## Configuration File for RA Manager Utility
## (c) 1998 by Massimiliano Pala - All Rights Reserved

LDAP "yes"
LDAP_CRL_Issuer	""
LDAP_CA_DN	""

## Crypto Section
## ==============
openssl    	"/usr/bin/openssl"
sslconfig  	"/etc/openca/openssl/openssl.cnf"
MakePath   	"/usr/bin/make -s"

## General Section
## ===============

DEFAULT_LANGUAGE "@default_language@"
DEFAULT_CHARSET  "@default_charset@"

CgiLibPath		"/usr/share/openca/functions"
CgiServerType		"ldap"
CgiServerName		"ldap"

ModuleID	@ldap_module_id@
ModuleShift	@module_shift@

HtdocsUrlPrefix		"/openca/ldap"

SessionDir      /var/lib/openca/session/cookie
SessionLifetime 1200

DBmodule 	"@dbmodule@"
AccessControlConfiguration "/etc/openca/access_control/ldap.xml"
SoftwareConfiguration      "/etc/openca/config.xml"
RoleConfiguration          "/etc/openca/rbac/roles.xml"
ModuleConfiguration        "/etc/openca/rbac/modules.xml"
TokenConfiguration         "/etc/openca/token.xml"
LogConfiguration           "/etc/openca/log.xml"
MenuConfiguration          "/etc/openca/menu.xml"
LDAPConfiguration          "/etc/openca/ldap.xml"

TempDir 	"/var/lib/openca/tmp"
MaxReturnedItems 20

ADDITIONAL_REQUEST_ATTRIBUTES   "requestercn" "email" "department" "telephone"
ADDITIONAL_ATTRIBUTES_DISPLAY_VALUE     "Name (first and Last name)" "Email" "Department"  "Telephone"
ADDITIONAL_REQUEST_ATTRIBUTES_STRING_TYPE "LATIN1_LETTERS" "EMAIL" "LATIN1_LETTERS" "LATIN1_LETTERS"

CmdRefs_viewCert "LDAP" "VIEW_CSR"
REQUIRE_PASSWD_PUBLIC	"NO"

## Images Section
## ==============
ValidSigImage	"/openca/ldap/images/validSig.png"
SigErrorImage	"/openca/ldap/images/sigError.png"

## Certificates and CRLs Section
## =============================

CACertificate 		"/var/lib/openca/crypto/cacerts/cacert.pem"
CACertificateDER 	"/var/lib/openca/crypto/cacerts/cacert.der"
CACertificateCRT 	"/var/lib/openca/crypto/chain/cacert.crt"
CACertsDir 		"/var/lib/openca/crypto/cacerts"
CertsDir 		"/var/lib/openca/crypto/certs"
ChainDir	 	"/var/lib/openca/crypto/chain"
CRLDir			"/var/lib/openca/crypto/crls"

##
## Role management Section
## -----------------------

RBAC_DIR          "/etc/openca/rbac"
RBAC_MODULE       "RA_1"
ROLES_DIR         "roles"
RIGHTS_DIR        "rights"
SCRIPT_CONFIG_DIR "scripts"