Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - gandalfmagic

Pages: [1] 2
1
Installation and Upgrades / Error accessing with outlook
« on: May 28, 2015, 05:31:53 pm »
Hello,
Is there a way to find what is causing the following error?

I get it every time a user try to access from outlook (MAPI or activesync is the same)
SOGo web frontend is working well.

I cannot find any useful information in other log files.

From samba log:
Code: [Select]
[so-category-info] did not find exported SoClass 'SOGo' in product <0x0x7f268c77e8b8[SoProduct]: loaded code-loaded bundle=/usr/lib/GNUstep/SOGo/MainUI.SOGo #classes=8 #categories=4 rm=0x0x7f268d2a1a68>!
<0x0x7f268dbd6b98[SOGoCache]> Cache cleanup interval set every 300.000000 seconds
<0x0x7f268dbd6b98[SOGoCache]> Using host(s) '/tmp/memcached.sock' as server(s)
2015-05-28 16:39:38.868 samba[19777]   registered class 'MAPIStoreCalendarContext' as handler of 'calendar' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreTasksContext' as handler of 'tasks' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreContactsContext' as handler of 'contacts' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreNotesContext' as handler of 'notes' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreFallbackContext' as handler of 'fallback' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreCalendarContext' as handler of 'calendar' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreOutboxContext' as handler of 'outbox' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreTasksContext' as handler of 'tasks' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreContactsContext' as handler of 'contacts' contexts
2015-05-28 16:39:38.869 samba[19777]   registered class 'MAPIStoreMailContext' as handler of 'mail' contexts
<0x0x7f268e5f1568[SOGoWebDAVAclManager]> entry '{DAV:}write' already exists in DAV permissions table
<0x0x7f268e5f1568[SOGoWebDAVAclManager]> entry '{DAV:}write-properties' already exists in DAV permissions table
<0x0x7f268e5f1568[SOGoWebDAVAclManager]> entry '{DAV:}write-content' already exists in DAV permissions table
<0x0x7f268d76ffb8[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268c6bfcc8[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268cd29028[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268e6f9e68[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268d8729d8[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268cbdf028[MAPIStoreMailContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268e7953f8[MAPIStoreMailContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268de45058[MAPIStoreMailContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268e255bf8[MAPIStoreFallbackContext]> -[MAPIStoreContext getPath:ofFMID:inMemCtx:]: you should *never* get here
<0x0x7f268e255bf8[MAPIStoreFallbackContext]> found path 'test.user@fallback/0xec04030000000001/' for fmid 0xee04030000000001
[2015/05/28 16:39:39.298464,  0] ../lib/util/fault.c:72(fault_report)
  ===============================================================
[2015/05/28 16:39:39.299108,  0] ../lib/util/fault.c:73(fault_report)
  INTERNAL ERROR: Signal 6 in pid 19777 (4.1.17-Zentyal)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2015/05/28 16:39:39.299930,  0] ../lib/util/fault.c:75(fault_report)
  ===============================================================
[2015/05/28 16:39:39.300521,  0] ../lib/util/fault.c:144(smb_panic_default)
  PANIC: internal error

2
I was trying to configure roundcube and openchange (without success), and I accidentally deleted /etc/roundcube/data/profiles.ldb

Is there a way to manually recreate it?

Thank you

3
Great!
The script solved my problem!

I've put it in my "bag of tricks(tm)"

Thank you.

4
Same problem here, with a user.
When I create a new file or directory in homedir from windows share, I get the wrong uid.

The user uid should be 3000029, and i get 3000000.


Thanks

5
 I found out this is a Calibre limitation: maybe last update has broken definitely access to network shares.

Now the workaround: create a Calibre library on local drive and add all the new books. Edit books metadata. Finally COPY all the book to the library on the network share.

This works fine.

6
I'll explain my actual configuration:

I've Calibre installed on my Windows 7 PC.
My PC connects  to a samba share on my zentyal server (3.2 rc2)
When I try to RENAME a book from Calibre GUI I receive this error:
Code: [Select]
Traceback (most recent call last):
  File "site-packages\calibre\gui2\library\models.py", line 958, in setData
  File "site-packages\calibre\gui2\library\models.py", line 1032, in _set_data
  File "site-packages\calibre\db\legacy.py", line 428, in set
  File "site-packages\calibre\db\cache.py", line 56, in ans
  File "site-packages\calibre\db\cache.py", line 946, in set_field
  File "site-packages\calibre\db\cache.py", line 957, in update_path
  File "site-packages\calibre\db\backend.py", line 1417, in update_path
  File "site-packages\calibre\db\backend.py", line 1225, in copy_cover_to
  File "site-packages\calibre\utils\filenames.py", line 365, in copy_path_to
  File "site-packages\calibre\startup.py", line 156, in local_open
OSError: [Errno 13] Permission denied

Calibre uses a directory structure like this : AUTHOR(dir) -> TITLE(dir) -> ebook files
So, when I change the book title or the author name, the directory and the files are actually copied.

It seems that Calibre can't handle a library on a network share in zentyal 3.2rc2.
It gives me the error every time I try to rename a file. The worst thing is that I get corrupted files.

On zentyal 3.0 I had this problem sporadically, but I never got a single corrupted file.

7
So what you expect is for Zentyal to expose such option via Zentyal GUI isn't it?
If yes, then post it again in the "features requests" section as, for the time being, this doesn't exist as far as I know.
OK, I'll do it. Thank you.

Is there anything that could be done, as workaround, using group membership ?
Not that I could find.
For the moment I stay with the smb.conf.mas workaround, by defining a custom share.

Thank you again.

8
Hello everyone,

This my problem: I need to share a server directory from samba, for users in my domain (a group defined in zentyal Domain). At the same time I need to access the same folder from a deamon owned ald launched by a linux system user.
With the ACL defined from zentyal, the daemon cannot access the files.

My question: Is there a way to easily define custom ACLs for a single share?

My option now is to use the smb.conf.mas file to hardcode the custom ACLs, but is not an easy way to manage this kind of situation.

It would be easily by using a conf file (for example: /etc/zentyal/shareacls.conf), where define the custom shares ACLs.
It would be even better if we could access linux system users directly from the ACL definition page in zentyal.

EDIT: I know about the "unmanaged_acls" option in samba.conf, but manually manage ALL the ACLs is a mess for me :)

Thank you.

9
Hi, I've got a problem with my slave samba server.

One (only one) of my users is missing from translucent ldap service.
It's present in replica service, and if I launch a "getent passwd" command, I can get it listed.

Now, I have a slapcat from the server before the entry got missed. Can I restore it in some way, without recreate the user from Web UI?

The idea of recreate the user profile on Windows make me sad.

Thank you.

10
Finally, I've managed to solve 004_upgrade_ldap error:

http://forum.zentyal.org/index.php/topic,9162.msg42174.html#msg42174

This method worked for me, I hope it can help other people.

11
Hi Steve

I have too many users and groups to try this kind of approach.
But today I've tryed again with the migration script, and I've managed to make it work (at least I hope so :) ).

Now I'll explain what I've done, it's quite simple:
My Zentyal structure is composed by 1 master (only ldap) and 2 slave (one for mail and one for samba/radius).

I ran the script on my master server and it worked fine.

Then I ran the script on the mail server and it gave me the infamous 004_upgrade_ldap 255 error. But the script finished without other error messages.

Now, the fun part:
  • On slave I've launched /usr/share/zentyal-users/rejoin-slave WITHOUT remove it from the master, this way I've regained access to users/groups
  • On slave I've stopped the zentyal users service (slapd)
  • On slave I've manually launched 004_upgrade_ldap script. This one didn't work, but then I've tried this:
    I've opened a new terminal connection to the slave, in the origial terminal I launched 004_upgrade_ldap script again, and while it was running I've launched /usr/share/zentyal-users/rejoin-slave from the new terminal.
    It did the trick! Maybe you need to launch rejoin-slave a couple of times to catch the right timing, but this way the LDAP upgrade finish without errors.
  • I repeated the last point on my second slave, and it worked again.

Ok, I admit this is not the best method to achieve the goal, but I needed a way to complete the migration, and this one saved me from reinstall my servers.
Now I can add/modify/remove users and groups on my servers without problems. And all the services are up and running smoothly.

I hope this can help other people.

12
Hi sheck, sorry but I've seen this post only now

Unfortunately it seems no one of the developers know how to resolve this problem at the moment, or maybe they cannot replicate it (I really don't know, they don't reply about it...).

I'm trying to resolve it myself by testing the upgrade when I've the time.

My last test was to run a zentyal-rejoin-slave AFTER the slave upgrade. It seemed to work, infact I could see user list on my slave server.
I had not enough time to run the tests and verify if the server was really working.

Can you try it?
I think if we can ADD, REMOVE and MODIFY 2/3 users on master and slave after the upgrade, then we can call it a victory :)

I'll redo my test ASAP.

13
You can use this document as reference:
http://blogs.zentyal.org/jacalvo/2011/01/04/how-to-customize-the-configuration-files-generated-by-zentyal/

The mechanism to replace stubs file is the one for you.

14
Installation and Upgrades / Re: Install commercial SSL CA
« on: January 03, 2012, 02:19:11 pm »
The easiest way is to  (manually) overwrite the zentyal created certificates with the official/commercial ones.
In the webserver, the certificate is the same for each virtualhost you create:

/etc/apache2/ssl/apache.pem

Anyway, you can find the position of a certificate by looking into the deamon configuration files.

15
Installation and Upgrades / Re: Limiting user access to one folder
« on: December 17, 2011, 02:44:59 pm »
I usually use webdav to publish a folder for a web developer.

You can configure webdav by enabling
1) the modules you need for the protocol: mod_dav and mod_dav_fs
2) and the ones you need for authentication: mod_authn_file

Here is a sample to enable webdav in your site configuration:
Code: [Select]
<Directory /srv/www/developementsite>
#    AllowOverride All
    Order allow,deny
    Allow from all
    DAV On
    AuthType Basic
    AuthName "webdav"
    AuthUserFile /srv/www/webdav.password
    <Limit PUT POST DELETE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
        Require valid-user
    </Limit>
</Directory>

You will only need to create a password file (AuthUserFile). Look at this page for the howto: http://httpd.apache.org/docs/2.2/mod/mod_authn_file.html

This way developers will be enabled to access only /srv/www/developementsite, and the magic in webdav is that they will access using HTTP protocol, with the site URL itself.
With webdav you can mantain the default file system permissions on the web site, and use an indipendent file-based authentications system for your developers. Apache will do all the work.

Pages: [1] 2