Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
Installation and Upgrades / Errors Ad Sync
« on: June 30, 2010, 03:20:36 pm »
Hi,
After set the Ebox Ad Sync, all users and groups were synchronizeds. If I change password, make groups and users the ebox update success, without problems. But, if I remove a user of the Ad group, the Ebox doesn't update the Group removing the user. Now, if I add a new user on same group, the Ebox adds the new user, but doesn't remove the other user.
Other problem is this error:
2010/06/30 10:00:04 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for eboxadsync.
Thanks
Clicério Neto
After set the Ebox Ad Sync, all users and groups were synchronizeds. If I change password, make groups and users the ebox update success, without problems. But, if I remove a user of the Ad group, the Ebox doesn't update the Group removing the user. Now, if I add a new user on same group, the Ebox adds the new user, but doesn't remove the other user.
Other problem is this error:
2010/06/30 10:00:04 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for eboxadsync.
Thanks
Clicério Neto
2
Installation and Upgrades / Ad Sync Error - user name does not exist
« on: March 25, 2010, 10:17:35 pm »
Windows 2003 Enterprise Edition SP2 x86 - PT-BR
Ebox - 1.4.3
I'm trying to synchronize the Ebox with the Active Directory, but is showing these errors in the log:
I did all of the documentation procedure, but the error continues. What could be?
Ebox - 1.4.3
I'm trying to synchronize the Ebox with the Active Directory, but is showing these errors in the log:
Code: [Select]
2010/03/25 15:18:23 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:18:23 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:18:23 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:18:53 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:19:23 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:19:53 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
I did all of the documentation procedure, but the error continues. What could be?
3
Installation and Upgrades / Re: Ebox 1.4 - Bug HTTP Proxy (default policy: Authrorize and deny)
« on: March 07, 2010, 10:37:38 pm »
Hi,
This I knew. I wanted to block all logins and allow only those who are configured in group policy (Ebox).
Since it is not possible in this way, I have to create a group in Active Directory and add users, who I do not want authenticate them in the proxy (for e.g. group GroupUsersDeny). Then, I will create a group policy in the Ebox using the group "GroupUsersDeny"
It takes more work, but it works.
Thanks
This I knew. I wanted to block all logins and allow only those who are configured in group policy (Ebox).
Since it is not possible in this way, I have to create a group in Active Directory and add users, who I do not want authenticate them in the proxy (for e.g. group GroupUsersDeny). Then, I will create a group policy in the Ebox using the group "GroupUsersDeny"
Code: [Select]
Group (GroupUsersDeny) Policy (Deny) Time Period (All Time) Filter Profile (default)It takes more work, but it works.
Thanks
4
Installation and Upgrades / Ebox 1.4 - Bug HTTP Proxy (default policy: Authrorize and deny)
« on: March 06, 2010, 01:08:09 am »
Hi,
I set the Ebox synchronized with AD and set the HTTP proxy authentication mode.
I set the default policy on "Authorize and Deny" for the proxy to block all logins access. Only be authenticated on the proxy, users who are in the group configured in group policy (HTTP Proxy> Group's Policy), right?!
The filter profile "default" I block the domain "youtube.com" (always deny).
After the Group Policy, I set up a policy:
Group (IT) Policy (Allow) Time Period (All Time) Filter Profile (default)
Theoretically, it was to filter the profile "default" is blocking the site "youtube.com" but not blocking, why?!
I set the Ebox synchronized with AD and set the HTTP proxy authentication mode.
I set the default policy on "Authorize and Deny" for the proxy to block all logins access. Only be authenticated on the proxy, users who are in the group configured in group policy (HTTP Proxy> Group's Policy), right?!
The filter profile "default" I block the domain "youtube.com" (always deny).
After the Group Policy, I set up a policy:
Group (IT) Policy (Allow) Time Period (All Time) Filter Profile (default)
Theoretically, it was to filter the profile "default" is blocking the site "youtube.com" but not blocking, why?!
5
Installation and Upgrades / Re: Ebox 1.4 - Web Url Filter - HTTPS
« on: March 05, 2010, 07:24:25 am »
Other tools can filter HTTPS (FortiGate, CensorNet ..). Why Ebox can not get too?! It is a security hole the proxy does not filter HTTPS. Will not help the HTTP Proxy if a User can bypass the proxy accessing sites such as:
https://vtunnel.com
https://proxy.org
https://vtunnel.com
https://proxy.org
6
Installation and Upgrades / EBOX 1.4 - AD SYNC WORKING !
« on: March 05, 2010, 07:02:24 am »
Hi, After several test I found the problem. At least here resolved.
Server used:
-Ebox-1.4.3
-Win 2003 Server R2 Enterprise Editon SP2
* Step by step:
1) Allow access to port 6677 Server Active Directory to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)
2) Allow access to port (Http Proxy - example: 8080, 3128) to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)
3) Update script "ebox-ad-sync." You can download the fixed file from:
http://trac.ebox-platform.com/export/16907/trunk/client/usersandgroups/tools/ebox-ad-sync
And copy it to /usr/share/ebox-usersandgroups/
4) Fix MAXGROUPLENGTH
Edit /usr/share/perl5/EBox/UsersAndGroups.pm and set MAXGROUPLENGTH to be 40
************************************************** *********
Following the procedure of the site:
http://trac.ebox-platform.com/wiki/Document/Documentation/EBoxActiveDirectorySync
WARNING! It was here that I discovered the problem. I did not mark the option "enable". Uncheck the option "Define this policy setting". With this option unchecked you can reset the password without using special characters (example:! *). Do not know why the Ebox is not recognizing passwords with special characters.
After accessing the shell Ebox:
cd /usr/share/ebox-usersandgroups
./ebox-ad-sync
./ebox-pwdsync-server
Viewing log:
tail -f /var/log/ebox/ebox.log
Result:
2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = biodiesel
2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:72 main:: - [ad-pwdsync] password updated successfully
Server used:
-Ebox-1.4.3
-Win 2003 Server R2 Enterprise Editon SP2
* Step by step:
1) Allow access to port 6677 Server Active Directory to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)
2) Allow access to port (Http Proxy - example: 8080, 3128) to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)
3) Update script "ebox-ad-sync." You can download the fixed file from:
http://trac.ebox-platform.com/export/16907/trunk/client/usersandgroups/tools/ebox-ad-sync
And copy it to /usr/share/ebox-usersandgroups/
4) Fix MAXGROUPLENGTH
Edit /usr/share/perl5/EBox/UsersAndGroups.pm and set MAXGROUPLENGTH to be 40
************************************************** *********
Following the procedure of the site:
http://trac.ebox-platform.com/wiki/Document/Documentation/EBoxActiveDirectorySync
WARNING! It was here that I discovered the problem. I did not mark the option "enable". Uncheck the option "Define this policy setting". With this option unchecked you can reset the password without using special characters (example:! *). Do not know why the Ebox is not recognizing passwords with special characters.
After accessing the shell Ebox:
cd /usr/share/ebox-usersandgroups
./ebox-ad-sync
./ebox-pwdsync-server
Viewing log:
tail -f /var/log/ebox/ebox.log
Result:
2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = biodiesel
2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:72 main:: - [ad-pwdsync] password updated successfully
7
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: March 03, 2010, 07:11:40 pm »
Hi,
The following error messages:
The ebox has some limitation as to disabled users in AD? I noticed that these users, who are in error, users are disabled.
The following error messages:
Code: [Select]
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:82 main:: - [ad-sync] Adding new group Usuários do depurador
2010/03/03 14:55:24 DEBUG> UsersAndGroups.pm:1377 EBox::UsersAndGroups::addGroup - Invalid value for group name: Usuários do depurador.
2010/03/03 14:55:24 WARN> ebox-ad-sync:86 main::__ANON__ - [ad-sync] Error adding group 'Usuários do depurador'.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:82 main:: - [ad-sync] Adding new group Windows Authorization Access Group
2010/03/03 14:55:24 DEBUG> UsersAndGroups.pm:1365 EBox::UsersAndGroups::addGroup - Groupname must not be longer than 32 characters
2010/03/03 14:55:24 WARN> ebox-ad-sync:86 main::__ANON__ - [ad-sync] Error adding group 'Windows Authorization Access Group'.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-9,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:82 main:: - [ad-sync] Adding new group Pre-Windows 2000 Compatible Access
2010/03/03 14:55:24 DEBUG> UsersAndGroups.pm:1365 EBox::UsersAndGroups::addGroup - Groupname must not be longer than 32 characters
2010/03/03 14:55:24 WARN> ebox-ad-sync:86 main::__ANON__ - [ad-sync] Error adding group 'Pre-Windows 2000 Compatible Access'.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-7,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-1-0,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:82 main:: - [ad-sync] Adding new group P&D
2010/03/03 14:55:24 DEBUG> UsersAndGroups.pm:1377 EBox::UsersAndGroups::addGroup - Invalid value for group name: P&D.
2010/03/03 14:55:24 WARN> ebox-ad-sync:86 main::__ANON__ - [ad-sync] Error adding group 'P&D'.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:94 main::__ANON__ - [ad-sync] Adding user paulo.castro to new group P&D
2010/03/03 14:55:24 DEBUG> UsersAndGroups.pm:1726 EBox::UsersAndGroups::addUserToGroup - group name P&D does not exist.
2010/03/03 14:55:24 WARN> ebox-ad-sync:97 main::__ANON__ - [ad-sync] can't add user to group P&D.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for alex.lima.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for jose.neto.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for junior.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for joaoitalo.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for keully.aquino.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-20,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
The ebox has some limitation as to disabled users in AD? I noticed that these users, who are in error, users are disabled.
Code: [Select]
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for diego.tavares.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for ricardo.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for jorge.barreto.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for delfran.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for diego.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for danielsousa.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-20,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=Domain Admins,CN=Users,DC=brasilecodiesel.
2010/03/03 14:55:24 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=Enterprise Admins,CN=Users,DC=brasilecodiesel.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=Domain Users,CN=Users,DC=brasilecodiesel.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-11,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=brasilecodiesel.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for robertofc.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for ulda.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for junior.
2010/03/03 14:55:25 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=Domain Guests,CN=Users,DC=brasilecodiesel.
Code: [Select]
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for robertofc.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for ulda.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for junior.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for CN=Domain Guests,CN=Users,DC=brasilecodiesel.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for junior.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for ana.cristina.
2010/03/03 15:00:26 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for felipe.gaspar.
2010/03/03 15:00:31 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.8
2010/03/03 15:00:31 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/03 15:00:31 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: NVdHn6KB3IdrzgmJlyFG9G6McZK1ZJs7FR+kphY+r3M=
2010/03/03 15:00:31 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = ©¼w´F+Ó9¶ã}
2010/03/03 15:00:31 DEBUG> UsersAndGroups.pm:979 EBox::UsersAndGroups::modifyUserLocal - user name ©¼w´F+Ó9¶ã} does not exist.
2010/03/03 15:00:31 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/03 15:01:01 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.8
2010/03/03 15:01:01 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/03 15:01:01 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: NVdHn6KB3IdrzgmJlyFG9G6McZK1ZJs7FR+kphY+r3M=
2010/03/03 15:01:01 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = ©¼w´F+Ó9¶ã}
2010/03/03 15:01:01 DEBUG> UsersAndGroups.pm:979 EBox::UsersAndGroups::modifyUserLocal - user name ©¼w´F+Ó9¶ã} does not exist.
2010/03/03 15:01:01 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
8
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: March 03, 2010, 01:54:53 pm »
Replication worked. However, even resetting the password is not authenticating. Appears the pop-pup asking for User and password, but failed.
Follow the steps I did:
-Reinstalled the Ebox;
-I upgraded to new version (1.4.3);
-Replace the file "ebox-ad-sync" (http://trac.ebox-platform.com/export/16907/trunk/client/usersandgroups/tools/ebox-ad-sync)
-I did the procedure for replication (http://trac.ebox-platform.com/wiki/Document/Documentation/EBoxActiveDirectorySync)
-At the time of replication has an error again. I made the following procedure:
modify this file /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb/olcOverlay={0}syncprov.ldif
add the follow line
olcSizeLimit: 50000
restart slapd
All User and groups synchronized.
But............
*******************************************************
To test, I created a new User:
user: test
pass: test
add group: TI
The new User has synchronized the list of users and group (TI). Reset the password for: 123456
I created a Group Policy (Http Proxy - athourize and filter):
Group: IT Policy: allow Time Period: All Time Filter Profile: default
But it did not work. How can I solve this problem?
Follow the steps I did:
-Reinstalled the Ebox;
-I upgraded to new version (1.4.3);
-Replace the file "ebox-ad-sync" (http://trac.ebox-platform.com/export/16907/trunk/client/usersandgroups/tools/ebox-ad-sync)
-I did the procedure for replication (http://trac.ebox-platform.com/wiki/Document/Documentation/EBoxActiveDirectorySync)
-At the time of replication has an error again. I made the following procedure:
modify this file /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb/olcOverlay={0}syncprov.ldif
add the follow line
olcSizeLimit: 50000
restart slapd
All User and groups synchronized.
But............*******************************************************
To test, I created a new User:
user: test
pass: test
add group: TI
The new User has synchronized the list of users and group (TI). Reset the password for: 123456
I created a Group Policy (Http Proxy - athourize and filter):
Group: IT Policy: allow Time Period: All Time Filter Profile: default
But it did not work. How can I solve this problem?
9
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: March 02, 2010, 02:22:13 pm »
Hi,
This procedure solved the problem, but only 3 groups were synchronized. I have several groups ...
Does anyone have any idea how to solve this?
Thanks,
Clicério Neto
This procedure solved the problem, but only 3 groups were synchronized. I have several groups ...
Does anyone have any idea how to solve this?
Thanks,
Clicério Neto
10
Installation and Upgrades / Re: Ebox 1.4 - Web Url Filter - HTTPS
« on: March 02, 2010, 02:16:23 pm »
Hi,
Someone managed to filter HTTPS url using authenticated proxy?
thanks,
Clicério Neto
Someone managed to filter HTTPS url using authenticated proxy?
thanks,
Clicério Neto
11
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: February 11, 2010, 03:49:47 pm »
No password policy is set:
Enforce password history - not defined
Maximum password age - not defined
Minimum password age - not defined
Minimum password length - not defined
As a suggestion, the personal development of ebox could analyze how the process works authentication with Windows AD, the tool CensorNet 3.3r6, Endian or SmoothWall. I had no problem with these tools to sync with AD.
The Ebox is an excellent tool and easy to administer. However, the use of synchronization with Active Directory left to be desired. Still needs improvement.
Enforce password history - not defined
Maximum password age - not defined
Minimum password age - not defined
Minimum password length - not defined
As a suggestion, the personal development of ebox could analyze how the process works authentication with Windows AD, the tool CensorNet 3.3r6, Endian or SmoothWall. I had no problem with these tools to sync with AD.
The Ebox is an excellent tool and easy to administer. However, the use of synchronization with Active Directory left to be desired. Still needs improvement.
12
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: February 11, 2010, 03:33:21 pm »
Earlier, the ebox was synchronizing with no errors. After 40 users got errors.
13
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: February 11, 2010, 03:28:19 pm »
Ebox Slave
14
Installation and Upgrades / Re: Ad Sync Error - Sizelimit Exceeded
« on: February 11, 2010, 03:25:35 pm »
Ebox 1.4.1 - Mode Slave - Windows Ad Sync
Active Directory - Windows 2003 Server Standard Edition SP2
My ad has multiple users and groups organized in several OUs:
Users (active and disabled) - 554
All Groups - 69
OU's - 69
Active Directory - Windows 2003 Server Standard Edition SP2
My ad has multiple users and groups organized in several OUs:
Users (active and disabled) - 554
All Groups - 69
OU's - 69
15
Installation and Upgrades / Ad Sync Error - Sizelimit Exceeded
« on: February 11, 2010, 02:56:48 pm »
Hi,
Following is the error in the synchronization process AD
Following is the error in the synchronization process AD
Code: [Select]
\n$VAR1 = bless( {
'-stacktrace' => 'Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded at /usr/share/perl5/EBox/Ldap.pm line 712
EBox::Ldap::_errorOnLdap(\'Net::LDAP::Search=HASH(0xb9139ec)\', \'HASH(0xb87467c)\') called at /usr/share/perl5/EBox/Ldap.pm line 351
EBox::Ldap::search(\'EBox::Ldap=HASH(0xa1e17b8)\', \'HASH(0xb87467c)\') called at /usr/share/perl5/EBox/UsersAndGroups.pm line 1155
EBox::UsersAndGroups::uidList(\'EBox::UsersAndGroups=HASH(0x9b956fc)\') called at /usr/share/perl5/EBox/UsersAndGroups/Model/Users.pm line 161
EBox::UsersAndGroups::Model::Users::ids(\'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\') called at /usr/share/perl5/EBox/UsersAndGroups/Model/Users.pm line 109
EBox::UsersAndGroups::Model::Users::precondition(\'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\') called at /usr/share/ebox/templates/ajax/modelViewer.mas line 67
HTML::Mason::Commands::__ANON__(\'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135
HTML::Mason::Component::run(\'HTML::Mason::Component::Subcomponent=HASH(0x97dd424)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/perl5/HTML/Mason/Request.pm line 1262
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1252
HTML::Mason::Request::comp(\'undef\', \'undef\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/ebox/templates/ajax/modelViewer.mas line 28
HTML::Mason::Commands::__ANON__(\'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\', \'tpages\', ...) called at /usr/share/perl5/HTML/Mason/Component.pm line 135
HTML::Mason::Component::run(\'HTML::Mason::Component::FileBased=HASH(0x97dd5ec)\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\', ...) called at /usr/share/perl5/HTML/Mason/Request.pm line 1262
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1252
HTML::Mason::Request::comp(\'undef\', \'undef\', \'undef\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', ...) called at /usr/share/perl5/HTML/Mason/Request.pm line 468
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 468
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 418
HTML::Mason::Request::exec(\'HTML::Mason::Request=HASH(0xb860df4)\') called at /usr/share/perl5/HTML/Mason/Interp.pm line 342
HTML::Mason::Interp::exec(\'undef\', \'undef\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', ...) called at /usr/share/perl5/EBox/CGI/Base.pm line 141
EBox::CGI::Base::_body(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 180
EBox::CGI::Base::_print(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 336
EBox::CGI::Base::run(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Run.pm line 120
EBox::CGI::Run::run(\'EBox::CGI::Run\', \'/Users/View/Users\', \'EBox\') called at /usr/share/ebox/cgi/ebox.cgi line 19
ModPerl::ROOT::ModPerl::Registry::usr_share_ebox_cgi_ebox_2ecgi::handler(\'Apache2::RequestRec=SCALAR(0xb744484)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
ModPerl::RegistryCooker::run(\'ModPerl::Registry=HASH(0x85dd874)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170
ModPerl::RegistryCooker::default_handler(\'ModPerl::Registry=HASH(0x85dd874)\') called at /usr/lib/perl5/ModPerl/Registry.pm line 31
ModPerl::Registry::handler(\'ModPerl::Registry\', \'Apache2::RequestRec=SCALAR(0xb744484)\') called at -e line 0
eval {...} called at -e line 0
',
'-file' => '/usr/share/perl5/EBox/Ldap.pm',
'-text' => 'Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded',
'-line' => 712,
'-package' => 'EBox::Ldap',
'silent' => 0
}, 'EBox::Exceptions::Internal' );
Code: [Select]
2010/02/11 10:55:05 ERROR> Ldap.pm:710 EBox::Ldap::_errorOnLdap - $VAR1 = {
'base' => 'ou=Users,dc=brasilecodiesel',
'attrs' => [
'uid',
'cn',
'givenName',
'sn',
'homeDirectory',
'userPassword',
'uidNumber',
'gidNumber',
'description'
],
'filter' => 'objectclass=*',
'scope' => 'one'
};
2010/02/11 10:55:05 ERROR> Ldap.pm:712 EBox::Ldap::_errorOnLdap - Unknown error at EBox::UsersAndGroups::users Sizelimit exceeded
2010/02/11 10:57:23 ERROR> Ldap.pm:710 EBox::Ldap::_errorOnLdap - $VAR1 = {
'base' => 'ou=Users,dc=brasilecodiesel',
'attrs' => [
'uid',
'uidNumber'
],
'filter' => 'objectclass=*',
'scope' => 'one'
};
2010/02/11 10:57:23 ERROR> Ldap.pm:712 EBox::Ldap::_errorOnLdap - Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded