Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ATT1

Pages: 1 ... 3 4 [5] 6 7 8
61
Hello,

I have configured and installed the domain called "companyname.lan" ; but under "DNS-> Domains" I actually have two domains:
a) Companyname.lan ......  ("redcross symbol" no dynamic domain)  (action: you can delete it)
b) zentyal-domain.lan .....  ("green symbol" :   YES , dynamic dom.) (action: you CANNOT delete it - greyed off)

Why cannot I delete zentyal-domain.lan - do I really need it if I only want "companyname.lan" ?

Self-installed duplicity complains about a domain name and host name mismatch:

root@srv01:/root# duplicity /mnt/data1/shares ftp://ba1@192.168.0.230/shares_backup
NcFTP version is 3.2.5
Synchronizing remote metadata to local cache...
Copying duplicity-full-signatures.20151009T161747Z.sigtar.gpg to local cache.
Copying duplicity-full.20151009T161747Z.manifest.gpg to local cache.
Copying duplicity-inc.20151009T161747Z.to.20151010T131843Z.manifest.gpg to local cache.
Copying duplicity-new-signatures.20151009T161747Z.to.20151010T131843Z.sigtar.gpg to local cache.
Last full backup date: Fri Oct  9 18:17:47 2015
Fatal Error: Backup source host has changed.
Current hostname: srv01.zentyal-domain.lan
Previous hostname: srv01."companyname".lan

How do I change the hostname back to "companyname.lan" and NOT to "zentyal-domain.lan" ?
Preferably an easy way without deleting all users etc?


62
For example, we have some users  "u1 u2 u3" which are in group limitedusers. Anyway they should have access to a share called "common".

/dev/mapper/vg2-lv2_crypt on /mnt/data1 type ext4 (rw,acl,user_xattr)

root@srv01:/mnt/data1# ls -al
total 48
drwxrwx---+  5 root          root  4096 Okt 15 13:52 .
drwxr-xr-x   6 root          root  4096 Okt 12 14:50 ..
drwxrwxrwx+  2 administrator adm   4096 Okt 15 14:04 common           -> this one is supposed to be shared for lots, but not all, of the users
drwxrwx---+  2 root          root 16384 Okt 11 12:08 lost+found
drwxrwx---+ 12 administrator adm   4096 Okt 15 10:15 shares

Proper rights?

root@srv01:~# pwd
/home/ad
root@srv01:~# cd /mnt/data1/
root@srv01:/mnt/data1# ls -al
total 48
drwxrwx---+  5 root          root  4096 Okt 15 13:52 .
drwxr-xr-x   6 root          root  4096 Okt 12 14:50 ..
drwxrwxrwx+  2 administrator adm   4096 Okt 15 14:04 common
drwxrwx---+  2 root          root 16384 Okt 11 12:08 lost+found
drwxrwx---+ 12 administrator adm   4096 Okt 15 10:15 shares

root@srv01:/mnt/data1# getfacl common/
# file: common/
# owner: administrator
# group: adm
user::rwx
user:administrator:rwx
user:guest:rwx
user:3000002:rwx
group::rwx
group:adm:rwx
group:domain\040admins:rwx
group:domain\040users:rwx
group:domain\040guests:rwx
group:3000002:rwx
mask::rwx
other::rwx
default:user::rwx
default:user:administrator:rwx
default:user:guest:rwx
default:user:3000002:rwx
default:group::rwx
default:group:adm:rwx
default:group:domain\040admins:rwx
default:group:domain\040users:rwx
default:group:domain\040guests:rwx
default:group:3000002:rwx
default:mask::rwx
default:other::rwx

So the rights look proper. In the webinterface:  "shares -> common" :

Gruppe: Domain Users    Lesen und Schreiben    
Gruppe: limitedusers    Lesen und Schreiben    
User: cz    Lesen und Schreiben    
User: sj    Lesen und Schreiben

Despite that, users "cz" and "sj" cannot read the share. If they try to access it, the Win7 client says "you have no rights to access \\srv01\common. Ask the administrator."

root@srv01:/mnt/data1# ls -al /home/samba/
total 16
drwxrwx---+  4 root domain users 4096 Okt 11 12:52 .
drwxr-xr-x  16 root root         4096 Okt 11 15:27 ..
drwxrwx---  19 root domain users 4096 Okt 11 16:28 profiles
drwxrwx---+  4 root domain users 4096 Okt 15 13:52 shares
root@srv01:/mnt/data1# ls -al /home/samba/shares/
total 32
drwxrwx---+ 4 root          domain users 4096 Okt 15 13:52 .
drwxrwx---+ 4 root          domain users 4096 Okt 11 12:52 ..
-rw-r--r--  1 root          root          462 Okt 15 11:00 acl_common2
-rw-r--r--  1 root          root          460 Okt 11 17:17 acl_dir_shares2_ok
-rw-r--r--  1 root          root          460 Okt 15 10:58 acl_shares2
lrwxrwxrwx  1 root          root           17 Okt 15 13:52 common -> /mnt/data1/common
drwxrwx---+ 2 administrator adm          4096 Okt 11 17:13 shares2

Any help is greatly appreciated.

63
The story so far:

We had a Zentyal server 3.5, we upgraded to 4.0. The upgrade seemed to work. Then we upgraded to 4.1. That one made lots of troubles. So we had no other options as to :
* save all mails from /var/vmail into one large TAR file
* save important data from /home/samba/profiles
* reinstall Zentyal 4.1 fresh from CD on the server
* manually add the same (luckily few) users
* re-configure domain, shares, users, fetching external mail for users.
* get back the /var/vmail file with the old user mails. Set ACL rights for the shares properly by hand (using chown, chmod, setfacl)

This worked almost neat so far, with the notable exception that we had to apt-get some packages by hand, otherwise we could not install mail/groupware and openchange server (for full details , see : https://forum.zentyal.org/index.php/topic,26713.0.html )

Anyway, we have an almost neat working Zentyal server now, who properly fetches external mails (totally necessary) and who properly gives out the samba shares and is the master of our windows domain, so people can log on their win7 clients anywhere in the local net.

The only problem is: It only works perfectly for ADMIN USERS, which are in the group "Domain Masters" (if I remember that name correctly).
Normal users, who are just in the (self-added) group "normalusers" or "limitedusers" or "pureemail" have the following problems:

* Login on a Win7 client almost always results in a warning that "you are logged in with a temporary profile".
* Lots of sync problems between the profiles in general
* External mails are not fetched properly.

So if anyone has a clue how to fix these sync problems and "temp profile" problems etc.etc. please let me know. I have the vague feeling it might have to do with insufficient rights or misconfigured rights, but I could be mistaken. Is there any option to edit what rights the normalusers should have?

64
Can you tell me - can you copy/paste a list of which deb archives to install ?

65
I finally found out what to do to add a proper crypted drive to the boot menu:
* properly install the drive with cryptsetup luksformat (options) and cryptsetup luksOpen.
* make file system on crypted drive  : mkfs.ext4 /dev/mapper/"name_of_crypted_drive"
* get blkid of crypted drive with command "blkid"
* add "name of crypted drive" and blkid to /etc/crypttab
* add mountpoint and mount options to /etc/fstab i.e.
/dev/mapper/"name_of_crypted_drive" /mnt/yourMountpoint  Your_mount_options
* update the bootloader with : "update-initramfs -u -k all"

Finished!


66
ui, that was a hassle.
It seems that the installer's partition menu decided to write something to the file system, despite I clearly told him "DO NOT TOUCH this harddisk , only ask for its crypt password when booting!"
I should probably have never assigned to it a "volume group 3 , crypted" . I did not format it in the partition menu.
Despite that, adding it to the VG3 volumegroup seems to have touched the harddisk badly.
Anyway:
                   vgchange -a n vg3
                   vgremove vg3
removed the never-used volumegroup3.
Then I was able to do a
              fsck.ext4 /dev/mapper/crypted_drive
took a while, found awfully many bugs, but restored the file system!
Then I did a
             mount -t ext4 /dev/mapper/crypted_drive /mnt/rescue_dir
and I could access nearly all data. YAY! :)

I specifically had to add the "-t ext4" parameter or it would spurt some error at me. (edit: addendum: namely, the same error as above: "mount: unknown filesystem type 'LVM2_member'")


67
At my place, openchange suddenly installed, but I cannot exactly tell why or what I was doing in the command line.....
I could have sworn they changed something in the repositories whilst I was installing on sunday!  :)
I just say: Various things I did in the command-line, quoted from bash-history:



apt-get install build-essential autoconf automake ccache pkg-config python python-dev libacl1-dev
apt-get install git flex bison docbook-xsl xsltproc
apt-get install libpopt-dev libical-dev libmagic-dev libboost-thread-dev zlib1g-dev libmysqlclient-dev
apt-get install libsqlite3-dev mysql-server python-mysqldb libevent-dev libparse-pidl-perl
apt-get install libncurses5 libncurses5-dev libpcap0.8 libpcap0.8-dev
apt-get install doxygen
apt-get install libsubunit-dev libcppunit-dev check gawk
apt-get install python-memcache
cd src
mkdir src
cd src
wget http://www.packetfence.org/downloads/SOGo/Ubuntu/pool/trusty/o/openchange/openchangeserver_2.4-zentyal6_amd64.deb
dpkg -i openchangeserver_2.4-zentyal6_amd64.deb
apt-get install libmapistore0
cd /tmp/
apt-get install mc
apt-get -f install mc
apt-get install -f libgpm2
apt-get -f install libgpm2
apt-get -f install openchangeproxy
apt-get -f install libmapi0
apt-get update
apt-get upgrade
dpkg --configure -a
apt-get install
apt-get -f install
dpkg --configure -a
w
apt-get install mc

..... so, one or serveral of these magic commands and a LOT of re-clicking on the "Install this software now" button in the web config menu finally did it for me.
I won't start the OpenChange service tho. Sounds too much like a hassle for me.

68
...eh.... trying to manually mount the drive as usual, I get errors.....
cryptsetup luksOpen /dev/sdb1 public_crypt
mount /dev/mapper/public_crypt /mnt/data2

mount: unknown filesystem type 'LVM2_member'

Eh.... how to fix that?

69
Hello,

I have installed Zentyal 4.1 - suddenly it works fine, after the xth reinstall. I dont know why.
At the Zentyal install, I added two crypted partitions and they work just fine, the main "/" directory is crypted as well as another mounted partition from sda2 to /mnt/data.
The bootloader (?) asks me for the 2 passwords whilst booting and it simply works. Great.
But: I want to add another harddrive,  /dev/sdb, it contains one large crypted partition, /dev/sdb1 , and I want to modify the bootloader so that it also asks me for the password of this (third) crypted partition.
It is a LUKS crypted partition, but it was made with a former, older Zentyal.

I somehow could not recognize it during the installation process, and the installer always said he wanted to format that drive, and I dont want to format it, I want to use it normally.

So how do I add that old drive/partition (/dev/sdb1, crypted) to the existing bootloader?

70
Ok so I installed some tools..... I now have AR

but:

root@srv01:~/src# dpkg -i openchangeserver_2.4-zentyal6_amd64.deb
Vormals nicht ausgewähltes Paket openchangeserver wird gewählt.
(Lese Datenbank ... 72659 Dateien und Verzeichnisse sind derzeit installiert.)
Vorbereitung zum Entpacken von openchangeserver_2.4-zentyal6_amd64.deb ...
Entpacken von openchangeserver (3:2.4-zentyal6) ...
dpkg: Abhängigkeitsprobleme verhindern Konfiguration von openchangeserver:
 openchangeserver hängt ab von openchangeproxy; aber:   ("depends on openchangeproxy")
  Paket openchangeproxy ist nicht installiert.                        "not installed"
 openchangeserver hängt ab von libmapiproxy0; aber:        "depends on lib......"
  Paket libmapiproxy0 ist nicht installiert.                             "not installed"
 openchangeserver hängt ab von libmapistore0; aber:          "depends on "
  Paket libmapistore0 ist nicht installiert.                              "not installed"

dpkg: Fehler beim Bearbeiten des Paketes openchangeserver (--install):
 Abhängigkeitsprobleme - verbleibt unkonfiguriert
Fehler traten auf beim Bearbeiten von:
 openchangeserver
root@srv01:~/src# apt-get install libmapistore0
Paketlisten werden gelesen... Fertig
Abhängigkeitsbaum wird aufgebaut.
Statusinformationen werden eingelesen.... Fertig
Probieren Sie »apt-get -f install«, um dies zu korrigieren:
Die folgenden Pakete haben unerfüllte Abhängigkeiten:
 libmapistore0 : Hängt ab von: libmapi0 soll aber nicht installiert werden  "should not be installed"
                 Hängt ab von: libmapiproxy0 soll aber nicht installiert werden "should not be installed"
                 Hängt ab von: libmemcached10 soll aber nicht installiert werden
 openchangeserver : Hängt ab von: openchangeproxy soll aber nicht installiert werden
                    Hängt ab von: libmapiproxy0 soll aber nicht installiert werden
E: Unerfüllte Abhängigkeiten. Versuchen Sie »apt-get -f install« ohne Angabe eines Pakets (oder geben Sie eine Lösung an).
root@srv01:~/src#

.....

Meh, this is hard.

71
Very nice, but I dont even have the "ar" depacker for DEB files installed on a fresh machine.
Can you help me...? Where to find "ar" ?

72
i have a bug that is repeatably happening.
After installing Zentyal 4.1 and adding users, and domains, these users cannot log in in their freshly added win7-domain.
They get an error: "the security database on this server does not contain an account for this workstation trust"
(german error: "Die Sicherheitsdatenbank auf dem Server enthält kein Computerkonto für diese Arbeitsstationsvertrauensstellung" (what a word!  :o ) )

FIX found:

* service samba stop
* service samba-ad-dc stop
* service bind9 stop    (may be useless tho, but helped anyway)
* samba-tool domain provision -> now just press return all the time to re-enter your stuff
* service bind9 start
* service samba-ad-dc start
* service samba start

I hope this helps anyone.

I can login to the windows7 workstation with my Zentyal account now, but despite this, there is a large tendency to use a temporary profile. I will now remove from my Win7-client the registry keys from the old zentyal accounts and the temporary dirs.


73
ui shit I made more errors on the way. :-(
I added a "additional domain controller" - being the same as zentyal.
That was a bad idea :-(
Now because of that I cannot do anything... I cannot add the client coz Zentyal tries to import something from himself from the domain controller2. :-(
Can I fix this?
but suddenly I can ping zentyal.attdomain.lan, dunno why. Restarted samba and bind9 several times.

74
Hello,
I have a little DNS quirk. I can ping "zentyal" from a client in the same local net, but I cannot ping "zentyal.mydomain.lan". If I try to, I immidately get "host not found".
Once I tried to "service restart bind9" on the zentyal server and it helped, but now I try to do this again, but it does not work anymore. The ping to "zentyal.mydomain.lan" still fails.
Any help?
Zentyal version is 4.1.
Edit: Oh, I just got a mail saying "Samba is not yet provisioned". Hm. Maybe its a clue. So, what to do?


75
Hello,

I just installed a fresh Zentyal 4.1 server. I configured network correctly,  I can reach internet.
I also can reach the server config at https://server:8443
But I cannot install some software.

In the software center, I am offered to install:
Mail and Groupware    4.1.3    
OpenChange Server    4.1.3

but when I tick them on, I get errors:

Openchange server install says:

"Einige Pakete konnten nicht installiert werden. Das kann bedeuten, dass
Sie eine unmögliche Situation angefordert haben oder, wenn Sie die
Unstable-Distribution verwenden, dass einige erforderliche Pakete noch
nicht erstellt wurden oder Incoming noch nicht verlassen haben.
Die folgenden Informationen helfen Ihnen vielleicht, die Situation zu lösen:

Die folgenden Pakete haben unerfüllte Abhängigkeiten:
zentyal-openchange : Hängt ab von: openchangeserver (>= 3:2.4-zentyal3) soll aber nicht installiert werden"

Similarly, I get the error - when installing openchangeserver:

"Einige Pakete konnten nicht installiert werden. Das kann bedeuten, dass
Sie eine unmögliche Situation angefordert haben oder, wenn Sie die
Unstable-Distribution verwenden, dass einige erforderliche Pakete noch
nicht erstellt wurden oder Incoming noch nicht verlassen haben.
Die folgenden Informationen helfen Ihnen vielleicht, die Situation zu lösen:

Die folgenden Pakete haben unerfüllte Abhängigkeiten:
zentyal-mail : Hängt ab von: zentyal-openchange soll aber nicht installiert werden"

So the error is in both cases, zentyal-openchange should not be installed. Why not? How can I get past the error and install some mail, including mail fetching from external mails, for users?

Pages: 1 ... 3 4 [5] 6 7 8