Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - hanse

Pages: [1]
1
Other modules / CRL URL
« on: November 01, 2021, 08:48:15 pm »
I have deployed Zentyal and have so far found a lot of the stuff to be well done. One thing I am struggling with (and probably struggling with the concept as a whole) are the certificates.

I understand that I can create a certificate through the UI for a service, and then download that certificate and use it for whatever service (like Windows workstation authentication etc). But something that comes up in my searches is Windows AD offering a so-called CRL URL, where a list of revoked certificates can be obtained, and in such a way access can be restricted if a cert is on this revoked list.

Is there any such a URL in Zentyal? And if there is, is this URL automatically updated whenever I revoke a cert?

Any and all help will be greatly appreciated!
Regards

2
Installation and Upgrades / GPO from Windows to Zentyal
« on: October 01, 2021, 03:32:00 pm »
Hi All

I am very new to the world of setting up Domains and I am busy with a lab project of how to convert from Windows AD to Zentyal. After a lot of work so far, I am fairly confident I am nearly there. I have managed to add Zentyal DC to the domain as an additional DC, the users and groups synced successfully and I ran the migrate script, after which all the roles were transferred to Zentyal.
But now I am confused with regards to the GPO part. What commands can I use to transfer all the GPOs from Windows Server to Zentyal in order to reach the end goal of switching off the Windows Server? Any help anyone can offer will be greatly appreciated!

Another question for down the line: if we add a second Zentyal server, should we then use the tutorial listed in the Zentyal docs under total migration (https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround) for the GPOs to sync between the two Zentyal servers? Or will Zentyal to Zentyal be synced continuously and automatically?

Pages: [1]