Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
46
Installation and Upgrades / Server Master Slave Setup - looking for advice
« on: October 12, 2011, 04:37:18 pm »
I attempted to create a slave for my existing zentyal 2.2 server which would just run a webserver and zarafa. However I was not able to connect to the master.
I have read a few posts and this seems to be the case if you have either samba, mail, or maybe jabber running already on the master server.
Question is there a way to address this limitation and still connect a slave even though those modules are running?
In general based on this behavior... if someone was thinking of eventually adding more slave servers.. should they have one server running just the "users and groups" module as a master LDAP server (with no other modules installed).
I am trying to get an architectural understanding of how to layout a network using zentyal. What are the LDAP limitations??
I have read a few posts and this seems to be the case if you have either samba, mail, or maybe jabber running already on the master server.
Question is there a way to address this limitation and still connect a slave even though those modules are running?
In general based on this behavior... if someone was thinking of eventually adding more slave servers.. should they have one server running just the "users and groups" module as a master LDAP server (with no other modules installed).
I am trying to get an architectural understanding of how to layout a network using zentyal. What are the LDAP limitations??
47
Installation and Upgrades / Zentyal 2.2 - virtual machine module
« on: October 11, 2011, 04:01:24 pm »
In order to use the zentyal 2.2 virtual machine module which version of virtualbox should we be using??
I know that the standard is KVM, but for me it does not seem to work properly (can't bridge to my VLAN interfaces)
Virtualbox seems to work for me, but I could only get the 4.1 version working and not the older virtualbox-ose. However the Zentyal module for some reason does not recognize the virtualbox 4.1 installation..... keeps defaulting to KVM.
Has anyone had the same issues?
Has anyone had any issues installing virtualbox-ose on zentyal 2.2???
I know that the standard is KVM, but for me it does not seem to work properly (can't bridge to my VLAN interfaces)
Virtualbox seems to work for me, but I could only get the 4.1 version working and not the older virtualbox-ose. However the Zentyal module for some reason does not recognize the virtualbox 4.1 installation..... keeps defaulting to KVM.
Has anyone had the same issues?
Has anyone had any issues installing virtualbox-ose on zentyal 2.2??? 48
Installation and Upgrades / Zentyal 2.2 Dashboard Widgets - problem
« on: October 11, 2011, 03:56:47 pm »
Since yesterday my dashboard widget for monitoring interface fates has stopped working. The graphs no longer update to show the data rate through each interface.
Is there a way to reset the monitors or what should I be looking at to see what possibly could be causing the problem.
This started after I had trouble activating the virtualization manager.
Is there a way to reset the monitors or what should I be looking at to see what possibly could be causing the problem.
This started after I had trouble activating the virtualization manager.
49
Installation and Upgrades / Virtual machine not starting
« on: October 10, 2011, 06:43:35 pm »
I am using zentyal 2.2
I have installed virtualbox-ose and than installed the zentyal module for virtual servers.
Everything seems fine until I actually start the virtual machine... does not matter if I try to create and lunch through zentyal console or if I try to create and start one on the host system.
The virtualbox does not start... gives me an error about having to do a modprobe vboxdrv and something about installing virtualbox-ose-dkms.
This has never happened before and through the beta tests of zentyal I have never had a problem with virtualbox. From reading on the internet it seems like a problem with the kernel not loadin.. or something like that.
Has anyone had any issues like this ??
Also since my install of virtualbox it seems that my dashboard widgets which show me my interface rates are not longer working. They never seem to update.
I have installed virtualbox-ose and than installed the zentyal module for virtual servers.
Everything seems fine until I actually start the virtual machine... does not matter if I try to create and lunch through zentyal console or if I try to create and start one on the host system.
The virtualbox does not start... gives me an error about having to do a modprobe vboxdrv and something about installing virtualbox-ose-dkms.
This has never happened before and through the beta tests of zentyal I have never had a problem with virtualbox. From reading on the internet it seems like a problem with the kernel not loadin.. or something like that.
Has anyone had any issues like this ??
Also since my install of virtualbox it seems that my dashboard widgets which show me my interface rates are not longer working. They never seem to update.
50
Installation and Upgrades / Zentyal setup discussion
« on: October 07, 2011, 02:52:17 pm »
Hello everyone !!! I am starting this thread because I would like to combine some of the thoughts and other topics I have asked for help on.... and just see what people think about going this route with my setup.
As a standard zentyal setup with running everything in one box.... zentyal works for me pretty well. However I wanted to know about what you guys think about changing the setup to the following.
Have a physical Zentyal box running as the gateway, DHCP, DNS, Samba, Master LDAP, Proxy.... pretty much everything except mail. It will also be running the webserver, but only providing content for the intranet.
Now what do you guys think of creating a virtual server that would also run zentyal, but in slave mode. This server would be running mail + zarafa + z-push and a weberver(true webserver) and also Alfresco(if I can get it working). The webserver will be serving contact to the internet instead of the intranet. I will use a reverse proxy from the main box to server content on port 80 and port 443 to the virtual machine. Plus you will be able to contact zarafa this way and z-push
I was thinking of installing this virtual in a DMZ. I have several Vlan's running and was thinking of making on of them a DMZ zone.
Is this type of setup possible with zentyal... I guess I don't know if I can seperate the mail+zarafa module away from the main server???
Second would I put this type of server in a DMZ... does this make sense???
Third How would I create a DMZ zone with Zentyal exactly...
Finally if you can create a DMZ zone using zentyal and you can put the virtual server there running external an external web and mail server. Does it make sense to make it an LDAP slave.... would this pose a security risk?? Would you have a slave server in a DMZ???
Thank you for your thoughts and answers to my questions. I know this might not be a typical zentyal setup, but with all our talk about what zentyal should be and what modules can be added or not to it.... I started thinking about whether it might be a good idea to split it into two pieces... Anything exposed to the internet directly put on its own virtual machine....
As a standard zentyal setup with running everything in one box.... zentyal works for me pretty well. However I wanted to know about what you guys think about changing the setup to the following.
Have a physical Zentyal box running as the gateway, DHCP, DNS, Samba, Master LDAP, Proxy.... pretty much everything except mail. It will also be running the webserver, but only providing content for the intranet.
Now what do you guys think of creating a virtual server that would also run zentyal, but in slave mode. This server would be running mail + zarafa + z-push and a weberver(true webserver) and also Alfresco(if I can get it working). The webserver will be serving contact to the internet instead of the intranet. I will use a reverse proxy from the main box to server content on port 80 and port 443 to the virtual machine. Plus you will be able to contact zarafa this way and z-push
I was thinking of installing this virtual in a DMZ. I have several Vlan's running and was thinking of making on of them a DMZ zone.
Is this type of setup possible with zentyal... I guess I don't know if I can seperate the mail+zarafa module away from the main server???
Second would I put this type of server in a DMZ... does this make sense???
Third How would I create a DMZ zone with Zentyal exactly...
Finally if you can create a DMZ zone using zentyal and you can put the virtual server there running external an external web and mail server. Does it make sense to make it an LDAP slave.... would this pose a security risk?? Would you have a slave server in a DMZ???
Thank you for your thoughts and answers to my questions. I know this might not be a typical zentyal setup, but with all our talk about what zentyal should be and what modules can be added or not to it.... I started thinking about whether it might be a good idea to split it into two pieces... Anything exposed to the internet directly put on its own virtual machine....
51
Installation and Upgrades / Bug with Zentyal 2.2
« on: October 03, 2011, 07:04:44 pm »
I have added internal DNS nameserver 127.0.0.1 to the Network-- DNS section. I made it the first nameserver in the list.
I checked the /etc/resolv.conf file and the nameserver gets added to table.
My problem is that after some time passes .... I check the resolv.conf file again and the nameserver 127.0.0.1 is gone.
The Network--DNS entry under the zentyal web interface still exists, but it is no longer in the configuration file.
If I delete the entry in the Network-- DNS configuration under Zentyal and save.
I can than re-add it back to the module and it will now be shown in the resolv.conf file. It seems that something happens every 4 to 6 hours which removes the 127.0.0.1 nameserver from the resolv.conf file.
How should I start trouble shooting this issue?? Which log would show what is happening to the /etc/resolv.conf file?
Thank you !!!
I checked the /etc/resolv.conf file and the nameserver gets added to table.
My problem is that after some time passes .... I check the resolv.conf file again and the nameserver 127.0.0.1 is gone.
The Network--DNS entry under the zentyal web interface still exists, but it is no longer in the configuration file.
If I delete the entry in the Network-- DNS configuration under Zentyal and save.
I can than re-add it back to the module and it will now be shown in the resolv.conf file. It seems that something happens every 4 to 6 hours which removes the 127.0.0.1 nameserver from the resolv.conf file.
How should I start trouble shooting this issue?? Which log would show what is happening to the /etc/resolv.conf file
?Thank you !!!
52
Installation and Upgrades / Nginx Reverse Proxy
« on: September 29, 2011, 10:08:06 pm »
I am thinking of using Nginx reverse proxy in order to connect to a webser located on one of my Vlans.
The server will have a couple of vhosts all on IP 192.168.0.112 (one will be named appointments.com and the other will be services.com)
My external host name is provided by dyndns so it is xxxxx.dyndns.org
I have looked at some google documentation on Nginx, but I am not entirely sure how to implement it.
I also would like to make it listen on port 8080 so that I don't change any of the apache configurations present within my lan.
Has anyone setup Nginx reverse proxy? Could you provide me with some instructions based on my scenario?? I don't want to cause an error in my Zentyal setup.
Thank you !!!
The server will have a couple of vhosts all on IP 192.168.0.112 (one will be named appointments.com and the other will be services.com)
My external host name is provided by dyndns so it is xxxxx.dyndns.org
I have looked at some google documentation on Nginx, but I am not entirely sure how to implement it.
I also would like to make it listen on port 8080 so that I don't change any of the apache configurations present within my lan.
Has anyone setup Nginx reverse proxy? Could you provide me with some instructions based on my scenario?? I don't want to cause an error in my Zentyal setup.
Thank you !!!
53
Installation and Upgrades / Zentyal 2.2 Z-push ActiveSync
« on: September 29, 2011, 04:00:20 pm »
Here is my scenario:
I have deployed egroupware zarafa on a vhost webmail which has forced SSL.
I can get to vhost from within my lan and I get to vhost/webaccess from within my lan. Everything works how it should and the vhost automatically redirects you to the SSL HTTPS site.
How do I get Z-push ActiveSync to work with this setup. I would like to be able to have access from outside my lan.
Since the Vhost is pointing to an internal IP.....
Thank you !!!
I have deployed egroupware zarafa on a vhost webmail which has forced SSL.
I can get to vhost from within my lan and I get to vhost/webaccess from within my lan. Everything works how it should and the vhost automatically redirects you to the SSL HTTPS site.
How do I get Z-push ActiveSync to work with this setup. I would like to be able to have access from outside my lan.
Since the Vhost is pointing to an internal IP.....
Thank you !!!
54
Installation and Upgrades / Zentyal 2.2 DNS problem
« on: September 23, 2011, 03:25:15 pm »
Hello I have reinstalled Zentyal 2.2 last night which has solved some issues I was having, but has now created a completely new one.
My issues is as follows:
I have named my server (hostname: Zentyal)
Under Network-DNS- I have 127.0.0.1 as the first DNS followed by the IP's provided by my dynamic connection to my ISP.
I have several Vlans running.
In the DNS module I have created several domain names (home.lan, wifi.lan, wifi.guest....) I can see that in each entery the NS server is 127.0.0.1
In the DHCP module I have ranges setup and dynamic dns setup.
I also have the cache featured turned on
I am also running transparent proxy at the moment with all firewall rules set just like I have in zentyal 2.0; 2.1 beta; 2.2beta....so not thing different in my setup from how I have been doing it for the last six month.
My problem is the following:
my clients can't seem to resolve DNS enteries of the server. They can connect to outside websites no problem
Normally if I type the server name (zentyal) I would be directed to the standard webpage. -- this part works.
However if I try the HTTPS version or http://HTTPS://Zentyal:10001 (which is my admin interface) it can't find the page.
Also if I create a Vhost the page is not found.
If I type ns.home.lan it can not find the page.
However if I type the direct IP addresses of each lans gateway (192.168.11.11) than the zentyal webpage shows up. If I type 192.168.11.11:10001 I can access the administration page.
The server just does not resolve the host names correctly.
What should I be checking??? I don't want to reinstall the hole server again.
My issues is as follows:
I have named my server (hostname: Zentyal)
Under Network-DNS- I have 127.0.0.1 as the first DNS followed by the IP's provided by my dynamic connection to my ISP.
I have several Vlans running.
In the DNS module I have created several domain names (home.lan, wifi.lan, wifi.guest....) I can see that in each entery the NS server is 127.0.0.1
In the DHCP module I have ranges setup and dynamic dns setup.
I also have the cache featured turned on
I am also running transparent proxy at the moment with all firewall rules set just like I have in zentyal 2.0; 2.1 beta; 2.2beta....so not thing different in my setup from how I have been doing it for the last six month.
My problem is the following:
my clients can't seem to resolve DNS enteries of the server. They can connect to outside websites no problem
Normally if I type the server name (zentyal) I would be directed to the standard webpage. -- this part works.
However if I try the HTTPS version or http://HTTPS://Zentyal:10001 (which is my admin interface) it can't find the page.
Also if I create a Vhost the page is not found.
If I type ns.home.lan it can not find the page.
However if I type the direct IP addresses of each lans gateway (192.168.11.11) than the zentyal webpage shows up. If I type 192.168.11.11:10001 I can access the administration page.
The server just does not resolve the host names correctly.
What should I be checking??? I don't want to reinstall the hole server again.
55
Installation and Upgrades / Webserver Vhost Zentyal 2.2
« on: September 20, 2011, 01:06:23 pm »
I can not create a vhost in Zentyal 2.2 which allows SSL or is forced SSL.
When ever I save the changes I get and error that I am missing the apache.pem under etc/apache2/ssl
It seems that the right SSL certificate is not being generated when creating a VHost with SSL option.
Has anyone else encountered this problem or can recreate it???
When ever I save the changes I get and error that I am missing the apache.pem under etc/apache2/ssl
It seems that the right SSL certificate is not being generated when creating a VHost with SSL option.
Has anyone else encountered this problem or can recreate it???
56
Installation and Upgrades / Zentyal 2.2 configuration issues
« on: September 19, 2011, 01:12:49 pm »
I have several issues when trying to configure Zentyal 2.2
1) I can't create a virtual host in the webserver that allows SSL or is forced SSL.
I need this for Zarafa. I wanted to run zarafa-webaccess on its own virtual host (Zarafa) so that I could go to zarafa/webaccess. I have also configured zarafa to automatically go to the HTTPS version. However the only virtual host I can create is one that disables the SSL version.
2) The second problem I have is that I can't get the z-push exchange server working unless I allow HTTP access from the external interface.
I would rather not have the external interface open to the public, but I can't seem to find a way to get my phone to sync with z-push unless I do open it
Has anyone run into the same issues and can help me??
I have attached a log from the virtual host creation.
Some modules reported error when saving changes . More information on the logs in /var/log/zentyal/
The following modules failed while saving their changes, their state is unknown: webserver The following modules failed while saving their changes, their state is unknown: webserver at /usr/share/perl5/EBox/GlobalImpl.pm line 659 EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x3534af8)', 'progress', 'EBox::ProgressIndicator=HASH(0x341a228)') called at /usr/share/perl5/EBox/Global.pm line 95 EBox::Global::AUTOLOAD('EBox::Global=HASH(0x3563740)', 'progress', 'EBox::ProgressIndicator=HASH(0x341a228)') called at /usr/share/zentyal/global-action line 39
1) I can't create a virtual host in the webserver that allows SSL or is forced SSL.
I need this for Zarafa. I wanted to run zarafa-webaccess on its own virtual host (Zarafa) so that I could go to zarafa/webaccess. I have also configured zarafa to automatically go to the HTTPS version. However the only virtual host I can create is one that disables the SSL version.
2) The second problem I have is that I can't get the z-push exchange server working unless I allow HTTP access from the external interface.
I would rather not have the external interface open to the public, but I can't seem to find a way to get my phone to sync with z-push unless I do open it
Has anyone run into the same issues and can help me??
I have attached a log from the virtual host creation.
Some modules reported error when saving changes . More information on the logs in /var/log/zentyal/
The following modules failed while saving their changes, their state is unknown: webserver The following modules failed while saving their changes, their state is unknown: webserver at /usr/share/perl5/EBox/GlobalImpl.pm line 659 EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x3534af8)', 'progress', 'EBox::ProgressIndicator=HASH(0x341a228)') called at /usr/share/perl5/EBox/Global.pm line 95 EBox::Global::AUTOLOAD('EBox::Global=HASH(0x3563740)', 'progress', 'EBox::ProgressIndicator=HASH(0x341a228)') called at /usr/share/zentyal/global-action line 39
57
Installation and Upgrades / Need Help Understanding DNS forwarder
« on: September 16, 2011, 06:35:16 pm »
In the new Zentyal 2.2 release under the DNS module there is an option for DNS forwarders.
Could someone explain what that is exactly and how someone would use it??
I read the new documentation for 2.2 and did some google searches, but I am not really sure how it can be used and whether it has any benefit for a small LAN like mine.
Thank you !!!
Could someone explain what that is exactly and how someone would use it??
I read the new documentation for 2.2 and did some google searches, but I am not really sure how it can be used and whether it has any benefit for a small LAN like mine.
Thank you !!!
58
Installation and Upgrades / Vlan Separation
« on: September 09, 2011, 02:55:11 pm »
Hello Everyone,
I am having trouble separating some VLans that I created.
My server has two NIC cards. One is external and going to my ISP and one is internal set to 802.1Q trunking.
I created several internal VLAN interfaces. DMZ, Home.lan, Wifi.lan, wifi.guest, and control.
Each one of the VLAN has a DHCP server running on it and my switch recognizes each one of the VLANs. Everything is routed correctly and each client gets the right IP address and gets the right domain name from the DNS.
My only issue is that I can't isolate each VLAN. I have tried changing my firewall rules to not allow any connections between the VLans but they can still connect to each other and ping each other.
Does anyone have a working VLAN setup in which certain VLans are separated from others??? What firewall rules do you have set?
I am having trouble separating some VLans that I created.
My server has two NIC cards. One is external and going to my ISP and one is internal set to 802.1Q trunking.
I created several internal VLAN interfaces. DMZ, Home.lan, Wifi.lan, wifi.guest, and control.
Each one of the VLAN has a DHCP server running on it and my switch recognizes each one of the VLANs. Everything is routed correctly and each client gets the right IP address and gets the right domain name from the DNS.
My only issue is that I can't isolate each VLAN. I have tried changing my firewall rules to not allow any connections between the VLans but they can still connect to each other and ping each other.
Does anyone have a working VLAN setup in which certain VLans are separated from others??? What firewall rules do you have set?
59
Installation and Upgrades / Hard Drive Spin Down... How to set??
« on: August 23, 2011, 06:39:34 pm »
I was wondering if anyone knows how to properly set the spin down time for an Ubuntu software raid. In my case I have 7 X 2TD seagate SATA drives running in a raid6. The raid is mounted under /mnt and is used just for storing media files.
I would like to know how to make the raid array spin down after lets say 15 minutes of idle time. I tried using the setting in webmin which allows you to set spin down time, but it is not working.
In general I wish there was a little more drive management under zentyal dashboard.
I would like to know how to make the raid array spin down after lets say 15 minutes of idle time. I tried using the setting in webmin which allows you to set spin down time, but it is not working.
In general I wish there was a little more drive management under zentyal dashboard.
60
Installation and Upgrades / Reverse Proxy
« on: August 18, 2011, 08:44:05 pm »
I have transparent proxy with filtering running on Zentyal. All the computers on the Lan currently use the transparent proxy mode.
However I would like to add reverse proxy for when I try to make a connection from the internet to my external interface.
How do I setup reverse proxy with Zentyal??
However I would like to add reverse proxy for when I try to make a connection from the internet to my external interface.
How do I setup reverse proxy with Zentyal??