Recent Posts

Pages: 1 ... 3 4 [5] 6 7 ... 10
Directory and Authentication / random filesharing behaviour
« Last post by foeke on October 29, 2023, 11:20:52 am »
I am installing a 7.1 Zentyal server as DC and gateway. About 30 users en a dozen shares. The clients are all freshly installed updated Win 10 pro.
I first configured the groups and then assigned the users to the groups and the groups to the shares.
This normally is pretty straight forward.
But now I have the weirdest behavior that some clients can't access the shares, even if I assign them to the user.
It seems so random. It is user related as far as I can find. (same computer, logged in on a different account can access said share, same user on an other computer still can't access the share. But since it is so random, it might be a coincidence) )
So the clients are joining the domain just fine (except one account that could log in, but after login got the message the user couldn't be logged in properly and should try to log out and in again).
They see the server and the shares but when I open them, you get the popup for other credentials, or Windows can't even find the share anymore but it is still in the list on the client.
I made some shares again in an other name, and that worked most of the times. Some shares just work as expected.
So one user can open the share, some don't. Even thought the accounts are set up exactly the same as far as I can tell.
Some possible red herrings
1. Under windows the shares seem about 90Gb even though I installed the server on a 8Tb disk and I choose "use whole disk".
2. During the install I wanted to make a share with guest access then I got the message I needed to enable the guest user.
Then I went to said guest user, and the disable option was marked but greyed out.
I went back to the share to disable the guest access, but the share still has guest access and I still see the message that I need to enable the guestuser.

I don't even know where I should start looking.
Is there some maximum amount of users to a share?
And what is supposed to happen when you have the default 500Mb limit and want to access a 7Gb share?
Any feedback where I should start would help.
Thanks in advance.
Installation and Upgrades / PPPoE with static IP
« Last post by foeke on October 28, 2023, 02:51:57 pm »
I wanted to replace a server with a zentyal one. The internet connection is over PPPoE but it doen not have DHCP.
How would I set the static IP and subnet/gateway in the PPPoE connection?
Cheers, Foeke
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by Siroco on October 26, 2023, 01:34:36 pm »

Cuando dices que el DNS sigue en el Windows 2008, ¿a qué te refieres? ¿A los roles FSMO referentes al DNS?

Lo que primero debes hacer es conocer los roles FSMO que están ejecutándose en los controladores de dominio.

Desde Zentyal puedes ver los roles FSMO que tiene con el comando:

Code: [Select]
sudo samba-tool fsmo show
Respecto a los roles FSMO referentes al DNS del dominio y DNS del bosque, probablemente no habrán sido transferidos después de usar el script de migración de Zentyal, por lo que puedes utilizar los comandos que aparecen en la documentación de Samba para transferirlos.


Podrás ver dos opciones, transfer y seize. La recomendada es transfer siempre y cuando el antiguo servidor siga conectado a la red. El uso de transfer hará saber al antiguo servidor que ya no es el encargado de esos roles. Los comandos serían los siguientes:

Code: [Select]
sudo samba-tool fsmo transfer --role=domaindns -U administrator
Code: [Select]
sudo samba-tool fsmo transfer --role=forestdns -U administrador
Para el caso de que el servidor que tenía los roles se haya averiado y nunca más pueda estar conectado se utiliza la opción seize.

Please suggest , i want to a notification when Zentyal AD users are attempted wrong password and user is disabled

is this possible

Faisal Abbas
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by alfonsSF on October 25, 2023, 02:58:11 am »
Lo explico un poco mejor.

Teniamos Un controlador de dominio principal en W20o8 y otro secundario  tambien en w2008.

El principal quedó fuera de servicio .
Montamos un zentyal y lo pusimos como secundario del 2008 secundario.
Despues migramos los roles.

Si consultamos el w2008, tiene al Zentyal como el  maestro. pero zentyal está como secundario.
El DNS sigue en el 2008.

Yo quisera promocinar el zentyal a maestro o principal para poder apagar el w2008. Pero no se cómo hacerlo,

¿me puedes orientar en la dirección correcta?
Other modules / Re: Enabling IDS/IPS stops internet on interface
« Last post by gabor.strama on October 24, 2023, 09:25:51 pm »
Hi Guys,

Somebody can help in this case, because i wish to use the IPS.

Please help!

Installation and Upgrades / Re: Zentyal 7.1 how to get TLS1.1 back?
« Last post by Siroco on October 20, 2023, 01:20:05 pm »

To make persistent changes to system configuration, Zentyal uses stubs, otherwise, when restarting a service the changes made will be lost.


In the case of Dovecot, Zentyal only includes the file /etc/dovecot/extra.conf as you can see at the end of the file /etc/dovecot/dovecot.conf, so you can create that configuration file (ensure that root is used for the owner and group, and permissions are 0644). Then you can add the parameters you want to the configuration there.

You could also add new includes following dovecot doc or modify the configuration directly in the dovecot.conf.mas.


Best regards.
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by Siroco on October 20, 2023, 01:16:22 pm »

A través de la interfaz gráfica del módulo DNS no se ven los registros sincronizados ya que son manejados por Samba. Puedes listar todos los registros de una zona con el siguiente comando.

Code: [Select]
samba-tool dns query <zone-name> @ ALL -U administrator
Te dejo un enlace a la documentación oficial de Samba donde también puedes ver como agregar algún registro en caso de necesitarlo.


Para la administración de las GPO, Zentyal utiliza las herramientas RSAT desde un equipo con Windows que esté unido al dominio. Como Samba no sincroniza el directorio SysVol, necesitarás exportar dichas políticas para volver a importarlas en un equipo conectado al controlador de dominio de Zentyal.


Sobre cambiar Zentyal a controlador de dominio desde el panel de administración, no lo hagas porque si cambias el modo de operaciones, eliminarás toda la configuración establecida para tener que empezar de nuevo.

Hi Lars,

I have tried to reproduce your issue but I could not.

Please, do the following and send me the output:

1. Disable temporarily the third-party repositories:


2. Check if you have any broken packages:

Code: [Select]

dpkg -l | egrep -v ‘^ii’

3. Analyze the package `cloud-init` information:

Code: [Select]

apt policy cloud-init

4. Check if you still have that package pending to update:

Code: [Select]

sudo apt list —upgradable

sudo /usr/lib/update-notifier/apt-check

Best regards, Daniel Joven.
Был неправ. Манипуляция с cnf файлом действительно включает поддержку старых TLS.
НО! Проверять её надо с openssl1.X

Если проверять с OpenSSL3.X, то работать всё равно не будет, так как поддержка старых TLS убрана из кода клиента физически.

Второй момент, для XP клиентов ещё надо включать древние шифры.
Набор шифров можно сгенерировать здесь
Pages: 1 ... 3 4 [5] 6 7 ... 10