Messages

1

Contributions / Tips&Tricks / Features Requests / Proxy ACL for Users

« on: May 26, 2017, 11:17:00 am »

Hi,

in squid it is possible to set an acl by username.
In zentyal it's only possible to set it by IP-source.

Would be a nice feature.

2

Other modules / Re: How to replace Zentyal CA certificates and key with an already existing CA

« on: May 26, 2017, 11:10:38 am »

Zentyal 5.0 ?

For Admin:

Code: [Select]

sudo nano /usr/share/zentyal/stubs/core/nginx.conf.mas
Search for:

Code: [Select]

server {
       listen <% $port %>;

       ssl on;
       ssl_certificate <% $zentyalconfdir %>ssl/ssl.pem;
       ssl_certificate_key <% $zentyalconfdir %>ssl/ssl.pem;
% if ($caFile) {
       ssl_client_certificate <% $caFile %>;
       ssl_verify_client optional;
       ssl_verify_depth 1;
% }
and replace it:

Code: [Select]

server {
       listen <% $port %>;

       ssl on;
       ssl_certificate <directory of cert-files>/cert.pem;
       ssl_certificate_key <directory of cert-files>/key.pem;
       ssl_client_certificate <directory of cert-files>/ca.pem;
       ssl_verify_client optional;
       ssl_verify_depth 1;
For Apache Webserver:

 

Code: [Select]

sudo nano /etc/apache2/sites-available/000-default-le-ssl.conf
Add/Replace Lines:

Code: [Select]

SSLCertificateFile <directory of cert-file>/cert.pem
SSLCertificateKeyFile <directory of key-file>/privkey.pem