modules.conf 3.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788
  1. # cobbler module configuration file
  2. # =================================
  3. # authentication:
  4. # Decides what users can log into the WebUI and call Read-Write XMLRPC methods.
  5. # Choices:
  6. # authentication.denyall -- No one (default)
  7. # authentication.configfile -- Use /etc/cobbler/users.digest (for basic setups)
  8. # authentication.passthru -- Ask Apache to handle it (used for kerberos)
  9. # authentication.ldap -- Authenticate against LDAP
  10. # authentication.spacewalk -- Ask Spacewalk/Satellite (experimental)
  11. # authentication.pam -- Use PAM facilities
  12. # authentication.testing -- Username/password is always testing/testing (debug)
  13. # (user supplied) -- You may write your own module
  14. # WARNING: This is a security setting, do not choose an option blindly.
  15. # For more information:
  16. # - https://cobbler.readthedocs.io/en/latest/user-guide/web-interface.html
  17. # - https://cobbler.readthedocs.io/en/release28/5_web-interface/web_authentication.html
  18. #
  19. # hash_algorithm: This parameter has currently only a meaning when the option authentication.configfile is used.
  20. # The parameter decides what hashfun algorithm is used for checking the passwords.
  21. # Currently available are: sha3_384, sha3_512, blake2b, sha3_224, blake2s, shake_128, shake_256,
  22. # sha3_256
  23. [authentication]
  24. module = authentication.configfile
  25. hash_algorithm = sha3_256
  26. # authorization:
  27. # once a user has been cleared by the WebUI/XMLRPC, what can they do?
  28. # choices:
  29. # authorization.allowall -- full access for all authneticated users (default)
  30. # authorization.ownership -- use users.conf, but add object ownership semantics
  31. # (user supplied) -- you may write your own module
  32. # WARNING: this is a security setting, do not choose an option blindly.
  33. # If you want to further restrict cobbler with ACLs for various groups,
  34. # pick authorization.ownership. authorization.ownership does not support ACLs. configfile
  35. # does but does not support object ownership which is useful as an additional
  36. # layer of control.
  37. # for more information:
  38. # https://cobbler.readthedocs.io/en/latest/user-guide/web-interface.html
  39. # https://github.com/cobbler/cobbler/wiki/Security-overview
  40. # https://github.com/cobbler/cobbler/wiki/Web-authorization
  41. [authorization]
  42. module = authorization.allowall
  43. # dns:
  44. # chooses the DNS management engine if manage_dns is enabled
  45. # in /etc/cobbler/settings.yaml, which is off by default.
  46. # choices:
  47. # managers.bind -- default, uses BIND/named
  48. # managers.dnsmasq -- uses dnsmasq, also must select dnsmasq for dhcp below
  49. # managers.ndjbdns -- uses ndjbdns
  50. # NOTE: more configuration is still required in /etc/cobbler
  51. # for more information:
  52. # https://github.com/cobbler/cobbler/wiki/Dns-management
  53. [dns]
  54. module = managers.bind
  55. # dhcp:
  56. # chooses the DHCP management engine if manage_dhcp is enabled
  57. # in /etc/cobbler/settings.yaml, which is off by default.
  58. # choices:
  59. # managers.isc -- default, uses ISC dhcpd
  60. # managers.dnsmasq -- uses dnsmasq, also must select dnsmasq for dns above
  61. # NOTE: more configuration is still required in /etc/cobbler
  62. # for more information:
  63. # https://github.com/cobbler/cobbler/wiki/Dhcp-management
  64. [dhcp]
  65. module = managers.isc
  66. # tftpd:
  67. # chooses the TFTP management engine if manage_tftpd is enabled
  68. # in /etc/cobbler/settings.yaml, which is ON by default.
  69. #
  70. # choices:
  71. # managers.in_tftpd -- default, uses the system's tftp server
  72. # managers.tftpd_py -- uses cobbler's tftp server
  73. #
  74. [tftpd]
  75. module = managers.in_tftpd
  76. #-------------------------------------------------