apache::Ocsinventory::SOAP"# By default, you can query web service from everywhere with a valid userOrder deny,allowAllow from allAuthType BasicAuthName "OCS Inventory SOAP Area"# Use htpasswd to create/update soap-user (or another granted user)AuthUserFile "APACHE_AUTH_USER_FILE"require "SOAP_USER"</location>