Messages

1

Installation and Upgrades / Re: Ability to change hash algorithm in Zentyal CA [SOLVED]

« on: August 15, 2015, 10:33:48 pm »

I wonder why this hasn't been implemented as default setting in the meanwhile...
Chrome displays a warning everytime a SHA-1 certificate is detected in the certification chain :/

2

Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container

« on: August 10, 2015, 10:24:28 am »

I hope that these changes will be maintained in the event of changed files by updates.

I have a question for you, if you don't mind: my working version is 4.0.9.
Do you know if there are issues if I make upgrade to 4.1 from GUI (UPGRADE NOW button)?

Be warned: The modifications are for testing purposes only and not recommended for production environments.
Whenever you do domething on the GUI which forces a re-generation of your config files all your changes will be lost.

If you really need to make those change some sort of permanent, you'd better change the config file stubs:
/usr/share/zentyal/stubs/openchange/ocsmanager.ini.mas
/usr/share/zentyal/stubs/openchange/sogo.conf.mas
Then you may save your changes on the GUI and the config file regeneration will use the new values without CN=Users

But I think that these modifications may also be lost when you install the updates.

3

Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container

« on: August 10, 2015, 10:19:10 am »

Who was talking about SBS? SBS is a totally different thing in my opinion. If you have been running a SBS server you'd better migrate to Office365 and save all that money instead of running your own servers. If you really need to run your servers by yourself Zentyal MAY be a possible solution.

I tried to evaluate Zentyal as an alternative for "real" exchange servers with 100+ users. Zentyal could really help to save a lot of costs for Exchange server licenses and CALs (Enterprise vs. Core CAL) and admins may reinvest that money to support open source software development. But in the current state Zentyal is not a Exchange server replacement in any way.

I'm glad that you are happy with it, but in my eyes Zentyal still doesn't deliver what it tries to promise...

4

Installation and Upgrades / Re: outlook 2010 push issues

« on: August 10, 2015, 01:26:41 am »

I just tried to find out why my outlook test-clients are not syncing properly and found the strage replies of the zentyal team on bug #2747:

https://tracker.zentyal.org/issues/2747

ARE YOU GUYS F*ING SERIOUS?

I have been coming back to Zentyal every few months to see how it has improved, but these answers and the fact that Openchange-Accounts can only be activated for users inside the CN=Users Container has rendered Zentyal completely useless as Exchange Server replacement in my opinion. And if you can not satisfy people with the community versions nobody will even take notice about your commercial options.
Outlook does not receive any incoming messages when it says "connected to exchange" in the status line - That's still a bug with no fix available.

I really like the idea of supporting opensource-developers, but you just don't seem to deserve it - I'm sorry!

5

Installation and Upgrades / Re: Can't re-provision domain

« on: August 03, 2015, 04:30:42 pm »

The cleaner approach to force re-provisioning regardless of your fu**ed up LDAP:

The manpage of openchange_provision says:

Code: [Select]

  --ignore-already-exists
                        Ignore errors when installing schemas that already
                        exists
So we only need to find the call for openchange_provision in that bunch of perl source files - it's hidden in /usr/share/perl5/EBox/OpenChange/Model/Provision.pm on line 457:

Code: [Select]

my $cmd = "openchange_provision --firstorg='$organizationName' ";
just add that command line switch:

Code: [Select]

my $cmd = "openchange_provision --ignore-already-exists --firstorg='$organizationName' ";
Provisioning should be possible now using the web-gui

6

Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container

« on: August 03, 2015, 01:38:08 pm »

I'm still not sure if that's really the truth.

I searched all config files in /etc for "CN=Users" and modified:
/etc/sogo/sogo.conf
/etc/ocsmanager/ocsmanager.ini
and replaced CN=Users,DC=domain,DC=tld with DC=domain,DC=tld

After that I moved one of my test-environment-OU-users into the users-container and after sucessfully openchange-account-activation on the Zentyal webgui I moved that user back to another OU.
Everything is still working as expected so I doubt it's just a dumb restriction on the Zentyal WebGUI...

EDIT: I even restarted all services and the zentyal-server and it still works...

7

Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container

« on: August 03, 2015, 12:44:21 pm »

Your suggestion is nice - for tiny environments where you have users and OUs which you can count on one hand.

In bigger environments where you have hundreds of users and dozens of OUs - each with different GPO settings it's just not possible to put every user into the same container.
GPO processing is also becoming awfully slow when using your approach in bigger environments.

Can you explain whether that's a specific technical limitation by Openexchange/SoGo or it's just a Zentyal restriction?

If it's possible to redirect that to just ONE primary OU where all the users and sub-OUs are residing - that would be really great.

Thank you

8

Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container

« on: July 31, 2015, 01:06:12 pm »

If you look at the view counter on that forum's topic list page, this issue is really popular.

If you plan to use group policies (as almost every Windows admin does) you have to move your user and computer objects into organizational units, because linking a GPO to a container (like CN=Users) is not possible.
If you want to use openchange on Zentyal you are forced to put your users into that CN=Users container which in turn does not allow you to use group policies for your users at all.

So you must decide if you want to have group policies OR openchange... This is completely crazy!

Why isn't anyone of the development staff answering this topic?
If this restriction is not removed soon, openchange is completely useless as a Microsoft Exchange replacement!

Just my opinion

EDIT: Can you please explain in detail where the TECHNICAL limitation is?