Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
Installation and Upgrades / Re: printserver jobs disappearing on zentyal 3.3.10
« on: May 21, 2014, 12:18:57 pm »
ok whole story is finished (i think)
I recovered all important data using windows box and open source ext2explore program, then formated harddrive and installed 64 bit edition of zential 3.4 from schratch. As for now, it seems that all printers are working and windows clients can print sa before.
I recovered all important data using windows box and open source ext2explore program, then formated harddrive and installed 64 bit edition of zential 3.4 from schratch. As for now, it seems that all printers are working and windows clients can print sa before.
17
Installation and Upgrades / Re: printserver jobs disappearing on zentyal 3.3.10
« on: May 16, 2014, 01:41:18 pm »
now i realy need help
first of all i was thinking that my printr problem might be connected to compatybility issues between core version and cups version (i had that before with new samba and old core), so i try to update whole zentyal from 3.3 to 3.4 and that was the worst thing i ever did.
Upgrade does not work and in tail log was that samba, bind9, squed dns and one more package fail to upgrade, so entire upgrade fail.
I was sure that reinstalling packages by complette uninstall and install again could fix it , but i cudn't access repository anymore so every module i marked for reinstall (every zentyal module) simply get uninstalld.
Now i can acces server only by text consoles and i cant set dns. I can ping outside. I was thinking that iptables might blocking the way so i uninstalled it but no effect.
i edited dhclient.conf but no effect also i set my eth0 to dhcp i have no idea what to do next
is there a way to clean install Zentyal from cd, but without formating? the biggest downside is taht it was fileserver, and i didn't backup any data yet other than to "/" folder
i can see that some bind function are working (even when i removed bind9) but i dont known how to use them
first of all i was thinking that my printr problem might be connected to compatybility issues between core version and cups version (i had that before with new samba and old core), so i try to update whole zentyal from 3.3 to 3.4 and that was the worst thing i ever did.
Upgrade does not work and in tail log was that samba, bind9, squed dns and one more package fail to upgrade, so entire upgrade fail.
I was sure that reinstalling packages by complette uninstall and install again could fix it , but i cudn't access repository anymore so every module i marked for reinstall (every zentyal module) simply get uninstalld.
Now i can acces server only by text consoles and i cant set dns. I can ping outside. I was thinking that iptables might blocking the way so i uninstalled it but no effect.
i edited dhclient.conf but no effect also i set my eth0 to dhcp i have no idea what to do next
is there a way to clean install Zentyal from cd, but without formating? the biggest downside is taht it was fileserver, and i didn't backup any data yet other than to "/" folder
i can see that some bind function are working (even when i removed bind9) but i dont known how to use them
18
Installation and Upgrades / Re: printserver jobs disappearing on zentyal 3.3.10
« on: May 14, 2014, 09:40:57 am »
well i messed up with zentyal release number, so i am correcting it
zentyal core 3.3.10 (but it was upgraded from 3.0>3.2>3.3 with printers installed)
I am using cups 1.5.3 as i read in version info and it was working 2 days ago with no further modyfications of the system. windows clients, windows vista, and windows seven were able to print by using windows drivers corresponding with those installed on zentyal cups.
and one more thing ACL was distabled or i did not enable any rules in it and first "guest access" was uncheck, and it worked, i enabled guest access to alow non domain computers to print and they were able to print. now when i was trying to add acl rules for specyfic users, they were unable to connect to the printer from windows at all
edit
today i was able to print two pages on one printer from windows client but after i hit "save" in dashboard everything reverted back to being broken.
What i did was clean reinstal of cups and and printer service , reinstall all printers by their discovered names and then it vanished again.
But now what is really funny is that all printers have "not shared" before "idle ready to print" status even if shared box is markedin "modyfi printer
zentyal core 3.3.10 (but it was upgraded from 3.0>3.2>3.3 with printers installed)
I am using cups 1.5.3 as i read in version info and it was working 2 days ago with no further modyfications of the system. windows clients, windows vista, and windows seven were able to print by using windows drivers corresponding with those installed on zentyal cups.
and one more thing ACL was distabled or i did not enable any rules in it and first "guest access" was uncheck, and it worked, i enabled guest access to alow non domain computers to print and they were able to print. now when i was trying to add acl rules for specyfic users, they were unable to connect to the printer from windows at all
edit
today i was able to print two pages on one printer from windows client but after i hit "save" in dashboard everything reverted back to being broken.
What i did was clean reinstal of cups and and printer service , reinstall all printers by their discovered names and then it vanished again.
But now what is really funny is that all printers have "not shared" before "idle ready to print" status even if shared box is markedin "modyfi printer
19
Installation and Upgrades / printserver jobs disappearing on zentyal 3.3.10
« on: May 13, 2014, 09:43:38 pm »
Hello again.
For some reason my secundary domain controller, which was working fine for several months, begin to work weird.
The most annoying thing is that i can't print on any printer from windows clients, jobs just evaporating before they reach cups. Communication is fine, i can print from server just fine both from desktop aplication and cups maintenance page (test prints) those jobs are also listed, but jobs send from windows clients are missing, and windows does not show any problems. printer status is "ready" and responding.
I was going around this problem and
reinstalled printers on windows - no effect
reinstalled printers in cups - no effect
reinstalled whole printers service in dashboard - no change
rebooted server few times while thinking of solutions
It also seemd that if i enable ACL, none can access printers (adding groups "users" or specyfic user does not help) so it is set to guest access on all printers
we have 4 printers and every one was working. they all connected to server by ip socket
Everything was working just yesterday when i installed new printer and i did not install any new updates now we have 4 printers that do not print
Where should i start looking first, because i am out of ideas
For some reason my secundary domain controller, which was working fine for several months, begin to work weird.
The most annoying thing is that i can't print on any printer from windows clients, jobs just evaporating before they reach cups. Communication is fine, i can print from server just fine both from desktop aplication and cups maintenance page (test prints) those jobs are also listed, but jobs send from windows clients are missing, and windows does not show any problems. printer status is "ready" and responding.
I was going around this problem and
reinstalled printers on windows - no effect
reinstalled printers in cups - no effect
reinstalled whole printers service in dashboard - no change
rebooted server few times while thinking of solutions
It also seemd that if i enable ACL, none can access printers (adding groups "users" or specyfic user does not help) so it is set to guest access on all printers
we have 4 printers and every one was working. they all connected to server by ip socket
Everything was working just yesterday when i installed new printer and i did not install any new updates now we have 4 printers that do not print
Where should i start looking first, because i am out of ideas
20
Installation and Upgrades / printserver hp driver issues
« on: May 08, 2014, 10:45:43 am »
helo. I have one little problem with print servers after updating some packages
Apparently cups updated to 3.14 version along with last update/upgrade commands and most of my printers work ok.
But the one that i would realy want to work is giving this error stopped
"/usr/lib/cups/filter/hpcups failed"
i think that cups version 3.14 cant work with zentyal repository 3.12.2 driver
Any way to upgrade this driver or downgrade cups?
zentyal 3.3.10 community community (32bit)
edit
i confused some versions numbers
cups is 1.5
hpcups is 3.12.2, but manualy installing 3.14 add nothing but some more confusion
printer model is hp officejet professional p1102 hook to the network via tplink printserver tl-ps110u
Printserver "see" the printer and i can print outside of domain (but ms word print endlesly)
it worked fine just a week ogo, more than 20 prints done, from 5 computers, now it stuck on every one
Apparently cups updated to 3.14 version along with last update/upgrade commands and most of my printers work ok.
But the one that i would realy want to work is giving this error stopped
"/usr/lib/cups/filter/hpcups failed"
i think that cups version 3.14 cant work with zentyal repository 3.12.2 driver
Any way to upgrade this driver or downgrade cups?
zentyal 3.3.10 community community (32bit)
edit
i confused some versions numbers
cups is 1.5
hpcups is 3.12.2, but manualy installing 3.14 add nothing but some more confusion
printer model is hp officejet professional p1102 hook to the network via tplink printserver tl-ps110u
Printserver "see" the printer and i can print outside of domain (but ms word print endlesly)
it worked fine just a week ogo, more than 20 prints done, from 5 computers, now it stuck on every one
21
Installation and Upgrades / Re: move domain controller to new server box
« on: January 02, 2014, 09:42:07 am »
ok so things look a little different now
first thing is, i used buildin Administrator account to connect aditional server to main server, and it worked.
Aditional server download domain elements and that was it
2nd thing i used this migration command for my new server, and the command indeed move all server roles from old box to new one
what didn't woek
new box is still aditional controler with server roles in main domain, and run kind of idle all the time
old box lost all domain roles and see that new one hold them but is still main domain controller in zential dashboard
windows moving profiles resides on old box and i have no idea how to coopy them over to new box without breaking their owner atributes
i lost internet acces on new box
So what to do next?
first thing is, i used buildin Administrator account to connect aditional server to main server, and it worked.
Aditional server download domain elements and that was it
2nd thing i used this migration command for my new server, and the command indeed move all server roles from old box to new one
what didn't woek
new box is still aditional controler with server roles in main domain, and run kind of idle all the time
old box lost all domain roles and see that new one hold them but is still main domain controller in zential dashboard
windows moving profiles resides on old box and i have no idea how to coopy them over to new box without breaking their owner atributes
i lost internet acces on new box
So what to do next?
22
Installation and Upgrades / Re: move domain controller to new server box
« on: December 31, 2013, 10:36:21 am »
so we got this new machine, and i was trying to do what you point out but it stuck on something. I wonder should i use my domain admin or other user account for this?
well i succesyvly joined the domain with new server box, as aditional dc.
domain tree has populated from old server "core" to new server "core-xeo"
output from first check on the new server shows that old dc own all roles
well i succesyvly joined the domain with new server box, as aditional dc.
domain tree has populated from old server "core" to new server "core-xeo"
output from first check on the new server shows that old dc own all roles
Code: [Select]
samba-tool fsmo show
ldb_wrap open of secrets.ldb
InfrastructureMasterRole owner: CN=NTDS Settings,CN=CORE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=yotsuba2,DC=edu
RidAllocationMasterRole owner: CN=NTDS Settings,CN=CORE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=yotsuba2,DC=edu
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=CORE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=yotsuba2,DC=edu
DomainNamingMasterRole owner: CN=NTDS Settings,CN=CORE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=yotsuba2,DC=edu
SchemaMasterRole owner: CN=NTDS Settings,CN=CORE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=yotsuba2,DC=edubut when i start ad migrate something just don't workCode: [Select]
./ad-migrate
WARNING: This script will transfer all FSMO roles from the current owners to
the local server.
After all roles has been successfully transferred, you can shutdown
the other domain controllers.
Do you want to continue [Y/n]? Y
Checking server mode...
Checking if server is provisioned...
Synchronizing sysvol share...
syncing [sysvol] files and directories including ACLs, without DOS Attributes
failed to open dir on the destination server: \: NT_STATUS_ACCESS_DENIED
Could handle directory attributes for top level directory of share sysvol. Error NT_STATUS_ACCESS_DENIED
Could not handle the top level directory permissions for the share: sysvol
ERROR: The sysvol share could not be synchronized. Check Zentyal log for details.
And i simply do not known what i did wrong, because in domain tree view everything is in place. Computers, users, everything , so it has access to domain as admin using my "operator" account with "domain admin" group powers.
23
Installation and Upgrades / move domain controller to new server box
« on: December 10, 2013, 11:28:19 am »
Hello . In my work (school) we buy a new machine for ours main zentyal domain controller
Jump would be huge, because instead c2d 2x2,8 /4gb we get xeon 4 cores with ht (8 treads) and 16gb of faster ram. The problem is in how could i move entire domain from one computer to another and then replace their functions. I mean make new box a primary domain controller and old one secundary with gateway function intact. Most important is to move all existing user profiles in samba. I would like also to migrate from 32 bit zen 3.0 to 64 bit zen 3.2
I was thinking about making new box secundary controller first (it should copy domain controller to new box) after installing os but what next?
Jump would be huge, because instead c2d 2x2,8 /4gb we get xeon 4 cores with ht (8 treads) and 16gb of faster ram. The problem is in how could i move entire domain from one computer to another and then replace their functions. I mean make new box a primary domain controller and old one secundary with gateway function intact. Most important is to move all existing user profiles in samba. I would like also to migrate from 32 bit zen 3.0 to 64 bit zen 3.2
I was thinking about making new box secundary controller first (it should copy domain controller to new box) after installing os but what next?
24
Installation and Upgrades / Re: how to handle many vista/seven users
« on: October 31, 2013, 12:46:53 pm »
call me stupid but it might be my fault all together
our school have antivirus licence for ArcaVir antivirus software one licence for entire school and i installed a copy of that antivirus on every workstation making them work a little bit slugish
today i uninstalled it from one of vista workstations and it resulted in super smooth and super fast network login of my profile (4-20 secound compared to 1 minute before) Same with loging out. It might be that antivirus installed on workstations was the culprit?
how much protection for windows end users give zentyal integrated antivirus?
our school have antivirus licence for ArcaVir antivirus software one licence for entire school and i installed a copy of that antivirus on every workstation making them work a little bit slugish
today i uninstalled it from one of vista workstations and it resulted in super smooth and super fast network login of my profile (4-20 secound compared to 1 minute before) Same with loging out. It might be that antivirus installed on workstations was the culprit?
how much protection for windows end users give zentyal integrated antivirus?
25
Installation and Upgrades / Re: how to handle many vista/seven users
« on: October 30, 2013, 11:58:31 am »
ok i got a "full house" or classroom and top does not look much different
us is oscilating 50-60% sy 20% ni 0% with 27% spikes id 10-25% and wa as before 0-1% with up to 7% spikes
memoory usage does not jump much i still have about 200 mb free and swap uses only 90mb from its 1gb
eth1 use from dashboard grapf is oscilating around 300kb rx and spiking 0,2-2mb for tx. and that's about it nothing i can tell from that other than i run out of ram and cpu :]
is adding aditional zential box as aditional domain controller good idea?
us is oscilating 50-60% sy 20% ni 0% with 27% spikes id 10-25% and wa as before 0-1% with up to 7% spikes
memoory usage does not jump much i still have about 200 mb free and swap uses only 90mb from its 1gb
eth1 use from dashboard grapf is oscilating around 300kb rx and spiking 0,2-2mb for tx. and that's about it nothing i can tell from that other than i run out of ram and cpu :]
is adding aditional zential box as aditional domain controller good idea?
26
Installation and Upgrades / Re: how to handle many vista/seven users
« on: October 30, 2013, 09:33:33 am »
to be honest i don't know how to check i/o wait yesterday. When i launch top i only knew how to read cpu usage and that most of it goes to root process. (windows thinking, without ui i cant do anything :] )
so i read how to read top and now i can tell that 15 xp users generate 50 % cpu use right now with i/o wait at 1-5% level and they are one switch closer to the server than vsta workstations
also server practically eats all of ram leaving only 300mb free out of 4 gb
I will check it again when vista classroom start to complain
so i read how to read top and now i can tell that 15 xp users generate 50 % cpu use right now with i/o wait at 1-5% level and they are one switch closer to the server than vsta workstations
also server practically eats all of ram leaving only 300mb free out of 4 gb
I will check it again when vista classroom start to complain
27
Installation and Upgrades / Re: how to handle many vista/seven users
« on: October 29, 2013, 05:37:50 pm »
folder redirection is a gpo thing. it synchronize desktop and other redirected folders (in my case my documents, app data and desktop) and it moves between windows versions, so xp and vista workstations, have the same files on the same profiles. Profile itself is roaming profile, so settings are stored on server for every user (xp and vista separately) and not on workstations.
I check cpu load with top on server after users actually loged in, not when they were in "welcome" stage of login but after desktops were loaded. (and with 20 users it can take up to 30 minutes to load all profiles, classes are in 45 minutes blocks)
Network communication is working ok, renewing workstation (13gb of data) via clonezilla is taking about 30 minutes for 100mbit network from any point when there is no trafic (10 for 1gigabit, server have one gigabit adapter, but there are no gigabit switches in my network)
I can think only of two thing that actually can clog network like that
1 is slow server hardware (2 core is too few or sata2 harddrive speed)
2 100mnit network could be to slow, for 15 and up simultaneous login
if that make any difference i still use 32 bit zentyal 3.0 and all windows boxes are 32 bit also
I check cpu load with top on server after users actually loged in, not when they were in "welcome" stage of login but after desktops were loaded. (and with 20 users it can take up to 30 minutes to load all profiles, classes are in 45 minutes blocks)
Network communication is working ok, renewing workstation (13gb of data) via clonezilla is taking about 30 minutes for 100mbit network from any point when there is no trafic (10 for 1gigabit, server have one gigabit adapter, but there are no gigabit switches in my network)
I can think only of two thing that actually can clog network like that
1 is slow server hardware (2 core is too few or sata2 harddrive speed)
2 100mnit network could be to slow, for 15 and up simultaneous login
if that make any difference i still use 32 bit zentyal 3.0 and all windows boxes are 32 bit also
28
Installation and Upgrades / how to handle many vista/seven users
« on: October 29, 2013, 02:07:29 pm »
Hello i have a little bit of mess with my network again.
Everything work ok up to the point when half of my bigger classroom start to login . There is about 20 pc's and all of them are windows vista buisness
server runs at core 2 duo e7300 with 4gb of ddr2 ram in dual channel and at the point of 10 pc loged in it is 100% bussy all the time. any more users simply cant do anything and loging in jams network completly
I enabled on my server roaming profiles and folder redirection, but it could work with either one of them alone i think. So witch of those services is more resource-jammer, becouse i must disable one of them to allow a normal school work ?
What kind of server should i build to enable them both and they to work eficiently?
Everything work ok up to the point when half of my bigger classroom start to login . There is about 20 pc's and all of them are windows vista buisness
server runs at core 2 duo e7300 with 4gb of ddr2 ram in dual channel and at the point of 10 pc loged in it is 100% bussy all the time. any more users simply cant do anything and loging in jams network completly
I enabled on my server roaming profiles and folder redirection, but it could work with either one of them alone i think. So witch of those services is more resource-jammer, becouse i must disable one of them to allow a normal school work ?
What kind of server should i build to enable them both and they to work eficiently?
29
Installation and Upgrades / Re: (not exacly)external network and samba access
« on: October 24, 2013, 09:47:58 am »Quote
The point is that "reading" your drawing is very difficult. I did print it and still can't figure out how it work.As crazy as it look that is correct. Zentyal controll classroom 20 (xp workstation) and 24(vista, cable going trough classrooms 20 to 19 and back to 24) also 3 computers in library (xp) I have draw color lines for every network to make it more readable. In reality it is black and white picture and for recognizing ends i numbered every eternet socket in school. but at last it is, because when i start to work here , there was no documentation at all.
This is not matter of wording or language (this is pretty self explanatory at least for a French guy)
This is more a physical representation than a logical one.
I'm not able to distinguish between routers and switches
My current understanding is that Zentyal controls classrooms 20 and 24. Is that correct?
Quote
As far as I can tell though you still only have described an internal network, unless you route through a public IP address between buildings!I go with ip's
Can you answer the following question: Is your Zentyal box responsible for receiving and routing all traffic from the internet?
router airlive2 is my gateway and dhcp server for orange netwoek 192.168.2.0
zentyal box is configured as server for internal network for classrooms 20 and 24, and library, 192.168.20.0 and have set "external" on other ethernet adapter which is also set as gateway to my airlive2 router in zential ip is 192.168.2.x and router ip is 192.168.2.y. All in one building and i would like to block non-standard ports for classrooms 20, and 24 to ban online gaming during classes
30
Installation and Upgrades / Re: (not exacly)external network and samba access
« on: October 24, 2013, 08:54:19 am »
it is complicated, because every computer in classrooms were bought separatly and without any supervision. Because up to that point nobody was responsible for managing or designing working network.
With computer science rooms, we have 3 and a half of those, and all of them were simply "fit as it is" because all of them were recived from ministry of education mostly designed to work as a single network in school. So that mean as one internal network and lan cable to outside. And servers are doing the job of accounts storage area and internet gateway with restricted access by users of that classroom network. In my picture every "sala" should translate to "classroom" and grey borders are in fact representation of walls.
I enabled "external network" in zentyal for one adapter because of my lack of understanding of routing tables in linux systems. If you say it will work as an internet gate even if that interface is not external, than problem will disapear on its own.
With computer science rooms, we have 3 and a half of those, and all of them were simply "fit as it is" because all of them were recived from ministry of education mostly designed to work as a single network in school. So that mean as one internal network and lan cable to outside. And servers are doing the job of accounts storage area and internet gateway with restricted access by users of that classroom network. In my picture every "sala" should translate to "classroom" and grey borders are in fact representation of walls.
I enabled "external network" in zentyal for one adapter because of my lack of understanding of routing tables in linux systems. If you say it will work as an internet gate even if that interface is not external, than problem will disapear on its own.