Try out Nethserver 7 beta1

lorentedford · July 15, 2016, 7:58pm

oh then i can’t use i guess… I have 7 domains to play with… Whats the point of having a virtual host when it can only host one domain…
I imagine i could force it to use other domains via command line…

fasttech · July 15, 2016, 8:04pm

Sorry, I thought you were referring to the DC when you were talking about users and groups.

GG_jr · July 16, 2016, 7:26am

I have tried to install from a USB stick made with Rufus-2.9 to a dedicated server (IBM xSeries 346 - my test machine) and didn’t work.
I never succeed to install NS from USB stick.
I will install on this machine next week, classically: using DVD.

I have installed NS7b1 on Virtualbox, without issues.
Also I made the first updates.
One warning regarding firewall after reboot; F5 and the warning disappeared.
I reboot again, and the same warning.
I will continue the tests.
Some screenshots, below.

dnutan · July 16, 2016, 8:56am

blk_update_request: I/O error, dev fd0, sector 0

@GG_jr, does the server has a floopy drive?
If it doesn’t look into the BIOS settings and disable any floppy related setting (Drive A:) if present.

GG_jr · July 16, 2016, 9:27am

Yes, the server has FDD and is enabled.
I will try, on Monday, to disable FDD from BIOS.
I think I have an old PC at home and I will try with FDD disabled.
I will tell you if it works.

GG_jr · July 16, 2016, 6:42pm

NS7b1 on VirtualBox

The Self-signed certificate cannot be edited (reported by @netbix , here: Bug on edit the default self-signed certificate )

Time synchronization doesn’t work (Network synchronization).
The only synchronization with the host is on boot. After that doesn’t work.

GG_jr · July 16, 2016, 7:46pm

NS7b1 on VirtualBox

Something strange!

What is written on “Help” doesn’t match with the Left side.

I can ping some IPs/hosts (google.com, nethserver.org), others no (microsoft.com, intel.com).

There is something wrong with the NS7b1 ISO?

EDIT:

I will try a fresh installation of the NS 7a3 with upgrade to NS 7b1 to check.
But not now. I became angry!

dnutan · July 16, 2016, 8:36pm

Self-signed certificate: does not save changes for Country code, CommonName, State, Locality (takes it from Organization Contacts) and Email address fields (as reported by @netbix and @GG_jr)
When editing the self-signed certificate there is no warning telling the user she will need to login back again (or accept the new certificate in the browser). To be expected as the certificate has changed.
Edit Server certificate’s inline help shows an error:

Docutils System Messages
System Message: ERROR/3 (/dev/stdin, line 46); backlink
Undefined substitution referenced: “product”.

The DNS servers inline documentation has to be moved to the Network page.
Not an issue, just a note: rebooting from nethgui does not show the progress as in NS6.

dnutan · July 16, 2016, 8:45pm

microsoft.com and intel.com not responding to ping neither from the host machine nor from online ping tests, so not related to NethServer.

giacomo · July 16, 2016, 8:57pm

Thanks guy for the amazing testing work! Monday morning we will go through all the problems and try to fix all as soon as possible!

GG_jr · July 16, 2016, 9:25pm

Sorry! My mistake!
I was involved too deeply in testing of the NS to check also from the host.

Thank you!

GG_jr · July 16, 2016, 9:31pm

Finally, I tried now!

In NS 7a3 the Time synchronisation also doesn’t work.

In NS 7a3 it is possible to change the Self-signed Certificate; after upgrade to NS 7b1, you can’t.

filippo_carletti · July 17, 2016, 8:43am

To create an usb key from the downloaded iso, simply use dd.
See the first paragraph of the official documentation:
https://wiki.centos.org/HowTos/InstallFromUSBkey

GG_jr · July 17, 2016, 9:32am

Thank you!

Also Rufus should work:
" Confirmed as functioning correctly are Rufus, Fedora LiveUSB Creator, Win32 Disk Imager, Rawrite32 and dd for Windows. If using a version of Windows newer than 7, make sure you unmount the USB drive first (formatting it prior to launching the disk copier is one way to accomplish that), otherwise Windows might refuse to write on the stick, bailing out with the “can’t write to drive” error message. "

dnutan · July 17, 2016, 11:55am

yikes

dnutan · July 17, 2016, 12:02pm

Tested NethServer7 beta1 ISO unattended install into a virtualbox VM.

Dashboard

undefined menu titles (on hover):

Applications_Description
Services_Description
Dhcp_Descrition
RestoreData_Description
Ntopng_Description
MailQuota_Description
Ejabber_Description

Report → Web Proxy Stats menu opens a new instance of UI in iframes, as reported by @Vodka

Edited: no need to remove iframe lines. It was due to genRandomHash() and empty lightsquid alias in the database.

Status → Applcations → Lightsquid OPEN button link broken (points to ‘/’)
Seems $info['url'] var from /usr/share/nethesis/NethServer/Template/Applications.php does not get a value from $cweb['alias'] in /usr/share/nethesis/NethServer/Module/Dashboard/Applications/Lightsquid.php as the db configuration lightsquid alias is not set.
The lightsquid alias is not set because genRandomHash() from /etc/e-smith/templates/etc/httpd/admin-conf.d/lightsquid.conf/10base failed, as the function was removed from util.pm in this commit.

Not looked into it but this might also affect other packages using this function.

Red warning (clear yum cache) upon installing Web Filter and Web Proxy
/var/log/messages
Jul 17 01:45:03 intranet esmith::event[15312]: expanding /etc/httpd/admin-conf.d/lightsquid.conf
Jul 17 01:45:03 intranet esmith::event[15312]: ERROR in /etc/e-smith/templates//etc/httpd/admin-conf.d/lightsquid.conf/10base: Program fragment delivered error <<Undefined subroutine &esmith::util::genRandomHash called at /etc/e-smith/templates//etc/httpd/admin-conf.d/lightsquid.conf/10base line 11.>> at template line 1
Jul 17 01:45:03 intranet esmith::event[15312]: ERROR: Template processing failed for //etc/httpd/admin-conf.d/lightsquid.conf: 1 fragment generated errors
Jul 17 01:45:03 intranet esmith::event[15312]: at /etc/e-smith/events/actions/generic_template_expand line 64.
Jul 17 01:45:03 intranet esmith::event[15312]: [WARNING] expansion of /etc/httpd/admin-conf.d/lightsquid.conf failed
Jul 17 01:45:03 intranet esmith::event[15312]: expanding /etc/httpd/conf.d/lightsquid.conf
Jul 17 01:45:03 intranet esmith::event[15312]: ERROR in /etc/e-smith/templates//etc/httpd/conf.d/lightsquid.conf/10base: Program fragment delivered error <<Undefined subroutine &esmith::util::genRandomHash called at /etc/e-smith/templates//etc/httpd/conf.d/lightsquid.conf/10base line 11.>> at template line 1
Jul 17 01:45:03 intranet esmith::event[15312]: ERROR: Template processing failed for //etc/httpd/conf.d/lightsquid.conf: 1 fragment generated errors
Jul 17 01:45:03 intranet esmith::event[15312]: at /etc/e-smith/events/actions/generic_template_expand line 64.
Jul 17 01:45:03 intranet esmith::event[15312]: [WARNING] expansion of /etc/httpd/conf.d/lightsquid.conf failed
Jul 17 01:45:03 intranet esmith::event[15312]: expanding /etc/lightsquid/lightsquid.cfg
Jul 17 01:45:03 intranet esmith::event[15312]: Action: /etc/e-smith/events/actions/generic_template_expand FAILED: 1 [0.122303]
Jul 17 01:45:03 intranet systemd: Reloading.
Jul 17 01:45:03 intranet systemd: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Jul 17 01:45:03 intranet esmith::event[15312]: [INFO] service httpd reload
Jul 17 01:45:03 intranet systemd: Reloaded The Apache HTTP Server.
Jul 17 01:45:03 intranet esmith::event[15312]: [INFO] httpd reload
Jul 17 01:45:03 intranet esmith::event[15312]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.165297]
Jul 17 01:45:03 intranet systemd: Started Delayed graceful restart of httpd-admin.
Jul 17 01:45:03 intranet systemd: Starting Delayed graceful restart of httpd-admin.
Jul 17 01:45:03 intranet esmith::event[15312]: Action: /etc/e-smith/events/nethserver-lightsquid-update/S99nethserver-httpd-admin-asyncreload SUCCESS [0.003968]
Jul 17 01:45:03 intranet esmith::event[15312]: Event: nethserver-lightsquid-update FAILED

Got some other notes I might report later.

GG_jr · July 17, 2016, 5:51pm

The “mystery” is solved: Intel, Microsoft and also Community Nethserver, I think have DNS registrations only for www.intel.com, www.microsoft.com, www.community.nethserver.org.
So, intel.com, microsoft.com and community.nethserver.org will not respond at ping.

dnutan · July 17, 2016, 6:13pm

as reported by @GG_jr, strange behavior from chronyd/ntp:

Jul 17 04:19:28 intranet chronyd[17789]: Selected source 81.19.96.148
Jul 17 04:19:28 intranet chronyd[17789]: System clock wrong by 1721.913772 seconds, adjustment started
Jul 17 04:19:32 intranet chronyd[17789]: Selected source 95.211.224.12
Jul 17 04:19:32 intranet chronyd[17789]: System clock wrong by -1946.984184 seconds, adjustment started
Jul 17 04:21:41 intranet chronyd[17789]: Can’t synchronise: no majority

ntopng service unable to start
same problem as @vodka

Starting ntopng: /usr/bin/ntopng: error while loading shared libraries: libzmq.so.4: cannot open shared object file: No such file or directory

@vodka proposed linking the library, and it works:

ln -s /usr/lib64/libzmq.so.5 /usr/lib64/libzmq.so.4

It is an upstream_bug.
P.S. ntopng shows there is a new version:

@nethserver-statistics installation error caused by missing genRandomHash() function (same problem as with squid). Affects the Graphs section as @Vodka reported.

Jul 17 19:47:00 intranet pkgaction[15377]: install: @nethserver-statistics
(…)
Jul 17 19:47:05 intranet esmith::event[15432]: expanding /etc/httpd/admin-conf.d/cgp.conf
Jul 17 19:47:05 intranet collectd[15431]: Initialization complete, entering read-loop.
Jul 17 19:47:05 intranet esmith::event[15432]: ERROR in /etc/e-smith/templates//etc/httpd/admin-conf.d/cgp.conf/10base: Program fragment delivered error <<Undefined subroutine &esmith::util::genRandomHash called at /etc/e-smith/templates//etc/httpd/admin-conf.d/cgp.conf/10base line 11.>> at template line 1
Jul 17 19:47:05 intranet esmith::event[15432]: ERROR: Template processing failed for //etc/httpd/admin-conf.d/cgp.conf: 1 fragment generated errors
Jul 17 19:47:05 intranet esmith::event[15432]: at /etc/e-smith/events/actions/generic_template_expand line 64.
Jul 17 19:47:05 intranet esmith::event[15432]: [WARNING] expansion of /etc/httpd/admin-conf.d/cgp.conf failed
Jul 17 19:47:05 intranet esmith::event[15432]: expanding /etc/httpd/conf.d/cgp.conf
Jul 17 19:47:05 intranet esmith::event[15432]: ERROR in /etc/e-smith/templates//etc/httpd/conf.d/cgp.conf/10base: Program fragment delivered error <<Undefined subroutine &esmith::util::genRandomHash called at /etc/e-smith/templates//etc/httpd/conf.d/cgp.conf/10base line 11.>> at template line 1
Jul 17 19:47:05 intranet esmith::event[15432]: ERROR: Template processing failed for //etc/httpd/conf.d/cgp.conf: 1 fragment generated errors
Jul 17 19:47:05 intranet esmith::event[15432]: at /etc/e-smith/events/actions/generic_template_expand line 64.
Jul 17 19:47:05 intranet esmith::event[15432]: [WARNING] expansion of /etc/httpd/conf.d/cgp.conf failed
Jul 17 19:47:05 intranet esmith::event[15432]: Action: /etc/e-smith/events/actions/generic_template_expand FAILED: 1 [0.133367]

giacomo · July 18, 2016, 9:09am

I can’t reproduce for now, but I will try again later. (Thanks also to @dnutan).

The user shouldn’t be allowed to switch from one user provider to another (like from OpenLDAP to Samba 4), but we do not have any way to achieve this. Any suggestion?

Both errors should be generated by this: Undefined subroutine &esmith::util::genRandomHash · Issue #5057 · NethServer/dev · GitHub

Created a new issue: sope49-gdl1-mysql: wrong GPG key · Issue #5058 · NethServer/dev · GitHub

Samba 4 (like Windows) is case insensitive. The user is always force to create a valid username in unix style, but you can use it also with capital letters.

NS is a single-domain machine, all users belong to the same domain which is the FQDN of the server.

Virtualhosts are user domain are completely separated. Of course, you can have multiple domain names pointing to the same server to serve multiple web sites (and mail domains).

I will try to reproduce it, if you have time, please post the output of “shorewall check” command.

Created: Self-signed certificate doesn't save changes · Issue #5059 · NethServer/dev · GitHub

Created: Move "DNS servers" inline documentation to Network page. · Issue #5060 · NethServer/dev · GitHub

Created: Web UI: missing labels · Issue #5061 · NethServer/dev · GitHub

Opened a generic issue: Undefined subroutine &esmith::util::genRandomHash · Issue #5057 · NethServer/dev · GitHub

New issue (but I still can’t confirm it): Chrony not synching time · Issue #5062 · NethServer/dev · GitHub

I don’t what they messed up, but it was working correctly (@vodka)
We are studying a different solution to replace ntopng, but we still don’t have a ready one.
In the meanwhile, we will try to fix the problem: ntopng service unable to start · Issue #5063 · NethServer/dev · GitHub

Thank you again guys for your time, we are now working hard to fix all the issues!
In the background @davidep will soon release a simple web interface for proxy passes

dz00te · July 18, 2016, 10:12am

just a quick installation test in KVM (i could not resist). In addition to the problems already reported

1: annoying log error in /var/log messages (clean install+update)
dnsmasq-tftp[815]: file /var/lib/tftpboot/device.cfg not found

2: install basic firewall
OK
3: install backup
OK
4: install openvpn
OK
5: install ipsec tunnels
OK
6: install openldap
OK
create testgroup OK
create usertest1 member of testgroup OK
7: no help page in Password policies
8: File Server + samba audit
create a share ok, but missing options?

problem on samba audit install (webui link not working)

Jul 18 11:31:53 ns7b1i1 esmith::event[32541]: Action: /etc/e-smith/events/nethserver-samba-audit-update/S00initialize-default-databases SUCCESS [0.421432]
Jul 18 11:31:54 ns7b1i1 esmith::event[32541]: Undefined subroutine &esmith::util::genRandomHash called at /etc/e-smith/events/nethserver-samba-audit-update/S02nethserver-samba-audit-conf line 18.
Jul 18 11:31:54 ns7b1i1 esmith::event[32541]: Action: /etc/e-smith/events/nethserver-samba-audit-update/S02nethserver-samba-audit-conf FAILED: 255 [0.15972]
Jul 18 11:31:54 ns7b1i1 esmith::event[32541]: expanding /etc/httpd/admin-conf.d/smbaudit.conf
…
Jul 18 11:31:54 ns7b1i1 esmith::event[32541]: Event: nethserver-samba-audit-update FAILED

9: install mail server + roundcube
OK