Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - c4rdinal

Pages: [1] 2 3 ... 5

I'm try to configure via GUI the SRV Record for our sip servers. The requirement should look like this:

SRV record for service SIP TCP
;     priority: 1  weight: 0  port: 5070  server:
; IN      SRV     1   0 5070

SRV record for the resource record (port 5070 tcp) for each of the servers. This record is used for replication services to locate other servers for replication.

I can add SRV record via the GUI but not DNS SRV resource records (RRs).

Any clue on how to achieve this?


Installation and Upgrades / Using Backup Rsync to a Local Drive
« on: February 03, 2014, 04:16:35 am »

I mounted a USB Storage with NTFS partition and use it as backup storage.

Partition worked without any issues and can save files to it as /backup directory.

Is there a way I can use RSYNC as backup method instead of Filesystem? If yes how can I accomplish this?


Hi Everyone,

I installed the latest Zentyal 3.2.3 64bit. Everything went fine except that locally, I cannot open anything on the desktop. I can access the Remote Administration but cannot run locally.

After a successful login I got:


Your Firefox profile cannot be loaded. It may be missing or inaccessible.

I tried to remove and reinstall zebuntu desktop but this doesn't fix the problem as well. Everything is updated so I don't think something is broken or something.

Any clue?


Hi Christian,

I red your Case Study on Zentyal OpenVPN and would like to thank you for sharing it. I have a question though.

After Enabling the OpenVPN Service in both sides (Zentyal Central Office and Zentyal Client), I'm assuming the Zentyal Client will get a VPN IP address from the Server as it is usually the case, right? Because this doesn't happen on my deployment.

In the Dashboard it says VPN Interface Address: Not active.

I'm looking for the logs but don't see anything. How can I verify that the VPN was established with the Remote Zentyal Client?

Thanks and looking forward for your answer.


I'm trying to configure OpenVPN using Zentyal 2.2 with Remote VPN Client for the first time following the Zentyal 2.2 Official Document.

I have 3 NIC cards. Gateway are set for Load-balancing/fail-over.

eth2 = LAN

Config Details are as follows:

Zentyal Server:
Server Port: UDP 1194
VPN Address:
Server Certificicate: vpn-companyxyz
Client Authorizaiton by common name: disabled
NAT: Checked
Allow client-to-client connection: checked
Interface to listen on: All network Interfaces

I created an Advertised network: 192.168.x.x (my LAN)

Zentyal is facing the Internet and functioning as Gateway/Firewall.
- created a Service for OpenVPN on 1194
- created a Packet filter for EXTERNAL NETWORKS TO ZENTYAL to ACCEPT OpenVPN Service to allow ANY Network
- created a Packet filter for EXTERNAL NETWORKS TO INTERNET to ACCEPT OpenVPN Server to the Internal Network from ANY Network

- Then Dowloaded client bundle and install on my Laptop. And connection to the Remote Zentyal Server. My laptop is configured with a PUBLIC IP Address. And firewall is currently OFF in Windows 7.
- Put ALL the openvpn bundle to C:\Program Files (x86)\OpenVPN\config

However, I still have this error connecting to the OpenVPN Network.

Wed Sep 12 10:01:54 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Wed Sep 12 10:02:10 2012 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Wed Sep 12 10:02:40 2012 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Wed Sep 12 10:02:40 2012 TLS Error: TLS handshake failed
Wed Sep 12 10:02:40 2012 TCP/UDP: Closing socket
Wed Sep 12 10:02:40 2012 SIGUSR1[soft,tls-error] received, process restarting
Wed Sep 12 10:02:40 2012 Restart pause, 2 second(s)
Wed Sep 12 10:02:42 2012 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Wed Sep 12 10:02:42 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Sep 12 10:02:42 2012 Re-using SSL/TLS context
Wed Sep 12 10:02:42 2012 LZO compression initialized
Wed Sep 12 10:02:42 2012 Control Channel MTU parms [ L:1574 D:138 EF:38 EB:0 ET:0 EL:0 ]
Wed Sep 12 10:02:42 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Sep 12 10:02:42 2012 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Sep 12 10:02:42 2012 Local Options hash (VER=V4): 'd79ca330'
Wed Sep 12 10:02:42 2012 Expected Remote Options hash (VER=V4): 'f7df56b8'
Wed Sep 12 10:02:42 2012 UDPv4 link local: [undef]
Wed Sep 12 10:02:42 2012 UDPv4 link remote:

Googling for the error suggests a firewall error. However, I already provided the proper firewall policy to allow OpenVPN. I even created a PORT FORWARDING rule to forward request from PORT 1194 to the Zentyal Server but of no avail.

Hope you can shed light on this.

Appreciate any help.

Thanks in advance.

Installation and Upgrades / No Internet on Bridge WAN Interface
« on: September 08, 2012, 07:17:42 am »

I'm configuring Zentyal 3.0 RC2 with the EXTERNAL Interface (ETH0) as Bridge (br1) connected to a Cisco Router and has a Private IP addresss of The LAN Interface (ETH1) is Bridged as well to br1.

br1 = = Default Gateway for

The problem is I cannot access the Internet. Is it possible to have a bridged EXTERNAL WAN interface with a Private address?

I can ping from Zentyal without problem but cannot ping the Public IP configured in Cisco. Cisco router has Internet access.

f0/1 =

I can establish IPSEC-GRE tunnel to our remote office in Germany but cannot access other network other than that. So it seems the default route is the problem...

I've done lot's of this things to resolve but can't find the solution.

I'll appreciate any thoughts on this.

Thanks alot in advanced.

Installation and Upgrades / Disabling Outbound NAT in External Interface
« on: September 01, 2012, 06:57:53 am »

I have a requirement to disable Outbound NAT on the External Interface. I'm using private IP address on the WAN interface which is bridged to one CiscoRouter  interface as LAN with IP

The LAN interface is configured for my IPSEC-GRE tunnel which is used for our Interoffice VoIP. Therefore, the External WAN interface IP should not be NATed.

How do I go about this?


First of all, congratulations for the new Upcoming release of Zentyal. Wish you all more success!!

Anyway, I have a problem configuring Trunk Interface for my network. I created a TRUNK PORT on ETH1 and two VLANs tagged as VLAN 100 and VLAN 200 in Zentyal 3.0RC1. VLANs are properly configured on my Cisco Cat 2960G switch.

In the Dashboard I have: Internet Status down, link ok

I have 2 Interfaces Bridged to my Cisco Router. (The bridge interfaces can successfully establish connection to the Router and vice-versa.)
br2 -> f0/0
br3 -> f0/1

cisco interfaces
f0/0 =
f0/1 =

VLAN Interfaces are Bridged as follows:
VLAN100 -> br2 (ETH0)
VLAN200 -> br3 (ETH3)

TRUNK Interface = ETH1

br2 =
br3 =

The problem is I got no link status with the TRUNK PORT on ETH1 interface. Therefore, I cannot establish ping to from zentyal to cisco switch or vice-versa.

Here's the /etc/network/interfaces:

auto lo br2 br3 eth2

iface lo inet loopback
    post-up ip addr add dev lo
iface br2 inet static
   bridge_ports eth0 vlan10
   bridge_stp off
   bridge_waitport 5

iface br3 inet static
   bridge_ports eth3 vlan125
   bridge_stp off
   bridge_waitport 5

iface eth0 inet manual

iface eth3 inet manual

iface vlan100 inet manual
vlan-raw-device eth1

iface vlan200 inet manual
vlan-raw-device eth1

I already have no remaining idea on how to fix this. Already googled and read the Documentation but find no clue.

Any help will be appreciated thanks and more power!


I configured Captive portal on Zentyal 2.2.4 and all went ok. Users can login via the portal, etc. I have a question though.

1. How can I configure User/Group to have different Bandwidth Quota and Period settings? I'm not sure how to achieve this using the Captive Portal General Settings. It seems the settings are applicable to all users?
2. What happened to the user when the Period has expired? Is the connection be permanently deactivated? How can I revoke deactivated accounts so users can continue using the Internet in case we extend their Internet access? Is this possible?

Please enlighten me...



I have a problem whenever I attached a file on a client with a user privilege in Yahoo Mail. Whatever I do, I cannot click the attached button. All users having a User Profile have this problem. However, this is not the case with a user with Administrator privilege. You can attach a file using the same machine but you must logged in with an Administrator account.

Anyone have experienced this

Any thoughts?


I made a fresh installation of Zentyal 2.2.1 as a VM on my Proxmox 1.9 Server. Everything when fine during the installation and without any errors. After the installation, the system restarted but I noticed that the Zentyal Graphical screen keep on flashing like its refreshing a screen and the Mozilla browser moves down without me doing anything [this always happen to me, 4x by the way, everytime Zentyal was installed as virtual machine]. I tried to open Zentyal on my remote pc using its LAN IP but it throws an error on the browser:

Unable to connect
          Firefox can't establish a connection to the server at

I ssh to the new Zentyal server and was able to login successfully. I tried to restart apache

#/etc/init.d/zentyal apache restart
 * Restarting Zentyal module: apache                                     [fail]

root@fw:~# tail -f /var/log/zentyal/zentyal.log
2011/11/24 03:06:40 INFO> EBox::Module::Service::restartService - Restarting service for module: logs
2011/11/24 03:06:40 INFO> EBox::Module::Service::restartService - Restarting service for module: events
2011/11/24 03:06:40 INFO> EBox::Config::Redis::_initRedis - Starting redis server
2011/11/24 03:43:12 INFO> EBox::Config::Redis::_initRedis - Starting redis server
2011/11/24 04:01:20 INFO> EBox::Module::Service::restartService - Restarting service for module: apache
2011/11/24 04:01:20 ERROR> EBox::Module::Service::__ANON__ - Error restarting service: Can't call method "exists" on an undefined value at /usr/share/perl5/EBox/ line 1188.
2011/11/24 04:01:25 INFO> EBox::Module::Service::restartService - Restarting service for module: apache
2011/11/24 04:01:25 ERROR> EBox::Module::Service::__ANON__ - Error restarting service: Can't call method "exists" on an undefined value at /usr/share/perl5/EBox/ line 1188.
2011/11/24 04:01:29 INFO> EBox::Module::Service::restartService - Restarting service for module: apache
2011/11/24 04:01:29 ERROR> EBox::Module::Service::__ANON__ - Error restarting service: Can't call method "exists" on an undefined value at /usr/share/perl5/EBox/ line 1188.

Any idea how to fix this?

Hi Everyone,

All our users suddenly unable to login to our Jabber server configured on our Zentyal 2.0. Zentyal is running as PDC in our environment.
The ejabbered logs /var/log/ejabbered

root@myserver:~# tail -f /var/log/ejabberd/ejabberd.log
Check the ejabberd guide for details about changing the
computer hostname or Erlang node name.

tail - f /var/log/ejabberd/ejabberd.log

=INFO REPORT==== 2011-11-10 19:49:45 ===
    application: ejabberd
    exited: {bad_return,{{ejabberd_app,start,[normal,[]]},
                         {'EXIT',"Error reading Mnesia database"}}}
    type: temporary

Jabber Domain:
This can be resolved via DNS so name resolution is not an issue. Jabber service is running as well.

Tried changing the hostname to and add to /etc/hosts '' but still unable to fix the problem

Restarting doesn't help either.

Any idea?

Hi Everyone,

I wonder if anyone was able to implement Zentyal and Cisco Site-to-Site IPSEC VPN? I'm planning to deploy but are still in the planning mode. I'm assuming this is possible or I'm just assuming too much? :(

Also, I cannot start the VPN service on the Dashboard whatever I do. I wonder if I can start VPN even when the tunnel is not yes established?

I already created the CA but still no luck starting the service.

Thanks in advance.

Installation and Upgrades / Zentyal 2.2 Backup
« on: November 04, 2011, 02:50:30 am »

I'm trying to configure Zentyal 2.2.1 to perform backup on my NAS which is currently mapped locally on my Zentyal Server as /backup.

I can write and read on the /backup device but whenever i perform the command to initiate my Initial full backup, I got this message which denies me to perform the function.

# /usr/share/zentyal-ebackup/backup-tool --full
Backup failed: Last selection expression:
     Command-line include glob: /home
 only specifies that files be included.  Because the default is to
 include all files, the expression is redundant.  Exiting because this
 probably isn't what you meant.

In Zentyal GUI, I selected Filesystem > /backup and Include /home in the backup settings.

Any thoughts?

Thanks in advance.

Installation and Upgrades / Cannot Start DHCP in Zentyal 2.2.1 [SOLVED]
« on: October 31, 2011, 10:44:59 am »

I installed Zentyal 2.2.1 on my Core2-Quad Zeon Server with 8GB Memory.

I encountered some problems starting DHCP Service. For some reasons I cannot make it to start. DHCP Service in Modules Status is checked.

Pressing the Start button in Dashboard throws in the /var/log/messages the following:

Oct 31 18:11:48 fw kernel: [ 1465.554905] type=1505 audit(1320055908.263:36):  operation="profile_replace" pid=8659 name="/usr/sbin/dhcpd3"
Oct 31 18:14:21 fw kernel: [ 1618.335250] type=1505 audit(1320056061.045:37):  operation="profile_replace" pid=9632 name="/usr/sbin/dhcpd3"

Any clue on how to fix this?


Pages: [1] 2 3 ... 5