Messages

1

Installation and Upgrades / Re: Where are the zentyal/ldap/samba users stored?

« on: May 22, 2015, 10:35:59 am »

I ran into the same problem with Zentyal 4.1. The users home folder is still there, but I don't know where to look for remainings. Where are the user information stored?

Thanks,
Balazs

2

Magyar / Zentyal Samba authentikációs gondok

« on: January 14, 2015, 07:44:48 pm »

Sziasztok!

A következő problémám van, friss telepítésű Zentyal 4 community edition, az összes frissítéssel felvértezve. Alapvetően csak openchange funkciókra szeretném használni, létrehoztam egy cegnev.corp domaint, majd utána a how-to-k alapján megcsináltam a virtuális domaint, be is állítottam a domain userhez, de authentikációs problémáim vannak:

(A legegyszerűbb authentikációs request-em is sikertelen)
root@mail:/etc/init.d# smbclient -L 127.0.0.1 -U kovacs.balazs
Enter kovacs.balazs's password:
session setup failed: NT_STATUS_INVALID_SERVER_STATE

Amire a samba így "válaszol":

/usr/sbin/smbd: Allowed connection from 127.0.0.1 (127.0.0.1)
/usr/sbin/smbd: init_oplocks: initializing messages.
/usr/sbin/smbd: Transaction 0 of length 194 (0 toread)
/usr/sbin/smbd: switch message SMBnegprot (pid 23314) conn 0x0
/usr/sbin/smbd: Requested protocol [PC NETWORK PROGRAM 1.0]
/usr/sbin/smbd: Requested protocol [MICROSOFT NETWORKS 1.03]
/usr/sbin/smbd: Requested protocol [MICROSOFT NETWORKS 3.0]
/usr/sbin/smbd: Requested protocol [LANMAN1.0]
/usr/sbin/smbd: Requested protocol [LM1.2X002]
/usr/sbin/smbd: Requested protocol [DOS LANMAN2.1]
/usr/sbin/smbd: Requested protocol [LANMAN2.1]
/usr/sbin/smbd: Requested protocol [Samba]
/usr/sbin/smbd: Requested protocol [NT LANMAN 1.0]
/usr/sbin/smbd: Requested protocol [NT LM 0.12]
/usr/sbin/smbd: Module 'samba4' loaded
/usr/sbin/smbd: GENSEC backend 'gssapi_spnego' registered
/usr/sbin/smbd: GENSEC backend 'gssapi_krb5' registered
/usr/sbin/smbd: GENSEC backend 'gssapi_krb5_sasl' registered
/usr/sbin/smbd: GENSEC backend 'schannel' registered
/usr/sbin/smbd: GENSEC backend 'spnego' registered
/usr/sbin/smbd: GENSEC backend 'ntlmssp' registered
/usr/sbin/smbd: GENSEC backend 'krb5' registered
/usr/sbin/smbd: GENSEC backend 'fake_gssapi_krb5' registered
/usr/sbin/smbd: ldb_wrap open of secrets.ldb
/usr/sbin/smbd: AUTH backend 'sam' registered
/usr/sbin/smbd: AUTH backend 'sam_ignoredomain' registered
/usr/sbin/smbd: AUTH backend 'anonymous' registered
/usr/sbin/smbd: AUTH backend 'winbind' registered
/usr/sbin/smbd: AUTH backend 'winbind_wbclient' registered
/usr/sbin/smbd: AUTH backend 'name_to_ntstatus' registered
/usr/sbin/smbd: AUTH backend 'unix' registered
/usr/sbin/smbd: using SPNEGO
/usr/sbin/smbd: Selected protocol NT LANMAN 1.0
/usr/sbin/smbd: Transaction 1 of length 166 (0 toread)
/usr/sbin/smbd: switch message SMBsesssetupX (pid 23314) conn 0x0
/usr/sbin/smbd: wct=12 flg2=0xc843
/usr/sbin/smbd: Doing spnego session setup
/usr/sbin/smbd: NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
/usr/sbin/smbd: ldb_wrap open of secrets.ldb
/usr/sbin/smbd: Got NTLMSSP neg_flags=0x60088215
/usr/sbin/smbd: Transaction 2 of length 422 (0 toread)
/usr/sbin/smbd: switch message SMBsesssetupX (pid 23314) conn 0x0
/usr/sbin/smbd: wct=12 flg2=0xc843
/usr/sbin/smbd: Doing spnego session setup
/usr/sbin/smbd: NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
/usr/sbin/smbd: Got user=[kovacs.balazs] domain=[CEGNEV] workstation=[MAIL] len1=24 len2=162
/usr/sbin/smbd: auth_check_password_send: Checking password for unmapped user [CEGNEV]\[kovacs.balazs]@[MAIL]
/usr/sbin/smbd: auth_check_password_send: mapped user is: [CEGNEV]\[kovacs.balazs]@[MAIL]
/usr/sbin/smbd: NTLMSSP Sign/Seal - Initialising with flags:
/usr/sbin/smbd: Got NTLMSSP neg_flags=0x60088215
/usr/sbin/smbd: ldb_wrap open of privilege.ldb
/usr/sbin/smbd: Cannot contact winbind to provide unix token
/usr/sbin/smbd: Failed to generate session_info (user and group token) for session setup: NT_STATUS_INVALID_SERVER_STATE
/usr/sbin/smbd: NT error packet at ../source3/smbd/sesssetup.c(279) cmd=115 (SMBsesssetupX) NT_STATUS_INVALID_SERVER_STATE
/usr/sbin/smbd: Server exit (failed to receive smb request)

Van esetleg ötlet, hogy mi lehet a gond?

Nagyon köszönöm,
Balázs

3

Installation and Upgrades / Re: Cannot access exchange over https feature - Zentyal 4.0.3 - server behind fw

« on: December 11, 2014, 09:54:59 pm »

Dear Pcperfect,

Many thanks for your answer. Can you please give me some guidlines, as I'm a bit confused about the internal CA, and I'm not sure if I fully understand how it works.

Whenever I create a virtual domain, it automatically creates a certificate for virtualdomain.com , and I'm not able to change it anyhow. It is not a problem to purchase certificate for these purposes, but how to create certificate request then, and where to install it - i presume - manually? For testing I'd like to try it first with the internal CA, and once it works, I will purchase certificates.

The zentyal is named mail.internaldomain.lan , and dns for virtual domains is handled by zentyal.

I appreciate your feedback, thanks in advance!

Balazs

4

Installation and Upgrades / Cannot access exchange over https feature - Zentyal 4.0.3 - server behind fw

« on: December 11, 2014, 11:51:44 am »

Dear forum members,

I'm facing a strange problem with a fresh installation of Zentyal 4.0.3, applied with the latest updates. While the server was in the same subnet as an Outlook 2013 client, it worked as native exchange server access. I've placed behind a Juniper firewall, and forwared neccessary ports (8443,80,443,143,25), but exchange over http cannot access the server. Autodiscover is set, and it requests for inital username and passwords during the autodiscover. Do you have any suggestion, where to look for possible problems?

Thanks,
Balazs Kovacs