Connect OpenMediaVault to an Windows Server 2012R2 AD/LDAP

    This site uses cookies. By continuing to browse this site, you are agreeing to our Cookie Policy.

    • Connect OpenMediaVault to an Windows Server 2012R2 AD/LDAP

      Disclaimer: This Guide is far from perfect. These are the steps that I made, to connect an OpenMediaVault Server to an Windows Server 2012R2 AD/LDAP.
      I'm not responsible for any problems you may run into using this Guide.

      I strongly recommend to test this Guide in a Virtual testing environment before using on Productive Systems!



      So. Donh and me did it and connected OpenMediaVault to an 2012R2 AD/LDAP. Weird thing, Users page in webgui is fucking slow for me, groups page is nearly instant. On donh's installation with an 2008R2 Server the users tab is way faster.

      Step-by-step:

      1. Enable SSH
      2. Enable Samba, Set WORKGROUP to 'LOCAL' (WHEN your PDC is DC01.LOCAL.DOMAIN, change it according to your domain structure)
      2.1 Extra options for Samba:

      Source Code

      1. realm=DC01.LOCAL.DOMAIN
      2. winbind cache time = 3600
      3. winbind enum users = yes
      4. winbind enum groups = yes
      5. winbind use default domain = yes
      6. winbind separator = +


      3. nano /usr/share/openmediavault/mkconf/samba.d/15ldap
      3.1 Change Security = User to Security = ads
      3.2 Change both IDMAPUID and IMAPGID from 1000-2000 to 16777216-33554431

      4. Install anything thats needed (dnsutils to be able to use nslookup if needed)

      Source Code

      1. apt-get install krb5-config krb5-user krb5-clients winbind dnsutils


      4.1 Configure it according to your situation. You most likely fill in the IP/Hostname of your PDC/DC everytime!

      5. Install openmediavault-ldap and configure it like you would normally. (See attachment: ldap_settings, change according to your structure!)

      6. Apply anyhting in the GUI. Leave the GUI untouched after that! Otherwise the following changes will get reverted!

      7. Edit /etc/nsswitch.conf to look like the following:

      Source Code

      1. passwd: files winbind ldap
      2. group: files winbind ldap
      3. shadow: files winbind ldap
      4. hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4
      5. networks: files
      6. protocols: db files
      7. services: db files
      8. ethers: db files
      9. rpc: db files
      10. netgroup: nis
      Display All


      8. Restart samba and winbind

      Source Code

      1. service samba restart
      2. service winbind restart


      9. Add the following to your /etc/hosts file (REMEMBER: Change according your needs!)

      Source Code

      1. 10.0.15.1 dc01.local dc01


      10. Edit /etc/krb5.conf
      10.1 Remove all dummy domains
      10.2 add the following to the config file under [domain_realm] (CHANGE ACCORDING TO YOUR NEEDS!)

      Source Code

      1. .local.domain = LOCAL.DOMAIN
      2. local.domain = LOCAL.DOMAIN


      10.3 The whole file should like that

      Source Code

      1. [libdefaults]
      2. default_realm = DC01.LOCAL.DOMAIN
      3. # The following krb5.conf variables are only for MIT Kerberos.
      4. krb4_config = /etc/krb.conf
      5. krb4_realms = /etc/krb.realms
      6. kdc_timesync = 1
      7. ccache_type = 4
      8. forwardable = true
      9. proxiable = true
      10. # The following encryption type specification will be used by MIT Kerberos
      11. # if uncommented. In general, the defaults in the MIT Kerberos code are
      12. # correct and overriding these specifications only serves to disable new
      13. # encryption types as they are added, creating interoperability problems.
      14. #
      15. # Thie only time when you might need to uncomment these lines and change
      16. # the enctypes is if you have local software that will break on ticket
      17. # caches containing ticket encryption types it doesn't know about (such as
      18. # old versions of Sun Java).
      19. # default_tgs_enctypes = des3-hmac-sha1
      20. # default_tkt_enctypes = des3-hmac-sha1
      21. # permitted_enctypes = des3-hmac-sha1
      22. # The following libdefaults parameters are only for Heimdal Kerberos.
      23. v4_instance_resolve = false
      24. v4_name_convert = {
      25. host = {
      26. rcmd = host
      27. ftp = ftp
      28. }
      29. plain = {
      30. something = something-else
      31. }
      32. }
      33. fcc-mit-ticketflags = true
      34. [realms]
      35. 10.0.15.1 = {
      36. kdc = 10.0.15.1
      37. admin_server = 10.0.15.1
      38. }
      39. [domain_realm]
      40. .local.domain = LOCAL.DOMAIN
      41. local.domain = LOCAL.DOMAIN
      42. [login]
      43. krb4_convert = true
      44. krb4_get_tickets = false
      Display All


      11. Check (with DATE, not in the webinterface!) that your time on your CLI is synchron with the time of your PDC!

      12. execute the following command - thats the first step where you most likely run into errors!

      Source Code

      1. kinit administrator


      13. join the fucking AD/LDAP

      Source Code

      1. net ads join -U administrator


      13.1. If That doesn't work, you can specify the exact hostname of the PDC

      Source Code

      1. net ads join -U administrator -S DC01.LOCAL.DOMAIN


      14. Check if winbind can access your AD/LDAP

      Source Code

      1. wbinfo -t


      14.1. Check if winbind can access Users and groups from the LDAP

      Source Code

      1. wbinfo -u
      2. wbinfo -g


      14.2. nano /etc/login.defs change UID_MAX GID_MAX as follows. Then you might need to do ldconfig.

      Source Code

      1. UID_MIN 1000
      2. UID_MAX 33554431
      3. # System accounts
      4. #SYS_UID_MIN 100
      5. #SYS_UID_MAX 999
      6. #
      7. # Min/max values for automatic gid selection in groupadd
      8. #
      9. GID_MIN 1000
      10. GID_MAX 33554431
      Display All



      15. Check if OpenMediaVault can access it (You should see your OpenMediaVault Users AND your AD Users)

      Source Code

      1. getent passwd


      16. Check the Groups Page in the Webinterface. (This was nearly instant for both donh and me).

      17. Check Users Page in the Webinterface. (This was different for donh (Windows Server 2008R2) and me (Windows Server 2012R2) - mine was slow as hell, so maybe it timeouts for you, then access the Users Page again!)

      +18. To check for things I might have missed, here is my whole smb.conf

      Source Code

      1. #======================= Global Settings =======================
      2. [global]
      3. workgroup = LOCAL
      4. server string = %h server
      5. include = /etc/samba/dhcp.conf
      6. dns proxy = no
      7. log level = 0
      8. syslog = 0
      9. log file = /var/log/samba/log.%m
      10. max log size = 1000
      11. syslog only = yes
      12. panic action = /usr/share/samba/panic-action %d
      13. encrypt passwords = true
      14. passdb backend = tdbsam
      15. obey pam restrictions = yes
      16. unix password sync = no
      17. passwd program = /usr/bin/passwd %u
      18. passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
      19. pam password change = yes
      20. socket options = TCP_NODELAY IPTOS_LOWDELAY
      21. guest account = nobody
      22. load printers = no
      23. disable spoolss = yes
      24. printing = bsd
      25. printcap name = /dev/null
      26. unix extensions = yes
      27. wide links = no
      28. create mask = 0777
      29. directory mask = 0777
      30. use sendfile = yes
      31. aio read size = 16384
      32. aio write size = 16384
      33. null passwords = no
      34. local master = yes
      35. time server = no
      36. wins support = no
      37. realm=DC01.LOCAL.DOMAIN
      38. winbind cache time = 3600
      39. winbind enum users = yes
      40. winbind enum groups = yes
      41. winbind use default domain = yes
      42. winbind separator = +
      43. #======================= LDAP Settings =======================
      44. security = ads
      45. passdb backend = ldapsam:ldap://10.0.15.1:389
      46. ldap suffix = dc=local,dc=domain
      47. ldap admin dn = cn=administrator,dc=local,dc=domain
      48. ldap user suffix = ou=Users
      49. ldap group suffix = ou=Groups
      50. ldap ssl = off
      51. ldap passwd sync = yes
      52. ldapsam:trusted = no
      53. idmap uid = 16777216-33554431
      54. idmap gid = 16777216-33554431
      55. #======================= Share Definitions =======================
      Display All


      +18.1 /etc/hosts

      Source Code

      1. # This configuration file is auto-generated.
      2. # WARNING: Do not edit this file, your changes will be lost.
      3. 127.0.0.1 localhost
      4. 127.0.1.1 openmediavault.local openmediavault
      5. # The following lines are desirable for IPv6 capable hosts
      6. ::1 ip6-localhost ip6-loopback
      7. fe00::0 ip6-localnet
      8. ff00::0 ip6-mcastprefix
      9. ff02::1 ip6-allnodes
      10. ff02::2 ip6-allrouters
      11. ff02::3 ip6-allhosts
      12. 10.0.15.2 openmediavault.local openmediavault
      13. 10.0.15.1 dc01.local dc01
      Display All


      10 hours. And I'm not satisfied with it how it works here. Donh and I are unsure why its so slow for me. Hardware is out of the question. Donhs configs are a bit different from mine, he will post them later.

      Nuff Said.

      Greetings
      David
      Files
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: LDAP Plugin

      Here are my smb.conf and krb5.conf files. This is not the easiest thing to do. Thanks David for your hard work on it. This was based on these links. bugtracker.openmediavault.org/view.php?id=707

      bugtracker.openmediavault.org/view.php?id=487

      Source Code

      1. [libdefaults]
      2. default_realm = 10.0.83.215 ## or DC.MYDOMAIN.COM
      3. dns_lookup_realm = true
      4. dns_lookup_kdc = true
      5. ticket_lifetime = 24h
      6. forwardable = yes
      7. # The following krb5.conf variables are only for MIT Kerberos.
      8. krb4_config = /etc/krb.conf
      9. krb4_realms = /etc/krb.realms
      10. kdc_timesync = 1
      11. ccache_type = 4
      12. forwardable = true
      13. proxiable = true
      14. # The following encryption type specification will be used by MIT Kerberos
      15. # if uncommented. In general, the defaults in the MIT Kerberos code are
      16. # correct and overriding these specifications only serves to disable new
      17. # encryption types as they are added, creating interoperability problems.
      18. #
      19. # Thie only time when you might need to uncomment these lines and change
      20. # the enctypes is if you have local software that will break on ticket
      21. # caches containing ticket encryption types it doesn't know about (such as
      22. # old versions of Sun Java).
      23. # default_tgs_enctypes = des3-hmac-sha1
      24. # default_tkt_enctypes = des3-hmac-sha1
      25. # permitted_enctypes = des3-hmac-sha1
      26. # The following libdefaults parameters are only for Heimdal Kerberos.
      27. v4_instance_resolve = false
      28. v4_name_convert = {
      29. host = {
      30. rcmd = host
      31. ftp = ftp
      32. }
      33. plain = {
      34. something = something-else
      35. }
      36. }
      37. fcc-mit-ticketflags = true
      38. [realms]
      39. MYDOMAIN.COM = {
      40. kdc = 10.0.83.215:88
      41. admin_server = 10.0.83.215
      42. default_domain = MYDOMAIN.com
      43. }
      44. [domain_realm]
      45. .MYDOMAIN.com = MYDOMAIN.COM
      46. MYDOMAIN.com = MYDOMAIN.COM
      47. [login]
      48. krb4_convert = true
      49. krb4_get_tickets = false
      Display All


      Source Code

      1. #======================= Global Settings =======================
      2. [global]
      3. workgroup = mydomain
      4. server string = %h server
      5. include = /etc/samba/dhcp.conf
      6. dns proxy = no
      7. log level = 0
      8. syslog = 0
      9. log file = /var/log/samba/log.%m
      10. max log size = 1000
      11. syslog only = yes
      12. panic action = /usr/share/samba/panic-action %d
      13. encrypt passwords = true
      14. passdb backend = tdbsam
      15. obey pam restrictions = yes
      16. unix password sync = no
      17. passwd program = /usr/bin/passwd %u
      18. passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
      19. pam password change = yes
      20. socket options = TCP_NODELAY IPTOS_LOWDELAY
      21. guest account = nobody
      22. load printers = no
      23. disable spoolss = yes
      24. printing = bsd
      25. printcap name = /dev/null
      26. unix extensions = yes
      27. wide links = no
      28. create mask = 0777
      29. directory mask = 0777
      30. use sendfile = yes
      31. aio read size = 16384
      32. aio write size = 16384
      33. null passwords = no
      34. local master = no
      35. time server = no
      36. wins support = no
      37. #[Custom]
      38. security=ads
      39. realm=MYDOMAIN.COM
      40. idmap uid = 16777216-33554431
      41. idmap gid = 16777216-33554431
      42. winbind cache time = 3600
      43. winbind enum users = yes
      44. winbind enum groups = yes
      45. winbind use default domain = yes
      46. winbind separator = +
      47. #======================= LDAP Settings =======================
      48. passdb backend = ldapsam:ldap://dc.mydomain.com:389
      49. ldap suffix = dc=mydomain,dc=com
      50. ldap admin dn = scan user
      51. ldap user suffix = ou=Users
      52. ldap group suffix = ou=Groups
      53. ldap ssl = off
      54. ldap passwd sync = yes
      55. ldapsam:trusted = no
      56. #======================= Share Definitions =======================
      Display All
      If you make it idiot proof, somebody will build a better idiot.
    • Re: LDAP Plugin

      Thank you too. Without your initial effort I would've not done it.

      So, Datadigger, knock yourself out and try what you can accomplish. Or if you can spot mistakes, just say them out loud.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: LDAP Plugin

      Ok to fix nsswitch changing all the time edit /usr/share/openmediavault/mkconfig/nsswitch like this. It may break things that use mdns like apple stuff. Music players?

      Shell-Script

      1. #!/bin/sh
      2. #
      3. # This file is part of OpenMediaVault.
      4. #
      5. # @license http://www.gnu.org/licenses/gpl.html GPL Version 3
      6. # @author Volker Theile <volker.theile@openmediavault.org>
      7. # @copyright Copyright (c) 2009-2013 Volker Theile
      8. #
      9. # OpenMediaVault is free software: you can redistribute it and/or modify
      10. # it under the terms of the GNU General Public License as published by
      11. # the Free Software Foundation, either version 3 of the License, or
      12. # any later version.
      13. #
      14. # OpenMediaVault is distributed in the hope that it will be useful,
      15. # but WITHOUT ANY WARRANTY; without even the implied warranty of
      16. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
      17. # GNU General Public License for more details.
      18. #
      19. # You should have received a copy of the GNU General Public License
      20. # along with OpenMediaVault. If not, see <http://www.gnu.org/licenses/>.
      21. set -e
      22. . /etc/default/openmediavault
      23. . /usr/share/openmediavault/scripts/helper-functions
      24. OMV_NSSWITCH_CONFIG=${OMV_NSSWITCH_CONFIG:-"/etc/nsswitch.conf"}
      25. xmlstarlet sel -t \
      26. -i "//services/ldap/enable = '0'" \
      27. -o "passwd: compat" -n \
      28. -o "group: compat" -n \
      29. -o "shadow: compat" -n \
      30. -b \
      31. -i "//services/ldap/enable = '1'" \
      32. -o "passwd: files winbind ldap" -n \
      33. -o "group: files winbind ldap" -n \
      34. -o "shadow: files winbind ldap" -n \
      35. -b \
      36. -n \
      37. -o "hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4" -n \
      38. -o "networks: files" -n \
      39. -n \
      40. -o "protocols: db files" -n \
      41. -o "services: db files" -n \
      42. -o "ethers: db files" -n \
      43. -o "rpc: db files" -n \
      44. -n \
      45. -o "netgroup: nis" \
      46. ${OMV_CONFIG_FILE} | xmlstarlet unesc > ${OMV_NSSWITCH_CONFIG}
      Display All


      I added info about mdns to the bug tracker
      bugtracker.openmediavault.org/view.php?id=707
      If you make it idiot proof, somebody will build a better idiot.
    • Re: LDAP Plugin

      "davidh2k" wrote:

      ..... just say them out loud.

      That's what I'm known for. ;)

      Good job, boys! Thanks a lot for this nice piece of work.
      Homebox: Bitfenix Prodigy Case, ASUS E45M1-I DELUXE ITX, 8GB RAM, 5x 4TB HGST Raid-5 Data, 1x 320GB 2,5" WD Bootdrive via eSATA from the backside
      Companybox 1: Standard Midi-Tower, Intel S3420 MoBo, Xeon 3450 CPU, 16GB RAM, 5x 2TB Seagate Data, 1x 80GB Samsung Bootdrive - testing for iSCSI to ESXi-Hosts
      Companybox 2: 19" Rackservercase 4HE, Intel S975XBX2 MoBo, C2D@2200MHz, 8GB RAM, HP P212 Raidcontroller, 4x 1TB WD Raid-0 Data, 80GB Samsung Bootdrive, Intel 1000Pro DualPort (Bonded in a VLAN) - Temp-NFS-storage for ESXi-Hosts
    • Re: LDAP Plugin

      You're welcome.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Join your OpenMediaVault into Windows Server 2012R2 AD/LDAP

      Havn't had much time to work on the LDAP settings today, because I decided to raise a new W2K12 R2 server for testing as a VM on my testbed, running on an ESXi host. This thing installed pretty well, but it didn't want to start over after installation. These new server need a special setting in the start option, it should read EFI boot instead of Bios and that took a while until I found that out.

      Then I worked down the points of your post, David and everything up to #15 was successful. But it didn't pull the users nor the groups and the auth log said that it couldn't connect to the LDAP server due to invalid credentials.
      That was the point where I lost my patience, sweeped up the ripped hairs and went home. More to come tomorrow.
      Homebox: Bitfenix Prodigy Case, ASUS E45M1-I DELUXE ITX, 8GB RAM, 5x 4TB HGST Raid-5 Data, 1x 320GB 2,5" WD Bootdrive via eSATA from the backside
      Companybox 1: Standard Midi-Tower, Intel S3420 MoBo, Xeon 3450 CPU, 16GB RAM, 5x 2TB Seagate Data, 1x 80GB Samsung Bootdrive - testing for iSCSI to ESXi-Hosts
      Companybox 2: 19" Rackservercase 4HE, Intel S975XBX2 MoBo, C2D@2200MHz, 8GB RAM, HP P212 Raidcontroller, 4x 1TB WD Raid-0 Data, 80GB Samsung Bootdrive, Intel 1000Pro DualPort (Bonded in a VLAN) - Temp-NFS-storage for ESXi-Hosts
    • Re: Re: LDAP Plugin

      Done. If the disclaimer sounds like shit, I'm falling asleep here....

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      David try this and see if it is faster. It uses other programs than the ones in the plugin but apt takes care of every thing. Make a backup or clone just in case. It is what I used before finding and switching to the plugin.

      Source Code

      1. apt-get install libnss-ldapd libpam-ldapd nslcd unscd
      If you make it idiot proof, somebody will build a better idiot.
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      Hello,

      first of all, thank you very much for this guide!

      I have one problem, though. Everything went fine until the very last steps 16 and 17. There are neither users nor groups shown in my webinterface, although winbind can access AD/LDAP as well as users and groups.

      Do you guys have any idea what could cause my problem?

      Thank you very much in advance
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      Hm okay, I still have one pretty annoying problem. If I try to fetch the users via GUI it takes forever and eventually times out with an error message. Same story with groups with the exception that there it works aproxemately in 1 out of 15 times.

      I tried the guide from david as well as the guide from datadigger. I also installed the packages recommended by donh. I even tried it with another domaincontroller (SBS 2011 and Server 2012 standard).

      I read the whole ldap plugin thread but was not able to find any solution. Did i miss something or are there any additional tips?

      Thx again in advance
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      I am not sure why it is slow for some users. I do not have a 2012 to test thanks to MS cutting out technet, thanks. Must have been too helpful for their taste.

      Is it quick with "getent passwd" "getent group" "wbinfo -u" "wbinfo -g" ? Is the time set to use the dc as the ntp server? I think those are what is used to get the info. If they are fast it may be something within OMV? There is a fix coming but I am not sure it will fix anything for speed. bugtracker.openmediavault.org/view.php?id=993

      Is dns working properly? "nslookup (your domain name)" "nslookup (your domain name).(your extension)" Are you using (your domain name).local?
      If you make it idiot proof, somebody will build a better idiot.
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      haha microsoft, no comment...

      I put in the IP of my DC as time server for OMV.

      "getent passwd" "getent group" "wbinfo -u" "wbinfo -g" etc... takes some time to show up, but it always shows up. It does not show up instantly, though.

      If I do nslookup my domain I get:

      Source Code

      1. Server: 192.168.0.2
      2. Address: 192.168.0.2#53
      3. ** server can't find mydomain: SERVFAIL


      If I do nslookup mydomain.local I get:

      Source Code

      1. Server: 192.168.0.2
      2. Address: 192.168.0.2#53
      3. Name: mydomain.local
      4. Address: 192.168.0.2


      Yeah my SBS2011 domain is "mydomain".local.
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      Add an entry to /etc/hosts

      Source Code

      1. 192.168.0.2 mydomain mydomain.local servername.mydomain.local


      /etc/hosts get over writen some times.

      Also execute this and see how long it takes.

      Source Code

      1. omv-rpc "UserMgmt" "getUserList" '{"start":0,"limit":null,"sortfield":null,"sortdir":null}'
      If you make it idiot proof, somebody will build a better idiot.
    • Re: Connect OpenMediaVault to an Windows Server 2012R2 AD/LD

      My /etc/hosts now:

      Source Code

      1. 127.0.0.1 localhost
      2. 127.0.1.1 florisNAS.mydomain.local florisNAS
      3. 192.168.0.111 florisNAS.mydomain.local florisNAS
      4. 192.168.0.2 MYSERVER.mydomain.local MYSERVER
      5. 192.168.0.2 mydomain mydomain.local MYSERVER.mydomain.local
      6. # The following lines are desirable for IPv6 capable hosts
      7. ::1 ip6-localhost ip6-loopback
      8. fe00::0 ip6-localnet
      9. ff00::0 ip6-mcastprefix
      10. ff02::1 ip6-allnodes
      11. ff02::2 ip6-allrouters
      Display All


      still getting

      Source Code

      1. root@florisNAS:~# nslookup mydomain
      2. Server: 192.168.0.2
      3. Address: 192.168.0.2#53
      4. ** server can't find mydomain: SERVFAIL


      My timesettings:



      Getting pretty desperate now... Maybe I should just wait for the next version of OMV /:

      EDIT:

      Source Code

      1. omv-rpc "UserMgmt" "getUserList" '{"start":0,"limit":null,"sortfield":null,"sortdir":null}'
      took about 35 seconds

      The post was edited 1 time, last by gladston3 ().