Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
Installation and Upgrades / Re: Latest samba upgrade to 5.0 is borked.
« on: February 26, 2017, 06:12:06 pm »
Disabling the samba module and then re-enabling it seems to have resolved this issue.
If that didn't work the only thing I have found that seems to make samba on Zentyal happy again when it is profoundly unhappy is to change the netbios name under Domain. This causes Zentyal to "reprovision" samba (whatever that means). This seems to be pretty powerful mojo, but it also blows away all the users. The next step after that when Zentyal gets wonky is to test your backups and do a reinstall from scratch.
I need to work on a way to import users into Zentyal anyway. I used to know how, so hopefully that mechanism still works. Once that is in place then when I have to blow away all my users because Zentyal is having a bad day it won't be such an ordeal.
If that didn't work the only thing I have found that seems to make samba on Zentyal happy again when it is profoundly unhappy is to change the netbios name under Domain. This causes Zentyal to "reprovision" samba (whatever that means). This seems to be pretty powerful mojo, but it also blows away all the users. The next step after that when Zentyal gets wonky is to test your backups and do a reinstall from scratch.
I need to work on a way to import users into Zentyal anyway. I used to know how, so hopefully that mechanism still works. Once that is in place then when I have to blow away all my users because Zentyal is having a bad day it won't be such an ordeal.
17
Installation and Upgrades / Latest samba upgrade to 5.0 is borked.
« on: February 26, 2017, 05:42:42 pm »
I have upgraded to zentyal-samba 5.0.4 and now my system is toast. I would suggest that people hold off on that upgrade until it gets sorted out. Getting a lot of "unable to connect to LDAP" errors in the log. Restarting services or rebooting the server does not help. I hope I won't have to reinstall the server from scratch. Again.
*sigh*
*sigh*
18
Email and Groupware / Re: Zentyal 5 454 4.7.1 relay access denied on virtual domains
« on: February 17, 2017, 09:29:35 pm »
I am using zentyal mail version 5.0.4 and I am having the same problem. Unfortunately the workaround isn't working for me. Any ideas?
19
Email and Groupware / Mailfilter Configuration Issue
« on: February 14, 2017, 08:18:34 pm »
I was happy to see the mailfilter module return, but unfortunately I can't use it. The reason is I need the X-Spam flags included on all messages passed through and I can't seem to get that to work with the new mailfilter module. The X-Virus-Scanned header shows up but no amavis configuration changes seem to make the smap headers show up. I've spent enough hours on this so it's time to punt. I have been able to get it to work with Zentyal 5.0 if I install and configure everything by hand, so I guess that is what I am going to do.
In case you are wondering, I need the flag so I can divert any questionable emails to a separate mail folder so that users can review then. Emails in that folder are automatically deleted after a month. I also have spamassassin learn spam from that folder, so users place any spam not flagged as spam there and it is learned as spam.
In case you are wondering, I need the flag so I can divert any questionable emails to a separate mail folder so that users can review then. Emails in that folder are automatically deleted after a month. I also have spamassassin learn spam from that folder, so users place any spam not flagged as spam there and it is learned as spam.
20
Installation and Upgrades / Re: Jabber, Mail Filter, and Antivirus modules back?
« on: February 14, 2017, 04:09:54 pm »
Yeah, I just tar up the /var/vmail directory for backups.
So I just turned on the official Zentyal mail filter and it seems to work, but it doesn't seem to be adding spam headers to all messages. I've tried changing the $sa_tag_level_deflt setting to -999 and that doesn't seem to work either. I will keep playing with it.
So I just turned on the official Zentyal mail filter and it seems to work, but it doesn't seem to be adding spam headers to all messages. I've tried changing the $sa_tag_level_deflt setting to -999 and that doesn't seem to work either. I will keep playing with it.
21
Installation and Upgrades / Jabber, Mail Filter, and Antivirus modules back?
« on: February 13, 2017, 08:37:36 pm »
Folks,
I'm converting my second Zentyal 4.2 server to 5.0 and I just noticed that the Jabber, Mail Filter, and Antivirus modules are available again. I'll be checking out the mail filter module here shortly, but does anybody know anything about this?
I'm converting my second Zentyal 4.2 server to 5.0 and I just noticed that the Jabber, Mail Filter, and Antivirus modules are available again. I'll be checking out the mail filter module here shortly, but does anybody know anything about this?
22
Installation and Upgrades / Re: HARDWARE REQUIREMENTS
« on: February 12, 2017, 05:21:57 pm »
I think that should be fine. I run Zentyal on lesser hardware.
23
Email and Groupware / Re: Does Zentyal 5 still include native Outlook support?
« on: February 05, 2017, 05:44:46 pm »
salvois, I agree with you to a great extent, but I still think Zentyal is worth it for SOGO and it's GUI router/admin features. But yeah, it was never much of an exchange replacement and I'm actually kind of glad they seem to have given up on it. Hopefully that means they will spend their limited resources on what makes Zentyal unique and actually worth using. I think that is why the proxy module is available again.
I still think that businesses that want exchange will always prefer to spend ridiculous amount of money to have the real thing, and there are plenty of free alternatives for those few businesses that think otherwise.
I still think that businesses that want exchange will always prefer to spend ridiculous amount of money to have the real thing, and there are plenty of free alternatives for those few businesses that think otherwise.
24
Installation and Upgrades / Re: auto-update on Zentyal 5.0 is not working?
« on: February 05, 2017, 05:33:26 pm »
It was a total disaster for me and I ending up having to restore from backups on a fresh install. I am going to try it one more time on another server (having a fresh install ready just in case) before I give up on the upgrade process. As far as updates, I always update from the command line and watch the zentyal log just in case.
25
Installation and Upgrades / Re: Zentyal 5 with Antivirus?
« on: February 05, 2017, 05:29:36 pm »
It looks like you have to do this yourself now, but the process for blocking spam and viruses on Zentyal is the same as Ubuntu: https://help.ubuntu.com/lts/serverguide/mail-filtering.html . Note that before this works the system has to download virus definition files which takes a long time due to throttling on the server end. So after a few hours it is probably a good idea to run "service clamav-daemon restart".
* apt-get install amavisd-new spamassassin clamav-daemon opendkim postfix-policyd-spf-python pyzor razor arj cabextract cpio lhasa nomarch pax rar unrar unzip zip
* adduser clamav amavis
* adduser amavis clamav
* Edit /etc/default/spamassassin to enable the daemon.
* systemctl start spamassassin.service
* Edit /etc/amavis/conf.d/15-content_filter_mode and uncomment the bypass lines.
* Edit the /etc/amavis/conf.d/50-user file:
@local_domains_acl = ( "example1.com", "example2.com" );
$sa_tag_level_deflt = -999;
$sa_tag2_level_deflt = 5.0;
* systemctl restart amavis.service
* Edit /etc/clamav/clamd.conf and enable AllowSupplementaryGroups.
* service clamav-daemon restart
* Add custom mail filter using Zentyal webmin with default options (custom,10025,127.0.0.1,10024).
Of all of that the last step is the most iffy. Even though the name is "custom" it actually results in Zentyal adding a whole bunch of amavis specific configuration changes. I am pretty much expecting that to break at some point in the future either intentionally or unintentionally. The good news is that with doing it yourself the spam blocking is MUCH improved, probably because it discards any blatant spam instead of marking and delivering it.
* apt-get install amavisd-new spamassassin clamav-daemon opendkim postfix-policyd-spf-python pyzor razor arj cabextract cpio lhasa nomarch pax rar unrar unzip zip
* adduser clamav amavis
* adduser amavis clamav
* Edit /etc/default/spamassassin to enable the daemon.
* systemctl start spamassassin.service
* Edit /etc/amavis/conf.d/15-content_filter_mode and uncomment the bypass lines.
* Edit the /etc/amavis/conf.d/50-user file:
@local_domains_acl = ( "example1.com", "example2.com" );
$sa_tag_level_deflt = -999;
$sa_tag2_level_deflt = 5.0;
* systemctl restart amavis.service
* Edit /etc/clamav/clamd.conf and enable AllowSupplementaryGroups.
* service clamav-daemon restart
* Add custom mail filter using Zentyal webmin with default options (custom,10025,127.0.0.1,10024).
Of all of that the last step is the most iffy. Even though the name is "custom" it actually results in Zentyal adding a whole bunch of amavis specific configuration changes. I am pretty much expecting that to break at some point in the future either intentionally or unintentionally. The good news is that with doing it yourself the spam blocking is MUCH improved, probably because it discards any blatant spam instead of marking and delivering it.
26
Installation and Upgrades / Re: Zentyal 5.0 Issues
« on: February 02, 2017, 05:00:22 pm »
I am finally getting to the end of the upgrade process. During the upgrade process any customization scripts (/etc/zentyal/hooks) are moved out of the way. After moving them back my letsencrypt and mlmmj scripts seem to work without modification with one exception. It appears that with version 5 Zentyal has renamed the openchange module to sogo, so I need to rename openchange.postsetconf to sogo.postsetconf. In the webmin they have renamed openchange to ActiveSync. Also, I have worked through getting virus and spam blocking working but I am going to put that in a separate post.
So the only issue left right now is SOGO is completely broken. I thought I had it solved because openchange-ocsmanager was broken because some obscure package called python-pastescript was missing. But after getting that running I can't find anything wrong but I still keep getting the following error in the apache log:
[Thu Feb 02 09:43:03.931383 2017] [proxy:error] [pid 29478:tid 140504065857280] (111)Connection refused: AH00957: HTTP: attempt to connect to 127.0.0.1:20000 (127.0.0.1) failed
[Thu Feb 02 09:43:03.931571 2017] [proxy:error] [pid 29478:tid 140504065857280] AH00959: ap_proxy_connect_backend disabling worker for (127.0.0.1) for 0s
[Thu Feb 02 09:43:03.931606 2017] [proxy_http:error] [pid 29478:tid 140504065857280] [client 192.168.1.240:55098] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
Huh. If I manually start openchange and sogo the old fashioned way ("/etc/init.d/openchange-ocsmanager start" and "/etc/init.d/sogo start") then SOGO lets me log in but it never displays anything.
What a mess. I think I am just going to give up on the upgrade process for now and just see how a fresh install goes.
So the only issue left right now is SOGO is completely broken. I thought I had it solved because openchange-ocsmanager was broken because some obscure package called python-pastescript was missing. But after getting that running I can't find anything wrong but I still keep getting the following error in the apache log:
[Thu Feb 02 09:43:03.931383 2017] [proxy:error] [pid 29478:tid 140504065857280] (111)Connection refused: AH00957: HTTP: attempt to connect to 127.0.0.1:20000 (127.0.0.1) failed
[Thu Feb 02 09:43:03.931571 2017] [proxy:error] [pid 29478:tid 140504065857280] AH00959: ap_proxy_connect_backend disabling worker for (127.0.0.1) for 0s
[Thu Feb 02 09:43:03.931606 2017] [proxy_http:error] [pid 29478:tid 140504065857280] [client 192.168.1.240:55098] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
Huh. If I manually start openchange and sogo the old fashioned way ("/etc/init.d/openchange-ocsmanager start" and "/etc/init.d/sogo start") then SOGO lets me log in but it never displays anything.
What a mess. I think I am just going to give up on the upgrade process for now and just see how a fresh install goes.
27
Installation and Upgrades / Re: Zentyal 5.0 Issues
« on: February 01, 2017, 05:02:20 pm »
This lxdm-breaking-apt issue seems to be a new one for the internet. So far the best solution I can come up with is to edit /var/lib/dpkg/status and remove the lxdm section, but if I try to reinstall lxdm or zentyal-desktop the error crops up again. So I guess I am out of luck for a GUI on this server unless I want do a reinstall from scratch. I am going to try and remove the lxdm package by hand on this server and try removing the lxdm package before the next upgrade attempt.
Typical errors I am getting are:
update-rc.d: error: lxdm Default-Start contains no runlevels, aborting.
dpkg: error processing package lxdm (--remove):
subprocess installed post-removal script returned error exit status 1
Errors were encountered while processing:
lxdm
E: Sub-process /usr/bin/dpkg returned an error code (1)
Typical errors I am getting are:
update-rc.d: error: lxdm Default-Start contains no runlevels, aborting.
dpkg: error processing package lxdm (--remove):
subprocess installed post-removal script returned error exit status 1
Errors were encountered while processing:
lxdm
E: Sub-process /usr/bin/dpkg returned an error code (1)
28
Installation and Upgrades / Re: Zentyal 5.0 Issues
« on: February 01, 2017, 04:32:59 pm »
Well that didn't take long. There is a new filter option under Mail -> General -> Mail Filter Options that looks promising, but it looks like mail filters are now DIY. And I did find a good tutorial on doing what I what I want to do at https://help.ubuntu.com/lts/serverguide/mail-filtering.html .
The bad news is the upgrade appears to have made the system a bit shaky. The first issue I have come across is that apt is hopelessly confused when it comes to the lxdm package, so I am going to have to come up with a way to get apt working again. If you plan on doing the upgrade anytime soon I suggest that you uninstall lxdm first.
The bad news is the upgrade appears to have made the system a bit shaky. The first issue I have come across is that apt is hopelessly confused when it comes to the lxdm package, so I am going to have to come up with a way to get apt working again. If you plan on doing the upgrade anytime soon I suggest that you uninstall lxdm first.
29
Installation and Upgrades / Zentyal 5.0 Issues
« on: February 01, 2017, 04:09:31 pm »
I prepped a new server in case the upgrade from 4.2 to 5.0 went wrong but for the most part it seems to have worked. But there are issues, namely my mechanism to use trusted certificates seems to have failed and neither anti-virus nor spam checking seem to be working. They seem to Just Work before, so now I'm going to have to research how to get them all working again. I'll try to keep you all posted.
30
Installation and Upgrades / [SOLVED] Install Issues with Zentyal 5.0
« on: January 30, 2017, 09:14:18 pm »
I finally have some time to kick the tires on Zentyal 5.0, so I am starting with a fresh install. Except for a couple issues so far so good. The first issue is the GUI wouldn't come up, and after perusing the X log for whatever reason no video drivers were loaded. "apt-get install xserver-xorg-video-fbdev" fixed that problem. The second issue is I accidentally entered the wrong host name when installing, and I was getting an error with the webmin trying change it. It was blowing up enforcing the timezone because /etc/localtime is now a link instead of an actual file. So "rm /etc/localtime;cp /usr/share/zoneinfo/America/Chicago /etc/localtime" fixed that issue.
The plan is to upgrade my personal server, run it for a few days, and see how it goes. If that goes well then upgrade my business server and run that for a couple weeks. And if THAT goes well for a couple weeks I will start upgrading customer servers. It will be great to have all my servers based on Ubuntu 16.04, thanks Zentyal folks.
PS Feature Request: Integrate the certificate authority with LetsEncrypt. That would eliminate the bulk of the customization I do at this point.
The plan is to upgrade my personal server, run it for a few days, and see how it goes. If that goes well then upgrade my business server and run that for a couple weeks. And if THAT goes well for a couple weeks I will start upgrading customer servers. It will be great to have all my servers based on Ubuntu 16.04, thanks Zentyal folks.
PS Feature Request: Integrate the certificate authority with LetsEncrypt. That would eliminate the bulk of the customization I do at this point.