Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
76
Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container
« on: October 19, 2015, 09:58:04 pm »
I'm guessing you'll at least get pointed in the right direction in:
/usr/share/Zentyal/stubs/openchange/apache-ocsmanager.conf.mas
That has references to the sogo side of things in a few places. I'd venture a guess that you'll find what you need inside the openchange directory.
What I did to figure out quite a bit of things was just drop a stub file in /etc/Zentyal/stubs/openchange (or whichever directory) and just start changing stuff. If it screwed up then I just deleted the file and made a note of what not to do LoL.
Of course the DC side of things is supposed to be managed by Samba, so maybe in the Samba stubs would be something. Now you've really got me thinking on this, so I'm going to tear some stuff apart in a minute here and see what I can figure out!
/usr/share/Zentyal/stubs/openchange/apache-ocsmanager.conf.mas
That has references to the sogo side of things in a few places. I'd venture a guess that you'll find what you need inside the openchange directory.
What I did to figure out quite a bit of things was just drop a stub file in /etc/Zentyal/stubs/openchange (or whichever directory) and just start changing stuff. If it screwed up then I just deleted the file and made a note of what not to do LoL.
Of course the DC side of things is supposed to be managed by Samba, so maybe in the Samba stubs would be something. Now you've really got me thinking on this, so I'm going to tear some stuff apart in a minute here and see what I can figure out!
77
Installation and Upgrades / Re: Installation Zentyal by command line - Ldap issue
« on: September 16, 2015, 11:08:28 pm »
I'm going to guess you haven't configured OpenChange or Samba yet. Go check the Wiki out here:
https://www.google.com/search?q=installing+zentyal+4.1+on+ubuntu&rls=com.microsoft:en-US:IE-Address&ie=UTF-8&oe=UTF-8&sourceid=ie7&gws_rd=ssl
Sorry it's not an actual link but I'm blind and I can never find that stupid insert hyperlink button LoL.
Anyways you need to configure certain modules before you can do other things. You'll also need to do almost everything for Zentyal via the web GUI instead of going through terminal. To access the web GUI just crack open Firefox and browse to https://<server local IP>:8443/ and login with a user that has root privileges. For the record you really should disable the root user, I know it's a pain typing sudo but sudo su makes it easier!
https://www.google.com/search?q=installing+zentyal+4.1+on+ubuntu&rls=com.microsoft:en-US:IE-Address&ie=UTF-8&oe=UTF-8&sourceid=ie7&gws_rd=ssl
Sorry it's not an actual link but I'm blind and I can never find that stupid insert hyperlink button LoL.
Anyways you need to configure certain modules before you can do other things. You'll also need to do almost everything for Zentyal via the web GUI instead of going through terminal. To access the web GUI just crack open Firefox and browse to https://<server local IP>:8443/ and login with a user that has root privileges. For the record you really should disable the root user, I know it's a pain typing sudo but sudo su makes it easier!
78
Installation and Upgrades / Re: [HOWTO] Trusted SSL With Zentyal 4+
« on: September 16, 2015, 10:13:55 pm »
HOLY COW - Even easier on the wallet AND the certs!!! I was having some trouble getting everyone and everything to play nicely just using the Comodo Positive SSL certs, so I went hunting for something better. I just picked up a Comodo Positive UCC or SAN (whichever you want to call it). There's no need to cat anything and you can add domains/subdomains to it as you need. Ironically the fix came when I was troubleshooting someone's Exchange 2013 setup and I noticed they'd used a legit 3rd party SSL but it was ONLY for their FQDN. Suddenly I remembered that you need the TLD, FQDN and an autodiscover domain listing.
It cost me less than $50 and it comes with a .ca-bundle file that is already all setup and ready to rock! If your domain is Zentyal.org and your server name is mx then you'd want to use the following set of domains:
Common Name: Zentyal.org
Domain 1: mx.zentyal.org
Domain 2: autodiscover.zentyal.org
To make things run even better you can add up to 300 domains so throw in a couple of potential future domain names:
Domain 3: blog.zentyal.org
Domain 4: shop.zentyal.org
OR if you're trying to corner the market on a specific domain you could add:
Zentyal.net
Zentyal.com
Zentyal.online
and so on and so on. You can add up to the limit for additional domains whether they're subdomains or something completely different like covering Zentyal.org, Microsoft.com, google.com, netzero.net and you get the point now. Depending on where you buy your UCC/SAN cert there's a cost for additional domains, some give you the first 3 free, some give you 1 free, some charge $35.00/additional domain and some charge $5.95/additional domain. I just bought mine direct from Comodo and with verification and everything it literally took me 10 minutes from start to finish - that's including updating my stub file and restarting my server!
It cost me less than $50 and it comes with a .ca-bundle file that is already all setup and ready to rock! If your domain is Zentyal.org and your server name is mx then you'd want to use the following set of domains:
Common Name: Zentyal.org
Domain 1: mx.zentyal.org
Domain 2: autodiscover.zentyal.org
To make things run even better you can add up to 300 domains so throw in a couple of potential future domain names:
Domain 3: blog.zentyal.org
Domain 4: shop.zentyal.org
OR if you're trying to corner the market on a specific domain you could add:
Zentyal.net
Zentyal.com
Zentyal.online
and so on and so on. You can add up to the limit for additional domains whether they're subdomains or something completely different like covering Zentyal.org, Microsoft.com, google.com, netzero.net and you get the point now. Depending on where you buy your UCC/SAN cert there's a cost for additional domains, some give you the first 3 free, some give you 1 free, some charge $35.00/additional domain and some charge $5.95/additional domain. I just bought mine direct from Comodo and with verification and everything it literally took me 10 minutes from start to finish - that's including updating my stub file and restarting my server!
79
Installation and Upgrades / Re: Cannot enable openchange account for users outside the default user container
« on: September 16, 2015, 06:49:19 pm »
This solution will not survive an upgrade from 4.1-4.2, it may not survive 4.1-4.1.4 either, but there is a solution! Go check out the Appendix B of the Zentyal Wiki:
https://wiki.zentyal.org/wiki/En/4.1/Appendix_B:_Development_and_advanced_configuration
Sorry it's not an actual link but I'm blind and I can never find that stupid insert hyperlink button anymore. It's actually a super cool setup that makes this much easier, you use Zentyal Stub Files to make the changes, which ironically have pretty much the same name. The secret is creating a directory /etc/zentyals/stubs - if and when you upgrade and there is a conflict with your custom stub file you just compare files between the default and your custom one, make appropriate changes and restart whatever service/module you just changed. It's actually pretty easy and survives - until Zentyals stops using stub files I guess LoL.
https://wiki.zentyal.org/wiki/En/4.1/Appendix_B:_Development_and_advanced_configuration
Sorry it's not an actual link but I'm blind and I can never find that stupid insert hyperlink button anymore. It's actually a super cool setup that makes this much easier, you use Zentyal Stub Files to make the changes, which ironically have pretty much the same name. The secret is creating a directory /etc/zentyals/stubs - if and when you upgrade and there is a conflict with your custom stub file you just compare files between the default and your custom one, make appropriate changes and restart whatever service/module you just changed. It's actually pretty easy and survives - until Zentyals stops using stub files I guess LoL.
80
Installation and Upgrades / Re: Domain Admin can't reset Userpassword
« on: September 16, 2015, 06:41:34 pm »
I thought that was fixed in v4.1 - I kind of remember something about that but being honest I've read soooooooooo much trying to figure it all out LoL. I had completely forgotten about that but I think (maybe ask my buddy Google cuz he knows EVERYTHING) installing winnbind fixes that. I'll see if I ever made any notes about that and if I find anything I'll post it back in this thread.
In the meantime, thanks for the post and info, it's always nice to have more resources to look back on going forward! Great job getting it solved!!!
In the meantime, thanks for the post and info, it's always nice to have more resources to look back on going forward! Great job getting it solved!!!
81
Installation and Upgrades / Re: managing without the web interface
« on: September 16, 2015, 06:37:32 pm »
Thanks for the reply, I thought I was way off base on it LoL!
82
Installation and Upgrades / Re: Problem with outlook openchange configuration
« on: September 16, 2015, 06:35:12 pm »
Apologies for the lack of alink but I'm blind and can n never find that stupid insert link button anymore, but go here:
https://testconnectivity.microsoft.com/
Run these tests and you'll find your problem.
One other thing, have you installed your Zentyal CA cert on the machine inn question? Iactually remembered this one lst night. Go into your Zentyal GUI, goo to Mail>OpenChaange and download your CA cert. Double click it and hit the Install button BUT you have to manually choose the destination and put it in the Trusted Root CA store. If you don't do that it will never, ever connect. You can also just buy a legit 3rd party SSL certificate and install it using a stub file - super easy and then there's no need to deploy your self signed SSL.
I wrote a howto on it in this forum somewhere, if I have a chance I'll drop a link in this thread for you later.
Final question, are you on a static IP or are you using a DDNS service? If you're on DDNS I have a few tips for that world too.
Good luck, hope this helps you out!
https://testconnectivity.microsoft.com/
Run these tests and you'll find your problem.
One other thing, have you installed your Zentyal CA cert on the machine inn question? Iactually remembered this one lst night. Go into your Zentyal GUI, goo to Mail>OpenChaange and download your CA cert. Double click it and hit the Install button BUT you have to manually choose the destination and put it in the Trusted Root CA store. If you don't do that it will never, ever connect. You can also just buy a legit 3rd party SSL certificate and install it using a stub file - super easy and then there's no need to deploy your self signed SSL.
I wrote a howto on it in this forum somewhere, if I have a chance I'll drop a link in this thread for you later.
Final question, are you on a static IP or are you using a DDNS service? If you're on DDNS I have a few tips for that world too.
Good luck, hope this helps you out!
83
Installation and Upgrades / Re: managing without the web interface
« on: September 16, 2015, 06:25:19 pm »
Well I'm not arguing at all but my understanding was that though the original stub file may change from 4.1-4.2 the reason it's setup to use a diferent directory is so that you can do a file comparison to quickly find the difference and modify it.
In theory you'd be able to survive a 4.1-4.2 upgrade with minimal down time, if you're running 100 Zentyal servers and they're all upgraded from 4.1-4.2 or 3.2-5.9 or whatever the case, finding the change in 1 stub file should be the same for all servers. Then it's simply a matter of deploying the appropriate change(s).
Anyways I'm stupid new to this, I'm just trying to figure it out still. It's really starting to feel truly like a replacement for SBS where you read the Wiki and it says "you always do this one thing this one way" and then when you go to do the one thingthe one way you have to Google to find the other 30 ways to do it and try until you find the right one LoL.
Thanks for the insight on stubs though, looks like I need to do some more research - again!
In theory you'd be able to survive a 4.1-4.2 upgrade with minimal down time, if you're running 100 Zentyal servers and they're all upgraded from 4.1-4.2 or 3.2-5.9 or whatever the case, finding the change in 1 stub file should be the same for all servers. Then it's simply a matter of deploying the appropriate change(s).
Anyways I'm stupid new to this, I'm just trying to figure it out still. It's really starting to feel truly like a replacement for SBS where you read the Wiki and it says "you always do this one thing this one way" and then when you go to do the one thingthe one way you have to Google to find the other 30 ways to do it and try until you find the right one LoL.
Thanks for the insight on stubs though, looks like I need to do some more research - again!
84
Installation and Upgrades / Re: missing argument: ifaceAddr
« on: September 14, 2015, 10:42:42 pm »
So 3 internal networks
Static IP for wireless devices
Some stuff goes on more than one network
That's a lot of not making sense. First of all are you meaning you want to give people's iPad and iPhone a static IP or the wireless access point that they would connect up to? Either way it really kind of doesn't matter - you would be better off creating IP reservations inside your DHCP server, just get the MAC off of whatever device, set it with the reservation IP in Zentyal DHCP and boom, it's done. That will work with any wireless client of any kind and not cause any headache.
As for something being on multiple networks it's only going to work with multiple connections and it's not likely going to yield the results you're looking for. You can usually only resolve one IP scheme at a time anyways so you'd end up enabling one NIC and disabling the other, really not an efficient option.
The big question is why do you have 3 internal networks? That kind of goes against the whole point of Active Directory and Samba and such. I really don't understand why people still preach about having separate networks like that these days when it's really not a best practice - ever.
I would suggest doing some reading on how to use the A.D. side of things to give certain user groups access to certain things but not other user groups.
If it's just a case of trying to host multiple domains then you don't have to create anything, just use DNS and virtual hosts.
Maybe if you can give a broader picture of what you have and why you're doing 3 internal networks and what your goal is I can give you some more help.
Static IP for wireless devices
Some stuff goes on more than one network
That's a lot of not making sense. First of all are you meaning you want to give people's iPad and iPhone a static IP or the wireless access point that they would connect up to? Either way it really kind of doesn't matter - you would be better off creating IP reservations inside your DHCP server, just get the MAC off of whatever device, set it with the reservation IP in Zentyal DHCP and boom, it's done. That will work with any wireless client of any kind and not cause any headache.
As for something being on multiple networks it's only going to work with multiple connections and it's not likely going to yield the results you're looking for. You can usually only resolve one IP scheme at a time anyways so you'd end up enabling one NIC and disabling the other, really not an efficient option.
The big question is why do you have 3 internal networks? That kind of goes against the whole point of Active Directory and Samba and such. I really don't understand why people still preach about having separate networks like that these days when it's really not a best practice - ever.
I would suggest doing some reading on how to use the A.D. side of things to give certain user groups access to certain things but not other user groups.
If it's just a case of trying to host multiple domains then you don't have to create anything, just use DNS and virtual hosts.
Maybe if you can give a broader picture of what you have and why you're doing 3 internal networks and what your goal is I can give you some more help.
85
Installation and Upgrades / Re: managing without the web interface
« on: September 14, 2015, 10:29:38 pm »
Stub files are created by Zentyal and that's how it finds it's configuration, not through the normal channels on a regular Ubuntu server.
More fun facts, you can't directly change the stub file because it will eventually get overwritten on update. So here's the quick and dirty on how you could probably get this done without digging around an entire API....
Modifying the configuration files directly is incorrect, because these files will be overwritten each time the templates are processed (saving changes, for example). Zentyal's own Original stub templates can be found in /usr/share/zentyal/stubs, and their names are the original configuration file, plus the .mas extension
Copy whatever stubs you need to /etc/Zentyal/stubs/<directory name>/<stubfilename>.mas
I did it with OpenChange to install a 3rd party SSL certificate and it works like a champ. In theory you could just copy everything from the original directory into the /etc/Zentyal/stubs directory and just go crazy with them. You'll have to reboot the server a few times on some of them, sometimes it's just restarting the service and sometimes it just goes horribly wrong somehow LoL.
Anyways I think for the most part the scripting wouldn't be too hard to make a new stub file for what you're wanting to do.
The Wiki has a pretty good read on it here:
https://wiki.zentyal.org/wiki/En/4.1/Appendix_B:_Development_and_advanced_configuration
Hope this helps!
More fun facts, you can't directly change the stub file because it will eventually get overwritten on update. So here's the quick and dirty on how you could probably get this done without digging around an entire API....
Modifying the configuration files directly is incorrect, because these files will be overwritten each time the templates are processed (saving changes, for example). Zentyal's own Original stub templates can be found in /usr/share/zentyal/stubs, and their names are the original configuration file, plus the .mas extension
Copy whatever stubs you need to /etc/Zentyal/stubs/<directory name>/<stubfilename>.mas
I did it with OpenChange to install a 3rd party SSL certificate and it works like a champ. In theory you could just copy everything from the original directory into the /etc/Zentyal/stubs directory and just go crazy with them. You'll have to reboot the server a few times on some of them, sometimes it's just restarting the service and sometimes it just goes horribly wrong somehow LoL.
Anyways I think for the most part the scripting wouldn't be too hard to make a new stub file for what you're wanting to do.
The Wiki has a pretty good read on it here:
https://wiki.zentyal.org/wiki/En/4.1/Appendix_B:_Development_and_advanced_configuration
Hope this helps!
86
Installation and Upgrades / Re: Domain Admin can't reset Userpassword
« on: September 14, 2015, 10:13:44 pm »
Not sure exactly what's going on BUT I'd venture a guess that there's something going on with your domain accounts vs. your local accounts.
I had run into a kind of similar situation and just added the Domain Admin account to the sudoers group in the terminal.
As a sudo user in terminal try the following code:
sudo usermod -a -G sudo <username goes here>
Honestly I have no clue if that's the "right" way to do it, but it worked like a champ for me!
I had run into a kind of similar situation and just added the Domain Admin account to the sudoers group in the terminal.
As a sudo user in terminal try the following code:
sudo usermod -a -G sudo <username goes here>
Honestly I have no clue if that's the "right" way to do it, but it worked like a champ for me!
87
Installation and Upgrades / Outlook 2013 and Zentyal 4.1 Calendar
« on: September 14, 2015, 09:59:26 pm »
So I've got a test box up and running - works pretty darn good! I've got 99% of the wrinkles ironed out and I've even got a small test group using it to see if it works for our production environment.
One thing I've noticed is that when I use autodiscover to connect it just sets the account up like an IMAP/SMTP account, not like an Exchange server. For example if I connect to it using the computer I'm sitting at right now and I go into my Outlook 2013 > Calendar under the "My Calendars" it only has the option for "This Computer Only".
My guess is it's something in the wild world of OpenChange but there's honestly nowhere near enough documentation there yet so I'm pretty lost.
I don't know if anyone has had a similar issue and fixed it or if anyone has any advice on where to look, but I really hope so!!!
One thing I've noticed is that when I use autodiscover to connect it just sets the account up like an IMAP/SMTP account, not like an Exchange server. For example if I connect to it using the computer I'm sitting at right now and I go into my Outlook 2013 > Calendar under the "My Calendars" it only has the option for "This Computer Only".
My guess is it's something in the wild world of OpenChange but there's honestly nowhere near enough documentation there yet so I'm pretty lost.
I don't know if anyone has had a similar issue and fixed it or if anyone has any advice on where to look, but I really hope so!!!
88
Installation and Upgrades / Re: Zentyal 4.1 setup - no external active directory option
« on: September 14, 2015, 09:50:29 pm »
Did you get this figured out yet? I haven't done it yet but there's an article about importing existing AD into Zentyal and I round a couple of threads where people used stub files to change the openchange relation to certain user groups and such.
I was supposed to move a SBS 2008 with Exchange 2007 over recently but a few crisis jobs came up - so I'm still in the dark about that part LoL.
I was supposed to move a SBS 2008 with Exchange 2007 over recently but a few crisis jobs came up - so I'm still in the dark about that part LoL.
89
Installation and Upgrades / Re: IP Forwarding
« on: September 14, 2015, 09:23:22 pm »
Did you ever get that setup working?
90
Installation and Upgrades / Re: Problem with outlook openchange configuration
« on: September 14, 2015, 09:20:46 pm »
Well this answer is a long time overdue, but I stumbled on this thread looking for something else. The problem you guys seem to be running into is that there are a few different kinds of authentication going on and each one requires a different username.
On one part your email address and password are the correct credentials, on a different side just your username and password will work. So if your email address is:
John.Doe@zentyal.org
Your username would be:
John.Doe
The password is whatever password you made for that user. When you're doing the autodiscover bit you just put in the username and password then check the Remember My Password box and it's going to work just fine.
On occasion that won't work either though - then you have to figure out a couple of other bits to the puzzle. On the initial setup you make your local domain and your email domain - i.e. Zentyal.laan (local) Zentyal.org (tld) so depending on setup and such the email account John.Doe@zentyal.org may need to put one of the two following usernames:
John.Doe@zentyal.lan
Zentyal/John.Doe
This is more often an Exchange server issue but it's worked for me on my Zentyal box trying things out.
Here's a super cool trick to figuring out exactly what you need to put in the username and password fields though - open up a web browser and go to the following page:
http://<your-domain>.com/autodiscover/autodiscover.xml
Obviously replace the parts that are generic to point it at your domain. Ther may be a certificate error - it's your domain though so it's cool, but you should get hit with a login box. Whatever works in that page will work in the autodiscover.
When you do successfully login to that page you WILL see an error - that's fine it actually means your autodiscover service is working properly. The error is a result of the service asking Outlook for an answer and since you're going in via a web browser there's no response. So the error is no biggie, that took me a million years of research to figure out LoL.
Hope this helps someone!!!
On one part your email address and password are the correct credentials, on a different side just your username and password will work. So if your email address is:
John.Doe@zentyal.org
Your username would be:
John.Doe
The password is whatever password you made for that user. When you're doing the autodiscover bit you just put in the username and password then check the Remember My Password box and it's going to work just fine.
On occasion that won't work either though - then you have to figure out a couple of other bits to the puzzle. On the initial setup you make your local domain and your email domain - i.e. Zentyal.laan (local) Zentyal.org (tld) so depending on setup and such the email account John.Doe@zentyal.org may need to put one of the two following usernames:
John.Doe@zentyal.lan
Zentyal/John.Doe
This is more often an Exchange server issue but it's worked for me on my Zentyal box trying things out.
Here's a super cool trick to figuring out exactly what you need to put in the username and password fields though - open up a web browser and go to the following page:
http://<your-domain>.com/autodiscover/autodiscover.xml
Obviously replace the parts that are generic to point it at your domain. Ther may be a certificate error - it's your domain though so it's cool, but you should get hit with a login box. Whatever works in that page will work in the autodiscover.
When you do successfully login to that page you WILL see an error - that's fine it actually means your autodiscover service is working properly. The error is a result of the service asking Outlook for an answer and since you're going in via a web browser there's no response. So the error is no biggie, that took me a million years of research to figure out LoL.
Hope this helps someone!!!