Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - nontrivial

Pages: 1 2 [3] 4
31
Installation and Upgrades / Importing Users
« on: January 26, 2014, 04:59:54 pm »
In Zentyal 3.0 and 3.1 you could use something like the code below to import a list of users. Is there an equivalent in Zentyal 3.2+?

use EBox;
use EBox::UsersAndGroups::User;

  EBox::init();
  for my $Item (@Items) {
    EBox::UsersAndGroups::User->create($Item, 0);
  }

There $Item is a hash with keys user, givenname, surname, password.

PS: If so, bonus points for listing the possible key values.

32
Installation and Upgrades / Additional Domain Controller Issue
« on: January 25, 2014, 03:41:15 pm »
Hello, I have a setup with two Zentyal 3.2 servers, with one a primary domain controller and the other as an additional domain controller. They seem to be working OK, except I get a daily email from additional controller with the following error:

 /etc/cron.daily/zentyal-users-external-ad:
 run-parts: failed to exec /etc/cron.daily/zentyal-users-external-ad: Exec format error
 run-parts: /etc/cron.daily/zentyal-users-external-ad exited with return code 1

When I run /etc/cron.daily/zentyal-users-external-ad by hand as root I get:

Users module not using external Active Directory at /usr/share/zentyal-users/update-ad-keytabs line 27, <GEN0> line 4.

Any help or suggestions on tracking down the issue would be greatly appreciated.

James

33
I posted a reply to an old post about a problem I was having but it has disappeared, so I am starting a new thread. The problem is a fresh 3.2 install on an Atom based computer with an Intel graphics initially goes well, but after rebooting the screen blanks. The kicker is that I had no problems installing an earlier version of Zentyal on the exact same hardware. After a LOT of troubleshooting it seemed to be related to a kernel bug, so it turns out the best work around I can find is to downgrade the kernel. I actually have several of these servers, so my new install procedure on them is to:

 1) Start the install normally.
 2) After the reboot, finish the install remotely via the web interface.
 3) SSH into the box and install an older kernel: apt-get install linux-generic-pae
 4) Use apt-get purge to remove any trace of 3.8 (AKA raring) kernels.
 5) Go on about my business.

I just hope that no Zentyal functionality is dependent on newer kernel features.

James

34
Installation and Upgrades / VPN Questions
« on: January 17, 2014, 04:52:44 pm »
Hello, I have a server-to-server VPN set up between two Zentyal 3.2 servers. Actually, I tried this with Zentyal 2.x a while back and couldn't get it to work, and I am pleasantly surprised as to how easy it was this time. But I have a few questions that I hope somebody could answer for me.

My biggest question is, what are "Advertised Networks"? The documentation mentions how to define them but doesn't explain what the heck they are. Both the client and server has them?

Next for the interface address, which is a range. Is the server always going to be blah.blah.blah.1? 

Next for the firewall, which does not appear to have an entry for UDP 1194, which is what the VPN uses by default. Since it is working that the port was opened automagically elsewhere. Is that because since you can define the port there isn't a good way to create a static Service for it?

Finally, when I change settings I get the following error (which may not be related to the VPN): WARN> WebAdmin.pm:888 EBox::WebAdmin::_CAs - Ignoring CA /var/lib/zentyal/conf/remoteservices/subscription/ns1/cacert.pem: cannot read the file or not is a regular file. It doesn't seem to be fatal, so should I be concerned?

James

35
Installation and Upgrades / Mail Issues, Mostly with Outlook.
« on: January 16, 2014, 11:02:51 pm »
I am running Zentyal 3.2 on several machines that are primarily mail servers. I am not using Zarafa or OpenChange, just postfix, dovecot, and Egroupware. Most of the servers are fine except one, which is turning out to be a royal pain in the butt. It is either because a lot of people are using IMAP connections, or one user is using Outlook, or some combination. I honestly think it's the latter. First I was getting an error and fixed it by adding "mail_max_userip_connections = 50" to the dovecot config. Then I solved another error in the log by running "sysctl -w fs.inotify.max_user_instances 512". Now I'm not getting errors per se, it's just that the Outlook user is unable to send email, and in the log I get a lot of entries like the ones below. The names of the emails have been changed to protect the innocent, and the users do exist. At this point I have no idea how to proceed, so any advice or suggestions would be greatly appreciated.

Jan 16 15:58:56 a2cs1 dovecot: imap-login: Login: user=<user1@someplace.com>, method=PLAIN, rip=68.15.119.112, lip=98.188.121.181, mpid=13052, TLS
Jan 16 15:58:57 a2cs1 postfix/smtpd[12985]: NOQUEUE: reject: RCPT from a2cs2.someplace.com[68.15.119.112]: 554 5.7.1 <user2@someplace.com>: Recipient address rejected: Access denied; from=<user1@someplace.com> to=<user2@someplae.com> proto=ESMTP helo=<192.168.1.147>
Jan 16 15:59:03 a2cs1 dovecot: imap(user1@someplace.com): Connection closed bytes=38/706



36
Installation and Upgrades / Multiple interfaces causes DNS issue in 3.2
« on: December 27, 2013, 08:11:17 pm »
Hello,

I just noticed that after upgrading to Zentyal 3.2 that DNS is serving both internal (192.168.x.x) IP addresses and external (98.147.x.x) IP addresses when requests come in from an external interface. The result is that it's pure luck when somebody can now access my mail and web server. Any help would be greatly appreciated.

James

37
Installation and Upgrades / File Sharing Guest Access Porked
« on: November 20, 2013, 06:52:49 pm »
Hello all, I posted this question in another thread and didn't get a response, so I am trying again in a new topic. I recently upgrade to Zentyal 3.2 which was not very fun in regards to file sharing in general. Most of the shares I have are set as guest access and that has stopped working. Now if you browse to one of my servers you are asked for a password before you even get a list of possible shares to browse and you can't access the guest shares directly without user account credentials.

Is anybody else seeing this, and does anybody have any suggestions on how to get it working?

TIA,
James

38
Installation and Upgrades / Fetchmail Segmentation Fault
« on: July 24, 2013, 04:33:28 pm »
Hello, I am getting a segmentation fault every time cron tries to run "/usr/share/zentyal/manage-logs" or "/usr/share/zentyal-mail/fetchmail-update". Does anybody have any suggestions on how to begin to debug this issue? I looked at the scripts and there isn't much to look into as far as I can tell.

James

39
Howdy folks,

I looked at a few mail list managers and finally settled on mlmmj because it seems to work best with Zentyal. Basically it's a four step process (note, the script would need to be changed if you use zarafa):

 * sudo apt-get install mlmmj
 * Add to /etc/crontab: 0 */2 * * * root "find /var/spool/mlmmj -mindepth 1 -maxdepth 1 -type d -exec /usr/bin/mlmmj-maintd -F -d {} \;"
 * Save script below as executable /etc/zentyal/hooks/mail.postsetconf
 * sudo service zentyal mail restart

The script is:
#!/usr/bin/perl -w
use strict;

# Rewrites postfix config files to support mlmmj after zentyal resets

my $Main = '/etc/postfix/main.cf';
my $Master = '/etc/postfix/master.cf';

my @Lines;
open(FILE, "<", $Master);
@Lines = <FILE>;
close(FILE);

for my $Line (@Lines) {
  if ($Line =~ /mlmmj/i) {
    print("File already processed!\n");
    exit(0);
  }
}

open(FILE, ">", $Master);
for my $Line (@Lines) {
  if ($Line =~ /smtp\-amavis/i) {
    print(FILE "mlmmj   unix  -       n       n       -       -       " .
      "pipe     flags=ORhu user=list argv=/usr/bin/mlmmj-recieve -F -L " .
      "/var/spool/mlmmj/\${nexthop}\n");
  }
  print(FILE $Line);
}
close(FILE);

@Lines = ();
open(FILE, "<", $Main);
@Lines = <FILE>;
close(FILE);

open(FILE, ">", $Main);
for my $Line (@Lines) {
  if ($Line =~ /^virtual_alias_maps/i) {
    print(FILE "virtual_alias_maps = ldap:valiases, " .
      "hash:/var/spool/mlmmj/virtual\n");
    print(FILE "mlmmj_destination_recipient_limit = 1\n");
    print(FILE "transport_maps = hash:/var/spool/mlmmj/transport\n");
  } else  { print(FILE $Line); }
}
close(FILE);


40
Hello,

I have changed the domain name with a Zentyal 3.0 installation, and now I am getting a bunch of errors. I have rebooted the machin and uninstalled zentyal-printers, zentyal-samba, zentyal-usercorner, and zentyal-users. When I go to install zentyal-users, however, I get the following error:

Setting up zentyal-users (3.0.15) ...
LDAP error: The server cannot find an object specified in the request
.<br/> Operation parameters:{
  'base' => 'ou=Users,dc=olddomainname,dc=com',
  'filter' => 'uid=dns-genesi2',
  'scope' => 'one'
}
dpkg: error processing zentyal-users (--configure):
 subprocess installed post-installation script returned error exit status 255

So apparently deep in the bowels of Zentyal somewhere, it remembers it's old domain name, and is profoundly unhappy that I want to use a new one. Is there any way to use the users modules after changing the domain name besides doing a complete reinstall?

James

41
I know there is a way to set up user specific SpamAssassin settings, where you periodically run sa-learn on your mailbox, that information is stored in your mail box, and you have individual thresholds that SpamAssassin uses. Can anybody please tell me how to set that up? I am having trouble with the basics, not the details, so if somebody could just point me in the right direction I would greatly appreciate it. I understand that this would not be managed by Zentyal, I just want to have more control over MY spam handling.

James

42
Installation and Upgrades / Valid SSL Certificates
« on: March 25, 2013, 07:07:41 pm »
Hello All,

Zentyal comes with a great self-signed SSL certificate feature. However, end users are VERY fearful when the browser or email client pops up the dreaded "Untrusted certificate" error. I have used a couple different methods for getting Zentyal to use an actual trusted certificate, and my current imperfect solution is outlined below. I currently maintain 14 Zentyal servers and plan on adding more, so the problem is starting to get out of hand because Zentyal clobbers my changes at seemingly random intervals. My question is, does anybody have a better solution, or is there any plan for Zentyal to add a managed solution for this?

For a new server:
 * cat host.key host.crt host.int > nexus.pem
 * Copy nexus.pem to the right spots and restart the proper services.

When I get 20 panic phone calls from users about the server having been hacked because they have no idea why they are getting a spooky "untrusted" error suddenly and they are unable to check their email or visit their website:
 * cp /etc/apache2/ssl/nexus.pem /etc/apache2/ssl/ssl.pem
 * cp /etc/dovecot/ssl/nexus.pem /etc/dovecot/ssl/dovecot.pem
 * cp /etc/postfix/sasl/nexus.pem /etc/postfix/sasl/postfix.pem
 * cp /var/lib/zentyal-usercorner/ssl/nexus.pem /var/lib/zentyal-usercorner/ssl/ssl.pem
 * service zentyal webserver restart
 * service zentyal mail restart
 * service zentyal usercorner restart


Thanks,
James

43
Installation and Upgrades / sh: 1: status: not found
« on: January 02, 2013, 10:06:19 pm »
Hello,

I am using Zentyal version 3.0, and every night I get a message from cron with "sh: 1: status: not found". That's it, that's the entire message. I think I remember seeing a post about this before but I couldn't find it. It's not really a big deal getting one email about this, but I am about to have several servers and I know it is going to get annoying. Has there been any progress

On a related note, I am trying to synchronize the users on one Zentyal server with another server, and I just got an email that caused me post this. The message I got was:

sh: 1: status: not found
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210424294-addUser-wSKr...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210474836-addUser-pWw0...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210479434-addUser-CkpT...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210483922-addUser-CGOj...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210499110-addUser-ZvkS...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210503564-addUser-aEQz...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210507990-addUser-nkHR...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210512444-addUser-Z0RV...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210516815-addUser-FEuy...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210521216-addUser-3ynE...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210525673-addUser-5NjS...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210530241-addUser-z07p...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210534694-addUser-H_Hp...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210539112-addUser-ORpy...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210543597-addUser-Z1NH...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210548013-addUser-LCQh...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210552504-addUser-GAFk...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210557046-addUser-3E4r...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210561566-addUser-xq_m...
Syncing /var/lib/zentyal/syncjournal//sl1/1357159210566011-addUser-8r0h...

And the sync seems to have failed. Any suggestions would be greatly appreciated.

James

44
Installation and Upgrades / FTP Login Issue
« on: December 13, 2012, 12:43:44 am »
Hello,

I am trying to get FTP working on Zentyal 3.0. It works fine for users I have added via the command line. However, for any users I have added via the console (ie LDAP users), the FTP login fails. I have PAM enabled under LDAP settings. I can log into User Corner just fine, but I am unable to su to any LDAP user. Any help would be greatly appreciated.

James

45
Installation and Upgrades / [SOLVED] Issues after recent package updates
« on: December 06, 2012, 04:20:54 pm »
Hello,

As requested I just updated some packages (mail, usercorner, users, dns) and now there are a couple problems. First, user corner is no longer working. When I go to the URL I get a 403 forbidden error. The second thing is every five minutes I am getting an email from cron saying: "/bin/sh: 1: /usr/share/zentyal-users/slave-sync: not found". I guess I am going to reboot the server (ala windows), and then spend my day trying to figure this out. Any help is greatly appreciated.

Thanks,
James
PS Bonus points for fixing the nightly "sh: 1: status: not found" email I am getting as well.


Pages: 1 2 [3] 4