Recent Posts
1
Spanish / Re: No hay acceso a la interficie web
« Last post by turalyon on May 26, 2023, 02:35:09 pm »¿Has revisado los archivos de logs y servicios que gestionan el módulo de Webadmin?
Los archivos de logs que debes analizar para identificar y solventar la incidencia son:
* /var/log/zentyal/zentyal.log
* /var/log/zentyal/error.log
* /var/log/nginx/error.log
* /var/log/syslog
Adicionalmente, ejecutando los siguientes comandos también podrás obtener más información sobre los servicios que gestionan el módulo:
Finalmente, la configuración que usa Zentyal para configurar Nginx - el servicio web que sirve el módulo de Webadmin - la tienes disponible en: /var/lib/zentyal/conf/nginx.conf . Allí podrás revisar la ruta a los certificados para después consultar su información usando el comando openssl. A continuación un ejemplo para ver el contenido de un certificado:
--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".
Los archivos de logs que debes analizar para identificar y solventar la incidencia son:
* /var/log/zentyal/zentyal.log
* /var/log/zentyal/error.log
* /var/log/nginx/error.log
* /var/log/syslog
Adicionalmente, ejecutando los siguientes comandos también podrás obtener más información sobre los servicios que gestionan el módulo:
Code: [Select]
sudo systemctl status zentyal.webadmin-nginx zentyal.webadmin-uwsgi
sudo journalctl --no-pager -u zentyal.webadmin-nginx
Finalmente, la configuración que usa Zentyal para configurar Nginx - el servicio web que sirve el módulo de Webadmin - la tienes disponible en: /var/lib/zentyal/conf/nginx.conf . Allí podrás revisar la ruta a los certificados para después consultar su información usando el comando openssl. A continuación un ejemplo para ver el contenido de un certificado:
Code: [Select]
sudo openssl x509 -text -in /var/lib/zentyal/conf/ssl/ssl.pem
--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".
2
Installation and Upgrades / Re: Postfix configuration
« Last post by turalyon on May 26, 2023, 02:22:21 pm »There are specific configuration files that manage Zentyal like main.cf. To modify them, you must use the stubs. Below you have more information.
* https://doc.zentyal.org/en/appendix-c.html#stubs
--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".
* https://doc.zentyal.org/en/appendix-c.html#stubs
--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".
3
Other modules / Re: File Shares on Zentyal
« Last post by dkyrgia on May 25, 2023, 12:14:35 pm »After many efforts (try and error) I managed to bypass (and actually solve) this problem. I firstly mounted a "normal" Zentyal share, let's say /home/samba/shares/data.
The second step was to mount rhe nfs disk at the saming mounting point. I added thsi into my /etc/fstab file
user@192.168.2.175:/mnt/data /home/samba/shares/data fuse.sshfs noauto,x-systemd.automount,_netdev,IdentityFile=/home/dkyrgia/.ssh/id_rsa,allow_other,reconnect 0 0
The third step was to create a passowrdless connection to the remote side
https://linuxize.com/post/how-to-setup-passwordless-ssh-login/
so during the boot the connection in fstab can be established without the need of password.
It works fine
/dimitris
The second step was to mount rhe nfs disk at the saming mounting point. I added thsi into my /etc/fstab file
user@192.168.2.175:/mnt/data /home/samba/shares/data fuse.sshfs noauto,x-systemd.automount,_netdev,IdentityFile=/home/dkyrgia/.ssh/id_rsa,allow_other,reconnect 0 0
The third step was to create a passowrdless connection to the remote side
https://linuxize.com/post/how-to-setup-passwordless-ssh-login/
so during the boot the connection in fstab can be established without the need of password.
It works fine
/dimitris
4
Installation and Upgrades / Postfix configuration
« Last post by marcofrl1 on May 25, 2023, 10:57:01 am »Hi,
I have been using zentyal for over three years and am very happy with it.
But now I have a problem when I send emails to some exchange servers that don't respond with the close command after an smtp session.
To fix it I added smtp_discard_ehlo_keywords = pipelining to the postfix main.cf file, but every time zentyal restarts this setting is lost.
How can I make it permanent?
All custom settings added with version 6 worked, now with 7 , all new settings added by hand, are lost.
Can you help me ?
I have been using zentyal for over three years and am very happy with it.
But now I have a problem when I send emails to some exchange servers that don't respond with the close command after an smtp session.
To fix it I added smtp_discard_ehlo_keywords = pipelining to the postfix main.cf file, but every time zentyal restarts this setting is lost.
How can I make it permanent?
All custom settings added with version 6 worked, now with 7 , all new settings added by hand, are lost.
Can you help me ?
5
Spanish / Re: No hay acceso a la interficie web
« Last post by jporras on May 24, 2023, 10:00:19 am »Hello Mittelerde,
Thank you so much for your answer, anyway I think we are not talking about the same problem. I cannot open in the browser the Zentyal control panel. When I go to https://mydomain:8443 I get a blank page and the error "Cannot connect"
I think is something about certificates, any idea?
Thank you again.
Thank you so much for your answer, anyway I think we are not talking about the same problem. I cannot open in the browser the Zentyal control panel. When I go to https://mydomain:8443 I get a blank page and the error "Cannot connect"
I think is something about certificates, any idea?
Thank you again.
6
Other modules / Re: HTTP proxy won't start with transparent proxy enabled
« Last post by mdtech on May 24, 2023, 04:29:13 am »Any luck with this? I've got the same exact problem. I even tried changing the port. Did no good.
But after kicking it around. I had to enable ip6 in the sysctl.conf
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.lo.disable_ipv6 = 0
Then I found out it is working up until I make use of Domain Categories in Filter Profiles and denied one category and assign it to an access rule.. That's when Transparent Proxy stops working.
Everything else works. Domains, Extensions and MIME.
You can test using squid -k check
Also I had tried removing the module but for some reason the zentyal-squid-SERVER was not removed. It then would not configure properly when reinstalling. I was able to over come this by removing the object from samba with samba-tool group removemembers 'Domain Admins' zentyal-squid-MYSERVERNAME.
If you get errors dealing with ports look into /etc/e2guardian.conf
Hope this helps.
But after kicking it around. I had to enable ip6 in the sysctl.conf
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.lo.disable_ipv6 = 0
Then I found out it is working up until I make use of Domain Categories in Filter Profiles and denied one category and assign it to an access rule.. That's when Transparent Proxy stops working.
Everything else works. Domains, Extensions and MIME.
You can test using squid -k check
Also I had tried removing the module but for some reason the zentyal-squid-SERVER was not removed. It then would not configure properly when reinstalling. I was able to over come this by removing the object from samba with samba-tool group removemembers 'Domain Admins' zentyal-squid-MYSERVERNAME.
If you get errors dealing with ports look into /etc/e2guardian.conf
Hope this helps.
7
Spanish / Re: No hay acceso a la interficie web
« Last post by Mittelerde on May 23, 2023, 07:50:12 pm »On the Server !
If the GUI dont start try:
ctrl +alt +f7
or in the Shell Type:
startx
Do you now have access to the web server?
If the GUI dont start try:
ctrl +alt +f7
or in the Shell Type:
startx
Do you now have access to the web server?
8
Spanish / No hay acceso a la interficie web
« Last post by jporras on May 23, 2023, 11:34:21 am »Buenos días, quería consultaros que después de un reinicio no puedo acceder a la interficie web, sí puedo acceder por ssh. El servicio samba funciona ya que los usuarios pueden acceder a los archivos, DHCP y DNS también funcionan. No sé qué puedo hacer para recuperar el acceso.
Gracias de antemano, saludos.
Gracias de antemano, saludos.
9
Installation and Upgrades / Re: After update from 6.2 to 7.0 can not edit users on DC without fetchmail
« Last post by covex on May 22, 2023, 11:02:25 am »Ok, so attributes are synced correcly, just they are base64 and encrypted.. the encryption seems to be the problem...
and well... the /var/lib/zentyal/conf/fetchmail.passwd is used to encrypt the attribute, but this password is of-course not synced between two DC. So matching this pwds make the edit to work also on other DC.
Code: [Select]
WARN zentyal.psgi:43 Plack::Sandbox::_2fusr_2fshare_2fzentyal_2fpsgi_2fzentyal_2epsgi::__ANON__ - Use of uninitialized value $optionsStr in split at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 228.
WARN> zentyal.psgi:43 Plack::Sandbox::_2fusr_2fshare_2fzentyal_2fpsgi_2fzentyal_2epsgi::__ANON__ - Use of uninitialized value $mailProtocol in string ne at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 591.
WARN> zentyal.psgi:43 Plack::Sandbox::_2fusr_2fshare_2fzentyal_2fpsgi_2fzentyal_2epsgi::__ANON__ - Use of uninitialized value $mailProtocol in string ne at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 591.
Code: [Select]
sub _decryptExternalAccountString
{
my ($self, $str) = @_;
my $cipher = $self->_cipher();
$str = decode_base64($str);
$str = $cipher->decrypt($str);
return $str;
}
and well... the /var/lib/zentyal/conf/fetchmail.passwd is used to encrypt the attribute, but this password is of-course not synced between two DC. So matching this pwds make the edit to work also on other DC.
10
Installation and Upgrades / After update from 6.2 to 7.0 can not edit users on DC without fetchmail
« Last post by covex on May 22, 2023, 10:29:33 am »Two zentyal instances, one is having the fetchmail (external email retrieval) enabled, after update to 7.0 I can not edit the users on the DC without fetchmail enabled. In the zentyal log there are messages like this:
Code: [Select]
DEBUG> FetchmailLdap.pm:591 EBox::Mail::FetchmailLdap::checkEmailProtocol - Unknown mail protocol: Ä.µ Ý.íÒ.×ÅRüÞ.?ÐúTþG.BÁ´R'¹²÷].b..²òö;6£Ñék(@®.EÜBÌã.Ä.Ë$ܱ<÷Ñ7R.v.v"Òî..ë at Unknown mail protocol: Ä.µ Ý.íÒ.×ÅRüÞ.?ÐúTþG.BÁ´R'¹²÷].b..²òö;6£Ñék(@®.EÜ
BÌã.Ä.Ë$ܱ<÷Ñ7R.v.v"Òî..ë at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 591
If I enable fetchmail also on this DC then the generated zentyal-fetchmail.rc is full of garbage. This seems like somehow the attributes for fetchmail are not synced properly?!