Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - Josep

Pages: [1] 2
Today I tried to upgrade the zentyal-network module from 2.2.6 to 2.2.7 through the web interface.
Somehow the installation got stuck and the interface stopped responding.
In ssh I saw that the installation was not progressing and decided to reboot.
After it I still had to remove the dpkg locks.
Now, for some reason, the network module upgrade caused some error with zentyal core which appears as a failed installation as well.
Here is the output when trying to configure these packages:
Code: [Select]
root@zenbox:~# dpkg --configure --pending
Setting up zentyal-core (2.2.7) ...
Could not connect to Redis server at Connection timed out at /usr/share/perl5/ line 54
        Redis::new('Redis', 'server', '') called at /usr/share/perl5/EBox/Config/ line 744
        EBox::Config::Redis::_respawn('EBox::Config::Redis=HASH(0x32baa48)') called at /usr/share/perl5/EBox/Config/ line 54
        EBox::Config::Redis::new('EBox::Config::Redis') called at /usr/share/perl5/EBox/ line 45
        EBox::GConfModule::_create('EBox::GlobalImpl', 'name', 'global', 'printableName', 'global') called at /usr/share/perl5/EBox/ line 70
        EBox::GlobalImpl::_new_instance('EBox::GlobalImpl') called at /usr/share/perl5/Apache/ line 19
        Apache::Singleton::instance('EBox::GlobalImpl') called at /usr/share/perl5/EBox/ line 38
        EBox::Global::new('EBox::Global') called at /usr/share/perl5/EBox/ line 76
        EBox::Global::AUTOLOAD('EBox::Global', 'remoteservices') called at /usr/share/zentyal/sudoers-friendly line 39
dpkg: error processing zentyal-core (--configure):
 subprocess installed post-installation script returned error exit status 110
Errors were encountered while processing:
root@zenbox:~# netstat -ant4p |grep 6380
tcp        0      0*               LISTEN      1401/redis-server
tcp        1      0          CLOSE_WAIT  2366/perl

Here is the list of installed packages:
Code: [Select]
root@zenbox:~# dpkg -l zentyal*
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                     Version                  Description
ii  zentyal                  2.2                      Zentyal - Core metapackage
un  zentyal-antivirus        <none>                   (no description available)
ii  zentyal-ca               2.2.2                    Zentyal - Certification Authority
ii  zentyal-common           2.2.3                    Zentyal - Common Library
iF  zentyal-core             2.2.7                    Zentyal - Core
ii  zentyal-dhcp             2.2.1                    Zentyal - DHCP Service
ii  zentyal-dns              2.2.1                    Zentyal - DNS Service
ii  zentyal-ebackup          2.2.4                    Zentyal - Backup
ii  zentyal-firewall         2.2                      Zentyal - Firewall
un  zentyal-ftp              <none>                   (no description available)
un  zentyal-ipsec            <none>                   (no description available)
ii  zentyal-monitor          2.2.3                    Zentyal - Monitor
ii  zentyal-network          2.2.7                    Zentyal - Network Configuration
ii  zentyal-objects          2.2                      Zentyal - Network Objects
ii  zentyal-openvpn          2.2.1                    Zentyal - VPN Service
ii  zentyal-pptp             2.2                      Zentyal - PPTP
ii  zentyal-samba            2.2                      Zentyal - File Sharing Service
ii  zentyal-services         2.2                      Zentyal - Network Services
ii  zentyal-software         2.2.4                    Zentyal - Software Management
un  zentyal-squid            <none>                   (no description available)
ii  zentyal-usercorner       2.2                      Zentyal - User Corner
ii  zentyal-users            2.2.5                    Zentyal - Users and Groups

It claims that it cannot connect to the redis server, despite the fact that it is running.
Any hint? Please?

Installation and Upgrades / leftovers
« on: March 15, 2012, 09:09:28 pm »
When I uninstall a Zentyal module, it doesn't perform a great job at housekeeping. A number of configuration files and scripts are left in the system causing unexpected behavior. That happens even after purging the corresponding zentyal module.
For instance, in 2.0 I tested the mail systems and after purging them I still had configuration files and entries in LDAP.
In 2.2 I tested the IPSec module, and despite completely purging it I still have a bunch of init scripts and configuration files all over the place.
The system should be able to do some housekeeping and clean up after itself when modules are removed, otherwise it may turn out a nightmare.
It would be interesting to know how many people have noticed this issue, or they have just learnt to live with it.

Installation and Upgrades / PPTP: how to get it working?
« on: March 02, 2012, 12:34:26 am »
Does anyone know how to get PPTP to work?
I have OpenVPN but I would like to have PPTP as well.
Instructions in the (available) documentation are clearly not enoough, something is missing.
I can connect to the PPTP server but, like many others, have access to the server only.
I can get resolve names to IPs, but I can't even ping other hosts.
Yes, I have already opened ports tcp/1723 and GRE (protocol 47), but I will assume it is a routing issue that is not properly setup on the server upon connecting.
Is there someting I need to consider in /etc/pptpd.conf or some other file?
Any hint?

Installation and Upgrades / Problems after upgrading from 2.0 to 2.2
« on: February 20, 2012, 01:46:41 pm »
Today I decided to bite the bullet and upgrade my server from 2.0 to 2.2 and boy, what a disaster!
I had cleaned up everything prior to the upgrade and we run backups everyday (including configuration).
We don't run many services, so I thought it should be pretty straightforward.
I couldn't be any more wrong.

Downloaded the migration tool and run it.
At some point it claimed some dependency problems related to squid were preventing it from completing.
I promptly uninstalled the squid package on another session, but eventually I had to terminate the original script.
These are some of the last lines:
Code: [Select]
No apport report written because MaxReports is reached already
                                                              Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
Errors were encountered while processing:
E: Sub-process /usr/bin/dpkg returned an error code (1)
Command FAILED! Please check your internet connectivity

Press return to continue or Control+C to abort...

After that, I cleaned up and everything was properly installed.
However, the system was left unconfigured.
Backup configuration, FTP configuration, Users, etc. everything is lost.

Trying to recover from the 2.0 configuration backup does not work, because, you know, who would ever need it? right? Sorry about my rant but at this point I'm really pissed off at how  poorly handled  the migration process is.

I haven't found many migration-related posts, so either I'm in a situation of really bad luck, or I just don't know.

Does anyone have a quick solution for this? or will I have to actually go and recreate all my certificates and users from scratch?

2012-02-21 --Update--
In the end I had to remove all ebox and zentyal packages and start from scratch.
I have managed to salvage data from the configuration backup and I have been able to restore users and groups information directly into the LDAP database.
I also have been able to rebuild all my shares and their permissions by carefully reading the Redis files.
No luck with certificates, I didn't have any more time for this. I will re-issue new certificates to everyone.

Too bad that something that could be accomplished in under 1 hour ended up taking 12 in a small organization.

Hi all.
I have a VPN server with everything up to date (vpn service 2.0.10).
Som months ago I did download client bundles for some of the users.
Today I had to download another client bundle.
I went to VPN>Servers>(my server)>Download Client Bundle.
I chose the client type as "Windows", chose the client certificate for that particular user, filled in the public server address, and clicked on the Download button.
Then I was greeted withe the error message "Invalid client type: the server is intended for Zentyal-to-Zentyal tunnels".
The log /var/log/ebox/ebox.log contains the line
Code: [Select]
DEBUG> EBox::OpenVPN::Model::DownloadClientBundle::_validateClientType - Invalid client type: the server is intended for Zentyal-to-Zentyal tunnelsWTF?

The download works if I choose "Zentyal to Zentyal tunnel", but that's not what I want.
Someone else has experienced this issue?
I was looking into the source code but it did not seem a trivial matter and I don't have the time to dig anymore. I'll see what I can do with whatever I have.

Installation and Upgrades / Can't connect to PPTP server
« on: July 25, 2011, 01:16:43 pm »
I have installed Zentyal 2.1 into an Oracle Virtualbox machine.
Everything is up-to-date.
The virtual machine (VM) has 2 NICs defined: eth0, external ( and another one eth1, internal (
From within the VM I have connectivity to the outside.
I am managing the VM from the host via Web GUI and Putty SSH client, so I have connectivity to the VM.
I have installed PPTP, configured it and started it.
The host is running Windows 7 Ultimate.

Because initial tests failed, I enabled "debug" in /usr/share/zentyal/stubs/pptp/pptpd.conf.mas.
The VPN Network Address is
The primary nameserver is, which is working well (already tested it with nslookup).
I have added a couple of PPTP users, whithout specifying their client IP address.

In Windows 7 I created a new connection to
The fact of both client and server being on the same subnet could be a problem?
In the Security Tab I set the type of VPN to PPTP.
Data Encryption is optional.
In Authentication, I allow all protocols.
In Networking Tab, IPv4 is set to Obtain an IP address automatically.

Upon restarting the PPTP server in Zentyal, I get the following lines in /var/log/syslog:
Code: [Select]
Jul 25 11:38:53 zenbox22 pptpd[17751]: MGR: connections limit (100) reached, extra IP addresses ignored
Jul 25 11:38:53 zenbox22 pptpd[17752]: MGR: Manager process started
Jul 25 11:38:53 zenbox22 pptpd[17752]: MGR: Maximum of 100 connections available

No entries are added to the log while the Windows connection is in progress.
On the Windows side I get an error message.
Code: [Select]
Connecting to using 'WAN Miniport (PPTP)'.
Error 807: The network connection between your computer and the VPN server was interrupted.

I have attached the output of commands iptables -t filter -L -n -v and iptables -t nat -L -n -v.

Installation and Upgrades / [SOLVED] AD Slave issues
« on: July 10, 2011, 07:43:25 pm »
Hi folks. I would appreciate some assistance with issues I am having setting up an AD slave.

I have followed the instructions in and

On the zentyal slave I can see the groups and I can search the LDAP directory (synchronized from the Windows 2008 R2 AD).

Nevertheless, I can't login in FTP or SAMBA, I keep getting invalid credentials.
Code: [Select]
root@zBackup:~# ftp localhost
Connected to localhost.
220 (vsFTPd 2.2.2)
Name (localhost:root): cris
331 Please specify the password.
530 Login incorrect.
Login failed.

This is the message in /var/log/syslog:
Code: [Select]
Jul 10 17:12:03 zBackup vsftpd: pam_ldap: error trying to bind as user "uid=cris,ou=Users,dc=mydomain,dc=local" (Invalid credentials)

I have tested the following statement and it works (providing the password in /etc/ldap.secret) ...
Code: [Select]
root@zBackup:~# ldapsearch -x -v   -D cn=ebox,dc=mydomain,dc=local -W -b ou=users,dc=mydomain,dc=local "(uid=cris)" sambaNTPassword
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
filter: (uid=cris)
requesting: sambaNTPassword
# extended LDIF
# LDAPv3
# base <ou=users,dc=mydomain,dc=local> with scope subtree
# filter: (uid=cris)
# requesting: sambaNTPassword

# cris, Users, mydomain.local
dn: uid=cris,ou=Users,dc=mydomain,dc=local
sambaNTPassword: C515ED49483F21385F5F35A161DD3134

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

Can anyone help?
Is there something else I should try?

Installation and Upgrades / Full backup takes a long time
« on: March 22, 2011, 12:48:10 pm »
One of my servers has  over 370GiB of files to backup, and it is expected to increase.
Currently it is connected via a gigabit switch to a Buffalo NAS Terastation XEL. Both nodes have gigabit NICs.

The full backup took 10 hours and 31 minutes to complete, generating 1778 volumes, 200 MiB each.
This means that a volume was generated and transmitted every 21 seconds or so.
Transmission is done via unencrypted plain FTP.
Temporary folder is located on a SSD drive, while the files are located on a logical volume on RAID-1.
Source filesystems are ext4.

I have timed transfers between the server and the NAS. Average transfer for GET (NAS->server) is 39.2 MiB/s and PUT (server->NAS) is 12.3 MiB/s.

As suggested in, I will be adding the following lines to /usr/share/ebox-ebackup/ebox-duplicity-wrapper:
Code: [Select]
# 20110322 Add experimental switch
# See
# "We could  try one EXPERIMENTAL switch that make the uploads asynchronous
# with the volume creation.  However we cannot assure it would work correctly."
push @ARGV, '--asynchronous-upload';

I am also increasing the size of each volume from 200MiB to 300MiB (there is always some time involved in setting up a connection, so I would expect this to lower the number of connections and hence reduce the time overall).

The server has an Intel i3 processor with 4 cores. Only one is heavily used during the backup, while the other 3 remain mostly idle.

I am already working on a possible solution, but I want to be sure before spending more money.
Is there anything else I can do to improve efficiency without extra hardware?

Installation and Upgrades / Suggestions for Master/Slave/?
« on: January 10, 2011, 11:27:19 am »
I have setup a machine as a Master, as opposed to a Standalone server.
I have no Slave machines yet.
The reason for this is that, apparently, should my needs grow, there are no current paths defined to migrate from Standalone to Master/Slave.
Running the server as Master seems a safe bet to me, as I can run all available services on it. If at some point my needs grow, I could setup additional slaves and eventually move some of the services over to them.

Are my assumptions right?
Is there any caveat?
What is your experience?
I would appreciate comments and suggestions.
All feedback is welcome.

Installation and Upgrades / Apparmor messages for /usr/bin/freshclam
« on: December 23, 2010, 10:14:36 am »
In /var/log/kern.log I keep getting messages like the following one:
Code: [Select]
[60215.306554] type=1503 audit(1293094801.367:39):  operation="exec" pid=5795 parent=5794 profile="/usr/bin/freshclam" requested_mask="::x" denied_mask="::x" fsuid=122 ouid=0 name="/bin/dash"

This must be related to Apparmor. Relevant files would be /etc/apparmor.d/usr.bin.freshclam and /etc/apparmor.d/usr.bin.freshclam.zentyal.
In the last one there are the following lines:

Code: [Select]
 # Run observer script
  /bin/dash ix,
  /usr/share//ebox-antivirus/freshclam-observer rUx,

Is there any setting that should be different?

After a fresh start, my OpenVPN server works fine, and I can login and set some options. This is the relevant line in the logs:

Code: [Select]
Tue Dec 21 12:21:06 2010 us=835842 vpn-client/ PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 21 12:21:06 2010 us=835949 vpn-client/ SENT CONTROL [vpn-client]: 'PUSH_REPLY,route,redirect-gateway,dhcp-option DNS,dhcp-option WINS,dhcp-option DOMAIN xxxxxx,route-gateway,ping 10,ping-restart 120,ifconfig' (status=1)

After a service ebox openvpn restart, however, the options are not pushed anymore:
Code: [Select]
Tue Dec 21 12:22:22 2010 vpn-client/ PUSH: Received control message: 'PUSH_REQUEST'
Tue Dec 21 12:22:22 2010 vpn-client/ SENT CONTROL [vpn-client]: 'PUSH_REPLY,route,route-gateway,ping 10,ping-restart 120,ifconfig' (status=1)

Does anyone have some clue as to what may be causing this?
The only errors between the previous line and the latest one are:
Code: [Select]
Tue Dec 21 12:22:01 2010 us=774124 event_wait : Interrupted system call (code=4)
Tue Dec 21 12:22:01 2010 us=774369 TCP/UDP: Closing socket
Tue Dec 21 12:22:01 2010 us=774395 Closing TUN/TAP interface
Tue Dec 21 12:22:01 2010 us=774412 /sbin/ifconfig tap0
SIOCSIFADDR: Permission denied
SIOCSIFFLAGS: Permission denied
Tue Dec 21 12:22:01 2010 us=775314 Linux ip addr del failed: external program exited with error status: 255
Tue Dec 21 12:22:01 2010 us=857781 SIGTERM[hard,] received, process exiting

If I start the VPN server by hand with openvpn --config /etc/openvpn/zenbox.conf --syslog /var/log/ebox/openvpn/zenbox.log everything works fine.

Installation and Upgrades / VPN (missing) Logs
« on: December 20, 2010, 11:16:08 pm »
In Core>Logs>Query Logs>VPN Full Reports, the list of entries is empty, despite actually having logged in and out several times in the past few days.
They are enabled and the "Purge logs older than" setting is set to "never purge".

How is it possible?

Installation and Upgrades / cat /var/run/ failed
« on: December 20, 2010, 08:31:56 am »
I keep getting these errors in /var/log/ebox/ebox.log:
Code: [Select]
2010/12/20 07:30:55 ERROR> EBox::Sudo::_rootError - root command cat /var/run/ failed.
Error output: cat: /var/run/ No such file or directory

Command output: .
Exit value: 1
2010/12/20 07:30:55 INFO> EBox::Event::Dispatcher::Log::send - $VAR1 = bless( {
                 'source' => 'Service',
                 'level' => 'error',
                 'dispatchers' => [
                 'timestamp' => 1292830255,
                 'message' => 'The following modules are not running but they are enabled: Groupware'
               }, 'EBox::Event' );
I have installed Zarafa and, as far as I can tell, it's working properly.
Any ideas?

Installation and Upgrades / VoIP / Asterisk error
« on: November 22, 2010, 03:04:49 pm »
I am checking the VoIP module, and testing by calling the demo extensions (400, 500, etc).
After each call, the VoIP module status becomes "stopped", and I need to restart it.

All modules are up to date.

I can't find any errors in ebox.log or any of the logs under /var/log/asterisk/.
In /var/log/messages, I can see the following error everytime the module stops (BTW, I have named this virtual machine: zenbox):

Nov 22 13:56:35 zenbox kernel: [  270.912106] asterisk[4058] general protection ip:7fc24b0c8052 sp:7fc225c6eb88 error:0 in[7fc24b045000+17a000]

Anyone has experienced the same error?

Installation and Upgrades / Sharing some thoughts
« on: October 19, 2010, 02:57:43 am »
I have been testing Zentyal 2.0 unsuccessfully. The process always started with a clean installation, followed by an update and upgrade of Linux and Zentyal components. The I gradually added a new component and tested it.
After a few trials It failed on me with the Mailfilter component (didn't receive emails, no warnings in logs, nothing) and now it fails with the VPN.
I have repeated this process about 5 times in Virtualbox.
So, I decided to do the same with EBox 1.4-2, and it worked right out of the box. All the components that were my minimum requirements were functional.
I guess, that 1.4 is the stable version, while 2.0 represents a testing version.
I would like to ask all of you what's your experience with these versions. Which version are you using in production environmentes: 1.4 or 2.0?
Have you installed 2.0 with all the lates components and is it working without a glitch?
I would appreciate your feedback on this.

Pages: [1] 2