Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - astana

Pages: [1] 2 3 ... 9
Check the event logs for group policy on a client that fails.

Check computer policy is being applied. Either it is that or something missing in your group policy setup.
Screen Saver is going to be user policy, but lockout can't be as the user isn't logged in yet so that policy won't be applied.
Check the event logs for group policy on a client that fails.

Did you use default group policy or create a new OU?
I've found using the default one was the only way to get the policy applied (older version of Zentyal so maybe no longer applies)
Another thing to test: Is it in computer policy or user policy and are they both being applied (check you windows event logs to verify)

Installation and Upgrades / Re: SARG
« on: January 19, 2015, 03:06:34 pm »
that should be:

as var/www/ is the root of the web server

edit: I see you've done that, so have a look with the console to see if any html is generated. in that folder. Also check permissions. Is the folder and contents root:www-data

Installation and Upgrades / Re: SARG
« on: January 17, 2015, 07:44:08 am »
You don't change apache unless you want it as a virtual host.
Check you /etc/sarg/sarg.conf file to see where it is generation the reports, and where it takes the data from

Zentyal is the one generating the .conf files, so on any changes (or service start/restart) it will overwrite your configuration.
Look at the .mas files which are used to generate the .conf files and put your changes in there (best to copy it to the template and update the template so upgrades don't overwrite it).
Look in /usr/share/zentyal/stubs

I've seen this many times. The cause is because websites load scripts and css files from external sites. Just do a 'view source' on a website that isn't working and check out the urls of the css and script files. You'll probably find they're pulling them in from CDN's or other random locations.
Whitelist those addresses and your pages should be fine.

Installation and Upgrades / Re: local public share
« on: October 18, 2014, 05:16:56 am »
Couple of points to ask:
1.Did you add all your user groups to the ACL of the share with read/write access?
2.Be aware the public shares used to cause problems with sysvol stopping domain computer policies being propagated (I'm not sure if this is fixed in current versions)

Installation and Upgrades / Re: How to setup HTTP Proxy with SSO
« on: October 16, 2014, 03:14:41 am »
did you check the file  '/etc/squid3/HTTP.keytab' exists?
If it does then you're set and you just need to make sure it's exported to squid.

Installation and Upgrades / Re: How to setup HTTP Proxy with SSO
« on: October 09, 2014, 09:58:28 am »
Have you tried generating the key on your windows domain controller and copying it to your zentyal machine?
See for generating keytabs. The rest of the article might also be useful.

This is obviously only useful information where your Zentyal box is not the PDC.

Your reasoning is correct.
If you have a peek in your etc/dansguardian/ conf files you'll see comments saying the blocked addresses are handled by squid.
But...some squid ACLS can be very quick (non regex ones) so I'm not sure on the actual performance hit caused soley by ACLS. Are you getting bit CPU spikes and no i/o waits, which would be indicitave of what you're supposing.
One point to check if you've got a lot of users is make sure you've got enough proxy/auth/dansguardian worker threads.
Check your squid cache.log for any 3129 connection failures as they will totally kill proxy performance.

Installation and Upgrades / Re: Should Zentyal box be DHCP server?
« on: October 06, 2014, 03:18:24 am »
You will want your server to have a static IP

Check your windows events for some clues, especially Windows Logs->Microsoft->Windows->Group Policy and of course the security logs.

sounds like DNS

Check your DNS setup from the problem machines.

Pages: [1] 2 3 ... 9