Changes

Jump to navigation Jump to search
config setprop setings
Line 1: Line 1:  +
{{usefulnote}}
 
== Database variables ==
 
== Database variables ==
 
{{Note box|See following wiki pages for the syntax of access to the configuration database entries from the command line [http://wiki.contribs.org/SME_Server:Documentation:Developers_Manual:Section2#Access_from_the_command_line Access from the Command Line] and a [http://wiki.contribs.org/Db_command_tutorial db command tutorial]}}
 
{{Note box|See following wiki pages for the syntax of access to the configuration database entries from the command line [http://wiki.contribs.org/SME_Server:Documentation:Developers_Manual:Section2#Access_from_the_command_line Access from the Command Line] and a [http://wiki.contribs.org/Db_command_tutorial db command tutorial]}}
Line 59: Line 60:  
  db configuration setprop atalk variable value
 
  db configuration setprop atalk variable value
 
  signal-event workgroup-update
 
  signal-event workgroup-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/atalk/netatalk.conf
 
|+Affected file: /etc/atalk/netatalk.conf
 
!Variable
 
!Variable
Line 70: Line 71:  
|}
 
|}
    +
{{Warning box|The AppleTalk protocol has been removed from SME Server as of version 8.x}}
    
==== Backup ====
 
==== Backup ====
Line 75: Line 77:  
  db configuration setprop backup variable value
 
  db configuration setprop backup variable value
 
  signal-event conf-backup
 
  signal-event conf-backup
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/e-smith/events/post-backup/S90eject-tape
 
|+Affected file: /etc/e-smith/events/post-backup/S90eject-tape
 
!Variable
 
!Variable
Line 89: Line 91:  
|no
 
|no
 
|}
 
|}
      
==== Console Mode ====
 
==== Console Mode ====
Line 96: Line 97:  
  signal-event post-upgrade
 
  signal-event post-upgrade
 
  signal-event reboot
 
  signal-event reboot
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
!Variable
 
!Variable
 
!Target
 
!Target
Line 106: Line 107:  
|}
 
|}
    +
{{Warning box|This functionality has been deprecated as of SME Server 9.x}}
    
==== Clam AntiVirus (clamav) ====
 
==== Clam AntiVirus (clamav) ====
 +
===== clamav =====
 +
 
''Usage''
 
''Usage''
 
  db configuration setprop clamav variable value
 
  db configuration setprop clamav variable value
 
  signal-event clamav-update
 
  signal-event clamav-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/clamd.conf
 
|+Affected file: /etc/clamd.conf
 
!Variable
 
!Variable
Line 218: Line 222:  
|}
 
|}
   −
 
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
{| width="100%" border="1" cellpadding="5" cellspacing="0"
   
|+Affected file: /etc/freshclam.conf
 
|+Affected file: /etc/freshclam.conf
 
!Variable
 
!Variable
Line 245: Line 248:  
|6
 
|6
 
|}
 
|}
 
+
===== clamd =====
 
+
''Usage''
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
db configuration setprop clamd variable value
 +
signal-event clamav-update
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/clamd/env/MEMLIMIT
 
|+Affected file: /var/service/clamd/env/MEMLIMIT
 
!Variable
 
!Variable
Line 255: Line 260:  
|MemLimit
 
|MemLimit
 
|MEMLIMIT
 
|MEMLIMIT
|600000000
+
|1400000000
 
|}
 
|}
   Line 262: Line 267:  
  db configuration setprop dhcpd variable value
 
  db configuration setprop dhcpd variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/dhcpd.conf
 
|+Affected file: /etc/dhcpd.conf
 
!Variable
 
!Variable
Line 283: Line 288:  
Note: the end of the dynamic IP range will be set to the value of 'endDynamicIPRange' ''minus'' the value of pptpd:sessions.
 
Note: the end of the dynamic IP range will be set to the value of 'endDynamicIPRange' ''minus'' the value of pptpd:sessions.
   −
==== DNS Cache Forwarder (dnscache.forwarder) ====
+
==== DNS Cache Forwarder (dnscache / dnscache.forwarder) ====
 
''Usage''
 
''Usage''
 
  db configuration setprop dnscache variable value
 
  db configuration setprop dnscache variable value
  signal-event dns-update
+
  signal-event dns-update  
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
or for some settings
|+Affected file: /var/service/dnscache.forwarder/config
+
signal-event console-save
 +
 
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected files: /var/service/dnscache.forwarder/config, var/service/dnscache.forwarder/root/servers/@
 
!Variable
 
!Variable
 
!Target
 
!Target
 
!Default
 
!Default
 +
!Options
 
|-
 
|-
 
|CacheSize
 
|CacheSize
 
|CACHESIZE
 
|CACHESIZE
|1000000
+
|1000000 (SME9 10000000)
 +
|Variable
 
|-
 
|-
 
|DataLimit
 
|DataLimit
 
|DATALIMIT
 
|DATALIMIT
|3000000
+
|3000000 (SME9 12000000)
 +
|Variable
 +
|-
 +
|Forwarder
 +
|Forwarder
 +
|not configured
 +
|a.b.c.d - address of remote DNS server
 +
|-
 +
|Forwarder
 +
|Forwarder2
 +
|not configured
 +
|a.b.c.d - address of remote DNS server
 
|}
 
|}
    +
==== TinyDNS ====
 +
''Usage''
 +
db configuration setprop tinydns variable value
 +
signal-event dns-update
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /var/service/tinydns/env
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|ListenIP
 +
|IP
 +
|127.0.0.1
 +
|-
 +
|DataLimit
 +
|DATALIMIT
 +
|300000
 +
|}
    
==== FlexBackup ====
 
==== FlexBackup ====
Line 307: Line 346:  
  db configuration setprop flexbackup variable value
 
  db configuration setprop flexbackup variable value
 
  signal-event conf-backup
 
  signal-event conf-backup
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/flexbackup.conf
 
|+Affected file: /etc/flexbackup.conf
 
!Variable
 
!Variable
Line 337: Line 376:  
|tar
 
|tar
 
|}
 
|}
      
==== Horde (webmail) ====
 
==== Horde (webmail) ====
Line 344: Line 382:     
  expand-template /home/httpd/html/horde/conf.menu.apps.php
 
  expand-template /home/httpd/html/horde/conf.menu.apps.php
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /home/httpd/html/horde/conf.menu.aps.php
 
|+Affected file: /home/httpd/html/horde/conf.menu.aps.php
 
!Variable
 
!Variable
Line 354: Line 392:  
|enabled
 
|enabled
 
|}
 
|}
      
  expand-template /home/httpd/html/horde/config/conf.php
 
  expand-template /home/httpd/html/horde/config/conf.php
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /home/httpd/html/horde/config/conf.php
 
|+Affected file: /home/httpd/html/horde/config/conf.php
 
!Variable
 
!Variable
Line 369: Line 406:     
  expand-template /etc/e-smith/templates/home/httpd/html/horde/config/prefs.php/200personal
 
  expand-template /etc/e-smith/templates/home/httpd/html/horde/config/prefs.php/200personal
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/e-smith/templates/home/httpd/html/horde/config/prefs.php/200personal
 
|+Affected file: /etc/e-smith/templates/home/httpd/html/horde/config/prefs.php/200personal
 
!Variable
 
!Variable
Line 379: Line 416:  
|'Horde Webmail'
 
|'Horde Webmail'
 
|}
 
|}
      
  expand-template /home/httpd/html/horde/turba/config/sources.php
 
  expand-template /home/httpd/html/horde/turba/config/sources.php
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /home/httpd/html/horde/turba/config/sources.php
 
|+Affected file: /home/httpd/html/horde/turba/config/sources.php
 
!Variable
 
!Variable
Line 398: Line 434:     
==== Apache server ibay specific (httpd-e-smith) ====
 
==== Apache server ibay specific (httpd-e-smith) ====
 +
see [[PHP]] for specific php options for ibays, or see [[Webhosting]] contrib.
 +
 
''Usage''
 
''Usage''
 
  db accounts setprop ibayname variable value
 
  db accounts setprop ibayname variable value
 
  signal-event ibay-modify ibayname
 
  signal-event ibay-modify ibayname
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/httpd/conf/httpd.conf
 
|+Affected file: /etc/httpd/conf/httpd.conf
 
!Variable
 
!Variable
Line 432: Line 470:  
|-
 
|-
 
|SSL
 
|SSL
|https access to ibay through Apache.
+
|Force https access to ibay through Apache.
 
|disabled
 
|disabled
 
|}
 
|}
Line 441: Line 479:  
  db accounts setprop ibayname variable value
 
  db accounts setprop ibayname variable value
 
  signal-event ibay-modify ibayname
 
  signal-event ibay-modify ibayname
<br />
     −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
==== Apache server-manager (httpd-admin) ====
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/httpd/conf/httpd.conf
 
|+Affected file: /etc/httpd/conf/httpd.conf
 
!Variable
 
!Variable
Line 449: Line 487:  
!Default
 
!Default
 
|-
 
|-
|AllowUrlfOpen
+
|PermitPlainTextAccess
|AllowUrlfOpen
+
|
|disabled, set to enabled
+
|no
 
|-
 
|-
|MemoryLimit
+
|ValidFrom
|MemoryLimit
+
|
|disabled, set a M as unit, eg 64M
+
|ip/mask coma separated list
|-
+
|}''Usage''
|UpMaxFileSize
  −
|UpMaxFileSize
  −
|disabled, set a M as unit, eg 64M
  −
|-
  −
|PostMaxSize
  −
|PostMaxSize
  −
|disabled, set a M as unit, eg 64M
  −
|-
  −
|MaxExecTime
  −
|MaxExecTime
  −
|disabled, set time in second without units, eg 60 or unlimited
  −
|}
  −
 
  −
==== Apache server-manager (httpd-admin) ====
  −
''Usage''
   
  db configuration setprop httpd-admin variable value
 
  db configuration setprop httpd-admin variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/httpd/admin-conf/httpd.conf and /etc/services
 
|+Affected file: /etc/httpd/admin-conf/httpd.conf and /etc/services
 
!Variable
 
!Variable
Line 484: Line 507:  
|980
 
|980
 
|}
 
|}
      
==== IMAP (imap) ====
 
==== IMAP (imap) ====
Line 490: Line 512:  
  db configuration setprop imap variable value
 
  db configuration setprop imap variable value
 
  signal-event email-update
 
  signal-event email-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/imap/config
 
|+Affected file: /var/service/imap/config
 
!Variable
 
!Variable
Line 510: Line 532:     
{{Tip box|The notes on the concurrency limits noted under IMAPS also apply here. See below.}}
 
{{Tip box|The notes on the concurrency limits noted under IMAPS also apply here. See below.}}
 
+
{{Note box| for sme9, only the key imap has properties ConcurrencyLimitPerIP,checkConcurrencyLimit,ProcessMemoryLimit. If you set these properties to the key imaps, a migrate fragment will remove them automatically}}
 
* only for SME Server 9
 
* only for SME Server 9
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/imap/config
 
|+Affected file: /var/service/imap/config
 
!Variable
 
!Variable
Line 524: Line 546:     
==== IMAPS (imaps) ====
 
==== IMAPS (imaps) ====
 +
 +
These properties apply to SME versions before 9.0 only. After 9.0, the imap properties are used to control imaps concurrency and memory limits.
 +
 
''Usage''
 
''Usage''
 
  db configuration setprop imaps variable value
 
  db configuration setprop imaps variable value
 
  signal-event email-update
 
  signal-event email-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/imaps/config
 
|+Affected file: /var/service/imaps/config
 
!Variable
 
!Variable
Line 545: Line 570:  
|128000000
 
|128000000
 
|}
 
|}
 
+
{{Note box| For sme9, only the key imap has properties ConcurrencyLimitPerIP, checkConcurrencyLimit, ProcessMemoryLimit. If you set these properties to the key imaps, a migrate fragment will remove them automatically. Look at /etc/dovecot/dovecot.conf for default values. ProcessMemoryLimit defaults to 256MB.
{{Tip box|msg=You can see if you are running out of the number of available connections in your log file /var/log/dovecot/current (for sme8, it is /var/log/imap/current and /var/log/imaps/current)  and look for messages like the log extract below where the ConcurrencyLimitPerIP was set to 12. A 13st connection was attempted and was denied.
+
}}
 +
{{Tip box|msg=You can see if you are running out of the number of available connections in your log file /var/log/dovecot/current (for sme8, it is /var/log/imap/current and /var/log/imaps/current)  and look for messages like the log extract below where the ConcurrencyLimitPerIP was set to 12. A 13th connection was attempted and was denied.
    
  @400000005396a2d215b40d9c imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=12):  
 
  @400000005396a2d215b40d9c imap-login: Info: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=12):  
Line 556: Line 582:  
{{Tip box|Some email clients use a separate connection per imap folder, so the concurrency limits may occur for users that have many imap folders.
 
{{Tip box|Some email clients use a separate connection per imap folder, so the concurrency limits may occur for users that have many imap folders.
 
}}
 
}}
 +
 +
==== Dovecot ====
 +
* Only for SME Server 9
 +
With smeserver-dovecot installed, 4 services in the configuration DB are used<br />
 +
 +
imap and imaps are used to be backward compatible with e-smith-imap (and are used to control the TCPPort of the service, and if it's accessible from local network or from the internet)<br />
 +
 +
dovecot is now the main service entry in the configuration DB. It's used to control various optional features of dovecot
 +
 +
 +
''Usage''
 +
db configuration setprop dovecot variable value
 +
signal-event email-update
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /etc/dovecot/dovecot.conf
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|AdminIsMaster
 +
| if enabled, the admin user will be a [http://wiki2.dovecot.org/Authentication/MasterUsers master user], and will be able to login as any user. To do so use user1*admin as login and the admin password to log as user1
 +
|enabled/disabled, default is disabled
 +
|-
 +
|FullTextIndexing
 +
|will turn on or off the full text indexing. When this option is enabled, a first search in an IMAP folder will trigger indexation. Next searches will be much faster. Read [http://wiki2.dovecot.org/Plugins/FTS/Squat this page] before enabling this option
 +
|enabled/disabled, default is disabled
 +
|-
 +
|LogActions
 +
|will turn on or off extra logging (flag change, move, copy etc…). !! Warning !!: enabling this can generate a huge amount of logs
 +
|enabled/disabled, default is disabled
 +
|-
 +
|Quotas
 +
|will report the actual [http://wiki2.dovecot.org/Quota/FS used space and the remaining one if the user has a quota limit]
 +
|enabled/disabled, default is enabled
 +
|}
 +
 +
 +
==== Fetchmail ====
 +
Various fetchmail settings for email collection
 +
 +
''Usage''
 +
db configuration setprop fetchmail variable value
 +
signal-event email-update
 +
 +
See the man page for more settings:
 +
 +
https://www.fetchmail.info/fetchmail-man.html
 +
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /etc/fetchmail
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|Verbosity
 +
| For debugging
 +
|silent/verbose, default is silent
 +
|-
 +
|SSL
 +
|Use SSL
 +
|enabled/disabled, default is disabled
 +
|-
 +
|Protocol
 +
|POP3
 +
|POP/Other, default is POP3
 +
|-
 +
|TCPPort
 +
|Retrieved from smtpd
 +
|default 25
 +
|}
 +
    
==== IPTables firewall (masq) ====
 
==== IPTables firewall (masq) ====
Line 561: Line 658:  
  db configuration setprop masq variable value
 
  db configuration setprop masq variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/rc.d/init.d/masq
 
|+Affected file: /etc/rc.d/init.d/masq
 
!Variable
 
!Variable
Line 575: Line 672:  
|no
 
|no
 
|}
 
|}
      
{{Tip box|Special case is TCPPort and UDPPort from any DB key.
 
{{Tip box|Special case is TCPPort and UDPPort from any DB key.
Line 601: Line 697:  
  db configuration setprop <servicename> UDPPorts <portnumbers>
 
  db configuration setprop <servicename> UDPPorts <portnumbers>
 
  db configuration setprop <servicename> status enabled|disabled
 
  db configuration setprop <servicename> status enabled|disabled
  db configuration setprop <servicename> access public|private
+
  db configuration setprop <servicename> access public|private|localhost
 
  db configuration setprop <servicename> AllowHosts a.b.c.d,x.y.z.0/24
 
  db configuration setprop <servicename> AllowHosts a.b.c.d,x.y.z.0/24
 
  db configuration setprop <servicename> DenyHosts e.f.g.h,l.m.n.0/24
 
  db configuration setprop <servicename> DenyHosts e.f.g.h,l.m.n.0/24
Line 608: Line 704:  
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
   −
 
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
{| width="100%" border="1" cellpadding="5" cellspacing="0"
   
|+Affected file: /etc/rc.d/init.d/masq
 
|+Affected file: /etc/rc.d/init.d/masq
 
!Variable
 
!Variable
Line 632: Line 727:  
|-
 
|-
 
|status
 
|status
|enabled | disabled
+
| enabled | disabled
 
|AllowHosts is set to "" (an empty string) unless the status is 'enabled'
 
|AllowHosts is set to "" (an empty string) unless the status is 'enabled'
 
|-
 
|-
 
|access
 
|access
|public | private
+
| public | private
 
|AllowHosts is set to "" (an empty string) unless access is 'public'
 
|AllowHosts is set to "" (an empty string) unless access is 'public'
 
|-
 
|-
Line 648: Line 743:  
|}
 
|}
   −
==== SpamAssasin ====
+
==== SpamAssassin ====
 
''Usage''
 
''Usage''
 
  db configuration setprop spamassassin variable value
 
  db configuration setprop spamassassin variable value
 
  signal-event email-update
 
  signal-event email-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/mail/spamassassin/local.cf
 
|+Affected file: /etc/mail/spamassassin/local.cf
 
!Variable
 
!Variable
Line 708: Line 803:  
  expand-template /etc/my.cnf
 
  expand-template /etc/my.cnf
 
  sv t /service/mysqld
 
  sv t /service/mysqld
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/my.cnf
 
|+Affected file: /etc/my.cnf
 
!Variable
 
!Variable
Line 728: Line 823:  
  signal-event timeserver-update
 
  signal-event timeserver-update
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/ntpd/env/MEMLIMIT
 
|+Affected file: /var/service/ntpd/env/MEMLIMIT
 
!Variable
 
!Variable
Line 739: Line 834:  
|}
 
|}
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/ntp/step-tickers and /etc/ntp.conf
 
|+Affected file: /etc/ntp/step-tickers and /etc/ntp.conf
 
!Variable
 
!Variable
Line 772: Line 867:     
==== Php ====
 
==== Php ====
 +
see [[PHP]] page for all the available options
 +
 
''Usage''
 
''Usage''
 
  db configuration setprop php variable value
 
  db configuration setprop php variable value
 
  expand-template /etc/php.ini
 
  expand-template /etc/php.ini
 
  /etc/init.d/httpd-e-smith restart
 
  /etc/init.d/httpd-e-smith restart
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/php.ini
 
|+Affected file: /etc/php.ini
 
!Variable
 
!Variable
Line 800: Line 897:  
|AllowUrlFopen
 
|AllowUrlFopen
 
|allow_url_fopen
 
|allow_url_fopen
 +
|Off
 +
|-
 +
|ExposePHP
 +
|expose_php : Exposes to the world that PHP is installed on the server
 
|Off
 
|Off
 
|}
 
|}
 
''Don't forget "M" unit because you get a lot of httpd errors and apache can't start!''
 
''Don't forget "M" unit because you get a lot of httpd errors and apache can't start!''
    +
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /etc/php-fpm.d/{ibays.conf,www.conf,custom.conf} and /etc/e-smith/templates/etc/httpd/conf/httpd.conf/
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|AllowUrlFopen
 +
|AllowUrlfOpen
 +
|disabled, set to enabled
 +
|-
 +
|MemoryLimit
 +
|MemoryLimit
 +
|disabled, set a M as unit, eg 64M
 +
|-
 +
|UpMaxFileSize
 +
|UpMaxFileSize
 +
|disabled, set a M as unit, eg 64M
 +
|-
 +
|PostMaxSize
 +
|PostMaxSize
 +
|disabled, set a M as unit, eg 64M
 +
|-
 +
|MaxExecTime
 +
|MaxExecTime
 +
|disabled, set time in second without units, eg 60 or unlimited
 +
|}
    
==== Virtual Private Network (VPN) (pptpd) ====
 
==== Virtual Private Network (VPN) (pptpd) ====
Line 809: Line 937:  
  db configuration setprop pptpd variable value
 
  db configuration setprop pptpd variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/ppp/options.pptpd
 
|+Affected file: /etc/ppp/options.pptpd
 
!Variable
 
!Variable
Line 831: Line 959:  
|passive
 
|passive
 
|enabled
 
|enabled
 +
|-
 +
|Interfaces
 +
|Unknown
 +
|not set by default
 
|}
 
|}
   −
 
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
{| width="100%" border="1" cellpadding="5" cellspacing="0"
   
|+Affected file: /etc/pptpd.conf
 
|+Affected file: /etc/pptpd.conf
 
!Variable
 
!Variable
Line 844: Line 975:  
|no
 
|no
 
|}
 
|}
      
==== Pro FTP (proftpd) ====
 
==== Pro FTP (proftpd) ====
Line 850: Line 980:  
  db configuration setprop ftp variable value
 
  db configuration setprop ftp variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/proftpd.conf
 
|+Affected file: /etc/proftpd.conf
 
!Variable
 
!Variable
Line 860: Line 990:  
|no
 
|no
 
|}
 
|}
 +
==== Qmail ====
 +
You can set the maximum size of email to be sent<br />
    +
''Usage''
 +
expressed in bytes
 +
db configuration setprop qmail MaxMessageSize 15000000
 +
signal-event email-update
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /etc/proftpd.conf
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|MaxMessageSize
 +
|The maximum email size for sending
 +
|15000000
 +
|}
 +
 +
 +
====Qpsmptd====
 +
{{Note box |For KOOZALI SME 10 server, qpsmtpd replaces smtpd.}}
 +
 +
Work in progress !!
 +
 +
''Usage''
 +
config show qpsmtpd
 +
 +
config setprop qpsmtpd variable value
 +
signal-event email-update
 +
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file:   
 +
.conf
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|Authentication
 +
|Authentication
 +
|enabled
 +
|-
 +
|Bcc
 +
|Bcc
 +
|disabled
 +
|-
 +
|BccMode
 +
|BccMode
 +
|cc
 +
|-
 +
|BccUser
 +
|BccUser
 +
|maillog
 +
|-
 +
|DKIMSigning
 +
|DKIMSigning
 +
|enabled
 +
|-
 +
|DNSBL
 +
|DNSBL
 +
|disabled
 +
|-
 +
|Instances
 +
|Instances
 +
|40
 +
|-
 +
|InstancesPerIP
 +
|InstancesPerIP
 +
|5
 +
|-
 +
|LogLevel
 +
|LogLevel
 +
|6
 +
|-
 +
|MaxScannerSize
 +
|MaxScannerSize
 +
|25000000
 +
|-
 +
|MaximumDateOffset
 +
|MaximumDateOffset
 +
|0
 +
|-
 +
|PatternScan
 +
|PatternScan
 +
|disabled
 +
|-
 +
|Proxy
 +
|Proxy
 +
|blocked
 +
|-
 +
|RBLList
 +
|RBLList
 +
|bl.spamcop.net,dnsbl-1.uceprotect.net,dnsbl-2.uceprotect.net,psbl.surriel.com,zen.spamhaus.org
 +
|-
 +
|RHSBL
 +
|RHSBL
 +
|disabled
 +
|-
 +
|RelayRequiresAuth
 +
|RelayRequiresAuth
 +
|enabled
 +
|-
 +
|SBLList
 +
|SBLList
 +
|multi.surbl.org,black.uribl.com,rhsbl.sorbs.net
 +
|-
 +
|TCPPort
 +
|TCPPort
 +
|25
 +
|-
 +
|TCPProxyPort
 +
|TCPProxyPort
 +
|25
 +
|-
 +
|TlsBeforeAuth
 +
|TlsBeforeAuth
 +
|1
 +
|-
 +
|UBLList
 +
|UBLList
 +
|multi.surbl.org:8-16-64-128,black.uribl.com,rhsbl.sorbs.net
 +
|-
 +
|URIBL
 +
|URIBL
 +
|disabled
 +
|-
 +
|VirusScan
 +
|VirusScan
 +
|enabled
 +
|-
 +
|access
 +
|access
 +
|public
 +
|-
 +
|qplogsumm
 +
|qplogsumm
 +
|disabled
 +
|-
 +
|status
 +
|status
 +
|enabled
 +
|-
 +
|tnef2mime
 +
|tnef2mime
 +
|enabled
 +
|-
 +
|
 +
|
 +
|
 +
|}
    
==== Samba global settings (smbd) ====
 
==== Samba global settings (smbd) ====
Line 866: Line 1,144:  
  db configuration setprop smb variable value
 
  db configuration setprop smb variable value
 
  signal-event ibay-modify  
 
  signal-event ibay-modify  
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/samba/smb.conf
 
|+Affected file: /etc/samba/smb.conf
 
!Variable
 
!Variable
Line 919: Line 1,197:  
|use client driver
 
|use client driver
 
|yes
 
|yes
 +
|-
 +
|LogLevel
 +
|log level
 +
|1
 
|}
 
|}
   Line 926: Line 1,208:  
  db accounts setprop ibay_name variable value
 
  db accounts setprop ibay_name variable value
 
  signal-event ibay-modify  
 
  signal-event ibay-modify  
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/samba/smb.conf
 
|+Affected file: /etc/samba/smb.conf
 
!Variable
 
!Variable
Line 949: Line 1,231:  
|-
 
|-
 
|Audit
 
|Audit
|disabled the samba audit per Ibay
+
|full_audit
|enabled, set it to disabled
+
|disabled
 
|-
 
|-
 
|KeepVersions
 
|KeepVersions
Line 969: Line 1,251:  
  db configuration setprop squid variable value
 
  db configuration setprop squid variable value
 
  signal-event proxy-update
 
  signal-event proxy-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/squid/squid.conf
 
|+Affected file: /etc/squid/squid.conf
 
!Variable
 
!Variable
Line 999: Line 1,281:  
  signal-event proxy-update
 
  signal-event proxy-update
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/squid/squid.conf and /etc/rc.d/init.d/masq
 
|+Affected file: /etc/squid/squid.conf and /etc/rc.d/init.d/masq
 
!Variable
 
!Variable
Line 1,010: Line 1,292:  
|}
 
|}
   −
 
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
{| width="100%" border="1" cellpadding="5" cellspacing="0"
   
|+Affected file: /etc/rc.d/init.d/masq
 
|+Affected file: /etc/rc.d/init.d/masq
 
!Variable
 
!Variable
Line 1,021: Line 1,302:  
|3128
 
|3128
 
|}
 
|}
      
''Alternate Usage for Configuration of an Up-Stream Proxy Server''
 
''Alternate Usage for Configuration of an Up-Stream Proxy Server''
 
  db configuration set squid-parent-variable value
 
  db configuration set squid-parent-variable value
 
  signal-event proxy-update
 
  signal-event proxy-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/squid/squid.conf
 
|+Affected file: /etc/squid/squid.conf
 
!squid-parent-variable
 
!squid-parent-variable
Line 1,045: Line 1,325:  
  db configuration setprop sshd variable value
 
  db configuration setprop sshd variable value
 
  signal-event remoteaccess-update
 
  signal-event remoteaccess-update
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/ssh/sshd_config
 
|+Affected file: /etc/ssh/sshd_config
 
!Variable
 
!Variable
Line 1,070: Line 1,350:  
|MaxStartups
 
|MaxStartups
 
|10:30:60
 
|10:30:60
 +
|-
 +
| MotdStatus
 +
| MotdStatus (display or not the motd)
 +
| enabled
 
|-
 
|-
 
|PasswordAuthentication
 
|PasswordAuthentication
Line 1,083: Line 1,367:  
|IP address(es) list
 
|IP address(es) list
 
|}
 
|}
      
{{Note box|Currently in SME 7.2 and up, TCPPort is configurable via server-manager, under Remote Access menu.
 
{{Note box|Currently in SME 7.2 and up, TCPPort is configurable via server-manager, under Remote Access menu.
Line 1,095: Line 1,378:  
see [[AutoBlock#Public_SSH_Acess]]
 
see [[AutoBlock#Public_SSH_Acess]]
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/ssh/sshd_config
 
|+Affected file: /etc/ssh/sshd_config
 
!Variable
 
!Variable
Line 1,115: Line 1,398:     
==== smtpd ====
 
==== smtpd ====
 +
{{Warning box| OBSOLETE. smtpd has been deprecated in sme10. now the variable is qpsmtpd.}}
 +
 
''Usage''
 
''Usage''
 
  config setprop smtpd variable value
 
  config setprop smtpd variable value
 
  signal-event email-update
 
  signal-event email-update
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /var/service/qpsmtpd/runenv<br>
 
|+Affected file: /var/service/qpsmtpd/runenv<br>
 
'''[[bugzilla:7846]]''': Changes to <code>'''Instances'''</code> or <code>'''InstancesPerIP'''</code> require a restart of qpsmtpd:<br>
 
'''[[bugzilla:7846]]''': Changes to <code>'''Instances'''</code> or <code>'''InstancesPerIP'''</code> require a restart of qpsmtpd:<br>
<code>expand-template /var/service/qpsmtpd/config && sv t /service/qpsmtpd /service/sqpsmtpd</code>
+
<code>expand-template /var/service/qpsmtpd/runenv && sv t /service/qpsmtpd /service/sqpsmtpd</code>
 
!Variable
 
!Variable
 
!Target
 
!Target
Line 1,136: Line 1,421:  
|}
 
|}
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
<br />
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
 
 
|+Affected file: /var/service/qpsmtpd/config/smtpgreeting
 
|+Affected file: /var/service/qpsmtpd/config/smtpgreeting
 
!Variable
 
!Variable
Line 1,147: Line 1,434:  
|}
 
|}
   −
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
<br />
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
 
 
|+Affected file: /var/qmail/control/helohost
 
|+Affected file: /var/qmail/control/helohost
 
!Variable
 
!Variable
Line 1,162: Line 1,451:  
  config setprop yum variable value
 
  config setprop yum variable value
 
  signal-event yum-modify
 
  signal-event yum-modify
{| width="100%" border="1" cellpadding="5" cellspacing="0"
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 
|+Affected file: /etc/yum.conf
 
|+Affected file: /etc/yum.conf
 
!Variable
 
!Variable
Line 1,173: Line 1,462:  
|-
 
|-
 
|check4updates
 
|check4updates
|Frequency of Update Checking [[:SME_Server:Documentation:FAQ#Frequency|see here]]
+
|Frequency of Update Checking daily(default but monthly or weekly available)
 
|daily
 
|daily
 
|-
 
|-
Line 1,203: Line 1,492:  
|All or part of an RPM name to be excluded from 'Available Packages' in the 'Software Installer'
 
|All or part of an RPM name to be excluded from 'Available Packages' in the 'Software Installer'
 
|none
 
|none
 +
|-
 +
|DeltaRpmProcess
 +
| Only changes between the installed package and the new one are downloaded. Once the delta rpm loaded, a rebuilding process is started only SME10 see [[bugzilla:8834]])
 +
| disabled (by default)/enabled
 +
|-
 +
| DownloadOnlyHour XX (0-23)
 +
| Set the time when to download rpm updates by yum (only sme10 see [bugzilla:1502]])
 +
| default is 04 AM if no property
 
|}
 
|}
   −
See also 'db yum_repositories'
+
See also 'db yum_repositories' [http://wiki.contribs.org/Category:Yum_Repository All available repositories]<br />
 +
 
 +
''Usage''
 +
db yum_repositories setprop RepositoryName variable value
 +
signal-event yum-modify
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
|+Affected file: /etc/yum.smerepos.d/sme-base.repo
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|EnableGroups
 +
|Enable groupinstall with yum
 +
|Yes(default)/no
 +
|-
 +
|GPGCheck
 +
|Enable the rpm verification by GPG of the repository signature
 +
|Yes(default)/no
 +
|-
 +
|MirrorList
 +
|It is the base url where the repository can be found
 +
|no default value
 +
|-
 +
|status
 +
|Enable the repository in yum, all updates will be installed if enabled
 +
|disabled/enabled
 +
|-
 +
|Visible
 +
|The repository can be selected from 'Enabled repositories' in the 'Software Installer' in order to be Enabled by Yum if set to yes
 +
|no
 +
|-
 +
|IncludePkgs 'rpm1,rpm2,rpm3'
 +
|Only rpms mentioned here will be available for installation or upgrade.
 +
|
 +
|-
 +
|Exclude 'rpm1,rpm2,rpm3'
 +
| rpms mentioned here will be excluded by yum
 +
|
 +
|-
 +
|DeltaRpmPercentage XX
 +
| Defines the maximum ratio allowed between the delta rpm size and the package size on a per-repository basis: by default, delta rpms can’t be bigger than 75% of the size of the associated rpms, otherwise they are not used. Set to disabled if  you don't want to use deltarpm for this repository (only SME10 see [[bugzilla:8834]])
 +
| default is '75' if no property
 +
|}
    
==== Miscellaneous Other DB Variables ====
 
==== Miscellaneous Other DB Variables ====
Line 1,217: Line 1,556:  
Note that any command listed here is to be executed on one line!}}
 
Note that any command listed here is to be executed on one line!}}
   −
 
+
{| width="100%" cellspacing="0" cellpadding="5" border="1"
{| width="100%" border="1" cellpadding="5" cellspacing="0"
   
!Command
 
!Command
 
!service(s)
 
!service(s)
Line 1,304: Line 1,642:  
|}
 
|}
    +
==== Port Forwarding ====
 +
Server manager will create two databases, one for TCP and one for UDP
 +
 +
db portforward_tcp set {port} forward AllowHosts {some.host.ip} Comment {Test} Denyhosts {0.0.0.0/0} DestHost {dest.host.ip} DestPort {port}
 +
 +
db portforward_udp set {port} forward AllowHosts {some.host.ip} Comment {Test} Denyhosts {0.0.0.0/0} DestHost {dest.host.ip} DestPort {port}
 +
 +
Apply with:
    +
signal-event portforwarding-update
    
----
 
----
 +
{| width="100%" cellspacing="0" cellpadding="5" border="1"
 +
!Variable
 +
!Target
 +
!Default
 +
|-
 +
|port
 +
|Incoming Port for Forwarding
 +
|none
 +
|-
 +
|DestPort
 +
|Destination Target Port
 +
|port
 +
|-
 +
|DestHost
 +
|Destination Host IP
 +
|none
 +
|-
 +
|AllowHosts
 +
|Allowed Hosts
 +
|0.0.0.0/0
 +
|-
 +
|DenyHosts
 +
|Denied Hosts
 +
|0.0.0.0/0
 +
|-
 +
|Comment
 +
|Notes for this rule
 +
|none
 +
|}
 +
 
[[Category:Howto]]
 
[[Category:Howto]]
 
[[Category:Developer]]
 
[[Category:Developer]]

Navigation menu