Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - LEGOManiac

Pages: [1] 2 3 4
1
OK. So dhcpd turned out to be a red herring.

In desparation, I tried switching to ClearOS and it had the same problem, though not with dhcpd.

I suddenly remembered back in my electronics days, that many embedded systems use a watchdog timer to automatically reboot a locked-up micro-controller. The scheme is to load some value into the watchdog timer, which then starts to count down to zero. The timer is controlled by the processor's timing circuitry, and runs independently from whatever the processor is (or isn't) doing.

The idea is that the programmer would include, within one of the programs subroutines, the code to reset the timer back to the initial number, before it reaches zero. If the subroutine doesn't run, the timer runs out and forces a re-boot.

It turns out the Fit-PC2i that I was running this on is designed to be an embedded system and includes the watchdog timer. Earlier versions of linux had been including the reset routines, so I never noticed it, but it would appear that a recent linux update (I don't know to what component) either broke the timer reset routine or changed (ie. delayed) the point at which it gets run, allowing the timer to run out, forcing a reset.

People with regular PCs would never notice it.

2
Sorry to be so brief, but I only get about 1 - 2 minutes of internet access before the firewall reboots.

Last dmesg line:
[  238.817545] type=1505 audit(1346805961.688:24):  operation="profile_replace" pid=4116 name="/usr/sbin/dhcpd3"

The server had been running for almost 2 years (not continuously) and had been updated maybe 1 week ago.

Today, it was reported to me that we had lost internet access. It turns out the firewall had crashed and was hanging on reboot.

Suspecting hardware (a FitPC2i - ATOM based), I moved the hard disk to a workstation (Core i5 based) and booted it there. It reported errors in the file system and I had them corrected.

On the workstation, the system booted to the desktop.

Back on the FitPC2i hardware, it's rebooting either just after starting the firewall module, or just as it starts dhcpd.

Unfortunately, the web interface on this thing as always been ridiculously slow and it won't be up long enough for me to use it (it's a headless system) but since I can SSH into it, briefly, I should be able to cut/paste commands to it quickly to get something done. I just don't know what to do, exactly.


3
Installation and Upgrades / Re: Low power consumption Zentyal
« on: December 16, 2011, 04:54:30 pm »
You want low power? We've been running a FitPC2i (2GB
RAM, 2 GBit ethernet ports) for a year now.

It consumes a whopping 7 watts at full load (I've measured it, it's about 5 watts when idle).

Primary uses: DNS, DHCP, Firewall, HTTP Proxy and Samba

My one major complaint is apache. If I use ssh -X  and lxsession to use log into the Zentyal user interface, the response is reasonable. If I connect from a workstation via https, the response ranges from ok to pathetic. I definitely wouldn't recommend it as a web server, although, come to think of it, my apt-cacher page loads instantly, although I'm not certain that it uses apache or has it's own web server.

We have a 750Mb internet connection which we regularly max out with no problems from the FitPC2i.

From an end-user's point of view, it does the job nicely. From an admin's point of view, where I depend on the web interface, it's irritating but workable. If I'm in a hurry, I just use lxsession and put up with the re-configuration of my workstation desktop.

Output from lshw, for anyone interested:

fitpc2i                   
    description: Computer
    product: CM-iAM/SBC-FITPC2i
    vendor: CompuLab
    version: Not Applicable
    serial: Not Applicable
    width: 32 bits
    capabilities: smbios-2.5 dmi-2.5 smp-1.4 smp
    configuration: administrator_password=disabled boot=oem-specific cpus=1 frontpanel_password=unknown keyboard_password=unknown power-on_password=disabled
  *-core
       description: Motherboard
       product: CM-iAM/SBC-FITPC2i
       vendor: Intel Corporation
       physical id: 0
       version: 1.x
       serial: Not Applicable
     *-firmware
          description: BIOS
          vendor: Phoenix Technologies LTD
          physical id: 0
          version: NAPA0001.86C.0000.D.1009141059 (09/14/2010)
          size: 97KiB
          capacity: 960KiB
          capabilities: isa pci pcmcia pnp apm upgrade shadowing escd cdboot acpi usb agp biosbootspecification
     *-cpu
          description: CPU
          product: Intel(R) Atom(TM) CPU Z550   @ 2.00GHz
          vendor: Intel Corp.
          physical id: 4
          bus info: cpu@0
          version: 6.12.2
          serial: 0001-06C2-0000-0000-0000-0000
          slot: U3E1
          size: 2GHz
          capacity: 2666MHz
          width: 32 bits
          capabilities: boot fpu fpu_exception wp vme de tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 xtpr pdcm movbe lahf_lm tpr_shadow vnmi flexpriority pse
          configuration: id=1
        *-cache:0
             description: L1 cache
             physical id: 5
             slot: L1 Cache
             size: 64KiB
             capacity: 64KiB
             capabilities: asynchronous internal write-back
        *-cache:1
             description: L2 cache
             physical id: 6
             slot: L2 Cache
             size: 512KiB
             capacity: 512KiB
             capabilities: burst external write-back
        *-logicalcpu:0
             description: Logical CPU
             physical id: 1.1
             width: 32 bits
             capabilities: logical
        *-logicalcpu:1
             description: Logical CPU
             physical id: 1.2
             width: 32 bits
             capabilities: logical
     *-memory
          description: System Memory
          physical id: 12
          slot: System board or motherboard
          size: 2GiB
        *-bank
             description: SODIMM DDR2 Synchronous
             physical id: 0
             slot: soldered
             size: 2GiB
             width: 32 bits
     *-pci
          description: Host bridge
          product: System Controller Hub (SCH Poulsbo)
          vendor: Intel Corporation
          physical id: 100
          bus info: pci@0000:00:00.0
          version: 07
          width: 32 bits
          clock: 33MHz
        *-display UNCLAIMED
             description: VGA compatible controller
             product: System Controller Hub (SCH Poulsbo) Graphics Controller
             vendor: Intel Corporation
             physical id: 2
             bus info: pci@0000:00:02.0
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: pm msi bus_master cap_list
             configuration: latency=0
             resources: memory:d8080000-d80fffff ioport:1800(size=8) memory:d0000000-d7ffffff memory:d8000000-d801ffff
        *-pci:0
             description: PCI bridge
             product: System Controller Hub (SCH Poulsbo) PCI Express Port 1
             vendor: Intel Corporation
             physical id: 1c
             bus info: pci@0000:00:1c.0
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: pci pciexpress pm bus_master cap_list
             configuration: driver=pcieport
             resources: irq:17 ioport:2000(size=4096) memory:d8100000-d81fffff memory:d8500000-d85fffff(prefetchable)
           *-network
                description: Ethernet interface
                product: RTL8111/8168B PCI Express Gigabit Ethernet controller
                vendor: Realtek Semiconductor Co., Ltd.
                physical id: 0
                bus info: pci@0000:02:00.0
                logical name: eth0
                version: 02
                serial: 00:01:c0:08:8e:69
                size: 1GB/s
                capacity: 1GB/s
                width: 64 bits
                clock: 33MHz
                capabilities: pm msi pciexpress msix vpd bus_master cap_list rom ethernet physical tp mii 10bt 10bt-fd 100bt 100bt-fd 1000bt 1000bt-fd autonegotiation
                configuration: autonegotiation=on broadcast=yes driver=r8169 driverversion=2.3LK-NAPI duplex=full ip=192.168.57.200 latency=0 link=yes multicast=yes port=MII speed=1GB/s
                resources: irq:24 ioport:2000(size=256) memory:d8100000-d8100fff memory:d8500000-d850ffff(prefetchable) memory:d8520000-d853ffff(prefetchable)
        *-pci:1
             description: PCI bridge
             product: System Controller Hub (SCH Poulsbo) PCI Express Port 2
             vendor: Intel Corporation
             physical id: 1c.1
             bus info: pci@0000:00:1c.1
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: pci pciexpress pm bus_master cap_list
             configuration: driver=pcieport
             resources: irq:16 ioport:3000(size=4096) memory:d8200000-d82fffff memory:d8600000-d86fffff(prefetchable)
           *-network
                description: Ethernet interface
                product: RTL8111/8168B PCI Express Gigabit Ethernet controller
                vendor: Realtek Semiconductor Co., Ltd.
                physical id: 0
                bus info: pci@0000:03:00.0
                logical name: eth1
                version: 02
                serial: 00:01:c0:08:8e:6a
                size: 10MB/s
                capacity: 1GB/s
                width: 64 bits
                clock: 33MHz
                capabilities: pm msi pciexpress msix vpd bus_master cap_list rom ethernet physical tp mii 10bt 10bt-fd 100bt 100bt-fd 1000bt 1000bt-fd autonegotiation
                configuration: autonegotiation=on broadcast=yes driver=r8169 driverversion=2.3LK-NAPI duplex=half latency=0 link=yes multicast=yes port=MII speed=10MB/s
                resources: irq:25 ioport:3000(size=256) memory:d8200000-d8200fff memory:d8600000-d860ffff(prefetchable) memory:d8620000-d863ffff(prefetchable)
        *-usb:0
             description: USB Controller
             product: System Controller Hub (SCH Poulsbo) USB UHCI #1
             vendor: Intel Corporation
             physical id: 1d
             bus info: pci@0000:00:1d.0
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: bus_master
             configuration: driver=uhci_hcd latency=0
             resources: irq:23 ioport:1820(size=32)
        *-usb:1
             description: USB Controller
             product: System Controller Hub (SCH Poulsbo) USB UHCI #2
             vendor: Intel Corporation
             physical id: 1d.1
             bus info: pci@0000:00:1d.1
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: bus_master
             configuration: driver=uhci_hcd latency=0
             resources: irq:19 ioport:1840(size=32)
        *-usb:2
             description: USB Controller
             product: System Controller Hub (SCH Poulsbo) USB UHCI #3
             vendor: Intel Corporation
             physical id: 1d.2
             bus info: pci@0000:00:1d.2
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: bus_master
             configuration: driver=uhci_hcd latency=0
             resources: irq:18 ioport:1860(size=32)
        *-usb:3
             description: USB Controller
             product: System Controller Hub (SCH Poulsbo) USB EHCI #1
             vendor: Intel Corporation
             physical id: 1d.7
             bus info: pci@0000:00:1d.7
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: pm debug bus_master cap_list
             configuration: driver=ehci_hcd latency=0
             resources: irq:21 memory:d8020000-d80203ff
        *-isa
             description: ISA bridge
             product: System Controller Hub (SCH Poulsbo) LPC Bridge
             vendor: Intel Corporation
             physical id: 1f
             bus info: pci@0000:00:1f.0
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: isa
             configuration: driver=isch_smbus latency=0
             resources: irq:0
        *-ide
             description: IDE interface
             product: System Controller Hub (SCH Poulsbo) IDE Controller
             vendor: Intel Corporation
             physical id: 1f.1
             bus info: pci@0000:00:1f.1
             logical name: scsi0
             version: 07
             width: 32 bits
             clock: 33MHz
             capabilities: ide bus_master emulated
             configuration: driver=pata_sch latency=0
             resources: irq:0 ioport:1f0(size=8) ioport:3f6 ioport:170(size=8) ioport:376 ioport:1810(size=16)
           *-disk
                description: ATA Disk
                product: WDC WD7500BPVT-2
                vendor: Western Digital
                physical id: 0.0.0
                bus info: scsi@0:0.0.0
                logical name: /dev/sda
                version: 01.0
                serial: WD-WXG1EB0NHX11
                size: 698GiB (750GB)
                capabilities: partitioned partitioned:dos
                configuration: ansiversion=5 signature=00078607
              *-volume:0
                   description: Linux filesystem partition
                   vendor: Linux
                   physical id: 1
                   bus info: scsi@0:0.0.0,1
                   logical name: /dev/sda1
                   logical name: /boot
                   version: 1.0
                   serial: 2a106660-5d91-4484-a969-391933d05e96
                   size: 243MiB
                   capacity: 243MiB
                   capabilities: primary bootable ext2 initialized
                   configuration: filesystem=ext2 modified=2011-12-11 00:59:49 mount.fstype=ext2 mount.options=rw,relatime,errors=continue mounted=2011-11-26 00:46:02 state=mounted
              *-volume:1
                   description: Extended partition
                   physical id: 2
                   bus info: scsi@0:0.0.0,2
                   logical name: /dev/sda2
                   size: 698GiB
                   capacity: 698GiB
                   capabilities: primary extended partitioned partitioned:extended
                 *-logicalvolume
                      description: Linux LVM Physical Volume partition
                      physical id: 5
                      logical name: /dev/sda5
                      serial: fwqJpw-giIV-KUbZ-adUa-N5KM-PTKS-rFdltZ
                      size: 698GiB
                      capacity: 698GiB
                      capabilities: multi lvm2
  *-remoteaccess UNCLAIMED
       vendor: Intel
       physical id: 1
       capabilities: inbound
  *-network
       description: Wireless interface
       physical id: 2
       logical name: wlan0
       serial: 00:0d:f0:8d:e9:2f
       capabilities: ethernet physical wireless
       configuration: broadcast=yes multicast=yes wireless=IEEE 802.11bgn

4
Installation and Upgrades / Re: Add a system user to "Users"
« on: April 02, 2011, 04:57:59 pm »
Interesting that this topic has been read 565 times and no-one has actually addressed it.

The last poster indicated that they don't have the problem because they set up all their users via ebox/zentyal. That would be with the exception of the admin account that was used to install zentyal in the first place.

That's my problem too: I use the same admin account on all my workstations/servers, but, I can't access a zentyal share properly from a workstation admin account because the username is the same and I can't add that name to the zentyal user's list.

It's very annoying.

My workaround has been to create an alternate account to associate with the share.
Then I log into the share using that username and password.

The BIG problem is that when I store a file on the share, the file ownership reverts to root:1901 instead of my account name. I then have to separately sudo chown the file or directory to access it again.

So, if you move a folder to the share, the folder is created first, but with the root:1901 ownership and you get an error when the first content of the folder is moved.

If you then chown the folder and re-run the command, the first layer of contents get moved into the folder, all with the root:1901 ownership but if there's a sub-folder, the first content of the sub-folder generates an error.

You then have to chown -R to fix everything and move the folder tree again.

The next sub-folder (sub-sub-folder) starts this all over again.

I haven't tried it yet, but I suppose if I create an account on the workstation that corresponds to alternate username I provided in Zentyal, and then moved all my folders to the corresponding account on my workstation, then logged into that account on the workstation and opened the zentyal share, it would probably all transfer in one go, but it should't be that painful.

5
Installation and Upgrades / Re: How do I get a remote desktop?
« on: March 07, 2011, 03:27:27 am »
Wow! That's wild!

Thanks half_life. After some playing around I discovered that -s LXDE -e LXDE seems to be the default and so lxsession seems to be sufficient.

I was aware you could run an application, but I didn't think it could take over your existing desktop appearance like that. It's weird having my normal Ubuntu default desktop's taskbar suddenly match my server yet the wallpaper and desktop icons remain the same. I note that even a locally run application takes on the theme associated with the server. Very weird. I would have thought that only applications run remotely on the server would take on the server's theme.

Fortunately all goes back to normal when I disconnect.

6
I moved to a FitPC2i because I wanted to set up a server that had absolute minimum power consumption. I'm down to 7W, which keeps my wife happy and hence keeps me happy.

One of the functions that I frequently use that keeps the computer on all night is a torrent server. I use Ktorrent on my desktop but I want to move this to my server.

When I went to install Ktorrent, I was shocked to see that it needed over 400MB of dependencies.

I was told about rtorrent, which I did install, but it, and most of the other torrent programs I've tried, use a flat file system which gets horrendously messy very quickly.

Can anyone recommend a torrent program that won't hog the Zentyal server's resources but allows torrents to be stored in individual folders? It would be an added bonus if it had a web interface like torrentflux had.

7
Installation and Upgrades / Re: How do I get a remote desktop?
« on: March 06, 2011, 07:49:04 pm »
I suppose the one thing I need from this is the answer to the question: what is the name of the desktop?

8
Installation and Upgrades / Re: How do I get a remote desktop?
« on: March 06, 2011, 12:55:31 pm »
Interesting. I'll look into both options.

Does this imply, however, that the Xorg implemented in Zentyal does NOT support the forwarding of X11 commands via SSH?

One of the things I was hoping to find out by posting this question, was: what does Zentyal use in place of Nautilus?

9
Installation and Upgrades / How do I get a remote desktop?
« on: March 05, 2011, 03:04:05 pm »
I've used ebox for almost 2 years and have now upgraded the server to a FitPC2i. At the same time, I installed the latest version of Zentyal.

The FitPC runs headless and, indeed, as one of it's features, if it doesn't detect a monitor on startup, it disables it's video chipset to save energy. As an aside, my server currently consumes a whopping 9W.

Here's my problem: I use the web interface for most of the configuration and I use SSH to connect to the server to do console related work that I can't do via the Web, but once in a while I like to use the desktop environment.

If I need to do this on a regular Ubuntu PC, I just use ssh -X pcaddress and then type "nautilus" and voila - I get the desktop of what whatever user I logged in as with SSH.

How do I do this with Zentyal? I've tried to just type "lxde" (or is it lxdm - either way it doesn't work)

I suppose I could (gag) use VNC but given that X and SSH are already there, I'd prefer to just use them.

10
I have an ebox PIII server that I'm replacing with a FitPC2i which is now set up and running zentyal.

The ebox has about 70 domains entered in DNS and I'd like to copy them over as painlessly as possible.

I copied over the bind entries in the hopes that zentyal would parse the bind directory and update itself from there, but it doesn't.

Is there  a configuration file on the ebox server that contains the list of all the DNS zone files that I can simply copy to the appropriate place in zentyal so that zentyal's gui properly reflects the DNS entries I have?


11
Installation and Upgrades / Re: Problems with squid on eBox 1.4
« on: March 07, 2010, 02:06:25 am »
Well, I finally solved it. It turns out that the server had a brain freeze and forgot which interface to use for the default gateway.

On the Gateways screen, all the data was there except the interface field was blank. When I went to edit it, the field defaulted to eth2 (which is correct) and I simply saved it again and I'm back in business.

12
Installation and Upgrades / Re: Problems with squid on eBox 1.4
« on: March 07, 2010, 01:47:36 am »
A typical failed connection looks like this in /var/log/squid:

1267922919.584   1946 192.168.57.200 TCP_MISS/503 1450 GET http://www.tcm.com/schedule/month/? - DIRECT/- text/html
1267922919.724    113 192.168.57.200 TCP_MISS/503 1440 GET http://www.tcm.com/favicon.ico - DIRECT/- text/html

13
Installation and Upgrades / Re: Problems with squid on eBox 1.4
« on: March 07, 2010, 01:20:10 am »
I've confirmed that squid is listening on port 6020

$ sudo fuser 6020/tcp
6020/tcp:            11760

$ ps -fp 11760
UID        PID  PPID  C STIME TTY          TIME CMD
proxy    11760     1  0 Mar04 ?        00:00:27 /usr/sbin/squid -D -sYC -N

nmap confirms that it is listening on the correct interface.

14
Installation and Upgrades / Problems with squid on eBox 1.4
« on: March 05, 2010, 04:51:52 am »
Squid has worked reliably for the most part although periodically it would crap out and require a reboot. Since upgrading to 1.4, I haven't been able to get it to work at all.

My settings under HTTP Proxy -> General
Transparent proxy - off
Port - 6020
Cache File Size - 100MB
Default Policy - Always allow (It used to be filter, but I changed it to see if it would get it working)

HTTP Proxy -> Objects Policy
Object -> MyLAN
Policy -> Always allow

under Services -> Squid Proxy
Protocol -> TCP
Source -> Any
Destination Port -> 6020

under Firewall -> Packet Filter -> Filtering rules from internal networks to eBox
The first entry is:
Decision -> Accept
Source Object -> MyLAN
Service -> Squid Proxy
Inverse Match -> no


Yet every attempt to connect with the proxy enabled in the browser (on port 6020) yields:

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.tcm.com/schedule/month/?

The following error was encountered:
Connection to Failed

The system returned:
    (101) Network is unreachable

The remote host or network may be down. Please try the request again.

Your cache administrator is webmaster.
Generated Fri, 05 Mar 2010 03:52:13 GMT by localhost (squid/2.6.STABLE18)

15
Installation and Upgrades / Re: Ebox 1.4 - Web Url Filter - HTTPS
« on: March 05, 2010, 04:26:30 am »
The only way to filter https traffic is to first establish an https connection to the proxy server, then have the proxy server establish a separate https connection to the target site. I'm not sure if eBox does this, but I doubt it.

Pages: [1] 2 3 4