<!-- $Id$ -->

<!-- BEGIN header -->

<form method="post" action="{action_url}">
<table align="center" cellspacing="0" border="5" width="90%" >
   <tr class="th">
    <td colspan="2">&nbsp;{title}</td>
   </tr>

<!-- END header -->

<!-- BEGIN body -->
   <tr class="th">
    <td colspan="2"><b>{lang_Path_information}, {lang_Virtual_filesystem}</b></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Where_should_eGroupware_store_file_content}:</td>
    <td>
      <select name="newsettings[vfs_storage_mode]">
{hook_vfs_storage_mode_options}
      </select>
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2"><b>{lang_Don't_change,_if_you_already_stored_files!_You_will_loose_them!}</b> There's currently no migration avaliable.</td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_the_full_path_for_users_and_group_files.<br />Examples:_/files,_E:\FILES}</td>
    <td><input name="newsettings[files_dir]" value="{value_files_dir}" size="80" /></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">
    	<b>{lang_This_has_to_be_outside_the_webservers_document-root!!!}</b><br />
    	{lang_If_you_can_only_access_the_docroot_choose_<b>Database</b>_for_where_to_store_the_file_content_AND_use_same_path_as_for_temporary_files.}
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Usernames_(comma-separated)_which_can_get_VFS_root_access_(beside_setup_user)}</td>
    <td><input name="newsettings[vfs_root_user]" value="{value_vfs_root_user}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Enter_the_full_path_to_the_backup_directory.<br />if_empty:_files_directory}/db_backup:</td>
    <td><input name="newsettings[backup_dir]" value="{value_backup_dir}" size="80" /></td>
   </tr>

   <tr class="row_on">
    <td colspan="2"><b>{lang_This_has_to_be_outside_the_webservers_document-root!!!}</b></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Enter_the_full_path_for_temporary_files.<br />Examples:_/tmp,_C:\TEMP}:</td>
    <td><input name="newsettings[temp_dir]" value="{value_temp_dir}" size="80" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_the_location_of_eGroupWare's_URL.<br />Example:_http://www.domain.com/egroupware_&nbsp;_or_&nbsp;_/egroupware<br /><b>No_trailing_slash</b>}:</td>
    <td><input name="newsettings[webserver_url]" value="{value_webserver_url}" size="80" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Enforce_SSL_(allows_to_specify_just_a_path_above)}:</td>
    <td>
     <select name="newsettings[enforce_ssl]">
      <option value="">None</option>
      <option value="links"{selected_enforce_ssl_links}>{lang_By_rewriting_links_to_https_(allows_eg._SiteMgr_to_run_on_http)}</option>
      <option value="redirect"{selected_enforce_ssl_redirect}>{lang_By_redirecting_to_https}</option>
     </select>
    </td>
   </tr>

   <!-- tr class="row_on">
    <td>{lang_Complete_path_to_aspell_program}:</td>
    <td>
     <input name="newsettings[aspell_path]" value="{value_aspell_path}" size="40">
    </td>
   </tr -->

   <tr class="row_on">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_Host_information}</b></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_the_hostname_of_the_machine_on_which_this_server_is_running}:</td>
    <td><input name="newsettings[hostname]" value="{value_hostname}" size="40"/></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Enter_your_HTTP_proxy_server}:</td>
    <td><input name="newsettings[httpproxy_server]" value="{value_httpproxy_server}" size="40"/></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_your_HTTP_proxy_server_port}:</td>
    <td><input name="newsettings[httpproxy_port]" value="{value_httpproxy_port}" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Enter_your_HTTP_proxy_server_username}:</td>
    <td><input name="newsettings[httpproxy_server_username]" value="{value_httpproxy_server_username}" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_your_HTTP_proxy_server_password}:</td>
    <td><input name="newsettings[httpproxy_server_password]" value="{value_httpproxy_server_password}" /></td>
   </tr>

  <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_Authentication_/_Accounts}</b></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Select_which_type_of_authentication_you_are_using}:</td>
    <td>
     <select name="newsettings[auth_type]">
{hook_auth_types}
     </select>
     <input type="hidden" value="" name="newsettings[auth_log]"/>
     <label><input type="checkbox" value="True" {checked_auth_log_True} name="newsettings[auth_log]"/>
{lang_Enable_logging_of_authentication_to_files-directory}: auth.log</label>
    </td>
   </tr>

    <tr class="row_on">
    <td>{lang_Authentication_type_for_application}: <b>CalDAV/CardDAV Sync</b></td>
    <td>
     <select name="newsettings[auth_type_groupdav]">
      <option value="">{lang_Standard,_as_defined_above}</option>
{hook_auth_type_groupdav}
     </select>
    </td>
   </tr>

    <tr class="row_off">
    <td>{lang_Authentication_type_for_application}: <b>eSync (ActiveSync)</b></td>
    <td>
     <select name="newsettings[auth_type_activesync]">
      <option value="">{lang_Standard,_as_defined_above}</option>
{hook_auth_type_activesync}
     </select>
    </td>
   </tr>

    <tr class="row_on">
    <td>{lang_Authentication_type_for_application}: <b>{lang_Security_&_Password}</b></td>
    <td>
     <select name="newsettings[auth_type_security]">
      <option value="">{lang_Standard,_as_defined_above}</option>
{hook_auth_type_security}
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>
     {lang_Authentication_type_for_HTTP_Host}:
     <input name="newsettings[auth_type_hostname]" value="{value_auth_type_hostname}" size="40"/>
    </td>
    <td>
     <select name="newsettings[auth_type_host]">
      <option value="">{lang_Standard,_as_defined_above}</option>
{hook_auth_type_host}
     </select>
    </td>
   </tr>

  <tr class="row_on">
    <td>{lang_HTTP_auth_types_(comma-separated)_to_use_without_login-page, eg. "NTLM"}:</td>
    <td>
      <input name="newsettings[http_auth_types]" value="{value_http_auth_types}" size="20" />
    </td>
   </tr>

  <tr class="row_off">
    <td>{lang_Fallback_Authentication}:</td>
    <td>
      <input type="hidden" value="" name="newsettings[auth_fallback]"/>
      <label><input type="checkbox" value="True" {checked_auth_fallback_True} name="newsettings[auth_fallback]"/>
{lang_If_primary_authentication_is_NOT_successful_fall_back_to_passwords_synced_into_account-storage}</label>
    </td>
   </tr>
   <tr class="row_on">
    <td>{lang_Select_where_you_want_to_store/retrieve_user_accounts}:</td>
    <td>
     <select name="newsettings[account_repository]">
{hook_account_repository}
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_sql_encryption_type}:</td>
    <td>
     <select name="newsettings[sql_encryption_type]">{hook_sql_passwdhashes}</select>
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Allow_password_migration}:</td>
    <td>
      <select name="newsettings[pwd_migration_allowed]">
         <option value="">{lang_No}</option>
         <option value="True" {selected_pwd_migration_allowed_True}>{lang_Yes}</option>
       </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Allowed_migration_types_(comma-separated)}:</td>
    <td>
      <input name="newsettings[pwd_migration_types]" value="{value_pwd_migration_types}" size="20" />
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Auto_login_anonymous_user}:</td>
    <td>
      <select name="newsettings[auto_anon_login]">
         <option value="">{lang_No}</option>
         <option value="True"{selected_auto_anon_login_True}>{lang_Yes}</option>
       </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Minimum_account_id_(e.g._500_or_100,_etc.)}:</td>
    <td><input name="newsettings[account_min_id]" value="{value_account_min_id}" /></td>
   </tr>
   <tr class="row_on">
    <td>{lang_Maximum_account_id_(e.g._65535_or_1000000)}:</td>
    <td><input name="newsettings[account_max_id]" value="{value_account_max_id}" /></td>
   </tr>
   <tr class="row_off">
    <td>{lang_User_account_prefix}:</td>
    <td><input name="newsettings[account_prefix]" value="{value_account_prefix}" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Usernames_are_casesensitive}:</td>
    <td>
      <select name="newsettings[case_sensitive_username]">
       <option value="">{lang_No}</option>
       <option value="True"{selected_case_sensitive_username_True}>{lang_Yes}</option>
      </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Auto_create_account_records_for_authenticated_users}:</td>
    <td>
      <select name="newsettings[auto_create_acct]">
       <option value="">{lang_No}</option>
       <option value="True"{selected_auto_create_acct_True}>{lang_Yes}</option>
       <option value="lowercase"{selected_auto_create_acct_lowercase}>{lang_Yes,_with lowercase_usernames}</option>
      </select>
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Auto-created_user_accounts_expire}:</td>
    <td>
     <select name="newsettings[auto_create_expire]">
      <option value="604800"{selected_auto_create_expire_604800}>{lang_one_week}</option>
      <option value="1209600"{selected_auto_create_expire_1209600}>{lang_two_weeks}</option>
      <option value="2592000"{selected_auto_create_expire_2592000}>{lang_one_month}</option>
      <option value="never"{selected_auto_create_expire_never}>{lang_Never}</option>
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Add_auto-created_users_to_this_group_('Default'_will_be_attempted_if_this_is_empty.)}:</td>
    <td><input name="newsettings[default_group_lid]" value="{value_default_group_lid}" placeholder="Default" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_If_no_ACL_records_for_user_or_any_group_the_user_is_a_member_of}:</td>
    <td>
     <select name="newsettings[acl_default]">
      <option value="deny"{selected_acl_default_deny}>{lang_Deny_Access}</option>
      <option value="grant"{selected_acl_default_grant}>{lang_Grant_Access}</option>
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_If_using_LDAP}:</b></td>
   </tr>

   <tr class="row_on">
    <td>
    	{lang_LDAP_host} {lang_IP_or_URL}: (ldap|ldaps|tls)://IP[:port]/<br/>
    	({lang_use_space_to_separate_multiple}):
    </td>
    <td><input name="newsettings[ldap_host]" value="{value_ldap_host}" size="80" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_LDAP_accounts_context}:</td>
    <td><input name="newsettings[ldap_context]" value="{value_ldap_context}" size="80" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_LDAP_search_filter_for_accounts,_default:_"(uid=%user)",_%domain=EGw-domain}:</td>
    <td><input name="newsettings[ldap_search_filter]" value="{value_ldap_search_filter}" size="80" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_LDAP_groups_context}:</td>
    <td><input name="newsettings[ldap_group_context]" value="{value_ldap_group_context}" size="80" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Additional_group_filter_(optional)}:</td>
    <td><input name="newsettings[ldap_group_filter]" value="{value_ldap_group_filter}" size="80" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_LDAP_rootdn} {lang_(searching_accounts_and_changing_passwords)}:</td>
    <td><input name="newsettings[ldap_root_dn]" value="{value_ldap_root_dn}" size="80" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_LDAP_root_password}:</td>
    <td><input name="newsettings[ldap_root_pw]" type="password" value="{value_ldap_root_pw}" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_LDAP_encryption_type}:</td>
    <td>
     <select name="newsettings[ldap_encryption_type]">
{hook_passwdhashes}
     </select>
    </td>
   </tr>

   <tr class="row_on">
     <td>{lang_Do_you_want_to_manage_homedirectory_and_loginshell_attributes?}:</td>
     <td>
      <select name="newsettings[ldap_extra_attributes]">
       <option value="">{lang_No}</option>
       <option value="True"{selected_ldap_extra_attributes_True}>{lang_Yes}</option>
      </select>
     </td>
    </tr>

   <tr class="row_off">
    <td>{lang_LDAP_Default_homedirectory_prefix_(e.g._/home_for_/home/username)}:</td>
    <td><input name="newsettings[ldap_account_home]" value="{value_ldap_account_home}" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_LDAP_Default_shell_(e.g._/bin/bash)}:</td>
    <td><input name="newsettings[ldap_account_shell]" value="{value_ldap_account_shell}" /></td>
   </tr>

   <tr class="row_off">
     <td>{lang_Allow_usernames_identical_to_system_users?}:</td>
     <td>
      <select name="newsettings[ldap_allow_systemusernames]">
       <option value="">{lang_No}</option>
       <option value="True"{selected_ldap_allow_systemusernames_True}>{lang_Yes}</option>
      </select>
     </td>
    </tr>

   <tr class="row_on" valign="top">
    <td colspan="2">
     <a href="account_migration.php"><b>{lang_Migration_between_eGroupWare_account_repositories}:</b></a>
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_If_using_ADS_(Active_Directory)}:</b></td>
   </tr>
   <tr class="row_off">
     <td>{lang_Host/IP_Domain_controler} ({lang_use_space_to_separate_multiple}):</td>
     <td><input name="newsettings[ads_host]" value="{value_ads_host}" size="80" /></td>
   </tr>
   <tr class="row_on">
     <td>{lang_Domain_name}:</td>
     <td><input name="newsettings[ads_domain]" value="{value_ads_domain}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>
     	{lang_Admin_user}:<br/>
     	({lang_optional,_if_only_authentication_AND_anonymous_search_is_enabled})<br/>
     	{lang_Requires_"Reset_Password"_privilege,_to_change_passwords!}
     </td>
     <td><input name="newsettings[ads_admin_user]" value="{value_ads_admin_user}" size="80" /></td>
   </tr>
   <tr class="row_on">
     <td>{lang_Password}:</td>
     <td><input type="password" name="newsettings[ads_admin_passwd]" value="{value_ads_admin_passwd}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>
     	{lang_Use_TLS_or_SSL_encryption} ({lang_required_to_change_passwords}):<br/>
     	{lang_Needs_extra_configuration_on_DC_and_webserver!}<br/>
     	({lang_Easiest_way_under_win2008r2_is_to_add_role_"Active_Directory_Certificate_Services"_and_reboot.})
     </td>
     <td>
     	<select name="newsettings[ads_connection]">
			<option value="">{lang_No}</option>
			<option value="tls"{selected_ads_connection_tls}>TLS</option>
			<option value="ssl"{selected_ads_connection_ssl}>SSL</option>
     	</select>
        &nbsp; <label title="{lang_Disable_only_if_your_AD_has_problems_with_VLV_controls_AND_can_return_all_users_in_a_single_query!}">
            <input type="checkbox" value="disable" {checked_ads_disable_vlv_disable} name="newsettings[ads_disable_vlv]"/>
            {lang_Disable_VLV_controls}</label>
     </td>
   </tr>
   <tr class="row_on">
     <td>
     	{lang_Context_to_search_users}: ({lang_leave_empty_to_use_default})<br/>
     	{lang_eg._"CN=Users,DC=domain,DC=com"_for_ADS_domain_"domain.com"}<br/>
     </td>
     <td><input name="newsettings[ads_context]" value="{value_ads_context}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>
     	{lang_Group_context}: ({lang_leave_empty_to_use_default})
     </td>
     <td>
        <input name="newsettings[ads_group_context]" value="{value_ads_group_context}" size="80" />
        <input type="hidden" value="" name="newsettings[ads_group_extra_types]"/>
        <label><input type="checkbox" value="distributionlists" {checked_ads_group_extra_types_distributionlists} name="newsettings[ads_group_extra_types]"/>
            {lang_distribution-lists_too}</label>
     </td>
   </tr>
   <tr class="row_on">
     <td>{lang_Additional_user_filter_(optional)}:</td>
     <td><input name="newsettings[ads_user_filter]" value="{value_ads_user_filter}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>{lang_Additional_group_filter_(optional)}:</td>
     <td><input name="newsettings[ads_group_filter]" value="{value_ads_group_filter}" size="80" /></td>
   </tr>
   <tr class="row_on">
     <td><b>{lang_Attributes_for_new_users}</b><br/></td>
     <td>{lang_use_%u_for_username,_leave_empty_to_no_set}</td>
   </tr>
   <tr class="row_on">
     <td>
     	{lang_Context_to_create_users}: ({lang_leave_empty_to_use_context_above})
     </td>
     <td><input name="newsettings[ads_create_context]" value="{value_ads_create_context}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>profilePath</td>
     <td><input name="newsettings[ads_new_profilePath]" value="{value_ads_new_profilePath}" size="40" /></td>
   </tr>
   <tr class="row_on">
     <td>homeDirectory</td>
     <td><input name="newsettings[ads_new_homeDirectory]" value="{value_ads_new_homeDirectory}" size="40" /></td>
   </tr>
   <tr class="row_off">
     <td>homeDrive</td>
     <td><input name="newsettings[ads_new_homeDrive]" value="{value_ads_new_homeDrive}" size="40" /></td>
   </tr>
   <tr class="row_on">
     <td>scriptPath</td>
     <td><input name="newsettings[ads_new_scriptPath]" value="{value_ads_new_scriptPath}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2">
        <b>{lang_If_using_OpenIDConnect_(authentication as client agains an other OIDC IdP)}:</b><br/>
        {lang_The_OIDC_IdP_must_support_autoconfiguration_under_the_below_given_URL}: /.well-known/openid-configuration<br/>
        {lang_EGroupware's_callback_URL_is_the_one_of_the_login_page}: <a href="{value_webserver_url}/login.php">{lang_Callback_URL}</a>
    </td>
   </tr>
   <tr class="row_on">
    <td>{lang_Label_to_display_as_option_on_login_page}:<br/>{lang_or_leave_empty_and_select_OpenIDConnect_as_authentication_type_above_for_single_sign_on}</td>
    <td><input name="newsettings[openidconnect_discovery]" placeholder="{lang_OpenIDConnect_Login}" value="{value_openidconnect_discovery}" size="20" /></td>
   </tr>
   <tr class="row_off">
     <td>{lang_URL_of_the_IdP_(without_path)}:</td>
     <td><input name="newsettings[oic_provider]" value="{value_oic_provider}" size="80" /></td>
   </tr>
   <tr class="row_off">
     <td>{lang_Microsoft_Tenant_ID_(empty_allows_every_tenant!)}:</td>
     <td><input name="newsettings[oic_tenant_id]" value="{value_oic_tenant_id}" size="80" /></td>
   </tr>
   <tr class="row_on">
     <td>{lang_Client_ID}:</td>
     <td><input name="newsettings[oic_client_id]" value="{value_oic_client_id}" size="40" /></td>
   </tr>
   <tr class="row_off">
     <td>{lang_Client_secret}:</td>
     <td><input type="password" name="newsettings[oic_client_secret]" value="{value_oic_client_secret}" size="40" /></td>
   </tr>
   <tr class="row_on">
      <td>{lang_Name_of_JWT_payload_attribute_for_username}:</td>
      <td>
        <select name="newsettings[oic_username_attribute]">
          <option value="sub"{selected_oic_username_attribute_sub}>sub ({lang_default})</option>
          <option value="preferred_username"{selected_oic_username_attribute_preferred_username}>preferred_username</option>
          <option value="email"{selected_oic_username_attribute_email}>email</option>
          <option value="custom"{selected_oic_username_attribute_custom}>{lang_custom_attribute}</option>
        </select>
        <input name="newsettings[oic_username_custom]" value="{value_oic_username_custom}" size="40" placeholder="{lang_custom_attribute}"/>
        <label title="{lang_Only_check_if_you_want_allow_unverified_email_addresses!}">
          <input type=checkbox name="newsettings[oic_email_unverified]" value="true" {checked_oic_email_unverified_true}>{lang_Allow_unverified_email}</label>
      </td>
   </tr>
   <tr class="row_off">
      <td>{lang_Perl_regular_expression_to_extract_username}</td>
      <td><input name="newsettings[oic_username_preg]" value="{value_oic_username_preg}" size="40" placeholder="/^(.*)$/"/></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_Periodic_import_from_ADS_or_LDAP_into_EGroupware_database}:</b></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Source_(must_be_configured_above)}:</td>
    <td>
     <select name="newsettings[account_import_source]">
      <option value="ads" {selected_account_import_source_ads}>ADS</option>
      <option value="ldap" {selected_account_import_source_ldap}>LDAP</option>
      <option value="univention" {selected_account_import_source_univention}>Univention (LDAP)</option>
     </select>
    </td>
   </tr>
   <tr class="row_on">
     <td>{lang_Regular_expression_to_filter_by_DN}</td>
     <td><input name="newsettings[account_import_dn_regexp]" value="{value_account_import_dn_regexp}" placeholder="/OU=(One|Two),DC=example,DC=org$/i" size="80" /></td>
   </tr>
   <tr class="row_off">
    <td>{lang_What_to_import?}</td>
    <td>
     <select name="newsettings[account_import_type]">
      <option value="users" {selected_account_import_type_users}>{lang_just_users}</option>
      <option value="users+groups" {selected_account_import_type_users+groups}>{lang_users,_groups_and_memberships}</option>
      <option value="users+local+groups" {selected_account_import_type_users+local+groups} title="{lang_Local_groups_includes_groups_and_their_memberships_deleted_on_the_AD/LDAP_server!}">{lang_users,_groups_and_memberships,_keep_local_groups}</option>
     </select>
     <label title="{lang_Will_import_aliases_from_multivalued_mail_or_proxyAddresses_attribute}">
        <input type=checkbox name="newsettings[account_import_aliases]" value="true" {checked_account_import_aliases_true}>{lang_Import_aliases}</label>
     (<a href="account_import.php?export_ldif=aliases" target="_blank" title="{lang_Need_to_be_applied_before_enabling} {lang_Import_aliases}!">{lang_Download_ldif_with_changes}</a>)
    </td>
   </tr>
   <tr class="row_on">
    <td>{lang_What_to_do_in_EGroupware_if_an_user_get_deleted?}</td>
    <td>
     <select name="newsettings[account_import_delete]">
      <option value="yes" {selected_account_import_delete_yes}>{lang_Delete_user_AND_his_data}</option>
      <option value="deactivate" {selected_account_import_delete_deactivate}>{lang_Deactivate_user}</option>
      <option value="no" {selected_account_import_delete_no}>{lang_Do_NOT_check_for_deleted_user}</option>
     </select>
    <br/><i>Deleting or disabling no longer existing accounts works currently only by using manual initial import!</i>
    </td>
   </tr>
   <tr class="row_off">
     <td>{lang_What_to_do,_if_an_account_get_modified_in_EGroupware?}</td>
     <td><label>
       <input type=checkbox name="newsettings[account_import_update_source]" value="true" {checked_account_import_update_source_true}>
       {lang_Update_the_account_in_the_source_(requires_write_rights!)}
     </label></td>
   </tr>
   <tr class="row_on">
    <td>{lang_How_frequent_should_the_import_run?}</td>
    <td>
     {lang_Every}
     <input type="number" name="newsettings[account_import_frequency]" style="width: 3em" value="{value_account_import_frequency}" step="0.1"/>
     {lang_hours_at}
     <input type="time" name="newsettings[account_import_time]" value="{value_account_import_time}"/>
     {lang_Log-Level}: <select name="newsettings[account_import_loglevel]">
      <option value="info" {selected_account_import_loglevel_info}>Info</option>
      <option value="detail" {selected_account_import_loglevel_detail}>Detail</option>
      <option value="debug" {selected_account_import_loglevel_debug}>Debug</option>
     </select>
     <br/>{lang_logs_to}: {value_files_dir}/setup/account-import.log
    </td>
   </tr>
   <tr class="row_off">
    <td>{lang_You_must_save_AND_run_an_inital_import,_before_the_periodic_import_will_start}:</td>
    <td>
      <button onclick="window.open('account_import.php?initial=true'+(document.getElementById('import_dry_run')?.checked?'&dry_run=true':''), '_blank')">{lang_Initial_import}</button>
      <button onclick="window.open('account_import.php'+(document.getElementById('import_dry_run')?.checked?'?dry_run=true':''), '_blank')">{lang_Incremental_import}</button>
      <label><input type="checkbox" id="import_dry_run"/> {lang_Dry-run_(only_show_what_would_happen)}</label><br/>
      {lang_We_strongly_recommend_to_run_a_DB_backup_BEFORE_running_the_import!}
    </td>
   </tr>

   <tr class="row_on">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_If_using_Mail_authentication}:</b></td>
   </tr>
   <tr class="row_on">
    <td>{lang_POP/IMAP_mail_server_hostname_or_IP_address}[:{lang_port}]:</td>
    <td><input name="newsettings[mail_server]" value="{value_mail_server}"></td>
   </tr>
   <tr class="row_off">
    <td>{lang_Mail_server_protocol}:</td>
    <td>
     <select name="newsettings[mail_server_type]">
      <option value="imap" {selected_mail_server_type_imap}>IMAP</option>
      <option value="imaps" {selected_mail_server_type_imaps}>IMAPS</option>
      <option value="pop3" {selected_mail_server_type_pop3}>POP3</option>
      <option value="pop3s" {selected_mail_server_type_pop3s}>POP3s</option>
     </select>
    </td>
   </tr>
   <tr class="row_on">
	<td>{lang_Mail_server_login_type}:</td>
    <td>
     <select name="newsettings[mail_login_type]">
      <option value="standard" {selected_mail_login_type_standard}>{lang_username_(standard)}</option>
      <option value="vmailmgr" {selected_mail_login_type_vmailmgr}>{lang_username@domainname_(Virtual_MAIL_ManaGeR)}</option>
      <option value="email" {selected_mail_login_type_email}>{lang_EMail-address}</option>
      <option value="uidNumber" {selected_mail_login_type_uidNumber}>{lang_UserId@domain_eg._u1234@domain}</option>
     </select>
    </td>
   </tr>
   <tr class="row_off">
    <td>{lang_Mail_domain_(for_Virtual_MAIL_ManaGeR)}:</td>
    <td><input name="newsettings[mail_suffix]" value="{value_mail_suffix}"></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_If_using_SAML_2.0 / Shibboleth / SimpleSAMLphp}:</b></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Label_to_display_as_option_on_login_page}:<br/>{lang_or_leave_empty_and_select_SAML_as_authentication_type_above_for_single_sign_on}</td>
    <td><input name="newsettings[saml_discovery]" placeholder="{lang_University_Login}" value="{value_saml_discovery}" size="20" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Identity_Provider}:<br/>{lang_You_can_specify_multiple_IdP_on_separate_lines.}</td>
    <td><textarea name="newsettings[saml_idp]" placeholder="https://idp.uni-kl.de/idp/shibboleth" rows="3" cols="64">{value_saml_idp}</textarea></td>
   </tr>

   <tr class="row_off">
    <td>
     {lang_Metadata}:
     {lang_refresh}
     <select name="newsettings[saml_metadata_refresh]">
      <option value="daily"{selected_saml_metadata_refresh_daily}>{lang_daily}</option>
      <option value="weekly"{selected_saml_metadata_refresh_weekly}>{lang_weekly}</option>
      <option value="no"{selected_saml_metadata_refresh_no}>{lang_not_automatic}</option>
      <option value="now"{selected_saml_metadata_refresh_now}>{lang_just_now}</option>
     </select>
    </td>
    <td>
     <input name="newsettings[saml_metadata]" placeholder="https://www.aai.dfn.de/fileadmin/metadata/dfn-aai-metadata.xml" value="{value_saml_metadata}" size="64" /><br/>
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Certificate_Metadata_is_signed_with}: ({lang_Will_be_downloaded_once,_unless_changed.})</td>
    <td><input name="newsettings[saml_certificate]" placeholder="https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.pem" value="{value_saml_certificate}" size="64" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Result_data_to_use_as_username}:</td>
    <td>
     <select name="newsettings[saml_username]">
      <option value="eduPersonPrincipalName"{selected_saml_username_eduPersonPrincipalName}>eduPersonPrincipalName</option>
      <option value="eduPersonUniqueId"{selected_saml_username_eduPersonUniqueId}>eduPersonUniqueId</option>
      <option value="emailAddress"{selected_saml_username_emailAddress}>emailAddress</option>
      <option value="uid"{selected_saml_username_uid}>uid</option>
      <option value="customOid"{selected_saml_username_customOid}>{lang_custom_OID}</option>
     </select>
     <input name="newsettings[saml_username_oid]" value="{value_saml_username_oid}" placeholder="urn:oid:x.x.x.x" size="40" />
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Result_data_to_add_or_remove_extra_membership}:</td>
    <td>
     <select name="newsettings[saml_affiliation]">
      <option value="eduPersonAffiliation"{selected_saml_affiliation_eduPersonAffiliation}>eduPersonAffiliation</option>
      <option value="custom"{selected_saml_affiliation_customOid}>{lang_custom_OID}</option>
     </select>
     <input name="newsettings[saml_affiliation_oid]" value="{value_saml_affiliation_oid}" placeholder="urn:oid:x.x.x.x" size="40" />
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Result_values_(comma-separated)_and_group-name_to_add_or_remove}:</td>
    <td>
     <input name="newsettings[saml_affiliation_values]" value="{value_saml_affiliation_values}" placeholder="staff, ..." size="30" />
     <input name="newsettings[saml_affiliation_group]" value="{value_saml_affiliation_group}" placeholder="Teachers" size="30" />
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Allow_SAML_logins_to_join_existing_accounts}:<br/>({lang_Requires_SAML_optional_on_login_page_and_user_to_specify_username_and_password})</td>
    <td>
     <select name="newsettings[saml_join]">
      <option value="">{lang_No}</option>
      <option value="usernameemail"{selected_saml_join_usernameemail}>{lang_Replace_username_and_email}</option>
      <option value="username"{selected_saml_join_username}>{lang_Replace_username_and_keep_email}</option>
      <option value="description"{selected_saml_join_description}>{lang_Use_account_description_to_store_SAML_username}</option>
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Match_SAML_usernames_to_existing_ones_(use_strings_or_regular_expression)}:</td>
    <td>
      <input name="newsettings[saml_replace]" placeholder="{lang_replace}: '@uni-kl.de' {lang_or} '/@(uni-kl\.de)$/'" value="{value_saml_replace}" size="40"/>
      <input name="newsettings[saml_replace_with]" placeholder="{lang_with}: '@rhrk.uni-kl.de' {lang_or} '@rhrk.$1'" value="{value_saml_replace_with}" size="35"/>
   </td>
   </tr>

   <tr class="row_on" height="25">
    <td>{lang_Some_information_for_the_own_Service_Provider_metadata}:</td>
    <td><a href="{value_webserver_url}/saml/module.php/saml/sp/metadata.php/default-sp">{lang_Metadata_URL}</a></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Name_for_Service_Provider}:</td>
    <td><input name="newsettings[saml_sp]" placeholder="EGroupware" value="{value_saml_sp}" size="40" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Technical_contact}:</td>
    <td>
     <input name="newsettings[saml_contact_name]" value="{value_saml_contact_name}" placeholder="{lang_Name}" size="24" />
     <input name="newsettings[saml_contact_email]" value="{value_saml_contact_email}" placeholder="{lang_Email}" size="24" />
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2">
      {lang_The_used_SimpleSAMLphp_allows_a_lot_more_configuration_/_different_authentication_types_via_its_config_files in} {value_files_dir}/saml<br/>
      {lang_More_information}: <a target="_blank" href="https://github.com/EGroupware/egroupware/blob/master/api/src/Auth/Saml.php#L19">
        https://github.com/EGroupware/egroupware/blob/master/api/src/Auth/Saml.php</a>
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>
   <tr class="th">
    <td colspan="2"><b>{lang_If_using_CAS_(Central_Authentication_Service):}</b></td>
   </tr>

   <tr class="row_on">
    <td>{lang_CAS_server_host_name:<br />Example:_sso-cas.univ-rennes1.fr}</td>
    <td><input name="newsettings[cas_server_host_name]" value="{value_cas_server_host_name}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_CAS_server_port:<br />Example:_443}</td>
    <td><input name="newsettings[cas_server_port]" value="{value_cas_server_port}" size="40" /></td>
   </tr>

   <tr class="row_on">
    <td>{lang_CAS_server_uri:}</td>
    <td><input name="newsettings[cas_server_uri]" value="{value_cas_server_uri}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Authentification_mode:}</td>
    <td>
     <select name="newsettings[cas_authentication_mode]">
      <option value="Client"{selected_cas_authentication_mode_Client}>{lang_php_Client}</option>
      <option value="Proxy"{selected_cas_authentication_mode_Proxy}>{lang_php_Proxy}</option>
     </select>
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_SSL_validation:}</td>
    <td>
     <select name="newsettings[cas_ssl_validation]">
      <option value="No"{selected_cas_ssl_validation_No}>{lang_No}</option>
      <option value="PEMCertificate"{selected_cas_ssl_validation_PEMCertificate}>{lang_PEM_Certificate}</option>
      <option value="CACertificate"{selected_cas_ssl_validation_CACertificate}>{lang_CA_Certificate}</option>
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td>{lang_Certificate_(PEM_or_CA):}</td>
    <td><input name="newsettings[cas_cert]" value="{value_cas_cert}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>

   <tr class="th">
    <td colspan="2"><b>{lang_If_using_Multiple_authentication_providers:}</b></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Comma-separated_provider_names_or_JSON}: <a href="https://github.com/EGroupware/egroupware/blob/master/api/src/Auth/Multiple.php" target="_blank">Auth/Multiple.php</a></td>
    <td><textarea name="newsettings[auth_multiple]" cols="64" rows="1" onfocus="this.style='height: '+this.scrollHeight+'px'" onblur="this.style='height: auto'">{value_auth_multiple}</textarea></td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>
<!--
   <tr class="th">
    <td colspan="2"><b>{lang_Mcrypt_settings_(requires_mcrypt_PHP_extension)}</b></td>
   </tr>

   <tr class="row_on">
    <td>{lang_Enter_some_random_text_for_app_session_encryption}:</td>
    <td><input name="newsettings[encryptkey]" value="{value_encryptkey}" size="40" /></td>
   </tr>

   <tr class="row_off">
    <td>{lang_Mcrypt_algorithm_(default_TRIPLEDES)}:</td>
    <td>
     <select name="newsettings[mcrypt_algo]">
{hook_encryptalgo}
     </select>
    </td>
   </tr>

   <tr class="row_on">
    <td>{lang_Mcrypt_mode_(default_CBC)}:</td>
    <td>
     <select name="newsettings[mcrypt_mode]">
{hook_encryptmode}
     </select>
    </td>
   </tr>

   <tr class="row_off">
    <td colspan="2">&nbsp;</td>
   </tr>
-->
<!-- end from admin -->

<!-- END body -->

<!-- BEGIN footer -->
  <tr class="th">
    <td colspan="2">
	&nbsp;
    </td>
  </tr>
  <tr>
    <td colspan="2" align="center">
      <input type="submit" name="submit" value="Submit" />
      <input type="submit" name="cancel" value="Cancel" />
    </td>
  </tr>
</table>
</form>
<!-- END footer -->