Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
61
Email and Groupware / Re: Where is webmail?
« on: December 19, 2016, 05:43:04 am »
Capitalisation is important. I believe you will find that it is
I intended the capitalisation that you see
If you skip the https:// portion it will do a redirect and correct the case issues. If you use https:// initially, it never goes through the rewrite logic and therefore your case must be accurate. Copy and paste from above and then edit the "your.ip.address" portion to match the server in question. I believe you will see what I mean..
Code: [Select]
https://your.ip.address/SOGo
I intended the capitalisation that you see
Quote
SOGo
If you skip the https:// portion it will do a redirect and correct the case issues. If you use https:// initially, it never goes through the rewrite logic and therefore your case must be accurate. Copy and paste from above and then edit the "your.ip.address" portion to match the server in question. I believe you will see what I mean..
62
Other modules / Re: DHCP server broken on non-Ubuntu kernels
« on: December 18, 2016, 03:42:07 pm »
Netgate is the corporate sponsor behind pfsense. They are also a manufacturer of hardware with pfsense in mind. I worked there for a short time recently. Pfsense 2.4 is currently in beta and should roll to gold soon. I was suggesting that you might find a hardware pfsense solution a better fit if virtualization isn't working out for you. Perhaps an SG-1000 would work in your situation. I have a few 8860's here though one of them has Proxmox loaded on it.
63
Other modules / Re: DHCP server broken on non-Ubuntu kernels
« on: December 18, 2016, 05:32:31 am »
When I was over at Netgate, I know there was some discussion on this. I am not sure if they were targeting the 2.4 release to resolve it. I can say that their hardware is pretty high quality.
64
Other modules / Re: DHCP server broken on non-Ubuntu kernels
« on: December 18, 2016, 01:21:19 am »
I don't have the ability to re-create your environment but safe to say it fails similarly under Proxmox. This article might provide some clues https://help.ubuntu.com/lts/serverguide/lxc.html
Would that I could help more. Out of curiosity, what is pushing you away from pfsense?
Would that I could help more. Out of curiosity, what is pushing you away from pfsense?
65
Other modules / Re: DHCP server broken on non-Ubuntu kernels
« on: December 18, 2016, 12:18:06 am »
I believe you are referring to this ?
Are you using Proxmox?
Quote
Error output: Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)
Are you using Proxmox?
66
Email and Groupware / Re: Zentyal 5.0 mail not working after reboot
« on: December 17, 2016, 09:14:16 pm »
5.0.2 mail fixed the external mail fetch problem. I did need to edit the /etc/default/fetchmail daemon settings as you described.
67
Email and Groupware / Re: Where is webmail?
« on: December 17, 2016, 01:41:44 am »
Let me go one step further and show you how I arrived at the answer. First things first, let's determine what is listening on port 443 or https.
Which gives the result of :
Ahh... so apache is handling https traffic. All of apache's configs are kept under /etc/apache2. A quick look in the directory shows me a couple of config files and several sub directories.
apache2.conf has the base config + a quick explanation of the directory structure in the comments.
You have three directory categories and two statuses to choose from. You have conf, mods, and sites for categories and available and enabled for statuses.
So you see directories like conf-available and conf-enabled and so on. We are interested in what is actually enabled. IF we were looking for Sogo.my.domain that would be a virtual host and you would find that under sites-enabled. If we are looking for my.domain/sogo that is going to be under a configured directory which you will find in conf-enabled. Assuming we don't know which that is we just check each directory in turn looking for clues.
My sites-enabled has :
000-default.conf and default-ssl.conf. Neither of these had a reference to Sogo so it isn't a virtual host.
Next we check conf-enabled:
Surprise! there is a SOGo.conf. It is probably going to be SOGo but let's make sure by reading the conf file.
Inside we find
Hopefully this helps!
I wrote this from a "assumes nothing" standpoint and I did not intend to give the impression I was talking down to you.
ETA: added sudo to the ss command to allow access to process application and pid information
Code: [Select]
sudo ss -ltpn |grep :443
Which gives the result of :
Quote
LISTEN 0 128 *:443 *:* users:(("apache2",pid=11612,fd=3),("apache2",pid=11611,fd=3),("apache2",pid=3437,fd=3))
Ahh... so apache is handling https traffic. All of apache's configs are kept under /etc/apache2. A quick look in the directory shows me a couple of config files and several sub directories.
apache2.conf has the base config + a quick explanation of the directory structure in the comments.
You have three directory categories and two statuses to choose from. You have conf, mods, and sites for categories and available and enabled for statuses.
So you see directories like conf-available and conf-enabled and so on. We are interested in what is actually enabled. IF we were looking for Sogo.my.domain that would be a virtual host and you would find that under sites-enabled. If we are looking for my.domain/sogo that is going to be under a configured directory which you will find in conf-enabled. Assuming we don't know which that is we just check each directory in turn looking for clues.
My sites-enabled has :
000-default.conf and default-ssl.conf. Neither of these had a reference to Sogo so it isn't a virtual host.
Next we check conf-enabled:
Surprise! there is a SOGo.conf. It is probably going to be SOGo but let's make sure by reading the conf file.
Inside we find
Quote
ProxyPass /SOGo http://127.0.0.1:20000/SOGo retry=0so definitely it is going to be my.domain/SOGo/
Hopefully this helps!
I wrote this from a "assumes nothing" standpoint and I did not intend to give the impression I was talking down to you.
ETA: added sudo to the ss command to allow access to process application and pid information
68
Contributions / Tips&Tricks / Features Requests / Re: Feature request (Idea) - protect Samba shares with fail2ban
« on: December 15, 2016, 11:54:57 pm »
Putting your shares on zfs and performing periodic snapshots makes you pretty much immune to ransomware attacks. Once the infection is detected and the offending machine isolated, simply reverting to a snapshot from just before the event and you are back in business.
69
Email and Groupware / Re: Zentyal 5.0 mail not working after reboot
« on: December 15, 2016, 02:10:00 am »
The error changed but the results are a little ambiguous.
zentyal log
The pam_cap.so error repeats continously. The problem doesn't assert itself until fetchmail is turned on. If you need insitu access Jose, just email me. It can be arranged.
zentyal log
Code: [Select]
2016/12/14 15:49:04 ERROR> Service.pm:962 EBox::Module::Service::restartService - Error restarting service: root command systemctl start 'fetchmail' failed.
Error output: Job for fetchmail.service failed because the control process exited with error code. See "systemctl status fetchmail.service" and "journalctl -xe" for details.
Command output: .
Exit value: 1
2016/12/14 15:49:04 ERROR> Service.pm:964 EBox::Module::Service::restartService - root command systemctl start 'fetchmail' failed.
2016/12/14 15:49:04 ERROR> RestartService.pm:61 EBox::SysInfo::CGI::RestartService::_process - Restart of Mail from dashboard failed: root command systemctl start 'fetchmail' failed.
Error output: Job for fetchmail.service failed because the control process exited with error code. See "systemctl status fetchmail.service" and "journalctl -xe" for details.
(journalctl output)Code: [Select]
Dec 14 18:56:21 zentyal5 sudo[24463]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 14 18:56:21 zentyal5 systemd[1]: Starting LSB: init-Script for system wide fetchmail daemon...
-- Subject: Unit fetchmail.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fetchmail.service has begun starting up.
Dec 14 18:56:21 zentyal5 fetchmail[24466]: /etc/zentyal-fetchmail.rc: 6: /etc/zentyal-fetchmail.rc: poll: not found
Dec 14 18:56:21 zentyal5 fetchmail[24466]: /etc/zentyal-fetchmail.rc: 7: /etc/zentyal-fetchmail.rc: user: not found
Dec 14 18:56:21 zentyal5 systemd[1]: fetchmail.service: Control process exited, code=exited status=127
Dec 14 18:56:21 zentyal5 systemd[1]: Failed to start LSB: init-Script for system wide fetchmail daemon.
-- Subject: Unit fetchmail.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fetchmail.service has failed.
--
-- The result is failed.
Dec 14 18:56:21 zentyal5 systemd[1]: fetchmail.service: Unit entered failed state.
Dec 14 18:56:21 zentyal5 systemd[1]: fetchmail.service: Failed with result 'exit-code'.
Dec 14 18:56:21 zentyal5 sudo[24463]: pam_unix(sudo:session): session closed for user root
Dec 14 18:56:21 zentyal5 sudo[24477]: PAM unable to dlopen(pam_cap.so): /lib/security/pam_cap.so: cannot open shared object file: No such file or directory
Dec 14 18:56:21 zentyal5 sudo[24477]: PAM adding faulty module: pam_cap.so
The pam_cap.so error repeats continously. The problem doesn't assert itself until fetchmail is turned on. If you need insitu access Jose, just email me. It can be arranged.
70
Email and Groupware / Re: Zentyal 5.0 mail not working after reboot
« on: December 14, 2016, 11:01:29 pm »
Unfortunately mail 5.0.1 did not fix my situation concerning external accounts. Should I completely remove the module then reinstall it?
71
Email and Groupware / Re: Zentyal 5.0 mail not working after reboot
« on: December 14, 2016, 04:11:24 am »
You didn't happen to disable "retrieve mail for external accounts" , did you? Turning this feature on in my test system causes the mail service not start.
Seems to be a missing module dependency.
The feature doesn't matter much to me as I was just using it to keep the test machine in sync with the live email service. I don't actually use it in production.
Code: [Select]
2016/12/13 21:04:09 INFO> LDAP.pm:304 EBox::Module::LDAP::waitForLDAPObject - Waiting for schema object present: CN=userZentyalMail,CN=Schema,CN=Configuration,DC=idoubtit,DC=net
2016/12/13 21:04:09 INFO> LDAP.pm:304 EBox::Module::LDAP::waitForLDAPObject - Waiting for schema object present: CN=vdZentyalMail,CN=Schema,CN=Configuration,DC=idoubtit,DC=net
2016/12/13 21:04:13 ERROR> GlobalImpl.pm:659 EBox::GlobalImpl::saveAllModules - Failed to save changes in module mail: Can't locate object method "throw" via package "Can't locate object method "fetchmailMustRun" via package "EBox::Mail::FetchmailLdap" at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 443.
" (perhaps you forgot to load "Can't locate object method "fetchmailMustRun" via package "EBox::Mail::FetchmailLdap" at /usr/share/perl5/EBox/Mail/FetchmailLdap.pm line 443.
"?) at /usr/share/perl5/EBox/Module/Base.pm line 238.
2016/12/13 21:04:13 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: logs
2016/12/13 21:04:14 ERROR> GlobalImpl.pm:734 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: mail at The following modules failed while saving their changes, their state is unknown: mail at /usr/share/perl5/EBox/GlobalImpl.pm line 734
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x5eb3e50)', 'progress', 'EBox::ProgressIndicator=HASH(0x5e51270)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x5e695d0)', 'progress', 'EBox::ProgressIndicator=HASH(0x5e51270)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30 Seems to be a missing module dependency.
The feature doesn't matter much to me as I was just using it to keep the test machine in sync with the live email service. I don't actually use it in production.
72
Email and Groupware / Re: Postgres process hogging HDD 90% of the time.
« on: December 10, 2016, 11:59:47 pm »
I have looked at your posting history. You have inherited this relic server from a person who retired. The only conclusion that I can come to for not updating the server was related to something you were using not being in the 3 series of Zentyal. Is this correct? Do you folks use Zarafa ?
73
Email and Groupware / Re: Postgres process hogging HDD 90% of the time.
« on: December 10, 2016, 10:55:23 pm »
How long do you keep your logs? Is it possible that you have logs going back to 2011?
74
Email and Groupware / Re: Postgres process hogging HDD 90% of the time.
« on: December 10, 2016, 08:23:41 pm »
Apologies, I wasn't aware that the 2 series used postgres. You can use pgadmin to kill the query if you like. You don't need to kill the whole service just the offending process.
75
Installation and Upgrades / Re: Zentyal 5 ERROR
« on: December 10, 2016, 05:51:46 am »
No worries. It gave me something to break up writing maintenance plans for our F5's. Change management can be so tedious at times 