Messages

1

Installation and Upgrades / Secure ldap (ldaps://) does not work

« on: July 30, 2010, 11:38:16 am »

I can not get ldaps:// to work for machines that want to authenticate against ebox server. I do think it's suppose to work, so this is maybe a bug.

Watching port 636 with wireshark and I can see that client tries to initiate a SSL connection but server (ebox) is not setting SSL session up so a reset flag is set on the connection and it start over again.

I have installed eBox 1.5 with Core version 1.5.8 and "Users and Groups" module at version 1.5.3-0ubuntu1~ppa1~lucid1


Do not forget to open port 636 before you begin. I have submitted a bug report about this.

2

News and Announcements / Re: Usage of eBox Platform

« on: August 24, 2009, 08:03:37 pm »

Current usage

• Am using eBox as a router/firewall/VPN mainly.

Future vision

• Am interested in replacing my Active Directory structure with eBox in the future. That means replicating ldap between ebox'es, distribute rules and making it easy to join the domain for both Linux and Windows clients.
• Optimizing ldap more is a good thing. I want to integrate services (Zimbra for example) with a central ldap catalog.

Things I don't use

• Things like eGroupware, Asterisk and mail. I use dedicated boxes for these kinds of features. (Zimbra, Asterisk + FreePBX)

eBox is not user friendly

• That I really miss is that ebox is not user friendly. When helping friends with eBox, they simple not getting it. For example, Module Status module, why does it say "Status" and not "Enabled" in the last column?
• One killer for new users is that they can't surf on the Internet after they have installed eBox as a router. Yeah, outgoing connections are disabled by default. And how do new users find this out? They don't. They uninstall ebox and takes something else. No help button exist.
• When adding new rules to firewall port forwarding feature, the interface marked as External is not used by default. Why?

Features am missing

• A feature am missing is traffic shaping. "What" you say? Yes, a lot of us has our external interface as DHCP and then we can't use this kind of feature. What's up with that? (requested here)
• And why can't I add my machines in the network as objects and then bind that object to dns, dhcp static, whatever? Much simpler. (requested here)