Recent Posts
91
Installation and Upgrades / Re: PPPoE with static IP
« Last post by Siroco on November 03, 2023, 01:16:00 pm »Hi
Usually, in PPPoE connections, the IP and gateway is provided by your ISP when you connect using your username and password.
Best regards.
Usually, in PPPoE connections, the IP and gateway is provided by your ISP when you connect using your username and password.
Best regards.
92
Directory and Authentication / Which LOG Tells me that the specific user has been deleted or added in Zentyal
« Last post by Faisal Abbas on October 31, 2023, 11:57:27 am »Dear Zentyal
Please tell me where i find the logs of the users who has been deleted and added in Zentyal AD
Regards
Faisal
Please tell me where i find the logs of the users who has been deleted and added in Zentyal AD
Regards
Faisal
93
Directory and Authentication / random filesharing behaviour
« Last post by foeke on October 29, 2023, 11:20:52 am »I am installing a 7.1 Zentyal server as DC and gateway. About 30 users en a dozen shares. The clients are all freshly installed updated Win 10 pro.
I first configured the groups and then assigned the users to the groups and the groups to the shares.
This normally is pretty straight forward.
But now I have the weirdest behavior that some clients can't access the shares, even if I assign them to the user.
It seems so random. It is user related as far as I can find. (same computer, logged in on a different account can access said share, same user on an other computer still can't access the share. But since it is so random, it might be a coincidence) )
So the clients are joining the domain just fine (except one account that could log in, but after login got the message the user couldn't be logged in properly and should try to log out and in again).
They see the server and the shares but when I open them, you get the popup for other credentials, or Windows can't even find the share anymore but it is still in the list on the client.
I made some shares again in an other name, and that worked most of the times. Some shares just work as expected.
So one user can open the share, some don't. Even thought the accounts are set up exactly the same as far as I can tell.
Some possible red herrings
1. Under windows the shares seem about 90Gb even though I installed the server on a 8Tb disk and I choose "use whole disk".
2. During the install I wanted to make a share with guest access then I got the message I needed to enable the guest user.
Then I went to said guest user, and the disable option was marked but greyed out.
I went back to the share to disable the guest access, but the share still has guest access and I still see the message that I need to enable the guestuser.
I don't even know where I should start looking.
Is there some maximum amount of users to a share?
And what is supposed to happen when you have the default 500Mb limit and want to access a 7Gb share?
Any feedback where I should start would help.
Thanks in advance.
I first configured the groups and then assigned the users to the groups and the groups to the shares.
This normally is pretty straight forward.
But now I have the weirdest behavior that some clients can't access the shares, even if I assign them to the user.
It seems so random. It is user related as far as I can find. (same computer, logged in on a different account can access said share, same user on an other computer still can't access the share. But since it is so random, it might be a coincidence) )
So the clients are joining the domain just fine (except one account that could log in, but after login got the message the user couldn't be logged in properly and should try to log out and in again).
They see the server and the shares but when I open them, you get the popup for other credentials, or Windows can't even find the share anymore but it is still in the list on the client.
I made some shares again in an other name, and that worked most of the times. Some shares just work as expected.
So one user can open the share, some don't. Even thought the accounts are set up exactly the same as far as I can tell.
Some possible red herrings
1. Under windows the shares seem about 90Gb even though I installed the server on a 8Tb disk and I choose "use whole disk".
2. During the install I wanted to make a share with guest access then I got the message I needed to enable the guest user.
Then I went to said guest user, and the disable option was marked but greyed out.
I went back to the share to disable the guest access, but the share still has guest access and I still see the message that I need to enable the guestuser.
I don't even know where I should start looking.
Is there some maximum amount of users to a share?
And what is supposed to happen when you have the default 500Mb limit and want to access a 7Gb share?
Any feedback where I should start would help.
Thanks in advance.
94
Installation and Upgrades / PPPoE with static IP
« Last post by foeke on October 28, 2023, 02:51:57 pm »I wanted to replace a server with a zentyal one. The internet connection is over PPPoE but it doen not have DHCP.
How would I set the static IP and subnet/gateway in the PPPoE connection?
Cheers, Foeke
How would I set the static IP and subnet/gateway in the PPPoE connection?
Cheers, Foeke
95
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by Siroco on October 26, 2023, 01:34:36 pm »Buenas,
Cuando dices que el DNS sigue en el Windows 2008, ¿a qué te refieres? ¿A los roles FSMO referentes al DNS?
Lo que primero debes hacer es conocer los roles FSMO que están ejecutándose en los controladores de dominio.
Desde Zentyal puedes ver los roles FSMO que tiene con el comando:
Respecto a los roles FSMO referentes al DNS del dominio y DNS del bosque, probablemente no habrán sido transferidos después de usar el script de migración de Zentyal, por lo que puedes utilizar los comandos que aparecen en la documentación de Samba para transferirlos.
- https://wiki.samba.org/index.php/Transferring_and_Seizing_FSMO_Roles
Podrás ver dos opciones, transfer y seize. La recomendada es transfer siempre y cuando el antiguo servidor siga conectado a la red. El uso de transfer hará saber al antiguo servidor que ya no es el encargado de esos roles. Los comandos serían los siguientes:
Para el caso de que el servidor que tenía los roles se haya averiado y nunca más pueda estar conectado se utiliza la opción seize.
Saludos
Cuando dices que el DNS sigue en el Windows 2008, ¿a qué te refieres? ¿A los roles FSMO referentes al DNS?
Lo que primero debes hacer es conocer los roles FSMO que están ejecutándose en los controladores de dominio.
Desde Zentyal puedes ver los roles FSMO que tiene con el comando:
Code: [Select]
sudo samba-tool fsmo showRespecto a los roles FSMO referentes al DNS del dominio y DNS del bosque, probablemente no habrán sido transferidos después de usar el script de migración de Zentyal, por lo que puedes utilizar los comandos que aparecen en la documentación de Samba para transferirlos.
- https://wiki.samba.org/index.php/Transferring_and_Seizing_FSMO_Roles
Podrás ver dos opciones, transfer y seize. La recomendada es transfer siempre y cuando el antiguo servidor siga conectado a la red. El uso de transfer hará saber al antiguo servidor que ya no es el encargado de esos roles. Los comandos serían los siguientes:
Code: [Select]
sudo samba-tool fsmo transfer --role=domaindns -U administratorCode: [Select]
sudo samba-tool fsmo transfer --role=forestdns -U administradorPara el caso de que el servidor que tenía los roles se haya averiado y nunca más pueda estar conectado se utiliza la opción seize.
Saludos
96
Directory and Authentication / Need Notification if any user Attempted a wrong Password
« Last post by Faisal Abbas on October 26, 2023, 12:53:34 pm »Please suggest , i want to a notification when Zentyal AD users are attempted wrong password and user is disabled
is this possible
Regards
Faisal Abbas
is this possible
Regards
Faisal Abbas
97
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by alfonsSF on October 25, 2023, 02:58:11 am »Lo explico un poco mejor.
Teniamos Un controlador de dominio principal en W20o8 y otro secundario tambien en w2008.
El principal quedó fuera de servicio .
Montamos un zentyal y lo pusimos como secundario del 2008 secundario.
Despues migramos los roles.
Si consultamos el w2008, tiene al Zentyal como el maestro. pero zentyal está como secundario.
El DNS sigue en el 2008.
Yo quisera promocinar el zentyal a maestro o principal para poder apagar el w2008. Pero no se cómo hacerlo,
¿me puedes orientar en la dirección correcta?
Teniamos Un controlador de dominio principal en W20o8 y otro secundario tambien en w2008.
El principal quedó fuera de servicio .
Montamos un zentyal y lo pusimos como secundario del 2008 secundario.
Despues migramos los roles.
Si consultamos el w2008, tiene al Zentyal como el maestro. pero zentyal está como secundario.
El DNS sigue en el 2008.
Yo quisera promocinar el zentyal a maestro o principal para poder apagar el w2008. Pero no se cómo hacerlo,
¿me puedes orientar en la dirección correcta?
98
Other modules / Re: Enabling IDS/IPS stops internet on interface
« Last post by gabor.strama on October 24, 2023, 09:25:51 pm »Hi Guys,
Somebody can help in this case, because i wish to use the IPS.
Please help!
BR,
GáborS
Somebody can help in this case, because i wish to use the IPS.
Please help!
BR,
GáborS
99
Installation and Upgrades / Re: Zentyal 7.1 how to get TLS1.1 back?
« Last post by Siroco on October 20, 2023, 01:20:05 pm »Hi,
To make persistent changes to system configuration, Zentyal uses stubs, otherwise, when restarting a service the changes made will be lost.
- https://doc.zentyal.org/en/appendix-c.html#stubs
In the case of Dovecot, Zentyal only includes the file /etc/dovecot/extra.conf as you can see at the end of the file /etc/dovecot/dovecot.conf, so you can create that configuration file (ensure that root is used for the owner and group, and permissions are 0644). Then you can add the parameters you want to the configuration there.
You could also add new includes following dovecot doc or modify the configuration directly in the dovecot.conf.mas.
- https://doc.dovecot.org/configuration_manual/config_file/
Best regards.
To make persistent changes to system configuration, Zentyal uses stubs, otherwise, when restarting a service the changes made will be lost.
- https://doc.zentyal.org/en/appendix-c.html#stubs
In the case of Dovecot, Zentyal only includes the file /etc/dovecot/extra.conf as you can see at the end of the file /etc/dovecot/dovecot.conf, so you can create that configuration file (ensure that root is used for the owner and group, and permissions are 0644). Then you can add the parameters you want to the configuration there.
You could also add new includes following dovecot doc or modify the configuration directly in the dovecot.conf.mas.
- https://doc.dovecot.org/configuration_manual/config_file/
Best regards.
100
Spanish / Re: substiuyendo un AD win2008 por un zentyal 7.1.
« Last post by Siroco on October 20, 2023, 01:16:22 pm »Buenas,
A través de la interfaz gráfica del módulo DNS no se ven los registros sincronizados ya que son manejados por Samba. Puedes listar todos los registros de una zona con el siguiente comando.
Te dejo un enlace a la documentación oficial de Samba donde también puedes ver como agregar algún registro en caso de necesitarlo.
- https://wiki.samba.org/index.php/DNS_Administration#Delete_a_record
Para la administración de las GPO, Zentyal utiliza las herramientas RSAT desde un equipo con Windows que esté unido al dominio. Como Samba no sincroniza el directorio SysVol, necesitarás exportar dichas políticas para volver a importarlas en un equipo conectado al controlador de dominio de Zentyal.
- https://doc.zentyal.org/7.1/es/directory.html#politicas-de-grupo-gpo
Sobre cambiar Zentyal a controlador de dominio desde el panel de administración, no lo hagas porque si cambias el modo de operaciones, eliminarás toda la configuración establecida para tener que empezar de nuevo.
Saludos.
A través de la interfaz gráfica del módulo DNS no se ven los registros sincronizados ya que son manejados por Samba. Puedes listar todos los registros de una zona con el siguiente comando.
Code: [Select]
samba-tool dns query dc1.samdom.example.com <zone-name> @ ALL -U administratorTe dejo un enlace a la documentación oficial de Samba donde también puedes ver como agregar algún registro en caso de necesitarlo.
- https://wiki.samba.org/index.php/DNS_Administration#Delete_a_record
Para la administración de las GPO, Zentyal utiliza las herramientas RSAT desde un equipo con Windows que esté unido al dominio. Como Samba no sincroniza el directorio SysVol, necesitarás exportar dichas políticas para volver a importarlas en un equipo conectado al controlador de dominio de Zentyal.
- https://doc.zentyal.org/7.1/es/directory.html#politicas-de-grupo-gpo
Sobre cambiar Zentyal a controlador de dominio desde el panel de administración, no lo hagas porque si cambias el modo de operaciones, eliminarás toda la configuración establecida para tener que empezar de nuevo.
Saludos.