Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
1
Installation and Upgrades / Re: Multiple Active Directory Zentyal Slaves
« on: March 06, 2012, 07:48:40 pm »
Hi Jsalamero and thank you
I wasnt very clear - that is in fact how I ended up configuring this project. When I allowed all the slaves to sync directly with the server 2008, only the very first server configured synced correctly. For some reason I didnt have time to look into, all the other slaves would only pull users and groups, but no passwords for users. So the ldap master route is working fine for me and im actually busy deploying this cofiguration at the customer as we speak.
Where can I find out more about how your plugin for the active directory server actually works?
Best Regards
Craig
I wasnt very clear - that is in fact how I ended up configuring this project. When I allowed all the slaves to sync directly with the server 2008, only the very first server configured synced correctly. For some reason I didnt have time to look into, all the other slaves would only pull users and groups, but no passwords for users. So the ldap master route is working fine for me and im actually busy deploying this cofiguration at the customer as we speak.
Where can I find out more about how your plugin for the active directory server actually works?
Best Regards
Craig
2
Installation and Upgrades / Re: Multiple Active Directory Zentyal Slaves
« on: March 02, 2012, 12:39:03 am »
Greetings Vshaulsk
No, im not using Zentyal as a gateway - i use Pfsense. Its generally considered a bad idea to virtualize your gateway/firewall/router, and o run as little services on it as possible. So i would rather suggest, keep your services such as web, mail, file sharing on a dedicated server running proxmox, and run a minimal zentyal or pfsense on a dedicated server as your gateway/router/firewall - much more secure due to less surface to attack.
Performance wise, in my limited tests with mixed files up to 2Gb, theres little performance loss - proxmox openvz containers effectively use host fiesystem for storage, whereas Virtuabox uses a VMDK file as storage ON TOP of host filesystem.
Really hope this is helpful to you.
Best regards
Craig
No, im not using Zentyal as a gateway - i use Pfsense. Its generally considered a bad idea to virtualize your gateway/firewall/router, and o run as little services on it as possible. So i would rather suggest, keep your services such as web, mail, file sharing on a dedicated server running proxmox, and run a minimal zentyal or pfsense on a dedicated server as your gateway/router/firewall - much more secure due to less surface to attack.
Performance wise, in my limited tests with mixed files up to 2Gb, theres little performance loss - proxmox openvz containers effectively use host fiesystem for storage, whereas Virtuabox uses a VMDK file as storage ON TOP of host filesystem.
Really hope this is helpful to you.
Best regards
Craig
3
Installation and Upgrades / Re: Multiple Active Directory Zentyal Slaves
« on: March 01, 2012, 03:40:59 pm »
Success!!
In a virtual machine environment(proxmox openvz containers) i set up two zentyal VM's "mail" and "fileserver". I configured both as active directory slave and with a minimum of fuss they both synced with my server 2008R2 and pulled users and groups!
Thanks guys for zentyal - you rock!
How do i mark this post as solved, and does anybody have any queries with this configuration(logs and config files?) so i can pass on my successes to others?
Many many thanks
Craig
In a virtual machine environment(proxmox openvz containers) i set up two zentyal VM's "mail" and "fileserver". I configured both as active directory slave and with a minimum of fuss they both synced with my server 2008R2 and pulled users and groups!
Thanks guys for zentyal - you rock!
How do i mark this post as solved, and does anybody have any queries with this configuration(logs and config files?) so i can pass on my successes to others?
Many many thanks
Craig
4
Installation and Upgrades / Re: Multiple Active Directory Zentyal Slaves
« on: February 29, 2012, 03:34:22 pm »
Hi Ichat, and thank you...
No ive never seen that configuration before, so im going to simulate in my lab now to see if it works out. I will post back my findings later...
Regards
Craig...
No ive never seen that configuration before, so im going to simulate in my lab now to see if it works out. I will post back my findings later...
Regards
Craig...
5
Installation and Upgrades / Multiple Active Directory Zentyal Slaves
« on: February 28, 2012, 01:20:57 am »
Good Day All
First off a big big thank you for a wonderful product - especially the solution that a combination of Zentyal/Zarafa and Active Directory provides for many of my customers who are no longer willing to fork out for the expense of Active directory/exchange. This solution provides practically everything most exchange users need, including connecting mobile devices(android/blackberry etc) with very little effort on my part. Sync with Active Directory on both server 2003 and 2008 works pretty much flawlessly for me.
Most of my customers are small and they can get buy with one physical server for all zentyal roles, but one specific customer requires isolated server roles for security reasons. What im saying is: totally isolated instances of zentyal mail, file sharing, astarisk, web server and so on. My immediate solution is proxmox with OpenVz containers for each separate process - no KVM available here - older hardware with no virtualization support. But now active directory user/group sync for all zentyal processes(openvz containers) what would the official zentyal way be of doing this, if it is possible? Configure one zentyal container, say "mail" as active directory slave, and all other containers as zentyal LDAP slaves syncing to active directory slave?
Any input and assistance will be greatly appreciated
Craig...
First off a big big thank you for a wonderful product - especially the solution that a combination of Zentyal/Zarafa and Active Directory provides for many of my customers who are no longer willing to fork out for the expense of Active directory/exchange. This solution provides practically everything most exchange users need, including connecting mobile devices(android/blackberry etc) with very little effort on my part. Sync with Active Directory on both server 2003 and 2008 works pretty much flawlessly for me.
Most of my customers are small and they can get buy with one physical server for all zentyal roles, but one specific customer requires isolated server roles for security reasons. What im saying is: totally isolated instances of zentyal mail, file sharing, astarisk, web server and so on. My immediate solution is proxmox with OpenVz containers for each separate process - no KVM available here - older hardware with no virtualization support. But now active directory user/group sync for all zentyal processes(openvz containers) what would the official zentyal way be of doing this, if it is possible? Configure one zentyal container, say "mail" as active directory slave, and all other containers as zentyal LDAP slaves syncing to active directory slave?
Any input and assistance will be greatly appreciated
Craig...
6
Installation and Upgrades / Re: change standalone zentyal server to sync with active directory
« on: March 14, 2011, 03:38:08 pm »
Trym, Thank you!
I will be with this client tomorrow (tuesday) and I will give its a bash. I suppose it will be prudent to backup the servers configuration to their zentyal cloud account just in case?
Will post back here with the (hopefully good) news
Craig
I will be with this client tomorrow (tuesday) and I will give its a bash. I suppose it will be prudent to backup the servers configuration to their zentyal cloud account just in case?
Will post back here with the (hopefully good) news
Craig
7
Installation and Upgrades / change standalone zentyal server to sync with active directory
« on: March 12, 2011, 10:49:36 am »
Good day all..
Firstly thank you for a wonderful product. Coming from a Windows background, the stability and feature set of zentyal still amazes me!
I have been using your product since ebox 0.9 days, and have deployed at least 20 servers for clients of up to 20 workstations most are conversions from windows server. I've been a long term lurker on these forums, and this is my first post, so go easy on me please!
I have a client with a zentyal office server, no gateway functionality. Server is fully updated, running latest zentyal release and configured as standalone. This company has now been forced to purchase active directory server to support certain software. They want to retain the zentyal server but want to sync it with AD. Is it possible to reconfigure the zentyal server to sync with the AD SERVER? if so how do I go about this, or should I reinstall and configure server as AD slave?
Any help you guys provide will be appreciated..
Craig
Ps.. I promise to stop lurking and start contributing soon!
Firstly thank you for a wonderful product. Coming from a Windows background, the stability and feature set of zentyal still amazes me!
I have been using your product since ebox 0.9 days, and have deployed at least 20 servers for clients of up to 20 workstations most are conversions from windows server. I've been a long term lurker on these forums, and this is my first post, so go easy on me please!
I have a client with a zentyal office server, no gateway functionality. Server is fully updated, running latest zentyal release and configured as standalone. This company has now been forced to purchase active directory server to support certain software. They want to retain the zentyal server but want to sync it with AD. Is it possible to reconfigure the zentyal server to sync with the AD SERVER? if so how do I go about this, or should I reinstall and configure server as AD slave?
Any help you guys provide will be appreciated..
Craig
Ps.. I promise to stop lurking and start contributing soon!
Pages: [1]