Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
Installation and Upgrades / Re: relocation error: /usr/lib/x86_64-linux-gnu/libapt-private.so.0.0:
« on: December 13, 2018, 01:01:11 pm »
This totally worked. Thanks markus!
2
Installation and Upgrades / Re: DNS Updates stopped working after Upgrade from 4.2 to 5.0
« on: August 18, 2017, 02:02:39 pm »
Same problem. Very similar solution.
Upgrade from 4.2 to 5.0 went suprisingly well, some minor changes had to be made to the configuration only.
Had the same problem with DNS, wasnt able to add DNS entries anymore. Only problem was that I didnt had that DnsAdmins group. Luckly Domain Admins group worked just fine instead.
Now DNS updates again and works normally.
Upgrade from 4.2 to 5.0 went suprisingly well, some minor changes had to be made to the configuration only.
Had the same problem with DNS, wasnt able to add DNS entries anymore. Only problem was that I didnt had that DnsAdmins group. Luckly Domain Admins group worked just fine instead.
Now DNS updates again and works normally.
3
Installation and Upgrades / Re: [SOLVED.....kind of] DNS - External IP picked up in Internal DNS
« on: January 20, 2017, 06:19:04 pm »
I'm waking this old topic up.
I stumbled upon this problem too. The external IP address was picked up after a while when DNS server starts. The problem is actually a bug in Zentyal 4.2, but is easy to fix as all stubs are editable.
Samba thinks that it is enabled on the external interface, so you need to edit /usr/share/zentyal/stubs/samba/smb.conf.mas and set the interfaces manually there
interfaces = lo,eth0,eth1,eth1:virtual0
bind interfaces only = yes
I had to remove my external interface (eth0) and samba doesnt add the external IP to DNS anymore.
Restart zentyal samba after that and you are done. Only it might overwrite the stub after zentyal-samba updates. Other than that a nice fix that I found out.
I have latest 4.2 version of Zentyal.
Running Zentyal 3.0 on another machine and it sets the correct interfaces.
I stumbled upon this problem too. The external IP address was picked up after a while when DNS server starts. The problem is actually a bug in Zentyal 4.2, but is easy to fix as all stubs are editable.
Samba thinks that it is enabled on the external interface, so you need to edit /usr/share/zentyal/stubs/samba/smb.conf.mas and set the interfaces manually there
interfaces = lo,eth0,eth1,eth1:virtual0
bind interfaces only = yes
I had to remove my external interface (eth0) and samba doesnt add the external IP to DNS anymore.
Restart zentyal samba after that and you are done. Only it might overwrite the stub after zentyal-samba updates. Other than that a nice fix that I found out.
I have latest 4.2 version of Zentyal.
Running Zentyal 3.0 on another machine and it sets the correct interfaces.
4
Installation and Upgrades / Re: My zentyal is broken.
« on: February 24, 2014, 01:37:28 pm »
Looks like to me that his web interface is down and he just needs to restart it. 
5
Installation and Upgrades / Re: [Zentyal 3.0] Is PEAP|MSCHAPv2 supported?
« on: February 18, 2014, 04:22:27 pm »
I did change the path and uncomment that line and it started to work after restarting radius server. It really did. I am on Zentyal 3.0. Windows8 clients worked out of box, just like android clients. Dunno about Windows Phone and other phones tho...
I hope I can make this as my corporate wifi with WPA Enterprise, otherwise I'll have to think different, chillispot or so... But the good thing is that it really works.
I hope I can make this as my corporate wifi with WPA Enterprise, otherwise I'll have to think different, chillispot or so... But the good thing is that it really works.
6
Installation and Upgrades / Re: Using windows logon name and password for RADIUS?
« on: February 17, 2014, 05:07:18 pm »
Just posted again here
Same with 3.0 version of Zentyal. I am testing this now.
Same with 3.0 version of Zentyal. I am testing this now.
7
Installation and Upgrades / Re: [Zentyal 3.0] Is PEAP|MSCHAPv2 supported?
« on: February 17, 2014, 03:36:44 pm »
I'm still using 3.0 here and cant authorize neither of my devices using WPA Enterprise. Stadart PAP radtest works well. Any solutions? Havent tried to uncomment that line yet, but it's only related to mschap right?
edit:managed to successfully do a test using radtest -t mschap, does this mean mschapv2 will also work?
edit:managed to successfully do a test using radtest -t mschap, does this mean mschapv2 will also work?
8
Installation and Upgrades / Suggestions for wireless access point/router for public WiFi with Radius auth
« on: November 22, 2013, 11:18:31 pm »
Hello. I have one public AP at my work so people could get internet connectivity with their mobile devices or laptops. I have WPA2 Personal wireless security configured with a shared key. Although that is way not the best solution.
I could be using WPA2 Enterprise, but then there would be problems with connecting, so the best method in my opinion is web based authentication. I havent found about that much here in the forums, so I'm asking.
Are there any wireless routers/AP's which could be easily configured to work with Zentyal radius server and provide web-based authentication to users? I tried that with an old router with dd-wrt and chillispot, but I wasn't lucky.
I'm sure that there are people who have done that, because public wifi is just a very important thing to implement.
I could be using WPA2 Enterprise, but then there would be problems with connecting, so the best method in my opinion is web based authentication. I havent found about that much here in the forums, so I'm asking.
Are there any wireless routers/AP's which could be easily configured to work with Zentyal radius server and provide web-based authentication to users? I tried that with an old router with dd-wrt and chillispot, but I wasn't lucky.
I'm sure that there are people who have done that, because public wifi is just a very important thing to implement.
9
Installation and Upgrades / Re: Windows Updates Eating up my bandwidth.
« on: November 20, 2013, 10:18:14 am »
This part is pretty much the same on default Zentyal squid configs. Maybe your maximum_object_size is too low, maybe range_offset_limit needs changing. Yesterday I installed MSO2010 SP2 (500MB), it was cached fine and downloaded via maximum ethernet speed to ~20 workstations.
10
Installation and Upgrades / Re: Windows Updates Eating up my bandwidth.
« on: November 19, 2013, 10:59:11 pm »
To me that 2 Mbps upload speed looks way too low.
So it doesnt matter if you turn WU caching on or off in squid, the bandwidth is still used too much?
Maybe not all updates are cached? Can you show your squid-external.conf.mas?
WU caching works fine for me with Zentyal 3.0 and squid 3.1.19. Sometimes squid seems to download range requests on its own (external bandwitch exceeds internal), but not for long, then client workstations get the updates with local ethernet speed.
It would be interesting to hear if someone has got robb's solutions working with Zentyal.
nitrobit update server looks interesting.
So it doesnt matter if you turn WU caching on or off in squid, the bandwidth is still used too much?
Maybe not all updates are cached? Can you show your squid-external.conf.mas?
WU caching works fine for me with Zentyal 3.0 and squid 3.1.19. Sometimes squid seems to download range requests on its own (external bandwitch exceeds internal), but not for long, then client workstations get the updates with local ethernet speed.
It would be interesting to hear if someone has got robb's solutions working with Zentyal.
nitrobit update server looks interesting.
11
Installation and Upgrades / Re: Users and Computers
« on: November 18, 2013, 10:44:28 pm »
Yes, Zentyal built-in web administrative GUI.
12
Installation and Upgrades / Re: Users and Computers
« on: November 18, 2013, 11:58:26 am »
I have a GPO which can not be deleted. Neither via sambatool or RSAT GPO editor. But group policy, that one GPO and samba works very well. For this reason I try not to create lots of unneccesary GPO's.
A known bug is that GPO stops working after creating a guest share.
I also use "Active Directory Users and Computers" to block user accounts, remove computers from domain etc. For adding/removing users, adding groups etc... I use Zentyal tools.
I am curious to know if it is possible to reset samba4/gpo's if it stops working? Or am I forced then to restore system from backup?
A known bug is that GPO stops working after creating a guest share.
I also use "Active Directory Users and Computers" to block user accounts, remove computers from domain etc. For adding/removing users, adding groups etc... I use Zentyal tools.
I am curious to know if it is possible to reset samba4/gpo's if it stops working? Or am I forced then to restore system from backup?
13
Installation and Upgrades / Re: HTTP Proxy slow when higher load
« on: November 15, 2013, 06:43:16 pm »
I can also tell that diskd performs very much worse than aufs. I was able to get max download speed of 10Mbps from cache, but the web page loading still worked fine. With aufs I managed to get speeds very close to Gigabit Ethernet.
14
Installation and Upgrades / Re: HTTP Proxy slow when higher load
« on: November 13, 2013, 04:44:07 pm »
Yes, it is /usr/share/zentyal/stubs/squid/squid-external.conf.mas
I can show the modified template here http://pastebin.com/7URf44wm
Forget to mention that HTTP proxy module is up to date.
See line 175, I added that line there and also changed the value to 55 for testing reasons.
I suppose that it is called url_rewrite_children in newer versions of squid and it has also a higher default value.
I can show the modified template here http://pastebin.com/7URf44wm
Forget to mention that HTTP proxy module is up to date.
See line 175, I added that line there and also changed the value to 55 for testing reasons.
I suppose that it is called url_rewrite_children in newer versions of squid and it has also a higher default value.
15
Installation and Upgrades / Re: HTTP Proxy slow when higher load
« on: November 13, 2013, 04:04:52 pm »
After months of googling I found out the line that should be changed. Actually it should be like first thing to do after installing HTTP Proxy module in Zentyal. I remember changing a very similar squid configuration parameter in 2.2, but then squid was crashing with FATAL when it run out of redirector processes.
redirect_children (default 5)
Hope someone finds this. I set it to 50, RAM usage increased a little bit. Now the proxy runs a LOT smoother and I am not playing with caching range requests (windows updates), because windows updates started to work beautifully without caching now. When loading any webpage it now opens everytime.
For debugging I tried to set different values to parameter debug_options, so then the warning about redirector processes came out.
And I dont get those queue congestion warnings anymore.
I/O now gets higher just like CPU usage at some points of higher usage.
redirect_children (default 5)
Hope someone finds this. I set it to 50, RAM usage increased a little bit. Now the proxy runs a LOT smoother and I am not playing with caching range requests (windows updates), because windows updates started to work beautifully without caching now. When loading any webpage it now opens everytime.
For debugging I tried to set different values to parameter debug_options, so then the warning about redirector processes came out.
And I dont get those queue congestion warnings anymore.
I/O now gets higher just like CPU usage at some points of higher usage.