FormFlow system configuration

Set to TRUE to enable user authentication using LDAP. The FormFlow login page will be displayed, but users will be authenticated using LDAP. The user must be synchronized. It can only be used for synchronization with Active Directory. The default value is TRUE.

Enables/disables automatic authentication.

PHP function that returns the name of automatically authenticated user, if XMLGW_AUTO_AUTH_INVOCATION is set to function.

Automatic authentication type. Allowed values are: direct, redirect, function.

Hidden switch to enable URL variable show_dialog, which can be passed to the PHP script login.php with the value of 1.

Allowed values are 0, 1, or 2:

Methods of login using automatic authentication. This define can have the following values:

Name with namespace for the class that changes synchronization attributes.

Specifies whether and how to take certificates for LDAPS connection. This constant sets the type of connection. The options are never, allow, try and demand.

IP address or URL, where OpenSearch, the fulltext search service, responds. A port can also be specified. If not set, fulltext search in FormFlow will be hidden from the users.

Logging level, the field can have the following values:

Username to log in to OpenSearch.

Hash of the password to log in to OpenSearch.

Enables/disables automatic authentication.

Relative path to file with PHP function that performs external authentication. The path must be relative to the folder containing file htdocs/config.php.

Name of the PHP function that performs external authentication. The function must have the header function (string $login, string $password) and must return true, if the supplied $login and $password are correct, or false, if they are incorrect. The constant that contains the function to be used for logging in. E.g.: xmlfs_external_auth.

Write debug messages from CURL library to the standard output.

Maximum time in seconds to establish HTTP connection.

Maximum time in seconds to process HTTP request.

Write debug messages from CURL library to the error output.

Disable counterparty certificate validation in HTTP SSL/TLS communication.

Path to CAfile.crt that stores authority certificates.

List of addresses for which HTTP Proxy will not be used.

If not set, there will be no outgoing HTTP communication through a proxy.

HTTP Proxy port.

Login name for HTTP Proxy authentication.

Password for HTTP Proxy authentication.

Logging all lengthy queries.

Writing the stack to the log. Can be set to several levels, the default value is 40. Levels:

Enables time logging for functions.

The folders where to create log files.
Default value: XMLGW_ROOT.'/logs'

Log level setting for the file that catches log reports. Levels:

Logging all SQL queries.

Limit in ms for logging lengthy SQL queries.

Limit v ms for logging lengthy requests.

Base logfile name.
Default value: FFS

Log level setting for the service file that catches log reports. Can be set to several levels, the default value is 40. Levels:

Write web service client processing into a csv log.

Write web service processing into a csv log.

Types of authorities for which Service602LTV.ltvAnalyze returns positive validation. Enter as a comma-separated list (,), the values available are QUALIFIED, COMMERCIAL, INTERNAL. If the list is empty, all authority types are accepted.

Service602LTV in ltvAnalyzeResponse will not return the contents of /LtvAnalyzeResponse/sigInfos/sigInfo/certPath.

Service602LTV in ltvAnalyzeResponse will not return the contents of /LtvAnalyzeResponse/sigInfos/sigInfo/crlPath.

Length of time in ms, for which the service waits between repeating calls of the time-stamping service. The separator is a comma (,). The number of entries is the maximum number of repeats.
Default value: 300,500,1000,1500,2000

Service602LTV in ltvAnalyzeResponse will return PREVALIDATED instead of WARNING.

Support MS Office and LibreOffice documents when processing in qualified storage.

Whether to clean up data after communicating with the java submodule jas:

Length of time after which a temporarily failing operation will be considered permanently failed.
In seconds, the default value is 7776000, which is 90 days.

Grace period in seconds. When the grace period passes, it can be trusted whether the CRL list contains certificate revocation information.
The default value is 86400, which is 24 hours. Changing this value is meant for debugging only.

How often to run main operations, in seconds.
The default value is 3600, which is 1 hour.

Data mailbox environment type for data message reauthorization.

SecuSign environment type. Available values:

HTTP name of the host where the jas submodule will be listening.

HTTP port where the jas submodule will be listening.

URL of the jas module run on Apache Tomcat.

Additional JVM parameters for the jas submodule. Specific parameters can be found in the help for JVM parameters.

How long to wait for the jas submodule to start, in seconds.
Default value: 60

Log unknown id_sdar when calling getForUpdate.

Maximum number of attempts to register a document.
The default value is 3.

Minimum number of days between the registration and maintenance or between maintenances.
The default value is 360 days.

How often to test connection to SecuSign, in seconds.

Length of time in seconds after which an email notification is sent that SecuSign services are unreachable.
The default value is 14400, which is 4 hours.

How long to wait, in seconds, before repeating an operation that temporarily failed.
The default value is 43200, which is 12 hours.

Percentage of memory used for the service process that will make the service voluntarily stop and wait for the next run. Real number, for example 0.7.

How often to test writing in the SFLF store.
The default value is 1800, which is 30 minutes.

The size of test file when testing writing in the SFLF store.
The default value is 52428800, which is 50 MB.

Display the certification path of the signature certificate in the validation results.

Number of xg_udat entries to prepare for LTA processing.

Number of unregistrations to run at one time.

Settings for the Sofa processes.
Example: {"sofaSignPointFilled":{"agendaIdent":"SignPoint_FFS","messageIdent":"sys_obecna_dms_zprava","messageIdent2":"sys_instance"},"sofaSignPointBasic":{"agendaIdent":"SignPoint_API_start","messageIdent":"sys_start_template","messageIdent2":"sys_instance"}}

Settings for customized Sofa processes.

Encrypted Sofa password.

Sofa username.

Maximum size [B] of a single attachment in Sofa.

Preference for filling out the SignPoint process in Sofa.

Sofa base URL.
Example: https://testsofa.602.cz

The identifier of a group of users in Sofa that will be returned to code lists.
Example: Signors

User identifier in Sofa.

Level of empty disk space to signal an error, in GB.

Level of empty disk space to signal a warning, in GB.

Check the status of certificates.

Check the database schema.

Check for disk space.

Check data mailboxes.

Check Slovak electronic mailboxes.

Check FAS availability.

Check the status of the Master service.

Check the availability of SecuSign SDK and document conversion using Long-Term Docs SDK.

Check the status of child services.

Check the availability of SFLF.

Length of time in seconds, how long to wait for merging documents in a single PDF document.
The default value is 300 seconds.

Delay of the right-hand panel on a grid when bulk selecting, in milliseconds.

Sets whether to run SQL count to get the number of rows in grid cache.

In document section, sets whether to always load the first empty page after arriving from the ribbon or from a folder link.

Length of time in seconds, how long to wait for asynchronous export.
The default value is 86400, which is 24 hours.

Length of time in days, after which old exports will be deleted.

Path to Java folder.

Files of these types will always receive the .txt extension on download, to prevent them from being run automatically. If this configuration is empty, no changes are made.
Example: htm,html,js,js2,json,json2,svg,xml,php,asp,aspx,jsp,py,ps1,bat,exe,exe2,exe3,com,msi

Skip certificate PIN check before signing.

Interval in seconds between checks of certificate status in table XG_RCER in the General Maintanance service.

Interval in seconds between reloading the list of user’s certificates in the General Maintanance service using HSM_WS.

Interval in seconds between reloading the certificate list using HSM_WS.

Interval in seconds between refreshing the status of XG_RCER.STATE_RCER.

Interval in seconds between refreshing the status of XG_RREQ.STATE_RREQ.

Number of days before expiry when the operation to issue certificate renewal is displayed.

Specifies whether to use Object ID from EntraID (Azure Active Directory) to identify a certificate stored in HSM. When used, the entity code is sent; the code can be found in the GUI at the following path: Administration > Records management > Entity > Entity details > Entity code.

Check client IP address when using a token for authentication.

RSM token expiry time, in seconds.

Number of seconds to wait before the next background service call to get a list of certificates.
The default value is 43600, which is 12 hours.

Use rsmint.secusign.cz or its non-production versions.

Use a single softcard in HSM for all subjects using the remote signing services.

Length of time in seconds, how long to wait for the completion of asynchronous signing batch from the right-hand panel.
The default value is 1800 seconds.

Number of documents signed at one time in a FAS form using Signer.

Interval in seconds before retrying to create an AIP package.

Number of AIP packages created in one cycle.

If true (default), user’s domain will not be compared during authentication with the domain of the server where the FormFlow instance is running.

Defer deletion of binary files in SFLF made by rewriting the binary of a document version. The deletion itself is handled by SdelService.

Period in days before old SFLF files are deleted.
The default value is 1825 days, which is 5 years.

Accept and translate CODE_STAT_DOCU, CODE_RANK_DOCU and CODE_CLAS_DOCU in ServiceDG with their equivalents ID_*.

In GetDocument, return the values of dbtable_meta and dbcolumn_meta.

Path to concat.exe for merging PDF documents.

Switch that specifies whether to apply changes in row-based form permissions immediately or note them and execute later using a background service.

A switch that displays or hides a button in the list of attachment definitions for form template versions in form template administration. The button reloads attachment definitions from the XSL-FO file of the given form template version. Available values:

Generating the <gw_grp_fwd1> list of users in docflow form XML data.

Correct apx links saved in the database.

Indication whether to write detailed information related to e-mail sending in the FormFlow log.

Number of minutes that must pass since the last unsuccessful attempt to send an e-mail before another attempt can be made. The number must be larger than zero.

Number of e-mail messages to be sent during one cycle of the background service. The number must be larger than zero.

Allows setting up a list of allowed hostnames, separated with a comma (,). FormFlow will only be accessible from these hostnames. The value is mandatory, for example:

define('XMLGW_HOSTNAME_WHITELIST', 'front1.example.com,front2.example.com');

Enables or disables docview, which is a preview of files in MS Office formats directly in the browser tab. The value of the parameter is a comma-separated list of extensions for which docview is used.
Default value: 'tif,tiff,docx,xlsx,pptx,doc,xls,ppt,rtf'

The value of the cost parameter when calling the PHP function password_hash() for hashing passwords. Available values 1 to 31.

The default folder where FormFlow is placed, e.g. C:/wwwroot.

Jak dlouho má spát AIP služba, v sekundách.

Optional. The folder for temporary files.
Default value: XMLGW_ROOT.'/temp'

Globální přepínač stárnutí uzavřených formulářů. Pomocí něj se nastavuje, zda FormFlow má přesouvat staré uzavřené formuláře do oddělené množiny databázových tabulek.

Interval v sekundách pro opakovaní slití PDF dokumentů.

Doba v sekundách, po jejímž uplynutí budou ukončeny další pokusy o slití dokumentů.

The service name is placed in the variable name. This name will be used to register the service in the Windows system. If you leave the name commented out, the service will be registered using the default name 602js. You can use this name to refer to the service e.g. when using the command line.

The variable displayname contains the name of the service to be displayed in the Windows service manager. If you leave the displayname commented out, the service will be displayed in the Windows service manager as the default 602js.

The variable description contains the service description to be displayed in the Windows service manager. If you leave the description commented out, the service description in the Windows service manager will show the value Executes periodic jobs.

Logging runs automatically starting with the next run of the 602js service; you can adjust the amount of logged data by changing the logLevel value.

Specifies how many seconds after its start is the 602js service restarted. The default value is 604800 seconds (7 days). The minimum value is 60.  If the value is lower than the minimum, no automatic restart takes place.

serviceAutoRestartTotalSec=604800

The wait interval specifies the length of time after which the services are run. It is set in seconds. The default value is 600 (10 minutes).

waitIntervalSec=60

Sets the server ID. Integer, the default value is 1.

Sets the action after closing a window with the Filler application and the web Filler. Enables/disables refresh or reload of the FormFlow page (from which the form was opened in FAS) after the form is closed.

Optional. Configure, if the script generator is used.

Extension for the log files.
Default value: XMLGW_LOGDIR .'/' .XMLGW_NAME .'.log'

Username to be used to log in to the database and use the services.
Default value: XMLGW_USERNAME

The password used to log in to the database and use the services.
Default value: XMLGW_PASSWORD

Optional. If set to true, the full SQL error message is displayed. Otherwise, only the identifier with the # prefix is displayed and the administrator can look it up in the error log based on the ID. This define can only be used with the old API. The default value is false.

System stopwatch. If the configuration system contains the 'XMLGW_STOPWATCH' directive, stopwatch named "REQUEST" is automatically run to measure the time since the start of script processing. XMLGW_STOPWATCH can have the following 3 statuses:

The name and extension for the transaction log.
Default value: XMLGW_LOGDIR .'/' .XMLGW_NAME.'_trans'

The name and extension for the error log.
Default value: XMLGW_LOGDIR .'/' .XMLGW_NAME .'_errors.log'

The name and extension for the FormFlow service log.
Default value: XMLGW_LOGDIR.'/'.XMLGW_NAME.'\_service.log' XMLGW_LOGFILE_ROTATE_DAYS Enable/disable log rotation. Rotation is enabled if a positive integer is entered. The number specifies the rotation interval in days. If set to 0 (default value), log rotation is disabled. A rotated log is saved to a subfolder with the year of rotation. The date of rotation is appended to the log name.

The folder for the php log.
Default value: XMLGW_LOGDIR.'/php-errors.log'

The folder where to save sessions.
Default value: XMLGW_ROOT.'/sessiondata'

Specifies logging to various scripts. Suitable for services, such as LTV.

If you need to log the PHP itself to see the results directly in FormFlow environment. The default FormFlow setting is with this debugger off. If you are dealing with an issue, we recommend switching the debugger to a development mode. Set the define in the FormFlow configuration file.

The delimiter for the exported *.csv file.
Default value: ';'