Topics

1

Installation and Upgrades / Errors Ad Sync

« on: June 30, 2010, 03:20:36 pm »

Hi,

After set the Ebox Ad Sync, all users and groups were synchronizeds. If I change password, make groups and users the ebox update success, without problems. But, if I remove a user of the Ad group, the Ebox doesn't update the Group removing the user. Now, if I add a new user on same group, the Ebox adds the new user, but doesn't remove the other user.

Other problem is this error:

2010/06/30 10:00:04 DEBUG> ebox-ad-sync:303 main::getPrincipalName - [ad-sync] can't get userPrincipalName for eboxadsync.

Thanks
Clicério Neto

2

Installation and Upgrades / Ad Sync Error - user name does not exist

« on: March 25, 2010, 10:17:35 pm »

Windows 2003 Enterprise Edition SP2 x86 - PT-BR
Ebox - 1.4.3

I'm trying to synchronize the Ebox with the Active Directory, but is showing these errors in the log:

Code: [Select]

2010/03/25 15:18:23 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:18:23 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:18:23 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:18:53 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:18:53 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:19:23 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:19:23 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:63 main:: - [ad-pwdsync] connection from 192.168.0.3
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:92 main::handleRequest - [ad-pwdsync] handleRequest() called
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:110 main::handleRequest - [ad-pwdsync] received encoded data: yIbQXemlJQ37dv1lQUPhiddxhR7vCy2mOwaNSLt/19k=
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = j<Öçöz@ºöï
2010/03/25 15:19:53 DEBUG> UsersAndGroups.pm:984 EBox::UsersAndGroups::modifyUserLocal - user name j<Öçöz@ºöï does not exist.
2010/03/25 15:19:53 DEBUG> ebox-pwdsync-server:75 main:: - [ad-pwdsync] error updating password


I did all of the documentation procedure, but the error continues. What could be?

3

Installation and Upgrades / Ebox 1.4 - Bug HTTP Proxy (default policy: Authrorize and deny)

« on: March 06, 2010, 01:08:09 am »

Hi,

I set the Ebox synchronized with AD and set the HTTP proxy authentication mode.

I set the default policy on "Authorize and Deny" for the proxy to block all logins access. Only be authenticated on the proxy, users who are in the group configured in group policy (HTTP Proxy> Group's Policy), right?!

The filter profile "default" I block the domain "youtube.com" (always deny).

After the Group Policy, I set up a policy:

Group (IT) Policy (Allow) Time Period (All Time) Filter Profile (default)

Theoretically, it was to filter the profile "default" is blocking the site "youtube.com" but not blocking, why?!

 

4

Installation and Upgrades / EBOX 1.4 - AD SYNC WORKING !

« on: March 05, 2010, 07:02:24 am »

Hi, After several test I found the problem. At least here resolved.

Server used:
-Ebox-1.4.3
-Win 2003 Server R2 Enterprise Editon SP2

* Step by step:

1) Allow access to port 6677 Server Active Directory to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)

2) Allow access to port (Http Proxy - example: 8080, 3128) to the Ebox (Firewall> Packet Filter> Internal Network to Ebox)

3) Update script "ebox-ad-sync." You can download the fixed file from:

http://trac.ebox-platform.com/export/16907/trunk/client/usersandgroups/tools/ebox-ad-sync

And copy it to /usr/share/ebox-usersandgroups/

4) Fix MAXGROUPLENGTH
 Edit /usr/share/perl5/EBox/UsersAndGroups.pm and set MAXGROUPLENGTH to be 40

************************************************** *********

Following the procedure of the site:
http://trac.ebox-platform.com/wiki/Document/Documentation/EBoxActiveDirectorySync

WARNING! It was here that I discovered the problem. I did not mark the option "enable". Uncheck the option "Define this policy setting". With this option unchecked you can reset the password without using special characters (example:! *). Do not know why the Ebox is not recognizing passwords with special characters.


After accessing the shell Ebox:

cd /usr/share/ebox-usersandgroups
 ./ebox-ad-sync
 ./ebox-pwdsync-server

Viewing log:

tail -f /var/log/ebox/ebox.log

Result:

2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:122 main::handleRequest - [ad-pwdsync] username = biodiesel
2010/03/05 02:10:20 DEBUG> ebox-pwdsync-server:72 main:: - [ad-pwdsync] password updated successfully

5

Installation and Upgrades / Ad Sync Error - Sizelimit Exceeded

« on: February 11, 2010, 02:56:48 pm »

Hi,

Following is the error in the synchronization process AD

Code: [Select]

\n$VAR1 = bless( {
                 '-stacktrace' => 'Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded at /usr/share/perl5/EBox/Ldap.pm line 712
EBox::Ldap::_errorOnLdap(\'Net::LDAP::Search=HASH(0xb9139ec)\', \'HASH(0xb87467c)\') called at /usr/share/perl5/EBox/Ldap.pm line 351
EBox::Ldap::search(\'EBox::Ldap=HASH(0xa1e17b8)\', \'HASH(0xb87467c)\') called at /usr/share/perl5/EBox/UsersAndGroups.pm line 1155
EBox::UsersAndGroups::uidList(\'EBox::UsersAndGroups=HASH(0x9b956fc)\') called at /usr/share/perl5/EBox/UsersAndGroups/Model/Users.pm line 161
EBox::UsersAndGroups::Model::Users::ids(\'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\') called at /usr/share/perl5/EBox/UsersAndGroups/Model/Users.pm line 109
EBox::UsersAndGroups::Model::Users::precondition(\'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\') called at /usr/share/ebox/templates/ajax/modelViewer.mas line 67
HTML::Mason::Commands::__ANON__(\'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135
HTML::Mason::Component::run(\'HTML::Mason::Component::Subcomponent=HASH(0x97dd424)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/perl5/HTML/Mason/Request.pm line 1262
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1252
HTML::Mason::Request::comp(\'undef\', \'undef\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\') called at /usr/share/ebox/templates/ajax/modelViewer.mas line 28
HTML::Mason::Commands::__ANON__(\'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\', \'tpages\', ...) called at /usr/share/perl5/HTML/Mason/Component.pm line 135
HTML::Mason::Component::run(\'HTML::Mason::Component::FileBased=HASH(0x97dd5ec)\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', \'undef\', ...) called at /usr/share/perl5/HTML/Mason/Request.pm line 1262
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1252
HTML::Mason::Request::comp(\'undef\', \'undef\', \'undef\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', ...) called at /usr/share/perl5/HTML/Mason/Request.pm line 468
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 468
eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 418
HTML::Mason::Request::exec(\'HTML::Mason::Request=HASH(0xb860df4)\') called at /usr/share/perl5/HTML/Mason/Interp.pm line 342
HTML::Mason::Interp::exec(\'undef\', \'undef\', \'data\', \'undef\', \'dataTable\', \'HASH(0xb44bab8)\', \'model\', \'EBox::UsersAndGroups::Model::Users=HASH(0xb44b980)\', \'hasChanged\', ...) called at /usr/share/perl5/EBox/CGI/Base.pm line 141
EBox::CGI::Base::_body(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 180
EBox::CGI::Base::_print(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 336
EBox::CGI::Base::run(\'EBox::CGI::View::DataTable=HASH(0xb82e074)\') called at /usr/share/perl5/EBox/CGI/Run.pm line 120
EBox::CGI::Run::run(\'EBox::CGI::Run\', \'/Users/View/Users\', \'EBox\') called at /usr/share/ebox/cgi/ebox.cgi line 19
ModPerl::ROOT::ModPerl::Registry::usr_share_ebox_cgi_ebox_2ecgi::handler(\'Apache2::RequestRec=SCALAR(0xb744484)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
ModPerl::RegistryCooker::run(\'ModPerl::Registry=HASH(0x85dd874)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170
ModPerl::RegistryCooker::default_handler(\'ModPerl::Registry=HASH(0x85dd874)\') called at /usr/lib/perl5/ModPerl/Registry.pm line 31
ModPerl::Registry::handler(\'ModPerl::Registry\', \'Apache2::RequestRec=SCALAR(0xb744484)\') called at -e line 0
eval {...} called at -e line 0
',
                 '-file' => '/usr/share/perl5/EBox/Ldap.pm',
                 '-text' => 'Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded',
                 '-line' => 712,
                 '-package' => 'EBox::Ldap',
                 'silent' => 0
               }, 'EBox::Exceptions::Internal' );


Code: [Select]

2010/02/11 10:55:05 ERROR> Ldap.pm:710 EBox::Ldap::_errorOnLdap - $VAR1 = {
          'base' => 'ou=Users,dc=brasilecodiesel',
          'attrs' => [
                       'uid',
                       'cn',
                       'givenName',
                       'sn',
                       'homeDirectory',
                       'userPassword',
                       'uidNumber',
                       'gidNumber',
                       'description'
                     ],
          'filter' => 'objectclass=*',
          'scope' => 'one'
        };
2010/02/11 10:55:05 ERROR> Ldap.pm:712 EBox::Ldap::_errorOnLdap - Unknown error at EBox::UsersAndGroups::users Sizelimit exceeded
2010/02/11 10:57:23 ERROR> Ldap.pm:710 EBox::Ldap::_errorOnLdap - $VAR1 = {
          'base' => 'ou=Users,dc=brasilecodiesel',
          'attrs' => [
                       'uid',
                       'uidNumber'
                     ],
          'filter' => 'objectclass=*',
          'scope' => 'one'
        };
2010/02/11 10:57:23 ERROR> Ldap.pm:712 EBox::Ldap::_errorOnLdap - Unknown error at EBox::UsersAndGroups::uidList Sizelimit exceeded


6

Installation and Upgrades / Ebox 1.4 - "Bug" Active Directory Sync - Option "Mode" Disappeared.

« on: February 09, 2010, 01:54:31 am »

Hi,

After installing Ebox 1.4, before changing the Ebox Users Mode to "Windows Ad Slave" I activated the module "Users and Groups". When I was in "Users and Groups" option "mode" disappeared. Now, is appearing only options:

          o Users
          o Groups
          o Default User Template
          o LDAP Info
          o Slave Status

How do I show again the "Mode" to change to "Windows AD Slave"?

Thanks,
Clicério Neto
   

7

Installation and Upgrades / Ebox 1.4 - Web Url Filter - HTTPS

« on: January 26, 2010, 03:09:02 pm »

Hi,

I'm using version Ebox 1.4 with authenticated proxy (default policy: authorize and filter). The https sites are not filtered - examples: https://vtunnel.com, https://btunnel.com, even adding the "domains rules" domains as always blocked "vtunnel.com" and "btunnel.com"


Does anyone know how to do this to filter https traffic passing through the proxy?

thanks,
Clicério Neto

8

Installation and Upgrades / How to Set OpenVPN Client (Client Bundle) on Ubuntu Desktop 9.04

« on: September 30, 2009, 09:52:58 pm »

Hi,

Anyone know how to configure OpenVPN Client on Ubuntu Desktop using the client bundle ?

thanks,
Clicerio

9

Installation and Upgrades / Ebox Control Center. News ?

« on: September 25, 2009, 01:18:26 pm »

Hi,

Anyone have any news about the Ebox Control Center ?

Clicério Neto

10

Installation and Upgrades / Reports Logs HTTPProxy + SARG - Squid Analysis Report Generator

« on: September 04, 2009, 02:41:57 pm »

   
Hi,


As the reports from the logs of the proxy does not have options such as: top sites, top user, list of blocked sites and also be very slow ... I'm trying to view logs using the tool SARG - http://sarg.sourceforge.net/sarg.php --

To Install

Code: [Select]

apt-get update

Code: [Select]

apt-get install sarg
In settings sarg.conf

Code: [Select]

/etc/squid/sarg.conf
the line below, I specify the path where the logs (squid or dansguardian )

# TAG: access_log file
# Where is the access.log file
# Sarg-l file
#
access_log /var/log/dansguardian/access.log
or
access_log /var/log/squid/access.log

Even in settings has sarg.conf option below:


# TAG: dansguardian_conf file
# DansGuardian.conf file path
# Generate reports from DansGuardian logs.
# Use 'none' to disable it.
# Dansguardian_conf /usr/dansguardian/dansguardian.conf
#
# dansguardian_conf none

I do not know if it is needed 


#################

After running the command:

Code: [Select]

cd /var/log/dansguardian

Code: [Select]

#sarg -l access.log -l access.log.1 -l access.log.2 -l access.log.3 -l access.log.4 -l access.log.5
Go to Http:// ip /squid-reports

11

Installation and Upgrades / Ebox 1.2 - How to block ping requests

« on: August 25, 2009, 10:38:15 pm »

Hi

Does anyone know how to block ping requests (ICMP)?

I tried to create the service and then block ICMP in the firewall policy did not work - ping continued to respond.

12

Installation and Upgrades / Updating Ebox 1.2 - Bug System (Date/Time and Time Zone disappeared)

« on: August 24, 2009, 09:19:30 pm »

HI,

After I did the update on the Ebox 1.2:

*************************************************
apt-get update
apt-get upgrade

root @ EBOX-PROXY: ~ # apt-cache policy ebox
ebox:
   Installed: 1.2.8-0ubuntu1 ~ ppa1 ~ hardy1
   Candidate: 1.2.8-0ubuntu1 ~ ppa1 ~ hardy1

*************************************************
In the Tab > System > The Options Date / Time and Time Zone disappeared

Does anyone know how to fix these options?

13

Installation and Upgrades / Ebox 1.2 - Configure mail dispatcher - SMTP Client ( suggestion )

« on: August 20, 2009, 04:39:07 pm »

HI,
   
I was looking for work the Mail Dispatcher is needs to be installed and configured Mail Module (SMTP, POP3 IMAP).

For a Ebox being used only for HTTP Proxy and Firewall, there would be no need for this Mail Module is enabled to run the mail dispatcher.

As a suggestion it would be interesting in the mail dispatcher settings can configure an SMTP client for sending emails. Is attached an example.

14

Installation and Upgrades / Installation Simple - Ebox 1.2

« on: August 14, 2009, 07:04:49 pm »

Hi,   

In the simple method of installation when selecting only the modules (Security and gateway):

ebox-security: ebox-firewall, ebox-ids, ebox-squid, ebox-openvpn, mailfilter-ebox, ebox-antivirus, ebackup-ebox, ebox-software, ebox-monitor

ebox-gateway: ebox-network, ebox-squid, ebox-firewall, ebox-trafficshaping, ebox-l7-protocols, ebackup-ebox, ebox-software, ebox-monitor

After installation, check that it installed the e-mail service. What happened?

15

Installation and Upgrades / Replication of LDAP. is possible?

« on: July 21, 2009, 05:10:13 pm »

Hi,
   
I have 2 servers Ebox: worked as a server as Proxy Server and other mail server. Is possible only concentrate Ebox an LDAP or LDAP replication to another server?

As a suggestion, it would be interesting to an LDAP server from Ebox to communicate with the LDAP server to another