Cant create new users because quota

[psauxw]

yes i got:

aquota.group and aquota.user in /

-rw-------   1 root root 12288 2012-06-04 04:13 aquota.group
-rw-------   1 root root 11264 2012-06-03 22:04 aquota.user

Thanks for helping.

Anything else you want me to test?

[Javier Amor Garcia]

No, with this we have enough material. It is clear that since you mount the /home with NFS the quota are not set correctly and this is the cause of the failure. In previous versions it also failed but the fail was ignored.

Of course we have to provide a way to control this situation or disable the quota system. I will update you when we had news about this feature.

[psauxw]

Alright,

Thank you so much!

[psauxw]

Update,

The error is gone but I still can't log into the domain with a test user.  I tried changing the password and also deleted the user and home for that user and recreated it.

Still says I got the wrong password.

[Javier Amor Garcia]

Well, this other error is unrelated to disk quota.

- Can you use the user/password in other  zentyal services, user corner for example?
- What is your zentyal-users and zentyal-samba configuration?. The PDC is Zentyal itself or it is in AD synchronization mode?

[psauxw]

I can use the username/password to access the shares without any problems and yes the PDC is zentyal only... no sync with an AD.  I thought it could have been related because the person who first posted the problem in this topic said he could not log into the domain either

[Javier Amor Garcia]

Give PDC administrator rights to your user and use it to join or re-join the computer to the domain. Then you should be able to access with all users to the computer.

[psauxw]

Gave it another try,  same problem, I deleted the test user just to be sure... re-created it with the file you gave me. I can join the domain just fine but I can't login with the same credentials used to join the domain.

Is there a way to turn debug mode higher for that? I can't seem to find anything in the logs yet it says I have the wrong password...


small update on that:

For fun i tried "passwd testtest" which is my test user
Here's the output

root@zentyal:/home# passwd testtest
passwd: Authentication information cannot be recovered
passwd: password unchanged


more updates:

Looking at my syslog server I found this message coming from the Zentyal box:

 Entry (uid=testtest,ou=Users,dc=xxxx,dc=com), attribute 'sambaNTPassword' not allowed

[Sergo]

Hello! I can not figure out how to turn off quota checking.

You have the aquota.group and aquota.user files either in / or /home?.

Anyway until it is fixed I provide you a version with the check disabled. Use it to replace /usr/share/perl5/EBox/UsersAndGroups.pm and then execute 'sudo /etc/init.d/zentyal apache restart' then create your users. However the quotas would not work, regardless of what will be shown in the interface.

[psauxw]

You just download the file and replace it. Then, you restart the apache module.

/etc/init.d/zentyal apache restart

[Javier Amor Garcia]

Hello psauxw,

your error puzzles me, it is very strange to be able to join the domain but not be able to login. Maybe there is something of note en /var/log/samba ?. It would be worth a try to see if there is some new message logged after a failed login.

[psauxw]

I've been trying to look at every log but the only useful infos that ive found are in /var/log/samba/nmbd

[2012/06/06 11:41:19,  0] libsmb/nmblib.c:834(send_udp)
  Packet send failed to 192.168.5.232(138) ERRNO=Operation not permitted

That was right after I tried to login. The ip is the right one too (the vm i tried to log with)

/var/log/samba contains logs for every machines but if I do a "less 192.168.5.232" the log is filled with:

[2012/02/20 11:46:33,  0] lib/debug.c:663(reopen_logs)
  Unable to open new log file /var/log/samba/: Is a directory

[Javier Amor Garcia]

Reading again the thread I think that is probably that the user has not set correctly all the LDAP attributes.  Could you post a dump of the user LDAP data?.

To get it run this command:

Code: [Select]

sudo slapcat -a "(uid=USER_NAME)"
Then edit out the confidential fields and post it.

Also you can do a login with the administrator user which you used to join the system to the domain?

[psauxw]

I can join the domain with any user with administration's right but using the same user I can't login once the computer is in the domain.

Code: [Select]

root@zentyal:~# id testtest
uid=2069(testtest) gid=1901(__USERS__) groups=1901(__USERS__),2002(admin),512(Domain Admins),513(Domain Users),544(Administrators)

I edited the following to remove passwords SHA and MD5 and the domain's name

Code: [Select]

root@zentyal:~# slapcat -a "(uid=testtest)"
dn: uid=testtest,ou=Users,dc=xxxx,dc=com                         
cn: test test
uid: testtest
sn: test
loginShell: /usr/sbin/nologin
uidNumber: 2069
gidNumber: 1901
homeDirectory: /home/testtest
userPassword:
quota: 0
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: passwordHolder
objectClass: systemQuotas
objectClass: CourierMailAccount
objectClass: usereboxmail
objectClass: fetchmailUser
objectClass: sambaSamAccount
eboxSha1Password:
eboxMd5Password:
eboxLmPassword:
eboxNtPassword:
eboxDigestPassword:
eboxRealmPassword:
structuralObjectClass: inetOrgPerson
entryUUID: ac9b8c2c-4362-1031-918b-433f45acaea9
creatorsName: cn=ebox,dc=xxxx,dc=com
createTimestamp: 20120605140121Z
givenName: test
mail: testtest@xxxx.com
mailbox: xxxx.com/testtest/
userMaildirSize: 0
mailquota: 0
mailHomeDirectory: /var/vmail/
sambaPwdCanChange: 0
sambaLogoffTime: 2147483647
sambaLogonTime: 0
sambaAcctFlags: [U]
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
sambaKickoffTime: 2147483647
sambaPwdLastSet: 1338904882
sambaPwdMustChange: 2147483647
sambaHomePath: \\zentyal\homes\testtest
sambaPrimaryGroupSID: S-1-5-21-3818554400-921237426-3143208535-513
sambaLMPassword: 
sambaNTPassword: 
sambaSID: S-1-5-21-3818554400-921237426-3143208535-5138
entryCSN: 20120605140122.572281Z#000000#000#000000
modifiersName: cn=ebox,dc=xxxx,dc=com
modifyTimestamp: 20120605140122Z


im off for the weekend, thanks for your help this week. I'll continu trying to figure things out with you next week.

[psauxw]

I tried updating...problem still exist