Try out Nethserver 7 beta1

alefattorini · July 25, 2016, 10:27am

9 posts were split to a new topic: Why I don’t see ownCloud on NethServer 7?

ntsis · July 25, 2016, 1:58pm

Hello to everybody.
This is my first experience with NS7b1.
The installation on KVM was Ok.
i try to add a new user test but something went wrong…

Jul 25 14:39:14 pdc esmith::event[20846]: [INFO] memcached restart
Jul 25 14:39:14 pdc esmith::event[20846]: Action:
/etc/e-smith/events/actions/adjust-services SUCCESS [0.463643]
Jul 25 14:39:14 pdc esmith::event[20846]: Action:
/etc/e-smith/events/user-create/S90nethserver-sssd-clear-cache SUCCESS
[0.087755]
Jul 25 14:39:14 pdc esmith::event[20846]: Event: user-create SUCCESS
Jul 25 14:39:15 pdc esmith::event[20895]: Event: password-policy-update
test yes
Jul 25 14:39:15 pdc esmith::event[20895]: Action:
/etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache
SUCCESS [0.08973]
Jul 25 14:39:15 pdc esmith::event[20895]: Failed to get machine PTY: No
such file or directory
Jul 25 14:39:15 pdc esmith::event[20895]: Action:
/etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy
SUCCESS [0.35345]
Jul 25 14:39:15 pdc esmith::event[20895]: Event: password-policy-update
SUCCESS
Jul 25 14:39:15 pdc esmith::event[20905]: Event: password-modify
test@itraco.de /tmp/ng-sPsteS
Jul 25 14:39:15 pdc esmith::event[20905]: Action:
/etc/e-smith/events/password-modify/S25password-set SUCCESS [0.004986]
Jul 25 14:39:15 pdc esmith::event[20905]: spawn /usr/bin/systemd-run -M
nsdc -q -t /usr/bin/samba-tool user setpassword test
Jul 25 14:39:16 pdc esmith::event[20905]: New Password:
Jul 25 14:39:16 pdc esmith::event[20905]: ERROR: Failed to set password
for user ‘test’: Unable to find user "test"
Jul 25 14:39:16 pdc esmith::event[20905]: Action:
/etc/e-smith/events/password-modify/S30nethserver-dc-password-set
FAILED: 2 [1.009179]
Jul 25 14:39:17 pdc esmith::event[20905]: ERROR: Failed to enable user
’test’: Unable to find account where
’(&(objectClass=user)(sAMAccountName=test))'
Jul 25 14:39:17 pdc esmith::event[20905]: Action:
/etc/e-smith/events/password-modify/S40nethserver-dc-user-unlock FAILED:
2 [0.773608]
Jul 25 14:39:17 pdc esmith::event[20905]: Action:
/etc/e-smith/events/password-modify/S90password-cleanup SUCCESS
[0.020898]
Jul 25 14:39:17 pdc esmith::event[20905]: Event: password-modify FAILED

I have tired several times,

giacomo · July 25, 2016, 3:01pm

It seems systemd can’t open the PTY to the dc container.

Please try this command:

systemctl restart nsdc

And then

/usr/bin/systemd-run -M nsdc -q -t echo "nsdc is running"

The output of the last command should be:

nsdc is running

If the output is correct try again the change password operation from the web interface.

ntsis · July 25, 2016, 4:26pm

Hi, giacomo,

thank you very much.
It works!

giacomo · July 27, 2016, 6:48am

Now I’m working on … getmail!

chuckk · July 27, 2016, 5:55pm

Hi Guys,

Great job on the beta so far. I’m new to Nethserver (though I did run an e-smith server back in the day) and am considering updating my aging ClearOS server to Nethserver 7. So, I’ve been doing some experimenting and testing for a bit and hit a wall. I don’t know if it’s a bug or something I’m doing wrong, but for the life of me I can’t get nethserver-dc to work properly. Here is some background information on the setup and what I’ve done so far:

Nethserver 7 beta 1 is running in VirtualBox.
Only the base system is installed and updates applied.
Server has a static IP and default root password is changed.
nethserver-dc installs properly; I see no errors in the log.
A bridge is created on the green interface (via the checkbox) and I used a different IP than the server’s.

As the install is finishing up, I get a red error box at the top of the web page and this in the log:

Jul 27 11:38:16 amiga systemd-nspawn: Failed to create directory /var/lib/machines/nsdc//sys/fs/selinux: No such file or directory
Jul 27 11:38:16 amiga systemd-nspawn: Failed to create directory /var/lib/machines/nsdc//sys/fs/selinux: No such file or directory
Jul 27 11:38:40 amiga systemd: Started Authorization Manager.
Jul 27 11:38:40 amiga realmd: * Resolving: _ldap._tcp.kuntzilla.com
Jul 27 11:38:40 amiga realmd: * Performing LDAP DSE lookup on: 192.168.67.23
Jul 27 11:38:40 amiga realmd: ! Can’t contact LDAP server
Jul 27 11:38:40 amiga esmith::event[2805]: realm: Cannot join this realm
Jul 27 11:38:40 amiga esmith::event[2805]: [ERROR] DC join failed
Jul 27 11:38:40 amiga esmith::event[2805]: Action: /etc/e-smith/events/nethserver-dc-save/S96nethserver-dc-join FAILED: 1 [2.949292]
Jul 27 11:38:51 amiga esmith::event[2805]: Event: nethserver-dc-save FAILED

Not wanting to just give up, I found Davide’s nethserver-dc docs and followed the steps to join the AD domain manually. That worked and I got the expected output he shows in the doc right up to the “net ads info” command. That fails with the following:

ads_connect: No logon servers
ads_connect: No logon servers
Didn’t find the ldap server!

I don’t see anything about it in /var/log/messages. Clicking the “Domain Accounts” option in server manager gives similar output:

ads_connect: No logon servers
ads_connect: No logon servers
Didn’t find the ldap server!
ads_connect: No logon servers
Join to domain is not valid: No logon servers

Trying to create a new user with the server manager results in a red error box at the top of the page with the message “User name The user already exists”. I wasn’t ever prompted for a user name
Any ideas or hints? Seems like it shouldn’t be this hard… If I need to fill our a bug report or provide more information please let me know. I’m happy to help out if I can.
Thanks!

flatspin · July 29, 2016, 7:28am

Hi @chuckk, welcome here.
I had a similar problem with virtualbox. I had to set the interface to promiscuos mode “allow all”. This is mandatory in a virtualbox setup. Found that yesterday . Maybe this helps in your case also.

flatspin · July 29, 2016, 9:20am

Strange behavior of SOGo3 on NS7.
When I login Sogo with a user created on GUI I was not able to create an imap-account. If I did so, login stucked in mailbox0. I created a local user on the machine. After that I was able to use an imap-account on my ISP’S server. If I create a user with GUI the command cat /etc/pwasswd does’t show this user. Is this meant to this way, because of ldap-server in the container?

GG_jr · July 30, 2016, 6:06pm

Wrong link/open page when you want to access "Samba audit"

Wrong link/open page when you want to access Samba audit from “Report -> Samba audit” or from “Applications -> Samba Audit -> OPEN”.

EddieA · July 31, 2016, 2:22am

Similar, but slightly different errors that a couple of other folks have reported (sorry, can’t cut/paste the text):

Also, had issues where the ethernet interfaces were configured, but always had to issue a manual “ifconfig up” to them before they could be used. I’m going to try another couple of installs to see if I can narrow down the circumstances.

Cheers.

dnutan · July 31, 2016, 11:08pm

I can confirm also the problem reported by @GG_jr and @EddieA about genRandomHash.
The correct util.pm file was named util.pm.mod, therefore any call is still looking at the old file. The solution is to rename util.pm.mod to util.pm:

cd /usr/share/perl5/vendor_perl/esmith/
mv util.pm.mod util.pm

After that, a reinstall of the affected packages should work as expected.

giacomo · August 1, 2016, 7:29am

SOGo should work both with DC and Directory.
What user provide did you use? I can try to reproduce .it.

Sorry guys, we missed an rpm upload.

The issue is already solved here: Undefined subroutine &esmith::util::genRandomHash · Issue #5057 · NethServer/dev · GitHub
I just push the package to the master mirror!

GG_jr · August 1, 2016, 7:57am

@alefattorini, @davidep, @giacomo

Hello to all,

When we will have Web Content Filter and Web Proxy ready to install from Software Center?

TIA,
Gabriel

giacomo · August 1, 2016, 8:21am

I just pushed the new comps to the master mirror

Thanks for reporting!

flatspin · August 1, 2016, 8:20am

Sorry i’m on vacation for the next 2 weeks.
Will answer when i’m back.

Thx. Best regards. Ralf

GG_jr · August 1, 2016, 9:50pm

The problems were solved:

Web Content Filter and Web Proxy are available for install in Software center
Samba audit can be opened/accessed
Graphs - OK
Web proxy stats - OK

chuckk · August 2, 2016, 2:36pm

Thanks flatspin. I will make the changes in VirtualBox and give it another try.

GG_jr · August 4, 2016, 10:43pm

Download the certificate for transparent SSL mode, not works from GUI

cc: @giacomo, @davidep

How should work:

NethServer GUI -> Gateway -> Web proxy -> Proxy tab -> right click on “http://your_ip/proxy.crt” -> select “Open Link in New Tab” -> save the certificate.
Import the certificate as “Trusted Authorities” on used browser(s).

Instead of this, at the Step 1, when you select “Open Link in New Tab”, a new page will be open and you will see the “certificate”, so you cannot download the proxy certificate (please see the attached screenshot).

Same thing if you do left click on “http://your_ip/proxy.crt”.

I have tried also with MS IE.
Can anyone else confirm this?

Thank you!

HINT:

the certificate can be saved on USB to be installed later on each client.
any other known methods for download (WinSCP, …) and deploying the certificate to the clients can be used.

dnutan · August 5, 2016, 8:21am

I think it is more of a browser thing, but there was some php directive to force a file download.

How should work:
NethServer GUI -> Gateway -> Web proxy -> Proxy tab -> right click on “http://yourip/proxy.crt” -> select “Save link/target as…” -> save the certificate._

Linux Mint 17 + Firefox 47: left click, right click -> Save link as…, open in new tab, all three methods show a download window.

VM with Windows 10 (not up to date):

IE11 at defaults cannot access the server-manager (shows only the grey background), to get access had to uncheck compatibility view for intranet sites; http://yourip/proxy.crt shows the certificate.
Edge: shows the certificate but cannot download it. There isn’t a Save as… option (I’ve read it might be ready with a recent update).
Firefox 48: Right click -> Save link as… works. Left click or open in new tab shows the certificate content. Can be saved using CTRL+S or save as… menu.

Windows 7 + Firefox 47/48: Same as with Windows 10.

Chrome (in Linux Mint, Windows 7): shows the certificate content unless right click -> Save as…
When the certificate is shown it can be saved by CTRL+S or Save as… menu.

GG_jr · August 5, 2016, 9:30am

It works, left/right click -> save as, from Ubuntu 16.04 LTS / Mozilla 47.0