This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
46
Directory and Authentication / Re: Promote additional DC to main without loosing users?
« on: December 04, 2018, 03:04:35 pm »
Once you have sorted out the situation, check https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround : the lack of SYSVOL replication is not a Zentyal issue but a basic samba limitation.
Hopefully it will be implemented at some point but that link explains how to configure it manually.
Hopefully it will be implemented at some point but that link explains how to configure it manually.
47
News and Announcements / Re: Zentyal 6.0 available!
« on: November 19, 2018, 12:01:38 pm »
Hello,
I am using the Development/Community Edition, am on 5.1 and was expecting to see the button to upgrade to 6.0 becoming available any day.
However, after applying updates last week, today I seem to have a new version available, but it is 5.1.2 and not 6.0: "Core version 5.1.1 (5.1.2 available)".
Is this an intermediate step and where do I find info on the changes?
Many thanks
G
I am using the Development/Community Edition, am on 5.1 and was expecting to see the button to upgrade to 6.0 becoming available any day.
However, after applying updates last week, today I seem to have a new version available, but it is 5.1.2 and not 6.0: "Core version 5.1.1 (5.1.2 available)".
Is this an intermediate step and where do I find info on the changes?
Many thanks
G
48
Directory and Authentication / Re: NTP synch issue on additional domain controller after a power cut?
« on: October 25, 2018, 11:39:20 am »
The issue was solved by disabling time synchronization between Zentyal VM (hosted) and the VM hosting computer.
This consisted in setting the paravirtualization interface to none in Virtual Box settings for the Zentyal VM.
This consisted in setting the paravirtualization interface to none in Virtual Box settings for the Zentyal VM.
49
Directory and Authentication / Re: zentyal as an authentication center for my server farm
« on: October 17, 2018, 12:12:51 pm »
If you are looking for a developer/community product and do not intend to pay for support, do not use Zentyal.
It would work perfectly well as samba based active directory (easy to set up and manage through a sensible interface) but you would be on your own as soon as you wish to add more than a few other basic services.
I have deployed Zentyal here about a year ago, and had a few questions I posted on these forums. Most of them went unanswered, and when I did get some reply it was always from other users. Looks like Zentyal employees do not use the forum any more, except for some sporadic announcement about new versions.
Check out Nethserver and ClearOS (but there's more) before committing to this excellent but substantially dead product that is cutting down more options and packages with every release. It is hemorraging users day by day.
It would work perfectly well as samba based active directory (easy to set up and manage through a sensible interface) but you would be on your own as soon as you wish to add more than a few other basic services.
I have deployed Zentyal here about a year ago, and had a few questions I posted on these forums. Most of them went unanswered, and when I did get some reply it was always from other users. Looks like Zentyal employees do not use the forum any more, except for some sporadic announcement about new versions.
Check out Nethserver and ClearOS (but there's more) before committing to this excellent but substantially dead product that is cutting down more options and packages with every release. It is hemorraging users day by day.
50
Directory and Authentication / [SOLVED]NTP synch issue on additional domain controller after a power cut?
« on: September 27, 2018, 11:26:21 am »
Hello,
We have a small network with 2 Zentyal domain controllers.
Controller 1 is physical and connected to a UPS, Controller 2 is virtual and hosted on a machine that is not under UPS.
Yesterday morning there was a power cut so Controller 2 went down with its host, and Controller 1 stayed online.
When I got in the office I restarted Controller 2 host computer and the Zentyal virtual machine.
I had imagined the server time would update: both controllers are set up to synchronize with external servers and point to 3 machines from the ntp.org pool.
However, this did not happen and we had some authentication issues until we found out that the time on the controller we restarted was 25 minutes earlier than the other.
Why is this controller NOT updating its time when it is configured exactly like the other machine and has a working internet connection to reach ntp.org?
We have a small network with 2 Zentyal domain controllers.
Controller 1 is physical and connected to a UPS, Controller 2 is virtual and hosted on a machine that is not under UPS.
Yesterday morning there was a power cut so Controller 2 went down with its host, and Controller 1 stayed online.
When I got in the office I restarted Controller 2 host computer and the Zentyal virtual machine.
I had imagined the server time would update: both controllers are set up to synchronize with external servers and point to 3 machines from the ntp.org pool.
However, this did not happen and we had some authentication issues until we found out that the time on the controller we restarted was 25 minutes earlier than the other.
Why is this controller NOT updating its time when it is configured exactly like the other machine and has a working internet connection to reach ntp.org?
51
Contributions / Tips&Tricks / Features Requests / Re: How to allow linux users to change their own password?
« on: September 25, 2018, 10:58:52 am »
Go back to basics?
From the GUI
System Settings....
User Accounts
Select the account interested and change the password in the Login Options section
From the command line
normal user changing his/her password -> passwd
to change root password -> sudo passwd
to change other users passwords -> sudo passwd USERNAME
From the GUI
System Settings....
User Accounts
Select the account interested and change the password in the Login Options section
From the command line
normal user changing his/her password -> passwd
to change root password -> sudo passwd
to change other users passwords -> sudo passwd USERNAME
52
Directory and Authentication / Re: How to mount a network drive at login from linux clients
« on: September 11, 2018, 03:23:05 pm »
*BUMP*
Anyone has any direct experience with the suggestions here?
https://askubuntu.com/questions/1026316/cifs-mounts-and-kerberos-permissions-on-access-or-best-practice
The users' homes are correctly connected by Zentyal on client login, but I want them to be mounting automatically a CIFS share on our LAN. This share is managed by FreeNAS and set to authenticate users against the Zentyal domain.
Anyone has any direct experience with the suggestions here?
https://askubuntu.com/questions/1026316/cifs-mounts-and-kerberos-permissions-on-access-or-best-practice
The users' homes are correctly connected by Zentyal on client login, but I want them to be mounting automatically a CIFS share on our LAN. This share is managed by FreeNAS and set to authenticate users against the Zentyal domain.
53
Directory and Authentication / How to mount a network drive at login from linux clients
« on: July 16, 2018, 06:29:38 pm »
Hello,
I have a Zentyal 5.1 domain and my clients are a mix of Windows 10 and Ubuntu 18.05.
They all work on a main file server - a freeNAS device joined to the Zentyal domain.
I have been looking into ways to automate mounting the network drive from the Linux clients, but the solutions I found involve local scripts containing password in clear and in need of updating when the credentials change - a no-go for me.
How should I go about using Zentyal to do this instead? I need the clients at login to mount a CIFS share that is using the domain permissions and is on a server that is not the domain controller.
I have a Zentyal 5.1 domain and my clients are a mix of Windows 10 and Ubuntu 18.05.
They all work on a main file server - a freeNAS device joined to the Zentyal domain.
I have been looking into ways to automate mounting the network drive from the Linux clients, but the solutions I found involve local scripts containing password in clear and in need of updating when the credentials change - a no-go for me.
How should I go about using Zentyal to do this instead? I need the clients at login to mount a CIFS share that is using the domain permissions and is on a server that is not the domain controller.
54
Spanish / Re: Eliminar equipo registrado en el dominio
« on: May 02, 2018, 01:42:07 pm »
Problema antiguo: no.
1) utilizar RSAT & Directorio activo de usuarios y computadoras desde un pc Windows
o
2) pdbedit https://www.samba.org/samba/docs/current/man-html/pdbedit.8.html
o
3) LdapAdmin http://www.ldapadmin.org/
1) utilizar RSAT & Directorio activo de usuarios y computadoras desde un pc Windows
o
2) pdbedit https://www.samba.org/samba/docs/current/man-html/pdbedit.8.html
o
3) LdapAdmin http://www.ldapadmin.org/
55
Directory and Authentication / Re: How to set up domain login to Zentyal DC from Linux (Mint) clients?
« on: April 03, 2018, 04:09:41 pm »
Thanks!
It was actually easier than expected but your advice put me on the right track.
Looks like Kerberos was having a hiccup trying to generate TGTs because the users existed on the domain but they had never logged in from the command line.
As the domain is not in full production I have been able to issue password changes on the domain controller + connect to the DC via ssh with each user.
This has generated the initial info and I can now login with any valid domain user from my Linux machines as well.
It was actually easier than expected but your advice put me on the right track.
Looks like Kerberos was having a hiccup trying to generate TGTs because the users existed on the domain but they had never logged in from the command line.
As the domain is not in full production I have been able to issue password changes on the domain controller + connect to the DC via ssh with each user.
This has generated the initial info and I can now login with any valid domain user from my Linux machines as well.
56
Directory and Authentication / Re: How to set up domain login to Zentyal DC from Linux (Mint) clients?
« on: March 28, 2018, 02:08:13 pm »
Thanks ovecka:
I checked the package and it does do a good job joining a machine to the domain + is more straightforward.
However, it does not solve the question of how allowing any valid domain user to login from that machine.
I checked the package and it does do a good job joining a machine to the domain + is more straightforward.
However, it does not solve the question of how allowing any valid domain user to login from that machine.
57
Directory and Authentication / [SOLVED] How to set up domain login to Zentyal DC from Linux (Mint) clients?
« on: March 27, 2018, 04:29:27 pm »
Hello,
I can successfully add a Linux workstation to the Zentyal domain using the instructions at
https://wiki.zentyal.org/wiki/Authenticating_Linux_client_against_Samba
However, I am having some trouble figuring out how to allow ANY existing domain user to login from any Linux client.
We are a small setup with a mix of Windows and Linux and several of us work part-time, hence we need to share our computers among a few users.
I have installed system-config-samba (if it doesn't start, use sudo touch /etc/libuser.conf) on the clients and had some tries but the help is insufficient.
At the moment, I can only login with local users I have created.
Though I can manually get the Kerberos tickets with kinit, if I try and login with a domain account that does not have a local account on the client yet, I get "wrong password" message.
What I want to achieve is
- credentials verified against Zentyal
- if good, user logged in and local user with some /homedir created if it's the first login
- if not good, failback to some low privilege local account
Can someone please explain me how to configure the server and user settings in system-config-samba ?
I can successfully add a Linux workstation to the Zentyal domain using the instructions at
https://wiki.zentyal.org/wiki/Authenticating_Linux_client_against_Samba
However, I am having some trouble figuring out how to allow ANY existing domain user to login from any Linux client.
We are a small setup with a mix of Windows and Linux and several of us work part-time, hence we need to share our computers among a few users.
I have installed system-config-samba (if it doesn't start, use sudo touch /etc/libuser.conf) on the clients and had some tries but the help is insufficient.
At the moment, I can only login with local users I have created.
Though I can manually get the Kerberos tickets with kinit, if I try and login with a domain account that does not have a local account on the client yet, I get "wrong password" message.
What I want to achieve is
- credentials verified against Zentyal
- if good, user logged in and local user with some /homedir created if it's the first login
- if not good, failback to some low privilege local account
Can someone please explain me how to configure the server and user settings in system-config-samba ?
58
Spanish / Re: Buenas mi servidor zentyal 4.1 se le dañaron unos sectores del disco ayuda
« on: March 08, 2018, 03:14:01 pm »
Lo siento por mi pobre español. Aquí hay 2 links con información general sobre cómo recuperar una máquina Linux con problemas de disco duro; Deberías poder usar el CD de instalación de Zentyal y copiar los datos importantes en algún lugar de la red o en un dispositivo externo si necesita una reinstalación completa.
Hay páginas similares en español pero esta es más completa y tiene capturas de pantalla.
https://www.howtogeek.com/196740/how-to-fix-an-ubuntu-system-when-it-wont-boot/
https://www.howtogeek.com/129815/beginner-geek-how-to-change-the-boot-order-in-your-computers-bios/
Hay páginas similares en español pero esta es más completa y tiene capturas de pantalla.
https://www.howtogeek.com/196740/how-to-fix-an-ubuntu-system-when-it-wont-boot/
https://www.howtogeek.com/129815/beginner-geek-how-to-change-the-boot-order-in-your-computers-bios/
59
Installation and Upgrades / Re: Domain requirements for 600 Clients
« on: March 05, 2018, 05:21:19 pm »
Useful starting point at the very end of the installation guide
https://wiki.zentyal.org/wiki/En/5.0/Installation
For memory/storage requirements, it depends what services you need to provide.
For the number of controllers, depends on how many sites you have and how they are connected.
https://wiki.zentyal.org/wiki/En/5.0/Installation
For memory/storage requirements, it depends what services you need to provide.
For the number of controllers, depends on how many sites you have and how they are connected.
60
Contributions / Tips&Tricks / Features Requests / Re: [Feature Request] IPv6
« on: March 05, 2018, 11:35:48 am »
After another year, *BUMP* again.
This is getting important - I will be forced to replace Zentyal with an alternative product if IPv6 will not be fully supported by September.
This is getting important - I will be forced to replace Zentyal with an alternative product if IPv6 will not be fully supported by September.