Topics

1

Installation and Upgrades / Download filter by AD's groups

« on: July 09, 2010, 04:31:50 am »

Hello there!

I have an eBox 1.4.8 woking perfectly.
Now I need to restrict .EXE files for all except for Directors.

eBox is integrated with Windows Active Directory 2003 and the sync works.

The filter works for everyone with the following configurations:

Code: [Select]

Transparent Proxy ENABLED
Port 3128
Cache 1024
Policy FILTER
---
Filter Profiles DEFAULT
I have created a Filter Profile called ALLOW ALL.
To create a Group Policy, the proxy must be set to Authorize and Filter.
To set the proxy to Authorize and Filter, Transparent Proxy must be DISABLED.

So...

Code: [Select]

Transparent Proxy DISABLED
Port 3128
Cache 1024
Policy AUTHORIZE AND FILTER
---
Filter Profiles DEFAULT e ALLOW ALL
DIRECTOR's Group Policy -> ALLOW ALL
DOMAIN USERS' Group Policy -> DEFAULT (that restrict EXE)
The problem is that all users still able to download EXE files.
The rule applies to Everyone or to No one.

what can I doing wrong

Sorry for the long and boring post and for my BAD english...


Thanks in advice,
Gabriel.

2

Portuguese / [Resolvido] Acesso a serviços internos pelo endereço externo

« on: June 17, 2010, 08:40:01 pm »

Senhores, bom dia!

Trabalho em uma gráfica e muitos vendedores acessam de fora os serviços internos (como FTP).
O problema se dá quando eles estão aqui dentro e tentam fazer o mesmo acesso.

Só funciona usando o IP interno do servidor.
É como se o firewall bloqueasse acessos vindos daqui da rede interna.

Já olhei as configurações do Firewall:
Rede interna para rede externa está liberado...
eBox para rede externa está liberado...
rede externa para rede interna está liberado...
Regra de redirecionamento de porta criada...

Basicamente tenho que explicar todas as vezes que existe um endereço interno e outro externo.
São usuários bem básicos...

O que posso estar fazendo errado na configuração?


Obrigado,
Gabriel

3

Portuguese / [Resolvido] Erro ao habilitar Users and Groups

« on: June 11, 2010, 09:56:37 pm »

Olá pessoal!!!

Estou recebendo um erro quando tento habilitar o módulo Users and Groups no eBox 1.5 (Ubuntu 10.04).
Fiz as configurações para que o eBox seja o Slave de um servidor Windows 2003 (que já possui a ferramenta ebox-adsync 1.4 instalada e configurada).

A really nasty bug has occurred
Exception
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed. Error output: ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) Command output: . Exit value: 255
Trace
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed.
Error output: ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

Command output: .
Exit value: 255 at /usr/share/perl5/EBox/CGI/ServiceModule/ConfigureModuleController.pm line 74
EBox::CGI::ServiceModule::ConfigureModuleController::_process('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x22...') called at /usr/share/perl5/EBox/CGI/Base.pm line 262
EBox::CGI::Base::run('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x22...') called at /usr/share/perl5/EBox/CGI/Run.pm line 120
EBox::CGI::Run::run('EBox::CGI::Run', 'ServiceModule/ConfigureModuleController', 'EBox') called at /usr/share/ebox/cgi/ebox.cgi line 19
ModPerl::ROOT::ModPerl::Registry::usr_share_ebox_cgi_ebox_2ecgi::handler('Apache2::RequestRec=SCALAR(0x23312f90)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
ModPerl::RegistryCooker::run('ModPerl::Registry=HASH(0x233130c0)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170
ModPerl::RegistryCooker::default_handler('ModPerl::Registry=HASH(0x233130c0)') called at /usr/lib/perl5/ModPerl/Registry.pm line 31
ModPerl::Registry::handler('ModPerl::Registry', 'Apache2::RequestRec=SCALAR(0x23312f90)') called at -e line 0
eval {...} called at -e line 0

Na parte Users and Groups => Mode está configurado dessa forma:

Mode: Windows AD Slave
LDAP DN: DC=meudominio,DC=com,DC=br
Master Host: 10.1.1.5 (IP do meu AD)

Alguém tem alguma idéia?


Muito obrigado,
Gabriel

4

Portuguese / [Resolvido] Erro no OpenVPN Server

« on: June 11, 2010, 09:15:45 pm »

Olá a todos!!!
.
Quando eu tento criar um servidor de VPN no eBox recebo a seguinte mensagem:

A really nasty bug has occurred
Exception
Can't use an undefined value as a HASH reference
Trace
Can't use an undefined value as a HASH reference at /usr/share/perl5/EBox/OpenVPN/Model/Servers.pm line 383.

.
Onde /usr/share/perl5/EBox/OpenVPN/Model/Servers.pm é:

378  # Create server certificate
379  my $ca = EBox::Global->modInstance('ca');
380  my $certName = "vpn-$name";
381  my @certs = @{$ca->listCertificates()};
382  unless (List::Util::first { $_->{dn}->{commonName} eq $certName } @certs ) {
383    my $caExpiration = $ca->getCACertificateMetadata()->{expiryDate};
384    $ca->issueCertificate(commonName => $certName , endDate => $caExpiration);
385  }

.
E quando eu habilito o módulo da OpenVPN e salvo as alterações:

Some modules reported error when saving changes. More information on the logs in /var/log/ebox/
The following modules failed while saving their changes

.
Estou usando o eBox 1.5 sobre o Ubuntu 10.04, mas eu tive o mesmo problema no eBox 1.4.4 sobre o Ubuntu 8.04.

Essa linha que gera o erro aparentemente tenta ler a data de expiração do certificado Certification Authority (sim, ele está criado), mas por algum motivo não consegue.
A configuração da vpn até chega a ser criada, apesar do erro, mas dá erro quando habilito o módulo.

Alguma idéia?


Muito obrigado,
Gabriel

5

Installation and Upgrades / [Resolved] OpenVPN Server Error

« on: June 11, 2010, 07:46:45 pm »

Hello there!
.
When I try to create a VPN server on eBox, I receive the following message:

A really nasty bug has occurred
Exception
Can't use an undefined value as a HASH reference
Trace
Can't use an undefined value as a HASH reference at /usr/share/perl5/EBox/OpenVPN/Model/Servers.pm line 383.

.
Where /usr/share/perl5/EBox/OpenVPN/Model/Servers.pm is:

378  # Create server certificate
379  my $ca = EBox::Global->modInstance('ca');
380  my $certName = "vpn-$name";
381  my @certs = @{$ca->listCertificates()};
382  unless (List::Util::first { $_->{dn}->{commonName} eq $certName } @certs ) {
383    my $caExpiration = $ca->getCACertificateMetadata()->{expiryDate};
384    $ca->issueCertificate(commonName => $certName , endDate => $caExpiration);
385  }

.
And when I enable the OpenVPN module and save changes:

Some modules reported error when saving changes . More information on the logs in /var/log/ebox/
The following modules failed while saving their changes

.
I'm using eBox 1.5 over Ubuntu 10.04, but I had the same problem in eBox 1.4.4 over Ubuntu 8.04.

Thanks in advice...
Gabriel