Messages

76

Directory and Authentication / Re: Issue with Computer Name not changing

« on: January 29, 2020, 05:42:37 am »

BUMP anyone?

77

Directory and Authentication / Re: issue shares permissions (solved)

« on: January 29, 2020, 05:42:15 am »

Hey there, sure i love ZFS i currently use Proxmox with it, the idea of  why i needed ZFS was the shadow copy, which its a real quick easy hassale to recover on windows server which  i needed that option on zentyal i was going crazy until i found ZFS snapshots then redirect into samba shares so i can recover it directly on windows the only issue is the time is off, on windows it shows like 5 hours later.
I would totally recommend ZFS trust me it saved me big time, i used for snapshots pyznaps and PVE-ZSYNC on proxmox and syncoid for vm which are too big to send though network
if you need help let me know

Hope this helps

78

Directory and Authentication / Issue with Computer Name not changing

« on: January 28, 2020, 03:49:06 am »

Hi,
I was wondering if someone else has had this issue before, Currently changed name of a PC which was illustrator-pc to illustrators-pc adding the s at the end i check on zentyal web and it does not change

adding the screen shots

https://imgur.com/a/bkZRURI

Thank you

79

Directory and Authentication / Re: issue shares permissions

« on: January 28, 2020, 03:46:37 am »

Thanks for the reply, solved it i ad run on ZFS pool the following it was not a samba issue

Code: [Select]

zfs set acltype=posixacl data
zfs set aclinherit=passthrough data
zfs set xattr=sa data
Hope this helps someone else

80

Directory and Authentication / issue shares permissions (solved)

« on: January 27, 2020, 04:41:44 am »

Hi,

I was wondering if someone could shed some light on the issue im having.
I have a folder called shares

inside that folder im going to create another folder called Users

So far so good that folder shares and Users can be accessed and modify by the users of the domain.

But inside that folder Users im going to create user1folder and user2folder but i dont want all the users of the domain to have access of those folder

So normally i disable the inheritance and remove the users of the domain and only give test1 to access to user1folder and test2 to user2folder

which means that test2 cannot see user1folder and test1 cannot see user2folder

so this is what i need so not sure if i have to do on samba or on windows?

when i try on windows i get the error when enumerating objects in the container access was denied


This is the smb share conf

Code: [Select]

[shares]
    path = /data
    browseable = yes
    force create mode = 0660
    force directory mode = 0660
    valid users = @"Domain Users"
    read list =
    write list = @"Domain Users"
    admin users =
    vfs objects = acl_xattr full_audit recycle shadow_copy2
#    full_audit:failure = connect opendir disconnect unlink mkdir rmdir open rename
full_audit:prefix = %u|%I|%S
full_audit:failure = connect
full_audit:success = mkdir rename unlink rmdir pwrite pread connect disconnect
full_audit:facility = local5
full_audit:priority = notice
shadow: snapdir = .zfs/snapshot
shadow: sort = desc
shadow: format = _%Y-%m-%d_%H:%M:%S
shadow: snapprefix = ^pyznap
shadow: delimiter = _
shadow:localtime = no
    recycle: excludedir = /tmp|/var/tmp
    recycle: directory_mode = 0700
    recycle: inherit_nt_acl = Yes
    recycle: keeptree = Yes
    recycle: versions = Yes
    recycle: repository = RecycleBin
https://ibb.co/TtC6BsJ

Thank you

81

Installation and Upgrades / Re: quick question on migrating server 2012r2

« on: January 27, 2020, 03:25:36 am »

Hi there sure thing im going to post back next week and put the steps how to on github so i can help the community the only issue im having is to remove the other Windows server im guessing i need to put on a windows RSAT and remove it manually.

82

Installation and Upgrades / Re: quick question on migrating server 2012r2

« on: January 16, 2020, 03:44:12 pm »

EDIT: so these are the steps to migrate, only one issue is that i demoted the windows server but it still appears domain controllers on zentyal so odd

STEPS:

But before take a snapshot of the OS of windows server and were going to downgrade the forest and domain to windows 2008r2 go to powershell on windows

Code: [Select]

`Set-ADForestMode -Identity "YOURDOMAIN.local" -ForestMode Windows2008R2Forest`


`Set-ADDomainMode -Identity "YOURDOMAIN.local" -DomainMode Windows2008R2Domain`

now ssh the zentyal server

Code: [Select]

`cd /usr/share/zentyal-samba`

Code: [Select]

`chmod +x ad-migrate`


Code: [Select]

`./ad-migrate`
then say Y


then demote the windows server

83

Directory and Authentication / Samba Issue with shadow copy

« on: January 09, 2020, 04:05:10 am »

HI,
I was wondering if someone else has any experience with this before? Currently Version: 6.1 zentyal and Samba version 4.7.6-Ubuntu
The time in the shadow copy does not show correct on the windows previous versions, as soon as i put shadow:localtime = yes and restart samba does not show previous versions which therefore i have to put shadow:localtime = no
Currently using pyznap for the snapshots of the ZFS file system
see pictures on the times not correct but both windows and zentyal have the correct time just the previous versions are now. The hour difference is about 5 hours behind the last snapshot was 6:10pm on zentyal and on the previous versions on windows show 1:10 pm

Picture

https://ibb.co/PZTgXFB

This is my samba share

Code: [Select]

[test]
    path = /data
    browseable = yes
    force create mode = 0660
    force directory mode = 0660
    valid users = @"Domain Users"
    read list =
    write list = @"Domain Users"
    admin users =
    vfs objects = acl_xattr full_audit recycle shadow_copy2
#    full_audit:failure = connect opendir disconnect unlink mkdir rmdir open rename
full_audit:prefix = %u|%I|%S
full_audit:failure = connect
full_audit:success = mkdir rename unlink rmdir pwrite pread connect disconnect
full_audit:facility = local5
full_audit:priority = notice
    recycle: inherit_nt_acl = Yes
    recycle: versions = Yes
    recycle: excludedir = /tmp|/var/tmp
    recycle: keeptree = Yes
    recycle: repository = RecycleBin
    recycle: directory_mode = 0700
shadow: snapdir = .zfs/snapshot
shadow: sort = desc
# Specify snapshot name: frequent, hourly, daily... as desired
shadow: format = _%Y-%m-%d_%H:%M:%S
shadow: snapprefix = ^pyznap
shadow: delimiter = _
shadow:localtime = no


Thank you

84

Installation and Upgrades / Re: quick question on migrating server 2012r2

« on: January 09, 2020, 04:01:04 am »

Thank you again for the reply, im going to test it in a test environment to see how it works, and post back my experience

As what you mention is that i need to join Zentyal to the WS2012 so that means i dont need to downgrade ws2012 then run the script to migrate the FSMO roles and then demote it

Next week ill post back on the steps if all goes well
Thank you 

85

Installation and Upgrades / Re: quick question on migrating server 2012r2

« on: January 05, 2020, 03:08:17 am »

Thank you for the reply,
so if i understood correctly, I would make zentyal join my existing domain on windows server, which will replicate all the users the no issue meaning that the next day the users will not affected by trust domain, the only thing that does not replicate is the GPO but thats no issue as my gpo is real small (network drives) and i can redo it manual.
Then after that i need to transfer the roles to zentyal to make primary
and would execute the script which comes already inside zentyal

Code: [Select]

/usr/share/zentyal-samba$ sudo ./ad-migrate
then transfer the files from windows server to Zentyal
and demote normally the window server

I would guess these are the steps?
And the ad-migrate script works  to transfer the roles from windows server 2012r2?

Thank you again

86

Installation and Upgrades / Re: quick question on migrating server 2012r2

« on: January 03, 2020, 02:51:20 pm »

Thank you for the reply, and sorry for the late reply, did not get an email alert, as for the migration, this would migrate users but would i need to re connect them to the domain?

Thank you

87

Directory and Authentication / samba audit?

« on: December 28, 2019, 01:47:35 am »

Hi,
I was wondering if someone else has accomplish to enable the samba audit to log on another file?
This is what i have so far  first inside of rsyslog the 50.default.conf
added this at the end

Code: [Select]

if $programname == 'smbd_audit' then /var/log/audit.log
if $programname == 'smbd_audit' then ~

then on the shares.conf this is what i have

Code: [Select]

# Shares

[shares]
    path = /disk2
    browseable = yes
    force create mode = 0660
    force directory mode = 0660
    valid users = @"Domain Users"
    read list =
    write list = @"Domain Users"
    admin users =
    vfs objects = acl_xattr full_audit recycle
full_audit:prefix = %S|%u|%I|%m
full_audit:success = chdir mkdir open opendir read rename rmdir write link unlink
full_audit:failure = none
full_audit:facility = local7
full_audit:priority = notice

    recycle: inherit_nt_acl = Yes
    recycle: directory_mode = 0700
    recycle: repository = RecycleBin
    recycle: keeptree = Yes
    recycle: excludedir = /tmp|/var/tmp
    recycle: versions = Yes

then restarted samba and rsyslog but not seeing the logs comming in

Thank you

88

Installation and Upgrades / quick question on migrating server 2012r2

« on: December 06, 2019, 01:04:10 am »

Hi,
i was wondering if its possible to migrate users from 2012r2 to zentyal, i saw that the roles can only migrate if one has 2008r2, but not if migrating the users applies to that same concept?

Thank you

89

Directory and Authentication / Re: questions about DNS?

« on: August 11, 2019, 01:13:08 am »

thanks for the reply, thanks will be waiting for it :=)

90

Directory and Authentication / Re: questions about DNS?

« on: July 27, 2019, 12:47:43 am »

bump?