Messages

16

Installation and Upgrades / Re: [SOLVED] bug?

« on: April 14, 2019, 01:56:36 pm »

another issue: krb5.conf and krb5.keytab are not imported, I've to manually edit / create them

17

Installation and Upgrades / Re: Unable to upgrade from 5.13. to 6

« on: April 07, 2019, 01:41:08 pm »

go to system > backup

18

Directory and Authentication / pdbedit bug

« on: March 05, 2019, 10:26:09 am »

when I run pdbedit -u username, it shows

Code: [Select]

Password must change: never
even if password age is setted

19

Directory and Authentication / Notify password expiration

« on: March 05, 2019, 09:19:50 am »

I'd like to notify with an email to user and administrator (me) when a password is expiring
how can i do?

20

Directory and Authentication / Re: Google cloud directory service (GCDS) password synchronization

« on: March 04, 2019, 01:41:06 pm »

also interested

21

Directory and Authentication / Re: Samba DC backup

« on: March 04, 2019, 12:22:21 pm »

i'm also interested
i also have another question: i've joind a computer to domain but it has joined to BDC, it's not existent in PDC and he can't login
can i copy computer account from BDC to PDC? how?

22

Installation and Upgrades / [SOLVED] import/export bug during upgrade from 4 to 6

« on: February 23, 2019, 02:35:54 pm »

after last update of zentyal 6, bind doesnt start with this error:

dlz_dlopen: /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so: incorrect driver API version 2, requires 3

EDIT: i've imported backup from 4.2 to 6, and in named.conf.local there was dlz_bind9_9, I changed with dlz_bind9_11 and restarted bind

23

News and Announcements / Re: Zentyal 6.0 available!

« on: February 07, 2019, 02:07:54 pm »

can i update from 4.2 to 5.0 and then to 6.0 ?

24

Other modules / DHCP features

« on: February 07, 2019, 12:03:57 pm »

I've zentyal 4.2 and i want to update
in new zentyal 6.0 is it possible:
1. re-order records
2. add descriptions to record
3. sync dhcp between pdc and bdc or import/export configuration
?
thanks

25

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0, 5.1

« on: October 13, 2018, 05:36:54 pm »

zentyal 4.2
sometimes freeradius stops, in logs i found: "Info: Signalled to terminate"
so I've found in /etc/logrotate.d/freeradius the command

invoke-rc.d freeradius reload >/dev/null 2>&1 || true

I change reload with restart, I'll check next days if it works

26

Directory and Authentication / samba-tool domain passwordsettings

« on: July 10, 2018, 12:32:56 pm »

is it necessary to use this tool to set options about password policy?
i've tried to change them through administrative tools in windows, but i see they are not applied
thanks

27

Directory and Authentication / Re: Binding Macs to Zentyal Directory

« on: April 11, 2018, 02:37:11 pm »

i've joined 3 osx sierra with my zentyal server, but sometimes after a locked screen they can't login any more
plus, i suppose the local passwords are not syncronized with zentyal

what have you done to join your client?

28

Directory and Authentication / Re: mac osx sierra cant login after locked screen

« on: April 04, 2018, 09:57:42 am »

up

29

Directory and Authentication / mac osx sierra cant login after locked screen

« on: March 02, 2018, 10:07:11 am »

after a locked screen, cant login any more. if reboot, all is ok

in osx logs i found "Unable to reach any KDC", in zentyal logs i found:

[2018/03/02 09:41:03.193872,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ attori.cristina@ANTEA.BOGUS from ipv4:192.168.10.67:60872 for krbtgt/ANTEA.BOGUS@ANTEA.BOGUS
[2018/03/02 09:41:03.199558,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client sent patypes: 149
[2018/03/02 09:41:03.199638,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for PKINIT pa-data -- attori.cristina@ANTEA.BOGUS
[2018/03/02 09:41:03.199651,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for ENC-TS pa-data -- attori.cristina@ANTEA.BOGUS
[2018/03/02 09:41:03.199698,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: No preauth found, returning PREAUTH-REQUIRED -- attori.cristina@ANTEA.BOGUS
[2018/03/02 09:41:03.228510,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ attori.cristina@ANTEA.BOGUS from ipv4:192.168.10.67:49742 for krbtgt/ANTEA.BOGUS@ANTEA.BOGUS
[2018/03/02 09:41:03.232609,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client sent patypes: encrypted-timestamp, 149
[2018/03/02 09:41:03.232662,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for PKINIT pa-data -- attori.cristina@ANTEA.BOGUS
[2018/03/02 09:41:03.232686,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for ENC-TS pa-data -- attori.cristina@ANTEA.BOGUS
[2018/03/02 09:41:03.232772,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: ENC-TS Pre-authentication succeeded -- attori.cristina@ANTEA.BOGUS using arcfour-hmac-md5
[2018/03/02 09:41:03.242549,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ authtime: 2018-03-02T09:41:03 starttime: unset endtime: 2018-03-02T19:41:03 renew till: unset
[2018/03/02 09:41:03.242701,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using arcfour-hmac-md5/arcfour-hmac-md5
[2018/03/02 09:41:03.242772,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Requested flags: forwardable
[2018/03/02 09:41:03.254424,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: TGS-REQ attori.cristina@ANTEA.BOGUS from ipv4:192.168.10.67:61401 for bastet$@ANTEA.BOGUS [forwardable]
[2018/03/02 09:41:03.260344,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: TGS-REQ authtime: 2018-03-02T09:41:03 starttime: 2018-03-02T09:41:03 endtime: 2018-03-02T19:41:03 renew till: unset

30

Installation and Upgrades / Re: HowTo: add radius module with mschap support to zentyal 4.0, 4.2, 5.0

« on: February 07, 2018, 09:36:07 am »

I've removed all and tried to reinstall all, and i've problem with package freeradius-ldap: (in italian, sorry)

(Lettura del database... 67416 file e directory attualmente installati.)
Preparing to unpack freeradius-ldap_2.1.12+dfsg-1.2ubuntu8.2_amd64.deb ...
Unpacking freeradius-ldap (2.1.12+dfsg-1.2ubuntu8.2) over (2.1.12+dfsg-1.2ubuntu8.2) ...
Configurazione di freeradius-ldap (2.1.12+dfsg-1.2ubuntu8.2)...
reload: Unknown instance:
invoke-rc.d: initscript freeradius, action "force-reload" failed.
dpkg: error processing package freeradius-ldap (--install):
 il sottoprocesso installato script di post-installation ha restituito lo stato di errore 1
Si sono verificati degli errori nell'elaborazione:
 freeradius-ldap

EDIT: fixed, as wrote here https://askubuntu.com/questions/507040/invoke-rc-d-initscript-freeradius-action-force-reload-failed-while-config I edited /var/lib/dpkg/info/freeradius-ldap.postinst and it works! thanks