Show Posts

16

Installation and Upgrades / Re: Zentyal 5 DDNS will nopt update

« on: March 09, 2017, 11:20:47 pm »

So after a lot of digging I found the problem. The kerberos ticket is expired under root. As a temp fix I created a cron job that does a kinit every hour.

Code: [Select]


@hourly /usr/bin/kinit --password-file=/root/admin.pass Administrator@TAYLORTELEPHONE.COM

Created a password file that only root can read and put the Administrator password in on a single line.

-rw-------  1 root root      11 Mar  4 09:54 admin.pass

17

Installation and Upgrades / Zentyal 5 DDNS will nopt update

« on: February 27, 2017, 06:36:45 pm »

Fresh install of Zentyal 5. Has current updates as of 2/27/17 am.

Feb 27 11:24:29 zentyal named[28034]: samba_dlz: starting transaction on zone taylordatacom.com
Feb 27 11:24:29 zentyal named[28034]: client 192.168.183.148#57884: update 'taylordatacom.com/IN' denied
Feb 27 11:24:29 zentyal named[28034]: samba_dlz: cancelling transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: starting transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: allowing update of signer=WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM name=WIN10-XEN-TEST1.taylordatacom.com tcpaddr= type=AAAA key=916-ms-7.1-688d.981cf53b-fd11-11e6-d59b-ae4e2acb856e/160/0
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: allowing update of signer=WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM name=WIN10-XEN-TEST1.taylordatacom.com tcpaddr= type=A key=916-ms-7.1-688d.981cf53b-fd11-11e6-d59b-ae4e2acb856e/160/0
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: allowing update of signer=WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM name=WIN10-XEN-TEST1.taylordatacom.com tcpaddr= type=A key=916-ms-7.1-688d.981cf53b-fd11-11e6-d59b-ae4e2acb856e/160/0
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#60272/key WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM: updating zone 'taylordatacom.com/NONE': deleting rrset at 'WIN10-XEN-TEST1.taylordatacom.com' AAAA
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#60272/key WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM: updating zone 'taylordatacom.com/NONE': deleting rrset at 'WIN10-XEN-TEST1.taylordatacom.com' A
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#60272/key WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM: updating zone 'taylordatacom.com/NONE': adding an RR at 'WIN10-XEN-TEST1.taylordatacom.com' A 192.168.183.148
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: added rdataset WIN10-XEN-TEST1.taylordatacom.com 'WIN10-XEN-TEST1.taylordatacom.com.#0111200#011IN#011A#011192.168.183.148'
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: subtracted rdataset taylordatacom.com 'taylordatacom.com.#0113600#011IN#011SOA#011zentyal.taylordatacom.com. hostmaster.taylordatacom.com. 2 900 600 86400 3600'
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: added rdataset taylordatacom.com 'taylordatacom.com.#0113600#011IN#011SOA#011zentyal.taylordatacom.com. hostmaster.taylordatacom.com. 3 900 600 86400 3600'
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: committed transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#61913: update '183.168.192.in-addr.arpa/IN' denied
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#51795/key WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM: updating zone '183.168.192.in-addr.arpa/IN': update failed: rejected by secure update (REFUSED)
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: starting transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#50794: update 'taylordatacom.com/IN' denied
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: cancelling transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: starting transaction on zone taylordatacom.com
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: allowing update of signer=WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM name=WIN10_XEN_TEST1.taylordatacom.com tcpaddr= type=A key=916-ms-7.1-688d.981cf53b-fd11-11e6-d59b-ae4e2acb856e/160/0
Feb 27 11:24:30 zentyal named[28034]: client 192.168.183.148#50711/key WIN10-XEN-TEST1\$\@TAYLORDATACOM.COM: updating zone 'taylordatacom.com/NONE': deleting an RR at WIN10_XEN_TEST1.taylordatacom.com A
Feb 27 11:24:30 zentyal named[28034]: samba_dlz: committed transaction on zone taylordatacom.com

Using domain server:
Name: 192.168.183.240
Address: 192.168.183.240#53
Aliases:

Host 148.183.168.192.in-addr.arpa. not found: 3(NXDOMAIN)

root@zentyal:~# dpkg -l zentyal*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
ii zentyal 5.0.1 all Zentyal - Core metapackage
ii zentyal-antivirus 5.0.1 all Zentyal - Antivirus
ii zentyal-ca 5.0 all Zentyal - Certification Authority
un zentyal-common <none> <none> (no description available)
ii zentyal-core 5.0.7 all Zentyal - Core
ii zentyal-dhcp 5.0 all Zentyal - DHCP Server
ii zentyal-dns 5.0.1 all Zentyal - DNS Server
ii zentyal-firewall 5.0 all Zentyal - Firewall
ii zentyal-groupware 5.0.1 all Zentyal - Mail and Groupware
ii zentyal-jabber 5.0 all Zentyal - Jabber
ii zentyal-mail 5.0.4 all Zentyal - Mail
ii zentyal-mailfilter 5.0 all Zentyal - Mail Filter
ii zentyal-network 5.0.5 all Zentyal - Network Configuration
ii zentyal-ntp 5.0 all Zentyal - NTP Service
un zentyal-objects <none> <none> (no description available)
un zentyal-openchange <none> <none> (no description available)
ii zentyal-openvpn 5.0 all Zentyal - VPN
ii zentyal-samba 5.0.4 all Zentyal - Domain Controller and File Sharing
un zentyal-services <none> <none> (no description available)
ii zentyal-software 5.0.1 all Zentyal - Software Management
ii zentyal-sogo 5.0.1 all Zentyal - Web Mail
ii zentyal-squid 5.0.1 all Zentyal - HTTP Proxy
root@zentyal:~# dpkg -l bind*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
un bind <none> <none> (no description available)
ii bind9 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Internet Domain Name Server
un bind9-doc <none> <none> (no description available)
ii bind9-host 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Version of 'host' bundled with BIND 9.X
ii bind9utils 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Utilities for BIND
root@zentyal:~# dpkg -l dhcp*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
un dhcp <none> <none> (no description available)
un dhcp-client <none> <none> (no description available)
un dhcp3-client <none> <none> (no description available)
un dhcpcd <none> <none> (no description available)
root@zentyal:~# dpkg -l samba*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
ii samba 2:4.5.4+dfsg-1ubuntu1 amd64 SMB/CIFS file, print, and login server for Unix
un samba-ad-dc <none> <none> (no description available)
ii samba-common 2:4.5.4+dfsg-1ubuntu1 all common files used by both the Samba server and client
ii samba-common-bin 2:4.5.4+dfsg-1ubuntu1 amd64 Samba common files used by both the server and the client
un samba-doc <none> <none> (no description available)
ii samba-dsdb-modules 2:4.5.4+dfsg-1ubuntu1 amd64 Samba Directory Services Database
ii samba-libs:amd64 2:4.5.4+dfsg-1ubuntu1 amd64 Samba core libraries
un samba-tools <none> <none> (no description available)
ii samba-vfs-modules 2:4.5.4+dfsg-1ubuntu1 amd64 Samba Virtual FileSystem plugins
un samba4 <none> <none> (no description available)
un samba4-common <none> <none> (no description available)
un samba4-common-bin <none> <none> (no description available)

18

Installation and Upgrades / Zentyal 5 bind 9 out of date for samba 4.5.x

« on: February 26, 2017, 10:39:13 pm »

root@zentyal:~# dpkg -l samba*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
ii samba 2:4.5.4+dfsg-1ubuntu1 amd64 SMB/CIFS file, print, and login server for Unix
un samba-ad-dc <none> <none> (no description available)
ii samba-common 2:4.5.4+dfsg-1ubuntu1 all common files used by both the Samba server and client
ii samba-common-bin 2:4.5.4+dfsg-1ubuntu1 amd64 Samba common files used by both the server and the client
un samba-doc <none> <none> (no description available)
ii samba-dsdb-modules 2:4.5.4+dfsg-1ubuntu1 amd64 Samba Directory Services Database
ii samba-libs:amd64 2:4.5.4+dfsg-1ubuntu1 amd64 Samba core libraries
un samba-tools <none> <none> (no description available)
ii samba-vfs-modules 2:4.5.4+dfsg-1ubuntu1 amd64 Samba Virtual FileSystem plugins
un samba4 <none> <none> (no description available)
un samba4-common <none> <none> (no description available)
un samba4-common-bin <none> <none> (no description available)
root@zentyal:~# dpkg -l bind*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============================================-============================-============================-==================================================================================================
un bind <none> <none> (no description available)
ii bind9 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Internet Domain Name Server
un bind9-doc <none> <none> (no description available)
ii bind9-host 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Version of 'host' bundled with BIND 9.X
ii bind9utils 1:9.10.3.dfsg.P4-8ubuntu1.5 amd64 Utilities for BIND

BIND Version    Supported from Samba Version
BIND 9.11    Samba 4.5.2
BIND 9.10    Samba 4.2
BIND 9.9    Samba 4.0
BIND 9.8    Samba 4.0

https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End

Looks like bind needs to be 9.11 to support current samba version.

19

Installation and Upgrades / Re: Latest samba upgrade to 5.0 is borked.

« on: February 26, 2017, 07:14:16 pm »

Wish I would have saw this earlier! My shares still work but roaming profiles do not. I find that \\zentyal.domain.com\profiles\user\ you cannot read security permissions. If you remove the domain.com part everything works.

It did look like there is a problem with winbind. It is creating a lot of error messages.

20

Email and Groupware / Re: Mailfilter Configuration Issue

« on: February 17, 2017, 09:14:06 pm »

Found the problem

Code: [Select]

cp /etc/amavis/conf.d.old/15-content_filter_mode /etc/amavis/conf.d/

nano /etc/amavis/conf.d/15-content_filter_mode

uncomment
@bypass_spam_checks_maps = (
   \%bypass_spam_checks, \@bypass_spam_checks_acl, \$bypass_spam_checks_re);

zs mail restart

21

Email and Groupware / Re: Mailfilter Configuration Issue

« on: February 17, 2017, 07:34:47 pm »

From what I can tell on my server, it is not enabled.

Feb 17 11:25:04 zentyal amavis[9986]: ANTI-VIRUS code NOT loaded
Feb 17 11:25:04 zentyal amavis[9986]: ANTI-SPAM code NOT loaded
Feb 17 11:25:04 zentyal amavis[9986]: ANTI-SPAM-EXT code NOT loaded
Feb 17 11:25:04 zentyal amavis[9986]: ANTI-SPAM-C code NOT loaded
Feb 17 11:25:04 zentyal amavis[9986]: ANTI-SPAM-SA code NOT loaded

22

Installation and Upgrades / [SOLVED]Re: Zentyal 5.0 Comodo SSL

« on: February 15, 2017, 04:54:05 pm »

So here is what I did to get things to work and this will will survive an upgrade.

Code: [Select]

cp /usr/share/zentyal/stubs/mail/dovecot.conf.mas /etc/zentyal/stubs/mail/
nano /etc/zentyal/stubs/mail/dovecot.conf.mas

#my $certFile = '/etc/postfix/sasl/postfix.pem';
#my $keyFile  = '/etc/postfix/sasl/postfix.pem';
my $certFile = '/etc/ssl/certs/STAR_taylortelephone_com.crt';
my $keyFile  = '/etc/ssl/private/star_taylortelephone_com.key';

cp /usr/share/zentyal/stubs/mail/dovecot.conf.mas /etc/zentyal/stubs/mail
nano /etc/zentyal/stubs/mail/dovecot.conf.mas

#ssl_cert =</etc/dovecot/private/dovecot.pem
#ssl_key =</etc/dovecot/private/dovecot.pem
ssl_cert =</etc/ssl/certs/STAR_taylortelephone_com.crt
ssl_key =</etc/ssl/private/star_taylortelephone_com.key

nano /etc/apache2/sites-available/default-ssl.conf

                #SSLCertificateFile     /etc/ssl/certs/ssl-cert-snakeoil.pem
                #SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
                SSLCertificateFile      /etc/ssl/certs/STAR_taylortelephone_com.crt
                SSLCertificateKeyFile   /etc/ssl/private/star_taylortelephone_com.key
                SSLCertificateChainFile /etc/ssl/certs/STAR_taylortelephone_com.ca-bundle

zs mail restart
systemctl restart apache2

23

Installation and Upgrades / Re: Zentyal 5.0 Comodo SSL

« on: February 15, 2017, 03:58:27 pm »

Thanks for the info. Apache was easy and that is working. I had that done before I posted. It's the dovecot/postfix part that I am having problems with. There is NO openchange in 5.0.x as of right now. 5.0.x is very different so nothing that is posted in the forums seems to work. I read over the doc's and I understand what the stubs files are for and do.

24

Installation and Upgrades / [SOLVED] Zentyal 5.0 Comodo SSL

« on: February 13, 2017, 04:04:50 pm »

Does this still apply to installing 3rd party ssl certs? https://forum.zentyal.org/index.php?topic=24513.0

If not what is the proper way to install Comodo SSL certs. I have a *.domain.com cert.

Cookies usage

Messages - jrtaylor

Installation and Upgrades / Re: Zentyal 5 DDNS will nopt update

Installation and Upgrades / Zentyal 5 DDNS will nopt update

Installation and Upgrades / Zentyal 5 bind 9 out of date for samba 4.5.x

Installation and Upgrades / Re: Latest samba upgrade to 5.0 is borked.

Email and Groupware / Re: Mailfilter Configuration Issue

Email and Groupware / Re: Mailfilter Configuration Issue

Installation and Upgrades / [SOLVED]Re: Zentyal 5.0 Comodo SSL

Installation and Upgrades / Re: Zentyal 5.0 Comodo SSL

Installation and Upgrades / [SOLVED] Zentyal 5.0 Comodo SSL