You’re welcome!
Many thanks, it works!
Perhaps you could add it in the howto to…
And now I have to learn how it works…
You’re welcome!
Many thanks, it works!
Perhaps you could add it in the howto to…
And now I have to learn how it works…
Done.
i had installed initially, then updated from the instructions
do we need to update again?
Hi Stéphane,
My version of Dolibarr was 9.0.1
I upgraded to 10.0.7 then to 11.0.3.
I am using MariaDB-10.2 @ port 3312
The root directory for Dolibarr is: /var/www/html/dolibarr
/
I added your part of the config to /var/www/html/dolibarr/htdocs/conf/conf.php
My PHP is automatically set to PHP-7.2 with the file /etc/profile.d/activer-php72.sh
COMMAND:
php /var/www/html/dolibarr/scripts/user/sync_users_ldap2dolibarr.php commitiferror --server=localhost -y
RESULT:
commitiferror --server=localhost -y
***** sync_users_ldap2dolibarr.php (11.0.3) pid=5439 *****
Mails sending disabled (useless in batch mode)
----- Synchronize all records from LDAP database:
host=localhost
port=389
login=uid=admin,ou=People,dc=directory,dc=nh
pass=**********
DN to extract=ou=People,dc=directory,dc=nh
Filter=(&(objectClass=inetOrgPerson))
----- To Dolibarr database:
type=mysqli
host=127.0.0.1
port=3312
login=usager_dolibarr
database=DolibarrBD
----- Options:
commitiferror=1
excludeuser=
Mapped LDAP fields=uid,cn,sn,givenname,telephonenumber,facsimiletelephonenumber,mobile,mail
UserCreate # admin: login=admin, fullname=admin --> Created user id=3 login=admin
UserCreate # drukpa: login=drukpa, fullname=drukpa --> Created user id=4 login=drukpa
UserUpdate # michelandre: login=michelandre, fullname=michelandre --> Updated user id=1 login=michelandre
Pas d'erreur, on valide
I was able to login with admin and drukpa without problem.
Dolibarr is the second most downloaded document after Odoo.
For me, Dolibarr is way much better than Odoo.
Thank you very much for this howto,
Michel-André
Not now but when a new version is working I’ll provide an update.
I still wonder why you have missing languages in the screenshots, did you change language?
I am going to test remote LDAP again, maybe I can reproduce your issue.
Thank, the openldap is done and I merged the PR, now I am working on the samba AD
For now the rpm is not released, I would like to have both before to release
i am getting this error below
mautrix-telegram) [root@auth mautrix-telegram]# python -m mautrix_telegram -g
[2020-04-16 21:39:24,287] [CRITICAL@mau.init] Configuration error: bridge.permissions not configured
i also dont understand how the language issue appeared. it came out of the blues
The problem is that Nethserver relies on dnsmasq for preconfiguration of mail, dc and many more.
If you disable dnsmasq many packages won’t work anymore.
I assume in the config.yaml you need to configure the following:
permissions:
"*": "relaybot"
"public.example.com": "user"
"example.com": "full"
"@admin:example.com": "admin"
In my case I’ll use LDAP and access it only by localhost. For e-mail stuff (MX record and DKIM) I’ll configure by hand… not a problem. I think there isn’t anything else using DNS.
so what details does one put there?
This is what I found directly using dnsmasq for preconfiguration, this does not mean it’s not workable at all but it could create problems:
squid, ipsec, sssd, ejabberd, samba, mail, dc
I’ve rewritten the howto for icaro on CentOS 7 with a public domain name.
If somebody is interested have a look here:
This is what I have but I think it’s well documented:
# Permissions for using the bridge.
# Permitted values:
# relaybot - Only use the bridge via the relaybot, no access to commands.
# user - Relaybot level + access to commands to create bridges.
# puppeting - User level + logging in with a Telegram account.
# full - Full access to use the bridge, i.e. previous levels + Matrix login.
# admin - Full access to use the bridge and some extra administration commands.
# Permitted keys:
# * - All Matrix users
# domain - All users on that homeserver
# mxid - Specific user
permissions:
'*': relaybot
mydomain.tld: full
'@admin:mydomain.tld': admin
'@admin1:mydomain.tld': admin
I have an odd duck going on.
Steps - Created new VM with1 Green Nic Static IP from fresh 7.7 updated install
From Cockpit Terminal:
After the successful install and reboot after navigating to https://10.0.99.193/guacamole/ I get a blank screen.
Not sure what logs you’d like me to pull from. Oddly enough this looks similar to a problem I had with NethServer’s reverse proxy working with web sockets properly.
Thanks for testing!
It logs to /var/log/messages
and /var/log/tomcat/*
, please share relevant entries.
Does it work if you restart tomcat
systemctl restart tomcat
or reconfigure guacamole
signal-event nethserver-guacamole-update
or reinstall?
yum reinstall https://mrmarkuz.dynu.net/mirror/devtest/nethserver-guacamole-0.0.1-1.ns7.noarch.rpm
EDIT:
@royceb I think you found a bug. Please try:
mkdir -p /etc/fail2ban/jail.d/
signal-event nethserver-guacamole-update
I am up and running now; trying to get SAMBA4/AD (NS BDC joined to Zentyal AD) users to log in now properly.
EDIT - Getting lip but I think I need to understand the BIND settings.
Apr 16 14:05:57 guac server: 14:05:57.547 [http-bio-8080-exec-8] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "cn=ldapservice,cn=Users,DC=ad,DC=nethserver,DC=us"
Apr 16 14:05:57 guac server: 14:05:57.547 [http-bio-8080-exec-8] WARN o.a.g.r.auth.AuthenticationService - Authentication attempt from [10.92.0.2, 127.0.0.1] for user "admin@ad.nethserver.us" failed.
Hi everyone, among the hosts on the network and accredited to the nethserver AD domain, on a centos7 performing the status of the samba services I receive this error:
…/source3/nmbd/nmbd_namequery.c:109(query_name_response)
Apr 16 22:16:19 centos7.internal2.lan nmbd [927]: query_name_response: Multiple (2) responses received for a query on subnet 192.168 … L2 <1d>.
Apr 16 22:16:19 centos7.internal2.lan nmbd [927]: This response was from IP 192.168.3.83, reporting an IP address of 192.168.3.83
192.168.3.83 is the AD neth7 server.
The centos7 pc is working in the context of the domain, I was only asking if someone had the same problem.