Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
Installation and Upgrades / Re: Ngninx Function in Zentyal 3.3
« on: February 20, 2014, 03:44:47 pm »
Well it might, but I am not planning on upgrading for a while.
I would not have upgraded from 2.2, but I was having issues with all of a sudden zentyal failing (caused by me and not zentyal). Also I wanted to redo how my network was setup, so I figured I would upgrade at the same time.
So in my case I think I can create some custom options.
also 3.4 does not support Zarafa so I won't be upgrading..... the only feature I currently want is network bonding
I would not have upgraded from 2.2, but I was having issues with all of a sudden zentyal failing (caused by me and not zentyal). Also I wanted to redo how my network was setup, so I figured I would upgrade at the same time.
So in my case I think I can create some custom options.
also 3.4 does not support Zarafa so I won't be upgrading..... the only feature I currently want is network bonding
17
Installation and Upgrades / Re: Ngninx Function in Zentyal 3.3
« on: February 20, 2014, 03:05:21 pm »
To be honest I would rather not change any of the existing pcs of software on zentyal. This way when there are updates I don't run into issues.
I may just install HAproxy and see if I can configure for my needs just as I used Nginx on zentyal 2.2
I may just install HAproxy and see if I can configure for my needs just as I used Nginx on zentyal 2.2
18
Installation and Upgrades / Re: HTTP Proxy configuration
« on: February 20, 2014, 02:17:55 pm »
I am also finding an issue with the transparent proxy. However mine is that when the transparent proxy is on: I can not access any local webpages or even reach local server listening on port 80
So any zentyal vhost listening on port 80 and any local webserver listening on port 80.
It is like squid is not using the zentyal DNS server.
When transparent proxy is off; everything works as it should.
I however have no issue accessing external webpages when the transparent proxy is on. In the firewall section I have port 80 blocked and in the proxy rules I do have ALLOW ALL.
So any zentyal vhost listening on port 80 and any local webserver listening on port 80.
It is like squid is not using the zentyal DNS server.
When transparent proxy is off; everything works as it should.
I however have no issue accessing external webpages when the transparent proxy is on. In the firewall section I have port 80 blocked and in the proxy rules I do have ALLOW ALL.
19
Installation and Upgrades / Re: Ngninx Function in Zentyal 3.3
« on: February 20, 2014, 01:11:39 am »
Thank you everyone.... I was afraid that the admin interface was the one tide to Nginx.
Christian I will take a look at what options I have using the Apache server on zentyal as my reverse proxy.
Christian I will take a look at what options I have using the Apache server on zentyal as my reverse proxy.
20
Installation and Upgrades / Ngninx Function in Zentyal 3.3
« on: February 19, 2014, 10:30:31 pm »
Could anyone please let me know what is the function of Nginx in Zentyal 3.3 ?
On Zentyal 2.2 I manually added Nginx and used it as reverse proxy listening on ports 998 & 998. I would than use port forwarding and forward any traffic coming from web to my zentyal on porst 80 and 443 to the reverse proxy Nginx.
I need to have this function back in zentyal 3.3, but I don't want to break the Nginx configuration.
Thank you for any help.
On Zentyal 2.2 I manually added Nginx and used it as reverse proxy listening on ports 998 & 998. I would than use port forwarding and forward any traffic coming from web to my zentyal on porst 80 and 443 to the reverse proxy Nginx.
I need to have this function back in zentyal 3.3, but I don't want to break the Nginx configuration.
Thank you for any help.
21
Installation and Upgrades / Nested folders with different ACLs ?
« on: February 11, 2014, 07:14:52 pm »
Hello everyone.
I have been running zentyal 2.2 for several years and now (after some internal testing) have switched over the latest 3.3 (fully updated). The switch went pretty well and so far I have no issues that I can see. Even have all the emails from Zarafa transferred onto the new server.
My only question is it possible to share a directory though zentyal which contains different sub-directories with different ACL's
In version 2.2 I had every directory mapped separately (zentyal/shareA ; zentyal/shareB ; etc.....) which works fine, but it just makes for a lot of different directories.
I want to know if it is possible in 3.4 to map one main directory zentya/main which contains all the sub directories. However have each subdirectory have different ACL's so that different users can access them.
zentyal/main = everyone can mount this share
zentyal/main/marketing = marketing department
zentyal/main/engineering = engineering department
Is this possible ?
I have been running zentyal 2.2 for several years and now (after some internal testing) have switched over the latest 3.3 (fully updated). The switch went pretty well and so far I have no issues that I can see. Even have all the emails from Zarafa transferred onto the new server.
My only question is it possible to share a directory though zentyal which contains different sub-directories with different ACL's
In version 2.2 I had every directory mapped separately (zentyal/shareA ; zentyal/shareB ; etc.....) which works fine, but it just makes for a lot of different directories.
I want to know if it is possible in 3.4 to map one main directory zentya/main which contains all the sub directories. However have each subdirectory have different ACL's so that different users can access them.
zentyal/main = everyone can mount this share
zentyal/main/marketing = marketing department
zentyal/main/engineering = engineering department
Is this possible ?
22
Installation and Upgrades / Re: Zentyal y Hamachi
« on: August 15, 2013, 04:35:43 am »
If you are able to resolve the webpage by name when you are connected on the local lan, but not able to resolve the page by name (only by IP) when connected through VPN it is possible that the DNS server is not being pushed through to the client.
Normally in my case I run OpenVPN as administrator and I also go to control panel/ network sharing center
I open the TAP interface and go to properties
From there I find Internet Protocol Version 4 (TCP/IPv4) .... change obtain DNS server address automatically to use the following DNS server address (In your case it would be 192.100.1.1)
This typically allows me to resolve internal websites by name. Without this I can only get to the websites by typing in the IP.
Whether this is the proper way to get name resolution to work, but it works for me.
Normally in my case I run OpenVPN as administrator and I also go to control panel/ network sharing center
I open the TAP interface and go to properties
From there I find Internet Protocol Version 4 (TCP/IPv4) .... change obtain DNS server address automatically to use the following DNS server address (In your case it would be 192.100.1.1)
This typically allows me to resolve internal websites by name. Without this I can only get to the websites by typing in the IP.
Whether this is the proper way to get name resolution to work, but it works for me.
23
Installation and Upgrades / Re: Zentyal y Hamachi
« on: August 14, 2013, 08:40:13 pm »
You have to make sure you are running the VPN client as administrator. If you don't than it does not configure the routes correctly. Also in my case I go into the settings on the clients vpn network connection and manually configure the DNS server as zentyal.
This allows me to resolve webpages when I am connected through VPN as if I was connected on the local lan.
1) Are you able to resolve your site if you are on the local lan? example.com work from a machine on the lan using zentyal as its DNS server?
This allows me to resolve webpages when I am connected through VPN as if I was connected on the local lan.
1) Are you able to resolve your site if you are on the local lan? example.com work from a machine on the lan using zentyal as its DNS server?
24
Installation and Upgrades / Re: Zentyal y Hamachi
« on: August 14, 2013, 02:55:41 pm »
Are you trying to create a VPN connection to your zentyal server from a remote location?
That clients needs to be able to see a local webpage (stored on zentyal or internal network) using the name www.example.com in your internet browser?
However currently when you make the connection you can only access this webpage by typing the IP..... ?? Am I understanding you correctly ?
Also is your client a windows machine ?
That clients needs to be able to see a local webpage (stored on zentyal or internal network) using the name www.example.com in your internet browser?
However currently when you make the connection you can only access this webpage by typing the IP..... ?? Am I understanding you correctly ?
Also is your client a windows machine ?
25
Installation and Upgrades / Re: Migrating Clients from old to new Zentyal ??
« on: August 09, 2013, 04:42:36 pm »
Half_life I am very interested in what you are doing.... since this is the exact situation I am in as well. I would love for my users to not loose their emails.
Now to the second part of my question: Are your users using windows 7 machines or something else?
If they use windows 7 machines and you are not using roaming profiles.... how are you planning on switching them to the new zentyal version? When they log in the first time a new profile will be created on the windows machine domain/user so the clients will loose their previous settings or data on the desktop.
Now to the second part of my question: Are your users using windows 7 machines or something else?
If they use windows 7 machines and you are not using roaming profiles.... how are you planning on switching them to the new zentyal version? When they log in the first time a new profile will be created on the windows machine domain/user so the clients will loose their previous settings or data on the desktop.
26
Installation and Upgrades / Re: Migrating Clients from old to new Zentyal ??
« on: August 07, 2013, 09:07:27 pm »
Thanks Christian and Half_life
I will look into both options. Currently my clients only use the webaccess part for email and not a local email client, but maybe I should add one.
Now do you have any idea how to migrate the local user profile on each machine to the new domain? I don't want the users to loose their settings, favorites or any folders they might have on their desktop.
I will look into both options. Currently my clients only use the webaccess part for email and not a local email client, but maybe I should add one.
Now do you have any idea how to migrate the local user profile on each machine to the new domain? I don't want the users to loose their settings, favorites or any folders they might have on their desktop.
27
Installation and Upgrades / Migrating Clients from old to new Zentyal ??
« on: August 07, 2013, 04:51:15 pm »
I currently have a zentyal 2.2 system running. However once zentyal 3.2 comes out I was thinking of making the migration. I don't mind having to recreate all the firewall rules and special custom features I have done to my 2.2 installation. However I have some questions on how I would migrate zarafa, clients and their work stations.
My zentyal 2.2 machine has the users and groups module running. I have 10 windows 7 machines that authenticate their local profiles against the zentyal server (domain is zentyal.lan). The total client count is actually around 15 people, but I do not use roaming profiles.
Also each client has a zarafa email account. Zarafa MySQL database gets backed up every night using a script.
When I switch to Zentyal 3.2 I know that I will have to create a new domain and probably recreate all the users. Does anyone know how I would migrate each users local profile on each windows 7 machine to the new domain. I don't want the users to loose any data they might have saved on their desktop.
My second question is how would I get the clients emails back. I don't think that a zarafa MySQL restore will work since this will be a completely different system.
Since I have very few users I don't mind having to migrate each user manually, but I just need some direction.
For any other data stored on zentyal I will use my backups to restore it (shared folder data and any files clients saved on their network folder).
My zentyal 2.2 machine has the users and groups module running. I have 10 windows 7 machines that authenticate their local profiles against the zentyal server (domain is zentyal.lan). The total client count is actually around 15 people, but I do not use roaming profiles.
Also each client has a zarafa email account. Zarafa MySQL database gets backed up every night using a script.
When I switch to Zentyal 3.2 I know that I will have to create a new domain and probably recreate all the users. Does anyone know how I would migrate each users local profile on each windows 7 machine to the new domain. I don't want the users to loose any data they might have saved on their desktop.
My second question is how would I get the clients emails back. I don't think that a zarafa MySQL restore will work since this will be a completely different system.
Since I have very few users I don't mind having to migrate each user manually, but I just need some direction.
For any other data stored on zentyal I will use my backups to restore it (shared folder data and any files clients saved on their network folder).
28
Installation and Upgrades / Re: Is it correct way to configure bandwidth ?
« on: March 12, 2013, 11:52:38 am »
I found it really depends on how you setup the rules (zentyal 2.2). You have to look from the clients view of how the traffic flows and create new services for that.
Take example FTP (port 21) You want to control download rate
Your client connects from some random port to port 21 on some other system. The internal interface of zentyal sees traffic flowing from some location (port 21) to client (random port). You will need to create a service (ex. FTP download) which says destination port any and source port 21.
Now if you want to control upload
Your service will need to be (ex. FTP upload) which says source port 21 and destination port any. You would add this service to the external interface, which would see traffic flowing from source port 21 to some destination on any port.
I have setup rules like this for subsonic, plex, ftp, http and some other services running on both zentyal and on other servers in my network. From what I can see everything is working properly. Setting up the rules was the tricky part.
Take example FTP (port 21) You want to control download rate
Your client connects from some random port to port 21 on some other system. The internal interface of zentyal sees traffic flowing from some location (port 21) to client (random port). You will need to create a service (ex. FTP download) which says destination port any and source port 21.
Now if you want to control upload
Your service will need to be (ex. FTP upload) which says source port 21 and destination port any. You would add this service to the external interface, which would see traffic flowing from source port 21 to some destination on any port.
I have setup rules like this for subsonic, plex, ftp, http and some other services running on both zentyal and on other servers in my network. From what I can see everything is working properly. Setting up the rules was the tricky part.
29
Installation and Upgrades / Re: General Samba4 domain question
« on: February 20, 2013, 03:44:16 am »
Thanks for the answer half_life
More and more I wondering why I would upgrade to Zentyal 3.0 from 2.2
The group policy is nice and so is the SSO, but after that I am not sure what the benefits are for me......... maybe improved performance and reliability...
More and more I wondering why I would upgrade to Zentyal 3.0 from 2.2
The group policy is nice and so is the SSO, but after that I am not sure what the benefits are for me......... maybe improved performance and reliability...
30
Installation and Upgrades / General Samba4 domain question
« on: February 19, 2013, 10:05:35 pm »
I read the new published instructions on how to setup a standalone zentyal server with samba4.
In the instructions it says that it is very important to configure the proper domain name which will be used by samba4 module.
In the instructions it gave the domain as zentyal-domain.lan
It later shows that this domain is pushed onto the windows7 clients through DHCP.
My network however does not have one single domain name. I use Vlan's to segregate my lan into individual zones. Each zone has its own domain name: Control.lan ; home.lan ; wifi.lan, guest.lan etc.... several of the domains need to have the clients connected to the domain controller. How would I do this with samba4? Is it possible to have a segmented setup like this and still connect it properly to the domain controller?
In the instructions it says that it is very important to configure the proper domain name which will be used by samba4 module.
In the instructions it gave the domain as zentyal-domain.lan
It later shows that this domain is pushed onto the windows7 clients through DHCP.
My network however does not have one single domain name. I use Vlan's to segregate my lan into individual zones. Each zone has its own domain name: Control.lan ; home.lan ; wifi.lan, guest.lan etc.... several of the domains need to have the clients connected to the domain controller. How would I do this with samba4? Is it possible to have a segmented setup like this and still connect it properly to the domain controller?