Recent Posts
31
Installation and Upgrades / Re: My failed attempt at upgading from 7.1.1 to Zentyal 8.0
« Last post by zyzio on April 02, 2024, 06:34:38 pm »32
Installation and Upgrades / Re: Looking for reassurance before upgrading 7.1.1 to 8.0
« Last post by zyzio on April 02, 2024, 06:30:05 pm »Sorry for my english..
I managed to update 4 servers.
The problems I encountered were solved - in version 7.1.1 I installed the package ( you need to install, if skip = problems with upgrade)
apt-get install unattended-upgrades apt-listchanges
dpkg-reconfigure -plow unattended-upgrades
Now using "upgrade now". If it finish, restart and check mysql is working:
systemctl status mysql.service
If not -> sudo mkdir -p /var/log/mysql/
sudo chown mysql:mysql -R /var/log/mysql
systemctl start mysql.service.
I managed to update 4 servers.
The problems I encountered were solved - in version 7.1.1 I installed the package ( you need to install, if skip = problems with upgrade)
apt-get install unattended-upgrades apt-listchanges
dpkg-reconfigure -plow unattended-upgrades
Now using "upgrade now". If it finish, restart and check mysql is working:
systemctl status mysql.service
If not -> sudo mkdir -p /var/log/mysql/
sudo chown mysql:mysql -R /var/log/mysql
systemctl start mysql.service.
33
Installation and Upgrades / Looking for reassurance before upgrading 7.1.1 to 8.0
« Last post by trvaa on April 02, 2024, 05:47:19 pm »After reading of problems both here and on github, can anyone confirm a successful upgrade from 7.1.1 to 8.0 using the "Upgrade Now" button on the Dashboard?
34
Installation and Upgrades / Re: My failed attempt at upgading from 7.1.1 to Zentyal 8.0
« Last post by cforker on April 01, 2024, 06:51:01 pm »Hi scottdr,
I have had the same issues although I didn’t close any dialog boxes until I was sure it had finished all tasks. Eventually you have to reboot into the new server and antivirus was stoped but the rest was working. I managed to set the 20autostart and 50xxxx files to get to work, but the update process of zentyal-core never finished and is now stuck on expecting the unattended package which is not installed and can not be installed because of the unfinished installation proces of zentyal-core. I think that this is the bottleneck of all the problems.
I would advise to install the Debian unattended package before upgrading to Zentyal 8. Probably this will help to upgrade without issues. Once I have fixed my upgrade I will check this approach but maybe someone has a chance to test this theory before I can.
I also hope the the Zentyal community finds a way to finish the stuck unattended installation so we don’t have to fall back or restore to the earlier version.
C.
I have had the same issues although I didn’t close any dialog boxes until I was sure it had finished all tasks. Eventually you have to reboot into the new server and antivirus was stoped but the rest was working. I managed to set the 20autostart and 50xxxx files to get to work, but the update process of zentyal-core never finished and is now stuck on expecting the unattended package which is not installed and can not be installed because of the unfinished installation proces of zentyal-core. I think that this is the bottleneck of all the problems.
I would advise to install the Debian unattended package before upgrading to Zentyal 8. Probably this will help to upgrade without issues. Once I have fixed my upgrade I will check this approach but maybe someone has a chance to test this theory before I can.
I also hope the the Zentyal community finds a way to finish the stuck unattended installation so we don’t have to fall back or restore to the earlier version.
C.
35
Installation and Upgrades / My failed attempt at upgading from 7.1.1 to Zentyal 8.0
« Last post by scottdr on March 29, 2024, 11:29:26 pm »I wanted to upload a PDF attachment to show dialogue boxes with this report, but was unable to do so. The PDF was 179KB but there was no upload space.
Hope it helps
My attempt at carrying out an upgrade to Zentyal Version 8 from an up to date version of Zentyal 7.1.1
Platform: QEMU-KVM Hypervsisor host on HPE Proliant DL380 Gen9 running Ubuntu 22.04.4 LTS server with updates to 28th March 2024 including ESM updates.
VM 8vCPU, 8G Ram scsi drives on *.qcow2 2 x virtio bridge network connections
The dialogue below is misleading as it suggests that the Upgrade is finished and you can click close, but leave it open, In a separate shell monitor dpkg.log for progress ‘tail -f /var/log/dkpg.log’
Even though it will display ‘Finishing the upgrade’ watch the dpkg.log for the update finished message before clicking on ‘Close’
From dkpg.log
Click Close on Upgrading to Zentyal 8.0 dialogue and then reboot the system.
A stop job for Zentyal will delay the reboot for 1min 30sec
When the system restarted, the Zentyal logger daemon repeatedly stopped and started which might be a clue to issues ahead.
On restart, the Dashboard looked OK, but the Antivirus service failed to start. Also, the mysql service also failed due to permission issues on lock directory and missing log folder /var/log/mysql
This prevented the zentyal-core update script running to complete the install process.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: mysql.service: Start request repeated too quickly.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: mysql.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░ The unit mysql.service has entered the 'failed' state with result 'exit-code'.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: Failed to start MySQL Community Server.
░░ Subject: A start job for unit mysql.service has failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░ A start job for unit mysql.service has finished with a failure.
░░ The job identifier is 9012 and the job result is failed.
Setting up zentyal-core (8.0.0) ...
Connection DB Error: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)
dpkg: error processing package zentyal-core (--configure):
installed zentyal-core package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
zentyal-core
E: Sub-process /usr/bin/dpkg returned an error code (1)
Had to create a folder for mysql /var/log/mysql and chown mysql to that folder for mysql to start
Now clamav failing
Unable to work out clamav issues
Removed Antivirus module from Zentyal and rebooted
Mysql failed again, so had to chown mysql /var/log/mysql
Setting up zentyal-core (8.0.0) ...
Synchronizing state of apparmor.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install disable apparmor
sed: can't read /etc/apt/apt.conf.d/20auto-upgrades: No such file or directory
dpkg: error processing package zentyal-core (--configure):
installed zentyal-core package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
zentyal-core
E: Sub-process /usr/bin/dpkg returned an error code (1)
Removed Antivirus module, mailfilter and antivirus
Unable to process /etc/apt/apt.conf.d/20auto-upgrades: No such file or directory
Gave up!! Reverted VM to V7.1.1 with no outstanding updates as at 29th March 2024
Hope this helps somebody.
Thank you Zentyal for the community version.
Hope it helps
My attempt at carrying out an upgrade to Zentyal Version 8 from an up to date version of Zentyal 7.1.1
Platform: QEMU-KVM Hypervsisor host on HPE Proliant DL380 Gen9 running Ubuntu 22.04.4 LTS server with updates to 28th March 2024 including ESM updates.
VM 8vCPU, 8G Ram scsi drives on *.qcow2 2 x virtio bridge network connections
The dialogue below is misleading as it suggests that the Upgrade is finished and you can click close, but leave it open, In a separate shell monitor dpkg.log for progress ‘tail -f /var/log/dkpg.log’
Even though it will display ‘Finishing the upgrade’ watch the dpkg.log for the update finished message before clicking on ‘Close’
From dkpg.log
Click Close on Upgrading to Zentyal 8.0 dialogue and then reboot the system.
A stop job for Zentyal will delay the reboot for 1min 30sec
When the system restarted, the Zentyal logger daemon repeatedly stopped and started which might be a clue to issues ahead.
On restart, the Dashboard looked OK, but the Antivirus service failed to start. Also, the mysql service also failed due to permission issues on lock directory and missing log folder /var/log/mysql
This prevented the zentyal-core update script running to complete the install process.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: mysql.service: Start request repeated too quickly.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: mysql.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░ The unit mysql.service has entered the 'failed' state with result 'exit-code'.
Mar 29 11:23:28 hcs-zentyal6 systemd[1]: Failed to start MySQL Community Server.
░░ Subject: A start job for unit mysql.service has failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░ A start job for unit mysql.service has finished with a failure.
░░ The job identifier is 9012 and the job result is failed.
Setting up zentyal-core (8.0.0) ...
Connection DB Error: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)
dpkg: error processing package zentyal-core (--configure):
installed zentyal-core package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
zentyal-core
E: Sub-process /usr/bin/dpkg returned an error code (1)
Had to create a folder for mysql /var/log/mysql and chown mysql to that folder for mysql to start
Now clamav failing
Unable to work out clamav issues
Removed Antivirus module from Zentyal and rebooted
Mysql failed again, so had to chown mysql /var/log/mysql
Setting up zentyal-core (8.0.0) ...
Synchronizing state of apparmor.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install disable apparmor
sed: can't read /etc/apt/apt.conf.d/20auto-upgrades: No such file or directory
dpkg: error processing package zentyal-core (--configure):
installed zentyal-core package post-installation script subprocess returned error exit status 2
Errors were encountered while processing:
zentyal-core
E: Sub-process /usr/bin/dpkg returned an error code (1)
Removed Antivirus module, mailfilter and antivirus
Unable to process /etc/apt/apt.conf.d/20auto-upgrades: No such file or directory
Gave up!! Reverted VM to V7.1.1 with no outstanding updates as at 29th March 2024
Hope this helps somebody.
Thank you Zentyal for the community version.
36
Other modules / Re: Question on CA and the Password on a .p12 file it generates
« Last post by smtryan on March 28, 2024, 12:42:31 pm »This makes me sad that I am only now discovering Zentyal as it seems dead here.
I figured I would update on my post myself. I am not sure but I imagine that Zentyal is not providing a password to the .p12 however in Windows Server 2016 that I am running it looks like it needs a particular way the .p12 file needs to be generated in order for it to be able to be imported.
I was able, via command line using openssh to get a .pfx (same as .p12) to create and prompt for a password that I did later import into my server:
I did not try to go back and run the command and export as a .p12 however it SHOULD work. I think there is something with what it does and windows would not take any password on any that I created until I used all the switches above. So it could possibly be that there is no password however the encoding or whatever just isn't happy.
The one I created is not as robust as the one that I created from Zentyal and did not work for my use case. It may not be a fault of the cert and may have something to do with my domain now. I'm working it that route.
I figured I would update on my post myself. I am not sure but I imagine that Zentyal is not providing a password to the .p12 however in Windows Server 2016 that I am running it looks like it needs a particular way the .p12 file needs to be generated in order for it to be able to be imported.
I was able, via command line using openssh to get a .pfx (same as .p12) to create and prompt for a password that I did later import into my server:
Code: [Select]
openssl pkcs12 -export -certpbe PBE-SHA1-3DES -keypbe PBE-SHA1-3DES -nomac -inkey keyname.key -in certname.crt -out outpackage.pfxI did not try to go back and run the command and export as a .p12 however it SHOULD work. I think there is something with what it does and windows would not take any password on any that I created until I used all the switches above. So it could possibly be that there is no password however the encoding or whatever just isn't happy.
The one I created is not as robust as the one that I created from Zentyal and did not work for my use case. It may not be a fault of the cert and may have something to do with my domain now. I'm working it that route.
37
Other modules / Question on CA and the Password on a .p12 file it generates
« Last post by smtryan on March 26, 2024, 01:44:05 pm »Good Morning,
I have only just discovered zentyal and am looking to implement into my environment as a CA; possibly more but starting there for now. I have the CA setup from what I can tell and I have imported my Root CA Cert into AD.
What I am looking to do is get Meraki talking to AD. I created the cert for my DC dc.domain.local and have all the pieces it needs. I download the .zip file. Inside is the .cer, the .p12 and then the two .pem files.
I imported the .cer just fine. When I go to import the private key it is asking for a password. I have no password and blank simply states that it is incorrect.
My question is... what is the password that it creates for the .p12 file? Is there a way to specify these? There are only what 3 fields to fill out when creating so I'm not entirely sure.
I have only just discovered zentyal and am looking to implement into my environment as a CA; possibly more but starting there for now. I have the CA setup from what I can tell and I have imported my Root CA Cert into AD.
What I am looking to do is get Meraki talking to AD. I created the cert for my DC dc.domain.local and have all the pieces it needs. I download the .zip file. Inside is the .cer, the .p12 and then the two .pem files.
I imported the .cer just fine. When I go to import the private key it is asking for a password. I have no password and blank simply states that it is incorrect.
My question is... what is the password that it creates for the .p12 file? Is there a way to specify these? There are only what 3 fields to fill out when creating so I'm not entirely sure.
38
German / Re: Massenweise Kerneldumps sogod: segfault at 7ffc8d1001eb ip 00007fd5aeb7da84...
« Last post by markus.neubauer on March 22, 2024, 01:38:11 pm »... sp 00007ffc0d1000f8 error 4 in libc-2.31.so[7fd5aea14000+178000]
Ein simpler systemctl reboot hat geholfen, der Fehler trat offensichtlich in Zusammenhang von Security Updates bei Ubuntu auf.
39
German / Massenweise Kerneldumps sogod: segfault at 7ffc8d1001eb ip 00007fd5aeb7da84...
« Last post by markus.neubauer on March 21, 2024, 01:06:11 pm »... sp 00007ffc0d1000f8 error 4 in libc-2.31.so[7fd5aea14000+178000]
Mit dem Stand 7.1 (sogo:amd64 5.0.1.20201214-1) bekomme ich massenweise Kerneldumps wenn sogo benutzt wird. Die libs und sogo:amd64 habe ich bereits alle reinstalliert, es ändert an den den messages in /var/log/kern.log leider nichts.
Hat noch jemand diese Effekte und, wichtiger, eine Lösung dafür.
Mit dem Stand 7.1 (sogo:amd64 5.0.1.20201214-1) bekomme ich massenweise Kerneldumps wenn sogo benutzt wird. Die libs und sogo:amd64 habe ich bereits alle reinstalliert, es ändert an den den messages in /var/log/kern.log leider nichts.
Hat noch jemand diese Effekte und, wichtiger, eine Lösung dafür.
40
German / Re: Zentyal 7.1 Erfahrungen
« Last post by markus.neubauer on March 21, 2024, 01:00:07 pm »kannst Du dies bitte näher erläutern? Wird info@... in den anderen Postfächern nicht angezeigt oder die Mails nicht dahin kopiert?
Wenn ich mich recht entsinne steuert das postfix und nicht SoGO. In Postfix muss dann nur ein entsprechender alias angelegt werden, mit den Empfängern.
Ich meine damit, dass man ein Postfach nicht mehr delegieren kann. Ich meine mich zu erinnern, dass das in einer früheren Version möglich war.
Beispiel: Sekretärin kann die Mails von Chef sehen. Quasi shared Postfach oder Shared/Öffentlicher Order im MS Sprech.
Postfix steuert nicht den Zugriff auf die Postfächer, dass wird von Dovecot verwaltet. Mit Postfix kannst Du Mails replizieren mittels verschiedener Wege alias, bcc etc.