Topic: The following Things i realy need for complete migrataion.

[mobassir]

hello

Currently i am running Windows  2000 Server as my primary domain controller, MS ISA Server for internet, Trend Micro Office Scan for virus, and Mdeamon for mail server. with file and print sharing.

I just start work on Sme Server its looks nice product, but before compelete implementation i wants to check it.
For testeing i just install New SME server 6.01 behind our linksys Router with ADSL.
the clients who are behind SME Server by default able to access internet, i think squid or any other nat server working ?
The following Things i realy need for complete migrataion.

1-  Restricted internet access based on three IP  
    groups
    (a)- Staff group --> only email allowed
    (b)- Power user --> Limited internet access
    (c)- Exctives --> Full access
    (d)- Limited  --> Email and only 2 specific Sites
                      allowed

i need to know how can i configure is when i open squuid.conf, on the top of file it says dont modify this file.
then how can i do these changes

Aftre the above task compelete i will start next step which are following:

2- SME Server as Domain for windows users
3- File and print sharing
4- email server from maildaemon to qmail
5- Anivirus Solution for network clients
6- Secure VPN with branch Office

Thanks alot for all of you
i am sure i will get good responce

Mobassir Sattar

[maounique]

Everything you need can be done. However, the default installation must be tweaked quite extensivelly regarding the special internet access you require... If you are not well aquainted with linux (you must not be a guru, but have basic knowledge), I suggest you use an internal proxy for that kind of authentication. There is the dansguardian contrib, you may try this and see if you can set it up to suit your needs.
As for the rest, they come very handy with the standard installation (you need the antivirus update, and possibly the IPSec update, but only the latter may pose some problems). You can still use built-in PPTP for roadwarriors, and even for gateway-to-gateway tunnels (with some tweaking), but the IPSec solution is better but more difficult to setup. There is also openvpn, do a search for all those, you read the HOWTO and then try them on your test server.
Good luck !

[mobassir]

Hello

Thanks you very much your positve reply,After your confirmation i work on it professionaly.
With the help   “SME Admin Guide” I start using SME Server manager.  I log inn with default Admin and my password, But I don’t know why is wont allow me change any thing. I tried to change Server date and time and click on save its take some time for initialize after return back the all figures are same as it is. Then I tried to change workgroup name  from “mitel-networks” to ABC-Group but the behaviors is still same its not allow me to change any thing.
Then I tried to log one as root, but its wont allow to logon as root on server manager.

There will a little thing which I don’t know

I need some help to go forward.

Mobassir Sattar

[mobassir]

Hello

I am sorry that was my browser problem i was using Opera for Ser manager operations, may be its need some configurations.
I just checked with Interner Explorer its working fine and saving all settings.

Now i wants to join a test windows client with SME Server, is there need any special setting in server or client ?
And method will be same as we join Microsoft server.
meanwhile i am downloading dnsguardian for net amangment.  (i fine and other tool with name of cache manager is it same thing or some thing else)



thanks and regards

[mobassir]

hello

Still no Reply
But i treid to joining SME server from my test windows client, The task done sucessfully as we normaly do in Microsoft server. now i think its need to ctreat user account in SME server for user loginn.

1 thing this is very importent task when you are in migration process. its very dificult to creat 200 plus user account manulay one by one. becuase there is also not any user-account copy option like in windows server.

I remember i did migration in past from Novel Netware server to microsoft. That was grea experince the microsft migration process moved all user with securties, home folders, etc from my novel server.

Is there any Tool available which can migrate from windows server 2000 to SME Server and can also provide batter user managment system.

thanks for all of u
waiting for positive responce from expeince users

regards
Mobassir

[maounique]

Ok, the server has no problems in joining a domain, can also be domain controller with roaming profiles (if you have the hardware resources...).
As for migrating accounts... This is something I did not do. I know that, if you can somehow get a .ldif dump of your accounts from windows, there are ways to import them into the sme ldap implementation. However, I have no idea about importing mails, home directories and so on. Home directories could be imported by hand (moving individual files). About stored roaming profiles... I am not a windows guru, have no idea. AFAIK, there is no automated tool to migrate to contribs.org's sme server.
Good luck, keep us posted on how it went, maybe there are other ppl wanting to migrate their servers.

[mobassir]

hello

thanks for another reply.
juts a minute , i will have to stop my current tsting process, because i am facing an amazing problem behind SME Servr. i was using pop3 mail behind my ISA Server that was working fine.
as i menssion in above posts that for testing i moved my pc configuration to work behind SME Server. yesterday i snet some email from my outlook to some my co-workers and all saying they did not receive any mail. but in my outlook all emails are in my sent item.
For testing i sent an other email to my yahoo and hotmail account behind SME Server, still in out look it shows all email are gone.
but emails did nor reach to hotmail and yahoo accounts.
then i changed my pc configuration to work behind ISA and this tiles i test all emails confirm going to target adress.

what can be problem, i am using SME as default settings.
please guied me so i can go to next step.

thanks and regards

[mobassir]

hello

some thing i more wants to add in email error
Our email server is in USA with our domain and handling pop3 email us.
by mistake i gave the domain name of my SME Server as our real domain hosted in USa based server.
So i just changed the name of my domain. now its giving proper errror. every emails which send behind my Sme Server to remote users.
and reciving following error with failure notice

(Hi. This is the qmail-send program at pak-
expert.com.pk.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.)

1 thing is more to update.
behind ISA mail send/receive take normal time
but behind SME its take maximum 2 second and compelete all task without any error.

thanks
waiting for your reply

[mobassir]

hello
waiting for responce

regads

[p-jones]

Is your test SME email server behind the firewall and do you have the necessary pinholes in the firewall to let email traffic pass through.

[mobassir]

hello

thnaks for your reply.
CAn you please guied how i can do this or any link which can hlep me to allow my pop3 email Behind SME.
And the SME server not behind any firewall.

thnaks
waiting for reply

[p-jones]

If it is not behind a firwll then there is nothing to do and I dont know what your problem might be.

[maounique]

For the pop3 traffic to go through your sme server you need the following:
Sme server is not the final destination for the email (means it has assigned a different domain then the one you send mail to). If it is assigned the domain you are sending mail to, then it considers it is for itself, not asking the root dns who's the domain machine as long as it thinks it is itself and then it handles mail as usual trying to direct it to the user it is for and failing that notifying the admin.
Second, if you do not use the email system from the SME it would be a good ideea to disable it. My servers work flawlessly no matter if the mail is directed to them or not. I even have a pptp connection behind a firewall, still I can send and receive pop3 traffic from the outside world, as well as from the mail server within the sme server.
Third, your server is not behind a firewall when it has a public IP assigned to it(the vast majority of cases). As long as you are directing tests and you still have your original windows server in place I assume you do not have 2 different connections to the internet, so, maybe, check again the firewall thing. I can have a sme server behind a firewall, in most setups whould work fine to receive and send mails, only problem cames in when you are trying to receive mails from outside your internal network, when the firewall you have in place does not forward the necessary ports to your sme server.
If the sme gives you that error, then why don't you post the whole message, from what it sais there, it just sais the mail did not succeed. I imagine you set your sme as you default mail server (SMTP+POP3) and you are asking from mails on an account on another server.
Try this: In outlook express, set your EXTERNAL account (not the one on the sme server) and at smtp and POP3 settings set the machine name (ex. mail@somehost.com), then when you add an account created on your machine (sme server that is) use IP (ex. 10.0.0.1) as I imagine it is on an internal network. This will unconfuse you about which machine is on which domain, and will permit further troubleshooting. And please, give the whole error, not just the part where it sais there is an error.
Since PMs are disabled on this board, use maouniquero on your yahoo messenger to add me.

[mobassir]

hello

Thnaks for your detail reply.
yes you are right my sme server is not directly connected with conneted its behind our Linksys Router.
And my main Server also behind same Router and prodving service to all clients.
And for the time being its your good suggession to disable Mail server, so SME Server could easly passthrough pop3 email .
Guied me how to disable mail server.

thanks
and regards