Messages

1

Installation and Upgrades / Zentyal 4.1 Dev Edition / DNS Forwarders???? (where in the web interface)

« on: September 05, 2017, 04:12:21 pm »

Hello

I use Zentyal 4.1 Development Edition. And I have troubles to configure DNS Forwardes. The wiki pages shows, that in 4.1 exists a menu entry for configure dns forwardes (see picture in the attachment). But I cannot find this menu for dns forwarders. I tried dhcp for the zentyal server network interface and couldn't find the dns forwarders menu. I tried a static configuration for the zentyal server network interface hoping the dns forwardes menu gets "created" an I can set up dns forwarders. No dns forwarders menu.

My zentyal server is part of a local network. I manage the PC network settings using dhcp (IP, Local-DNS, WAN-DNS, Gateway). Therefore I use a Zywall USG50 as NAT router. So all PC can resolve Local-DNS and WAN-DNS; only the Zentyal Server fails to resolve Local-DNS. So I had in mind to add the Zywall as dns forwarder, hoping the Zentyal Server can resolve Local-DNS too.

Where is the dns forwarder menu? Or can I modify the Zentyal DNS settings using a bash script?

Kind regards, Roland

2

Installation and Upgrades / handeling fqdn because of the zentyal email services

« on: August 17, 2017, 11:31:21 am »

hello

i am going to set up a pdc for our small school network. now i am uncertain how to manage fully qualified domain names. our school owns a real domain registered by namecheap with the tld school.org. with this domain students can reach our cloud server.

internally we use the same domain but with the not official tld school.nhz. now i have in mind to use the email services from zentyal 5, but i dosen't know how to configure the email domain, so that the students can use the email also at home outside the local network.

we use a zywall usg 50 as nat router (separate wan/lan) and as dns/dhcp server for the local network. we use mac/ip binding for our local network and local dns (hostname.school.nhz)

should i use the real domain registered by namecheap also in the local network or should i stay local with the non real domain? what is easier because of the zentyal email services?

3

Installation and Upgrades / DNS Forwarder

« on: August 16, 2017, 06:59:55 am »

Hello

I have in mind to set up a Zentyal 4.1 server as a domain controller in a small local network (30 PCs).
The Zentyal 4.1 server is part of the local network and get the ip from a NAT router, which is connected to the internet and get the WAN ip from our isp.

In the documentation of Zentyal 4.1 is mentioned, that an admin can add DNS forwarders and pictures show that there exist an input field in the web interface. BUT i cannot find this input field!!

How can I add DNS forwarders to an existing domain?

Kind regards, Roland

4

Installation and Upgrades / Zentyal 4.1 Server as router

« on: October 07, 2016, 11:59:51 am »

Hello

How do I configure my Zentyal 4.1 server, so that it can replace my router. Til now my router separates my local lan from the internet using NAT. Further the router runs dnsmasq and I use it as a dhcp/dns server in order to manage the network settings of all hosts in the lan.

Now I will replace the router with my Zentyal 4.1 server. This server has three nics (eth0, eth1 and eth2). I configure eth2 as external (wan). eth0 and eth1 aren't configured yet.

a) What do I have to do in order to set up a NAT firewall, so that the wan side cannot initiate a connetion to the lan, but the lan can reach the internet.

b) How do I configure the wan interface (eth2) as dhcp client and the lan interfaces (eth0, eth1) as dhcp servers.

Kind regards, jandoe

5

Directory and Authentication / Re: incorrect password client user login

« on: September 26, 2016, 11:51:24 am »

I forget to say, that I can resolve the hosts using nslookup from IP to FQDN and from FQDN to IP.

6

Directory and Authentication / incorrect password client user login

« on: September 26, 2016, 11:48:35 am »

Hello

Client users cannot login. They get the message "incorrect password" on the Xubuntu 16.04 login (lightdm-gtk-greeter).

I set the Xubuntu client up as follows:

Installed the packages

Code: [Select]

apt-get install samba-common smbclient krb5-user krb5-config libpam-heimdal libpam-winbind libnss-winbind winbind

Copied the krb5.conf from the Zentyal 4.1 Server

Code: [Select]

[libdefaults]
    default_realm = SCHOOL.ZONE
    dns_lookup_kdc = true
    dns_lookup_realm = false
    rdns = no

Configured the smb.conf

Code: [Select]

[global]
workgroup = SCHOOL
realm = SCHOOL.ZONE
security = ADS
encrypt passwords = Yes

idmap config *:backend = rid
idmap config *:range = 10000-20000

winbind use default domain = Yes
winbind refresh tickets = Yes
winbind enum users = Yes
winbind enum groups = Yes

template shell = /bin/bash

Configured the /etc/hosts

Code: [Select]

127.0.0.1 localhost
#127.0.1.1 pc4-students.school.zone pc4-students

192.168.20.104 pc4-students.school.zone pc4-students

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

configured /etc/nsswitch.conf

Code: [Select]

#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         compat winbind
group:          compat winbind
shadow:         compat winbind
gshadow:        files

#hosts:          files mdns4_minimal [NOTFOUND=return] dns
hosts: files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

installed the packages

Code: [Select]

apt-get install cifs-utils libpam-mount

configured /etc/security/pam_mount.conf.xml

Code: [Select]

<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
<!--
See pam_mount.conf(5) for a description.
-->

<pam_mount>

<!-- debug should come before everything else,
since this file is still processed in a single pass
from top-to-bottom -->

<debug enable="0" />

<!-- Volume definitions -->

<volume
fstype="cifs"
server="srv1-server.school.zone"
path="%(USER)"
mountpoint="/home/SCHOOL/%(USER)"
user="*"
options="sec=krb5,cruid=%(USERUID),domain={full domain},uid=%(USERUID),gid=%(USERGID),rw"
/>

<!-- pam_mount parameters: General tunables -->

<umount>umount -l %(MNTPT)</umount>

<!--
<luserconf name=".pam_mount.conf.xml" />
-->

<!-- Note that commenting out mntoptions will give you the defaults.
     You will need to explicitly initialize it with the empty string
     to reset the defaults to nothing. -->
<mntoptions allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other" />
<!--
<mntoptions deny="suid,dev" />
<mntoptions allow="*" />
<mntoptions deny="*" />
-->
<mntoptions require="nosuid,nodev" />

<logout wait="0" hup="0" term="0" kill="0" />


<!-- pam_mount parameters: Volume-related -->

<mkmountpoint enable="1" remove="true" />


</pam_mount>

stopped the services

Code: [Select]

systemctl stop winbind
systemctl stop smbd
systemctl stop nmbd

Joined the client to the Zentyal 4.1 server

Code: [Select]

net ads join -U administrator

started the services again

Code: [Select]

systemctl start winbind
systemctl start smbd
systemctl start nmbd

made some tests

Code: [Select]

root@pc4-students:~# wbinfo -u
dns-srv1-server
administrator
jandoe
jodoe
krbtgt
guest

root@pc4-students:~# wbinfo -u
dns-srv1-server
administrator
jandoe
jodoe
krbtgt
guest
root@pc4-students:~# wbinfo -g
allowed rodc password replication group
enterprise read-only domain controllers
denied rodc password replication group
read-only domain controllers
group policy creator owners
ras and ias servers
domain controllers
enterprise admins
domain computers
cert publishers
dnsupdateproxy
domain admins
domain guests
schema admins
domain users
dnsadmins

root@pc4-students:~# kinit administrator@SCHOOL.ZONE
Password for administrator@SCHOOL.ZONE:
root@pc4-students:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@SCHOOL.ZONE

Valid starting       Expires              Service principal
2016-09-26T17:29:49  2016-09-27T03:29:49  krbtgt/SCHOOL.ZONE@SCHOOL.ZONE
renew until 2016-09-27T17:29:44

root@pc4-students:~# getent passwd jodoe
jodoe:*:11105:10513:John Doe:/home/SCHOOL/jodoe:/bin/bash

So, for me as a newbie everything seems fine. But when I try to login as jodoe - of which the password I of course know. The login page says "incorrect password".

I also checked time/date on the client and the server. they seem to be in sync.

So, any hints are welcome!!

Kind regards, Roland

7

Installation and Upgrades / Re: need help Zentyal 4.1 set up

« on: September 16, 2016, 01:24:37 pm »

Interesting is that - when I use the Zentyal server on the client as gateway and dns server and set the router as dns forwarder - I can nslookup domains like www.yahoo.com. I also can "first-level" google in the Browser, but when I double-click links from "first-level" search results, the Browser tries to connect, but nothing happens.

Kind regards, Roland

8

Installation and Upgrades / need help Zentyal 4.1 set up

« on: September 12, 2016, 09:43:58 am »

Hello

I need some help to configure a Zentyal 4.1 server the right way.

First, some hints to my local network (see picture in the attachment):

a) a router to separates the internet form the local network using a NAT firewall. Further the router is a DNS/DHCP server (dnsmasq) and gateway. So the administrator can manage the network settings of all hosts on the router (bind IPs to MAC addresses).
b) wired: there are two access points and two servers and a pc conneted to the router. all these hosts are dhcp clients getting there IP and DNS settings from the router.
c) wireless: 10 pc's are conneted with the router using two access points (5 pc's per access point). all pc's are dhcp clients getting there IP and DNS settings from the router.
d) on the pc's I use Xubuntu 16.04LTS as operating system and the NetworkManager as DHCP client. On the servers I use Ubuntu Server 14.04LTS. On one server I installed also Zentyal 4.1.
e) on the wireless clients I installed the following packages in order to join this pc's to the Zentyal server:

Code: [Select]

apt-get install samba-common smbclient winbind libpam-winbind libnss-winbind libpam-heimdal krb5-user krb5-config cifs-utils libpam-mount

smb.conf (client):

Code: [Select]

[global]
workgroup = SCHOOL
realm = SCHOOL.ZONE
security = ADS
encrypt passwords = Yes

idmap config *:backend = rid
idmap config *:range = 10000-20000

winbind use default domain = Yes
winbind enum users = Yes
winbind enum groups = Yes

template shell = /bin/bash

krb5.conf (client; copied from zentyal server)

Code: [Select]

[libdefaults]
    default_realm = SCHOOL.ZONE
    dns_lookup_kdc = true
    dns_lookup_realm = false
    rdns = no

added to pam_mount.conf.xml (client)

Code: [Select]

<volume
fstype="cifs"
server="192.168.20.10"
path="%(USER)"
mountpoint="/home/SCHOOL/%(USER)"
user="*"
options="sec=krb5,cruid=%(USERUID),domain={full domain},uid=%(USERUID),gid=%(USERGID),rw"
/>

<umount>umount -l %(MNTPT)</umount>

With the network settings from above every host has a working DNS (local and internet). But when I try to join the clients to Zentyal 4.1 I get error messages in relation to name resolution.

If I change the network settings on the clients (static) to:

Code: [Select]

auto wlan0
iface wlan0 inet static
address 192.168.20.104
netmask 255.255.255.0
network 192.168.20.0
broadcast 192.168.20.255
        gateway 192.168.20.10 (Zentyal Server)
dns-nameserver 192.168.20.10 (Zentyal Server)
dns-search school.zone

I can join the client to Zentyal 4.1 without any errors; user can login and there home folder gets mounted; files and directories the user creates get stored on the server; when the user logs out, his home folder gets unmounted. But the clients have not Internet anymore.

Which Zentyal modules do I have to enable/disable and how do I have to configure Zentyal, so that I can use the router as DNS/DHCP server and gateway?

Any hint is welcome!!

Kind regards, Roland

9

Installation and Upgrades / Re: realy slow Internet connection using DNS Forwarding in Zentyal 4.1

« on: September 09, 2016, 09:29:19 am »

Hi,

Thanks for your explanation! What does UTM mean?

First, on the Xubuntu clients I used the NetworkManager (as dhcp client) and my Router as DHCP Server (dnsmasq). So the Xubuntu clients get all there network settings from the Router. This way the Internet connection works fine and I can resolve lan hosts and wan hosts. Also the Server gets there network settings from the router.

But: Under the above configuration, I cannot join the clients to the Zentyal PDC. I get "DNS errors".

Can you explain your Zentyal Server configuration (network settings, zentyal settings) in more detail?

Kind regards, Roland

10

Installation and Upgrades / realy slow Internet connection using DNS Forwarding in Zentyal 4.1

« on: September 08, 2016, 10:57:24 am »

Hello

I use Zentyal 4.1 as PDC in a small local network (see attachment). Zentyal 4.1 runs on a Ubuntu 14.04LTS server (first ubuntu install, then Zentyal install). Further I run Xubuntu 16.04LTS clients I can join/leave to Zentyal PDC. Test users can login/logout and the coresponding home folder gets mountet/unmounted correctly. Also test users can creat folders an files, that get stored on the server.

But I have problems with the Internet connection speed. When a test user tries to use the internet the connection is realy realy slow (google search respond time: about 3 minutes and more).

As you can see in picture I use a router (NAT Firewall) to separate the local network from the internet. The Zentyal Server is connected to this router (cable). Further two access points are connected to the router (cable).
On the Router I use dnsmasq as DHCP and DNS server. Using dnsmasq I can manage the IPs of the clients (mac-ip-binding); second the clients get there dns settings from dnsmasq on the router.

two cases:
a) when I use on a client the router as gatway and dns-nameserver (local-lan) / dns-forwarder (internet) connenction speed to the internet is ok. Local dns resolution works. (NetworkManager; Wireless)
b) when I use on a client Zentyal as gateway  / dns-forwarder (Router-IP) connection speed slow. Local dns resolution doesn't work (Network Manager disabled; settings in file /etc/network/interfaces; Wireless)

Code: [Select]

auto wlan0
iface wlan0 inet static
    address 192.168.20.104
    netmask 255.255.255.0
    network 192.168.20.0
    broadcast 192.168.20.255
    gateway 192.168.20.10 (Zentyal Server)
    dns-nameserver 192.168.20.10 (Zentyal Server)
    dns-search school.zone

in Zentyal I add the Router IP as dns-forwarder (no other dns-forwarder).

Any hints are welcome!!

Kind regards, Roland

11

Installation and Upgrades / Re: Zentyal as DNS Forwarder / Internet Accesss

« on: September 08, 2016, 08:10:52 am »

Hello Thomas

You are wright! Adding the gateway helps. But the internet connection is realy slow.

Kind regards

12

Installation and Upgrades / Re: Zentyal as DNS Forwarder / Internet Accesss

« on: September 06, 2016, 10:38:47 am »

there is a mistake: can / can't

Further, I use in Zentyal 4.1 my Router IP as DNS Forwarder. The problem I have, is, that I CAN'T reach the Internet with Firefox. What works, is an nslooukup to yahoo or an nslookup to google.'t

13

Installation and Upgrades / Zentyal as DNS Forwarder / Internet Accesss

« on: September 06, 2016, 10:36:25 am »

Hello

I'm going to set up a small computer lab for a school. On the clients I use Xubuntu 16.04 LTS, the servers base on Ubuntu Server 14.04 LTS and Zentyal 4.1.

I managed to join (net ads join -U administrator) the clients to the Zentyal 4.1 (as Primary Domain Controller). In order to achieve this, I disabled the NetworkManager in Xubuntu and did a manual network interface configuration (/etc/network/interfaces):

Code: [Select]

auto wlan0
iface wlan0 inet static
    address 192.168.20.104
    netmask 255.255.255.0
    network 192.168.20.0
    broadcast 192.168.20.255
    dns-nameserver 192.168.20.10 (Zentyal Server)
    dns-search school.zone

The /etc/resolve.conf has then the entries

Code: [Select]

nameserver 192.168.20.10
search school.zone

Further, I use in Zentyal 4.1 my Router IP as DNS Forwarder. The problem I have, is, that I can reach the Internet with Firefox. What works, is an nslooukup to yahoo or an nslookup to google.

I have simulated all settings (client, server) in a virtualbox internal/nat network (internal client -> zentyal; zentyal dns forwarder -> nat nameserver -> internet) and everything works.

What are I'm missing to allow clients Internet through the Zentyal Sever?

Kind regards

14

Directory and Authentication / Re: mount /home/$(DOMAIN_USER) on ubuntu client (copy home folder to client)

« on: September 05, 2016, 10:42:00 am »

hello segelfreak

I have to say thank you. I tried your pam_mount.conf.xml entries <volume .... /> and <umount> ... </umount> and they work. I can login as DOMAIN_USER and the home folder gets mounted; create directories or files during the login and they get stored on the server. After logout there isn't a DOMAIN_USER home folder anymore.

What I haven't tested yet, is if a DOMAIN_USER can listen or play audio or video files. Also using a printer as DOMAIN_USER isn't configured yet.

thanks a lot and kind regards

15

Directory and Authentication / mount /home/$(DOMAIN_USER) on ubuntu client (copy home folder to client)

« on: August 29, 2016, 04:21:14 pm »

Hello

I'm able to "mount" the user folder form the zentyal 4.0 server from on a ubuntu client.
But this creates an exact copy on the client. When the $(DOMAIN_USER) logs out, the copied home folder of the $(DOMAIN_USER) remain on the client.
I can login as a local user, get root access using sudo and delete the localy new created home folder of $(DOMAIN_USER). $(DOMAIN_USER) can login again and its home folder get's copied again (needs some time).

On the Ubuntu 16.04 client, I additionally install cifs-utils and libpam-mount in order to mount $(DOMAIN_USER) home folders and the only config file I adapt is pam_mount.conf.xml. I add at line 17

Code: [Select]

<volume user="*" fstype="cifs" server="192.168.156.120" path="%(DOMAIN_USER)" mountpoint="/home/SCHOOL/%(DOMAIN_USER)" options="sec=ntlm,nodev,nosuid" />

All other entries in pam_mount.conf.xml stay untouched.

Is it normal, that this way the home folders from the zentyal 4.0 server get's copied to the ubuntu client?

Kind regards, Roland