Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - vshaulsk

Pages: [1] 2 3 ... 31
Installation and Upgrades / Re: upgrade 6.2 to 7.0 - CA problem
« on: March 19, 2021, 12:10:31 pm »
Has zentyal-ca 7.0.1 been pushed out yet ?   

Installation and Upgrades / Re: upgrade 6.2 to 7.0 - CA problem
« on: March 15, 2021, 12:21:26 am »
No that it helps, but I have the same issue

Other modules / Re: Open VPN wont connect after about 4 weeks
« on: May 29, 2019, 10:41:47 pm »
I have the same issue ....... it is frustrating enough that I am thinking of moving away from Zentyal

Installation and Upgrades / Re: Where should this sit on my network?
« on: January 25, 2019, 08:17:23 pm »
I thought more about my setup last night and decided to move the DHCP server over to Zentyal.

DHCP - Zentyal
- Gateway - PFsense
DNS1 - Zentyal PDC
DNS2 - Zentyal BDC

The clients are not longer using pfsense as the DNS server

Installation and Upgrades / Re: Where should this sit on my network?
« on: January 25, 2019, 02:14:33 am »
The best would just use the Zentyal DHCP server and only use the zentyal DNS or backup BDC DNS.  My setup is probably not fully compliant, but it works.

each one of my proxmox servers has a intel quad NIC with one port for Wan, LAN, DMZ  + the Dell built in NIC which has two 1gig ports and 2 SFP+ ports.   

Since for me PFsense is virtual, I bridge the intel quad nic to the pfsense vm and this allows the vm to move the different nodes if one nodes goes down or reboots.

Zentyal PDC is replicated between two nodes and also moves if one node fails or restarts.  Now if both nodes fail the BDC is on the third node.

In general:  PFsense = 3 network interfaces and Zentyal = 2 network interfaces

Installation and Upgrades / Re: Where should this sit on my network?
« on: January 24, 2019, 05:08:43 pm »
Currently my DHCP server is my PF-Sense firewall, but Zentyal would also work.

My DMZ has no DHCP server as everything there is statically assigned

On my Lan the PFsense server handles DHCP
- Gateway = Pfsense
- DNS1 = Zentyal PDC
- DNS2 = Zentyal BDC
- DNS3 = Pfsense

All of my servers are static, with only client computers (Windows PC's, tablets, phones, TV's, etc...) receive a addresses through DHCP

I have a Proxmox 3 node cluster on 10Gb network using local SSD, NVME and central storage (ISCSI, SMB, NFS) via two Freenas Storage servers
- PFSense, Zentyal and all the other servers run virtually in the cluster with the important ones setup with High Availability

Installation and Upgrades / Re: Where should this sit on my network?
« on: January 22, 2019, 03:19:17 pm »
My answer is both.

In my network I have a pfsense firewall with one interface for LAN and one DMZ;
The Zentyal Box has one interface to LAN and one to DMZ

The DMZ side has all the ports locked down except the ones I need ..... vpn, smtp, http/https (for the email webui).

In my pfsense, I have my SMTP port forwarded to zentyal on the DMZ interface
I also run HA reverse proxy on the pfsense firewall for the email webui of zentyal in DMZ.
- I have a wildcard certificate on pfsense which is used through the reverse proxy and provided certified SSL encryption for the zentyal email gui (SSL Labs A+ results)

Installation and Upgrades / Re: How to install IPS/IDS in zentyal 5.0.7
« on: December 05, 2017, 01:10:30 am »
I followed your instructions and when I installed the dependencies the system gave me an error.

Zentyal stopped working and would not come backup after reboot.

I had to bring the VM back from last nights backup.
Not a big deal and will try again to see if I can figure out the error

Email and Groupware / Re: SOGo 3.2.1 "No mailbox selected"
« on: June 21, 2017, 04:34:08 pm »
I had this issue originally and I had to enable either POP or IMAP in the mail module. ..... don't remember which one has to be turned on in the mail module.  If you are just trying to use POPs or IMAPs it was not working for me.

Not sure if that is how it should work, but this is what I did to make it work.

I have joined my ZD5 instance to my ZD4.2 Domain controller

The credentials I used are the ones I use when joining a workstation to the domain

The ZD5 instance shows up as second domain controller;  At this point in time I still am running the 4.2 and have not done anything further in my testing

My setup is this way: (ISP provided router) - eth0 zentyal - eth1zentyal - netgear router setup as a switch for LAN

In this scenario zentyal acts as the gateway, DNS, NTP, WINS and DHCP server for my lan. 

I have marked zentyal eth0 as external and eth1 and internal (both are assigned a static address).  Make sure you can access your ISP router and the internet directly from Zentyal.

For the LAN side my setup is as follow:  eth1 zentyal is plugged into the LAN port (does not work when plugged into the WAN port) of my netgear router.  Netgears DHCP function is turned off and the IP range is starts one number off from my zentyal eth1 IP address (zentyal IP ..... netgear range starts

The Zentyal DHCP server is turned active in modules.  It is set for eth1.  I have set the gateway, NTP, WINS (optional) to zentyal

You also have to add a range, which in my case is -

this should allow you to connect the LAN work stations.  They should be getting an IP from the Zentyal DHCP server and they should show Zentyal eth1 IP as the gateway, DNS.  If this is the case, try to ping or connect to a service running on the zentyal server ..... admin page for instance or FTP.

If this is working, but you still can't reach the internet through the regular port 80 or 443.... check your firewall rules to make sure you allow traffic from LAN to external networks through those ports.

In this scenario zentyal should work as a gateway for your lan and provide DHCP, DNS services.

Installation and Upgrades / Re: Backup Configuration
« on: March 05, 2014, 04:01:52 pm »
I saw this as well when I created my first backup.

I think you have to specifically add included directories.

I added /home ; /etc ; /srv ; /var/www ; /var/lib/zarafa to my backups

Installation and Upgrades / Re: Zentyal LDAP and NAS (Openmediavault)
« on: February 27, 2014, 08:58:14 pm »
Christian.... how would I increase LDAP log level if you know right off the top of your head.

I did change the root DN and passwords to match the new information in the zentyal 3.3 LDAP section, but nothing ________
Also in zentyal 3.3 it has a read only DN & pass along with the regular DN & pass... tried them both, but no luck.

For the samba issue, I did add zentyal IP as the wins server, but I am not really sure how to add OMV to the domain.  The only fields I can modify are workgroup (I put in my samba domain there) and wins server (zentyal IP).....

Installation and Upgrades / Zentyal LDAP and NAS (Openmediavault)
« on: February 27, 2014, 08:38:14 pm »
I have zentyal 3.3 installed and am trying to connect my NAS to its LDAP.  I have opened port 390 and restricted connect to only allow my NAS IP.

When I used to run zentyal 2.2 I had no issues connecting openmediavault to the zentyal LDAP server (port 389 in old version).  However when I follow the same steps with the newest version of zentyal I can not get it to connect.  I show in the firewall logs that the connection is accepted (at firewall level), but I don't see a user list in the openmediavault interface.

Is there something different about the LDAP server in zentyal 3.3 ?

On a seperate note when I try to add the NAS to the Samba/Cifs network it is not being seen by network explorer, so it does not show up as browsable.  I am wondering if Samba4 is the reason for the my LDAP issues and also why the NAS is not showing up for the windows machines..

Thank you !!

Installation and Upgrades / Re: HTTP Proxy configuration
« on: February 20, 2014, 07:19:38 pm »
normally there is a default rule which allows access to everyone

when you click on proxy in the left hand side of the dashboard it should give you some sub-menu choices.

One of them should be rules or something like that.  It should have a rule that basically allows everyone to access the proxy at any time.

Pages: [1] 2 3 ... 31