Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
Installation and Upgrades / Re: Account Lockout policies are not working
« on: April 07, 2015, 05:44:13 am »
Check the event logs for group policy on a client that fails.
2
Installation and Upgrades / Re: Account Lockout policies are not working
« on: April 06, 2015, 04:48:53 pm »
Check computer policy is being applied. Either it is that or something missing in your group policy setup.
Screen Saver is going to be user policy, but lockout can't be as the user isn't logged in yet so that policy won't be applied.
Check the event logs for group policy on a client that fails.
Screen Saver is going to be user policy, but lockout can't be as the user isn't logged in yet so that policy won't be applied.
Check the event logs for group policy on a client that fails.
3
Installation and Upgrades / Re: Account Lockout policies are not working
« on: April 06, 2015, 12:55:34 pm »
Did you use default group policy or create a new OU?
I've found using the default one was the only way to get the policy applied (older version of Zentyal so maybe no longer applies)
Another thing to test: Is it in computer policy or user policy and are they both being applied (check you windows event logs to verify)
I've found using the default one was the only way to get the policy applied (older version of Zentyal so maybe no longer applies)
Another thing to test: Is it in computer policy or user policy and are they both being applied (check you windows event logs to verify)
4
Installation and Upgrades / Re: SARG
« on: January 19, 2015, 03:06:34 pm »
that should be:
http://ip_of_server/html/squid-reports
as var/www/ is the root of the web server
edit: I see you've done that, so have a look with the console to see if any html is generated. in that folder. Also check permissions. Is the folder and contents root:www-data
http://ip_of_server/html/squid-reports
as var/www/ is the root of the web server
edit: I see you've done that, so have a look with the console to see if any html is generated. in that folder. Also check permissions. Is the folder and contents root:www-data
5
Installation and Upgrades / Re: SARG
« on: January 17, 2015, 07:44:08 am »
You don't change apache unless you want it as a virtual host.
Check you /etc/sarg/sarg.conf file to see where it is generation the reports, and where it takes the data from
Check you /etc/sarg/sarg.conf file to see where it is generation the reports, and where it takes the data from
6
Installation and Upgrades / Re: Home Folder changing on samba restart or smbcontrol all reload-config
« on: October 23, 2014, 07:07:35 am »
Zentyal is the one generating the .conf files, so on any changes (or service start/restart) it will overwrite your configuration.
Look at the .mas files which are used to generate the .conf files and put your changes in there (best to copy it to the template and update the template so upgrades don't overwrite it).
Look in /usr/share/zentyal/stubs
Look at the .mas files which are used to generate the .conf files and put your changes in there (best to copy it to the template and update the template so upgrades don't overwrite it).
Look in /usr/share/zentyal/stubs
7
Installation and Upgrades / Re: HTTP Proxy not loading images/layout of allowed website
« on: October 18, 2014, 03:03:15 pm »
I've seen this many times. The cause is because websites load scripts and css files from external sites. Just do a 'view source' on a website that isn't working and check out the urls of the css and script files. You'll probably find they're pulling them in from CDN's or other random locations.
Whitelist those addresses and your pages should be fine.
Whitelist those addresses and your pages should be fine.
8
Installation and Upgrades / Re: Zentyal 3.5 thunderbird gassapi/kerberos configuration
« on: October 18, 2014, 12:26:57 pm »9
Installation and Upgrades / Re: local public share
« on: October 18, 2014, 05:16:56 am »
Couple of points to ask:
1.Did you add all your user groups to the ACL of the share with read/write access?
2.Be aware the public shares used to cause problems with sysvol stopping domain computer policies being propagated (I'm not sure if this is fixed in current versions)
1.Did you add all your user groups to the ACL of the share with read/write access?
2.Be aware the public shares used to cause problems with sysvol stopping domain computer policies being propagated (I'm not sure if this is fixed in current versions)
10
Installation and Upgrades / Re: How to setup HTTP Proxy with SSO
« on: October 16, 2014, 03:14:41 am »
did you check the file '/etc/squid3/HTTP.keytab' exists?
If it does then you're set and you just need to make sure it's exported to squid.
If it does then you're set and you just need to make sure it's exported to squid.
11
Installation and Upgrades / Re: How to setup HTTP Proxy with SSO
« on: October 09, 2014, 09:58:28 am »
Have you tried generating the key on your windows domain controller and copying it to your zentyal machine?
See http://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication for generating keytabs. The rest of the article might also be useful.
This is obviously only useful information where your Zentyal box is not the PDC.
See http://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication for generating keytabs. The rest of the article might also be useful.
This is obviously only useful information where your Zentyal box is not the PDC.
12
Installation and Upgrades / Re: Zentyal 3.5 Squid+dansguardian blacklist problem
« on: October 08, 2014, 03:30:02 pm »
Your reasoning is correct.
If you have a peek in your etc/dansguardian/ conf files you'll see comments saying the blocked addresses are handled by squid.
But...some squid ACLS can be very quick (non regex ones) so I'm not sure on the actual performance hit caused soley by ACLS. Are you getting bit CPU spikes and no i/o waits, which would be indicitave of what you're supposing.
One point to check if you've got a lot of users is make sure you've got enough proxy/auth/dansguardian worker threads.
Check your squid cache.log for any 3129 connection failures as they will totally kill proxy performance.
If you have a peek in your etc/dansguardian/ conf files you'll see comments saying the blocked addresses are handled by squid.
But...some squid ACLS can be very quick (non regex ones) so I'm not sure on the actual performance hit caused soley by ACLS. Are you getting bit CPU spikes and no i/o waits, which would be indicitave of what you're supposing.
One point to check if you've got a lot of users is make sure you've got enough proxy/auth/dansguardian worker threads.
Check your squid cache.log for any 3129 connection failures as they will totally kill proxy performance.
13
Installation and Upgrades / Re: Should Zentyal box be DHCP server?
« on: October 06, 2014, 03:18:24 am »
You will want your server to have a static IP
14
Installation and Upgrades / Re: Access domain\user not work on Zentyal 3.5
« on: October 01, 2014, 04:24:58 pm »
Check your windows events for some clues, especially Windows Logs->Microsoft->Windows->Group Policy and of course the security logs.
15
Installation and Upgrades / Re: Access domain\user not work on Zentyal 3.5
« on: October 01, 2014, 12:12:56 pm »
sounds like DNS
Check your DNS setup from the problem machines.
Check your DNS setup from the problem machines.