Zentyal

Zentyal - это линукс сервер для малого бизнеса, который может быть сконфигурирован как шлюз(Gateway), инфраструктурный менеджер(Infrastructure Manager), защитный сервер(Unified Threat Manager), офисный сервер(Office Server), коммуникационный сервер(Unified Communication Server) или любое их сочетание. Все сетевые сервисы, управляемые Zentyal, тесно интегрированы, автоматизируя большинство задач. Это помогает избегать ошибок в сетевых настройках и администрировании, что позволяет сохранить время. Zentyal имеет открытые источники, опубликованные под лицензией GNU General Public License (GPL) и запускается поверх Ubuntu GNU/Linux.

Zentyal содержит серию пакетов (обычно по одному на модуль), которые обеспечивают web интерфейс для настройки различных серверов или сервисов. Настройка сохраняется в базе данных Redis парами ключ-значение, а настройки, связанные с пользователями, группами и доменами, в OpenLDAP. Когда вы настраиваете любые из доступных параметров через web интерфейс, окончательные файлы настройки переписываются с использованием шаблонов, предоставляемых модулями. Основные преимущества использования Zentyal это: объединенность, графический интерфейс пользователя для настройки всех сетевых сервисов и высокая их интеграция между собой «из коробки».

Zentyal 2.3 is available on Ubuntu 12.04 Universe repository. The modules available are:

1. zentyal-core & zentyal-common: the core of the Zentyal interface and the common libraries of the framework. Also include the logs and events modules that give the administrator an interface to view the logs and generate events from them.

2. zentyal-network: manages the configuration of the network. From the interfaces (supporting static IP, DHCP, VLAN, bridges or PPPoE), to multiple gateways when having more than one Internet connection, load balancing and advanced routing, static routes or dynamic DNS.

3. zentyal-objects & zentyal-services: provide an abstration level for network addresses (e.g. LAN instead of 192.168.1.0/24) and ports named as services (e.g. HTTP instead of 80/TCP).

4. zentyal-firewall: configures the iptables rules to block forbiden connections, NAT and port redirections.

5. zentyal-ntp: installs the NTP daemon to keep server on time and allow network clients to synchronize their clocks against the server.

6. zentyal-dhcp: configures ISC DHCP server supporting network ranges, static leases and other advanced options like NTP, WINS, dynamic DNS updates and network boot with PXE.

7. zentyal-dns: brings ISC Bind9 DNS server into your server for caching local queries as a forwarder or as an authoritative server for the configured domains. Allows to configure A, CNAME, MX, NS, TXT and SRV records.

8. zentyal-ca: integrates the management of a Certification Authority within Zentyal so users can use certificates to authenticate against the services, like with OpenVPN.

9. zentyal-openvpn: allows to configure multiple VPN servers and clients using OpenVPN with dynamic routing configuration using Quagga.

10. zentyal-users: provides an interface to configure and manage users and groups on OpenLDAP. Other services on Zentyal are authenticated against LDAP having a centralized users and groups management. It is also possible to synchronize users, passwords and groups from a Microsoft Active Directory domain.

11. zentyal-squid: configures Squid and Dansguardian for speeding up browsing thanks to the caching capabilities and content filtering.

12. zentyal-samba: allows Samba configuration and integration with existing LDAP. From the same interface you can define password policies, create shared resources and assign permissions.

13. zentyal-printers: integrates CUPS with Samba and allows not only to configure the printers but also give them permissions based on LDAP users and groups.

To install Zentyal, in a terminal on the server enter (where <zentyal-module> is any of the modules from the previous list):

sudo apt-get install <zentyal-module>

Zentyal publishes one major stable release once a year (in September) based on latest Ubuntu LTS release. Stable releases always have even minor numbers (e.g. 2.2, 3.0) and beta releases have odd minor numbers (e.g. 2.1, 2.3). Ubuntu 12.04 comes with Zentyal 2.3 packages. If you want to upgrade to a new stable release published after the release of Ubuntu 12.04 you can use Zentyal Team PPA. Upgrading to newer stable releases can provide you minor bugfixes not backported to 2.3 in Precise and newer features.

If you need more information on how to add packages from a PPA see Add a Personal Package Archive (PPA).

Not present on Ubuntu Universe repositories, but on Zentyal Team PPA you will find these other modules:

1. zentyal-antivirus: integrates ClamAV antivirus with other modules like the proxy, file sharing or mailfilter.

2. zentyal-asterisk: configures Asterisk to provide a simple PBX with LDAP based authentication.

3. zentyal-bwmonitor: allows to monitor bandwith usage of your LAN clients.

4. zentyal-captiveportal: integrates a captive portal with the firewall and LDAP users and groups.

5. zentyal-ebackup: allows to make scheduled backups of your server using the popular duplicity backup tool.

6. zentyal-ftp: configures a FTP server with LDAP based authentication.

7. zentyal-ids: integrates a network intrusion detection system.

8. zentyal-ipsec: allows to configure IPsec tunnels using OpenSwan.

9. zentyal-jabber: integrates ejabberd XMPP server with LDAP users and groups.

10. zentyal-thinclients: a LTSP based thin clients solution.

11. zentyal-mail: a full mail stack including Postfix and Dovecot with LDAP backend.

12. zentyal-mailfilter: configures amavisd with mail stack to filter spam and attached virus.

13. zentyal-monitor: integrates collectd to monitor server performance and running services.

14. zentyal-pptp: configures a PPTP VPN server.

15. zentyal-radius: integrates FreeRADIUS with LDAP users and groups.

16. zentyal-software: simple interface to manage installed Zentyal modules and system updates.

17. zentyal-trafficshaping: configures traffic limiting rules to do bandwidth throttling and improve latency.

18. zentyal-usercorner: allows users to edit their own LDAP attributes using a web browser.

19. zentyal-virt: simple interface to create and manage virtual machines based on libvirt.

20. zentyal-webmail: allows to access your mail using the popular Roundcube webmail.

21. zentyal-webserver: configures Apache webserver to host different sites on your machine.

22. zentyal-zarafa: integrates Zarafa groupware suite with Zentyal mail stack and LDAP.

Any system account belonging to the sudo group is allowed to log into Zentyal web interface. If you are using the user created during the installation, this should be in the sudo group by default.

If you need to add another user to the sudo group, just execute:

sudo adduser username sudo

To access Zentyal web interface, browse into https://localhost/ (or the IP of your remote server). As Zentyal creates its own self-signed SSL certificate, you will have to accept a security exception on your browser.

Once logged in you will see the dashboard with an overview of your server. To configure any of the features of your installed modules, go to the different sections on the left menu. When you make any changes, on the upper right corner appears a red Save changes button that you must click to save all configuration changes. To apply these configuration changes in your server, the module needs to be enabled first, you can do so from the Module Status entry on the left menu. Every time you enable a module, a pop-up will appear asking for a confirmation to perform the necessary actions and changes on your server and configuration files.

If you need to customize any configuration file or run certain actions (scripts or commands) to configure features not available on Zentyal place the custom configuration file templates on /etc/zentyal/stubs/<module>/ and the hooks on /etc/zentyal/hooks/<module>.<action>.

Zentyal Official Documentation page.

See also Zentyal Community Documentation page.

And don't forget to visit the forum for community support, feedback, feature requests, etc.