[SOLVED]Zentyal 3.0.14 PDC user and group / join problem

[tipeter]

Hello!

First of all sorry for my weak English.

I installed Zentyal 3.0 is the way as it's seen in the videos.
The lineup is as follows:
- there is a router / gateway (Zentyal 3.0)
- and a file server (Zentyal 3.0) with 2 network card, external & internal, external 192.168.1.2, internal 10.0.0.254

The 10.0.0.0 network has internet access from file server, it functions as a DNS and DHCP server too. NTP synchronization is configured, in principle, this should work.
DNS was checked several times, and I read all the relevant tutorial. Thejonasnet Youtube videos also had
The domain name is testdomain.lan and the file server host name is FS01.

So the system: INTERNET ---> gateway ---> file server ---> LAN

I have created 3 user: admin, zenuser, zentest
I created one group: testgroup
The admin user is in "Domain Admins" group.
The zenuser is in testgroup.
zentest user does not belong to any group.

Windows 7 join a domain testdomain.lan, but only with the built-in Administrator user I can add.
The admin user I created does not work, even though a member of the "Domain Admins" group.

The user's home directory reachable, but nothing else. All shared directory is shown but can not be accessed, regardless group.
For example, the share zentyal_kozos read / write for the group 'testgroup', but 'testgroup' member zenuser not access the share.

In practice, only home directories are browseable.

From these I conclude that there is something wrong with this group assignments.

Would you any ideas? Slowly giving up ...

[robb]

Am I correct when I say that you use double NAT with 2 Zentyal servers?
Why do you have the 2nd zentyal server on another subnet? I don't think this is necessary. Also, the 2nd Zentyal server should have enough with just 1 NIC. (unless you want to have a 2nd subnet for instance to serve as a storage or admin subnet)

I would suggest to remove the 2nd NAT function and de-install the gateway module on the 2nd server.

[tipeter]

Yes you are correct I have 2 NAT because I want to separate the two subnet as final chance...
In this scenario all samba client get DHCP from fileserver, so the DNS and NTP surely OK.
Before this I tried the classic lineup with one NIC but situation was the same.
Windows PC joined to the PDC, home directories was browseable but all other shared directories not.
And I was not been able to connect PCs with my created zentyal user only 'Administrator'.
It seems as groups do not work.
But all other OK.

[tipeter]

Does anyone have any ideas? This is disappointing. 

[robb]

My glass bulb is a bit misty, so can you please give a bit more info? Do you have any logs? Can you point what exactly is going wrong?
How do you have you domain and IP subnets configured?

[mamra]

there is a bug i think with latest users module or core.
i can add a user to a group but the user cannot access shared folders of that group.
Also if i change a user already added before the latest updates the changes don't work.
i removed a user from the domain admin group but the user still has admin privileges....

[tipeter]

This is exactly my problem too!
After dozens of different setups in virtualbox (with virtualized gateway and clients) I think there is a bug in user management.
As I wrote all other things OK. (join to domain, home folders etc.)

[mamra]

problem fixed, update modules...

[tipeter]

Yes, Core 3.0.15 is OK 

[mamra]

mark it solved.....