Zentyal Forum, Linux Small Business Server
Zentyal Server => Installation and Upgrades => Topic started by: jaycool on July 13, 2009, 05:33:46 pm
-
I am having a problem with my PDC setting in Ebox. I can join my xp machines to the domain without any problem, and i can change the password length, age, and history settings. The settings work until I restart and then they are disabled or back enabled with a 0. I have tried EBOX 1.1.3 and just tried 1.2 and both keep giving me the same problem. So, my question is this a bug or am I just doing something wrong? If its a bug will the new 1.3 version take care of this problem?
-
It's a bug. I'm gonna open a ticket to try find out what's wrong. It should be fixed in a few days.
-
1.3 version will be "unstable" forever, ebox 1.4 will be the next stable
but in the cases of bugs like that, there will be updates of the module ASAP, (1.2.1 version, 1.2.2, ...)
So, you don't have to use 1.3 to get that fixed, it will be fixed in 1.2 very soon ;)
Regards,
J. A. Calvo
-
Thanks a lot for your quick response.
-
It seems the only problem was with the minium password length. I've fixed it in ebox-samba 1.2.1. Could you please update and tell me if it fixes your issue? Please, rembember to set the values again before restarting.
Thanks!
-
I updated to samba 1.2.1 and I adjusted the minimum password length to 8, the age to 90 days, and the history to 6. I then restarted and it did the same thing as before, password length was disabled, the age was enabled and set to 0, and the history was disabled. Am I doing something wrong?
Thanks
-
I updated to samba 1.2.1 and I adjusted the minimum password length to 8, the age to 90 days, and the history to 6. I then restarted and it did the same thing as before, password length was disabled, the age was enabled and set to 0, and the history was disabled. Am I doing something wrong?
That's weird. So when you click on PDC settings, you see the values set to 0?
Could you readjust the values and post the content of the dn object called "dn sambaDomainName=<YOUR_DOMAIN>,dc=ebox" using the command "sudo slapcat". It will be something like this:
dn: sambaDomainName=EBOX,dc=ebox
sambaDomainName: EBOX
sambaSID: S-1-5-21-3818554400-921237426-3143208535
uidNumber: 2001
gidNumber: 2000
objectClass: sambaDomain
objectClass: sambaUnixIdPool
sambaMaxPwdAge: 10368000
sambaLockoutThreshold: 0
sambaPwdHistoryLength: 4
sambaMinPwdLength: 7
structuralObjectClass: sambaDomain
entryUUID: ad85377e-0449-102e-91fd-71bb829a1430
creatorsName: cn=admin,dc=ebox
createTimestamp: 20090713223849Z
entryCSN: 20090713223849.400247Z#000000#000#000000
modifiersName: cn=admin,dc=ebox
modifyTimestamp: 20090713223849Z
After that, restart, and post the the output again to see what changed.
Thanks!
-
First off thanks for all your help.
No only the maximum password age is enabled and set to 0.
The other to settings are disabled.
So, whenever I restart EBOX the PDC settings are as followed:
Minimum Password Length: disabled
Maximum Password Age: enabled : set to 0
Enforce Password History: disabled
Now I adjusted the settings to:
Minimum Password Length: enabled : set to 8
Maximum Password Age: enabled : set to 90
Enforce Password History: enabled : set to 6
Then I ran slapcat and I got the following:
dn: sambaDomainName=EBOX,dc=ebox
sambaDomainName: EBOX
sambaSID: S-1-5-21-3818554400-921237426-3143208535
uidNumber: 2002
gidNumber: 2000
objectClass: sambaDomain
objectClass: sambaUnixIdPool
structuralObjectClass: sambaDomain
entryUUID: 7abdf04e-04ce-102e-906f-a97cdafb1adf
creatorsName: cn=admin,dc=ebox
createTimestamp: 20090714135715Z
sambaMinPwdLength: 8
sambaMaxPwdAge: 7776000
sambaPwdHistoryLength: 6
entryCSN: 20090714140352.846895Z#000000#000#000000
modifiersName: cn=admin,dc=ebox
modifyTimestamp: 20090713223849Z
Next, I restarted ran slapcat and I got the following:
dn: sambaDomainName=EBOX,dc=ebox
sambaDomainName: EBOX
sambaSID: S-1-5-21-3818554400-921237426-3143208535
uidNumber: 2002
gidNumber: 2000
objectClass: sambaDomain
objectClass: sambaUnixIdPool
structuralObjectClass: sambaDomain
entryUUID: 7abdf04e-04ce-102e-906f-a97cdafb1adf
creatorsName: cn=admin,dc=ebox
createTimestamp: 20090714135715Z
entryCSN: 20090714140352.846895Z#000000#000#000000
modifiersName: cn=admin,dc=ebox
modifyTimestamp: 20090713223849Z
Then, I logged back into the web interface and the PDC settings are back to following:
Minimum Password Length: disabled
Maximum Password Age: enabled : set to 0
Enforce Password History: disabled
What do you think could be the cause of this issue?
-
Has anyone got any ideas? Is it still a bug or is it something I am doing wrong or something wrong with my setup?
-
It seems a bug but I'm unable to reproduce it :( I'll keep trying though.
Could you test the following. Edit /usr/share/perl5/EBox/SambaLdapUser.pm and a line containing "return;" to this function
sub setSambaDomainName
{
return; #Add this return
my ($self, $domain) = @_;
...
That should tell us if that's the method that is messing things up.
-
Thanks
I followed your directions and its working fine now.
-
Well, lol I spoke to soon. Its saves the settings now, but I can't join the domain. It prompts for username and password I enter them in. Then, it gives me an error: the network path was not found.
Any ideas? Should I try loading ebox on another test machine. You did say that you couldn't reproduce my error/issue?
-
As javi said: "That should tell us if that's the method that is messing things up". I mean, that wasn't a solution to the problem, only a test to help us finding the solution. We'll upload a new version when we fix it. (if there's really a bug).
If you have time you can test eBox on another clean machine to see if you reproduce it in the same way.
Thanks for your patience :)
Regards,
J. A. Calvo
-
Im sorry I typed the line in wrong. I have it working now. The PDC settings are saved and I can log onto the domain without a problem. So, I guess thats were the issue is? I am going to test the install on another machine and I will let you know the results. Thanks for all your help.
-
What line did you type wrong? the "return;" one? Well, that should fix the issue but it can have other negative effects (I suppose that the domain name change feature will stop working). If you can test in another machine (a virtual one is enough) it will be useful.
Thank you for the bug report!
Regards,
J. A. Calvo
-
Hello to all,
Where can be useful:
I have just finished installing e-box 1.2 with samba 1.2.1 update: same problem.
With the change in SambaLdapUser.pm work fine.
Thanks.
-
Ok benjoa, thanks for your contribution!
We'll upload a ebox-samba 1.2.2 package as soon as we reproduce it and fix it.
Regards,
J. A. Calvo
-
I'm trying to fix it but I definitely can't find a way to reproduce this issue. It works for me.
What are exactly the steps that you are doing?
jaycool, when you say "restarted" do you mean you restart the machine or the samba service?
Regards,
J. A. Calvo
-
In my case,
I shutdown server machine,
When turn on, my "pdc Fle sharing options" are reset.
Thanks.
-
In my case,
I shutdown server machine,
When turn on, my "pdc Fle sharing options" are reset.
Please post the output of:
sudo apt-cache policy ebox-samba
-
root@ebox:/home/sysop# apt-cache policy ebox-samba
ebox-samba:
Installed: 1.2.1-0ubuntu1~ppa1~hardy1
Candidate: 1.2.1-0ubuntu1~ppa1~hardy1
Version table:
*** 1.2.1-0ubuntu1~ppa1~hardy1 0
500 cdrom://Ubuntu-Server 8.04.2 _Hardy Heron_ - Release i386 (20090121.1) hardy/extras Packages
100 /var/lib/dpkg/status
1.2.1-0ubuntu1~ppa1~hardy1 0
500 http://ppa.launchpad.net hardy/main Packages
0.11.99-0ubuntu3 0
500 http://it.archive.ubuntu.com hardy/universe Packages
-
Edit SambaLdapUser.pm is The only fix ?
Many thanks.
-
If that works for you and don't cause you any other problem. Do it ;)
There is no other fix at the moment. We'll look it back when we have time.
Regards,
J. A.
-
Yes I miss typed the return line. Yes the fix does work, but like you said it causes the domain name change feature to stop working properly. Also, I did try installing ebox 1.2 on 2 different machines, but I keep getting the same error. So, what can I do next?
-
And yes I am restarting the machine.
-
I'm afraid that we can't find a way to reproduce this. :(
We have tried to reboot the machine several times and PDC settings remain there.
If you want, you can join our IRC channel (#ebox at irc.freenode.net) and give us access to a virtual machine where you can reproduce the issue or something like that.
Regards,
J. A. Calvo
-
Sorry just one last question. I have only tried installing ebox using the 1.2 installer cd. How are you installing? Are you installing hardy first then ebox 1.2 or are you using the ebox 1.2 installer cd? Also, I downloaded the 1.2 installer cd the very first day it was available. Is it possible I could have gotten a bad release. Sorry, If these are stupid questions. But is it possible for any of the above to be the cause of my issues?
-
It doesn't matter if you use the installer or not. The only thing that matters is the version of the ebox-samba package, which are you using? (apt-cache policy ebox-samba)
The first installer had a buggy package, but it's supposed to be fixed now if you upgrade.
Regards,
J. A. Calvo
-
Hello,
I tried the solution given by J. A. Calvo on a brand new installation of eBox release 1.2, and it solves the problem of losing PDC password length age and history setting ( adding the return into the file SambaLdapUser.pm ).
Afther the file was modified, the setting are saved and stay that way even by a reboot of the server.
Best regards,
Ian