Tiki Wiki CMS Groupware is a full-featured, web-based, multilingual (40+ languages), tightly integrated, all-in-one Wiki+CMS+Groupware, Free Source Software (GNU/LGPL), using PHP, MySQL, Zend Framework, jQuery and Smarty. Tiki can be used to create all kinds of Web applications, sites, portals, knowledge base, intranets, and extranets. It is actively developed by a very large international community.
Tiki offers a very large number of features "out-of-the-box", arguably more than any other Open Source Web Application. Highly configurable and modular, all features are optional and administered via a web-based interface.
Major features include a robust wiki engine, news articles, discussion forums, newsletters, blogs, file and image galleries, bug and issue trackers (form generator), a links directory, polls/surveys and quizzes, FAQs, banner management system, calendar, maps, mobile , RSS feeds, category system, tags, an advanced themeing engine (Smarty), spreadsheet, live support, shoutbox, inter-user messaging, menu generator, advanced permission system for users and groups, internal search engine, external authentication support, and much, much more. It integrates with the open source web conferencing BigBlueBlueButton.org for audio/video/chat/screensharing and whiteboard support.
---
Tiki Suite: A suite of Free and open source software collaboration, office productivity & publishing tools for small & medium-sized organizations, featuring Wiki + CMS + Groupware + Commerce + Accounting + Document Management + CRM + Web conferencing + Desktop sharing + PBX VOIP Telephony + Instant messaging & presence + Video management + E-learning, etc. The Tiki Suite includes and builds upon a selection of server, desktop and mobile components with a concerted effort to greater interoperability. The idea is to offer a well integrated set of tools for what most people need most of the time.
Tiki Suite should cover:
* what 80% of the people use 80% of the time
* for a typical small or medium organization.
http://www.clearfoundation.com/docs/howtos/Tiki_Wiki_CMS_Groupware
http://suite.tiki.org/
I am currently setting up ClearOS as a Web Proxy and a Content Filter, I have the system set up and the filtering is working as intended but I require users to be authenticated Via AD when using the proxy so it logs as the AD user.
What I have done so far is to follow some instructions here www.clearfoundation.com/component/option.../func,view/id,25117/ and added the machine to the domain, using wbinfo –u it displays the users in the domain (which is great) and but when I try the proxy I get asked for a log in box (which I don’t want) and if I try my domain log in details its fails to log in stating there is an error and brings up a clearOS error page.
As you can see what I am trying to achieve is that the users do not need to enter any log-in details and that the logs display the users access attempts to blocked sites and it would do if I was going to use the log in via ClearOS itself.
As you can see i'm having issues!!! If you need more info please let me know!!!
Hi everyone, I am going through all the updates (sdn subscriptions) available, and saw the two subscriptions:
antispam
and
antimalware
my question is - do these filtres work only if the mail server is on the clearos machine itself, or is ot some sort of a filter which analises trafic over smtp ports and they would work if I have a web and mail debian server in the dmz?
I have emailed Clear Foundation a couple times and still have not received a reply. Does anyone know if I need to purchase 1 subscription for my account ($80 x 1 account) that covers multiple machines, or do I need to purchase one subscription per machine ($80 x machine)?
Specifically, I need the $80 subscription that includes the dynamic VPN. So is that $80 per machine or $80 for the account that covers all the machines?
In my opinion, multi-wan web interface is so simple and poor.
explanation:
Mangle chain of iptables is used to mark the packets for future operations. U can see the it by typing:
iptables -t mangle -nvL
iptables will check the rules in chain by order, and first rule that matches will be applied, the rest rules wont be checked.
So in your situation, the order of rules will be the key. solution:
U can add custom firewall rules via web interface or by editing /etc/rc.d/rc.firewall.custom (or /etc/rc.d/rc.firewall.local). So u will change the rules in the mangle table to make it work as u requested.
If u need more help, post the output of "iptables -t mangle nvL"
With regards your current set up I am not sure what the issue is and I think it should work. It probably could be done differently with all three WAN's coming into ClearOS then have two LAN interfaces, one a DMZ and the other as a normal LAN. Attach the FTP and webserver to the DMZ and look at using 1-to-1 NAT to connect your external IP to the webserver. Normally the ClearOS firewall isolates the LAN from the DMZ but it is easy to make specific holes in the firewall to you can connect from LAN (or specific LAN machines) to DMZ and not the other way round. I am not familiar with 1-to-1 NAT but I believe it will do what you want.
Out of interest are eth0 and eth2 configured as ethernet or PPPoE and are your WAN's ADSL or cable?
I know you have said you now don't think it is a ClearOS issue, but if you want to check if you are using the latest/best drivers, can you post the output of "lspci -v | grep Eth", "grep eth /etc/modprobe.conf" and "uname -r" or run this script then post the output.
1- I think the value that u look for is "ip_conntrack_max"
# sysctl -A|grep -i net.ipv4.netfilter.ip_conntrack_max
net.ipv4.netfilter.ip_conntrack_max = 65512
the default value "65512" is ok for u?
Check "/var/log/messages" and look for "ip_conntrack Table full. Dropping packet" error message. If u dont see those lines, no need to change "net.ipv4.netfilter.ip_conntrack_max"
Note: U have very powerfull gateway box. If u care about system resources so much that, go with BSD based firewall distros which uses pf. Iptables will use more system resources than pf does.
2- I am not good at english at all I cannot understand the meaning of "evenly distribute public IP to NAT clients".
Do u want certain clients will always use certain external interface to reach internet?
hi Jeff,
Same port cannot be forwarded to multiple internal destination for same connection.
But the answer of question is "yes it is possible". The firewall will forward that port to multiple internal servers randomly (round robin). So that port will be forwarded to one of internal servers per connection.
it can be done that via custom firewall rules on web interface. iptables allows to define the range of internal servers ip, not seperate 2 ip address. So u must change second server ip 192.168.112.50 to 192.168.112.2
I want to install vmware server 2 on my ClearOS 5.2.
I followed the instructions in the HowTo's, however when i start the config.pl, I get the following question.
What is the location of the directory of C header files that match your running
kernel? [/usr/src/linux/include]
Whatever I try, the installation doesn't go further than this.
Before the installation i've already installed all of the development tools with : yum groupinstall "Development Tools"
According to the HowTo i've also installed the patch.
As far I can see there's a difference between the running kernel and the development kernel for the headers.
I'm not sure if this causes the problem, if yes, how can I solve it?
I used the rpm version of vmware server, this is the complete filename/version of this rpm.
VMware-server-2.0.2-203138.i386.rpm (this is also the version used in the HowTo)
Is there someone who can help me or has the same problem?
Hi every one on clearos forum.
In my School, i have project from my head master, the question is "how The Server ClearOs 5.2 can Remot via Mobile Phone:
example:
- Report - who is online (everyting via wireless/wire)?,
- SMS Gateway for Schedule On/Off server by authentic user via Mobile Phone?
- Report - Hotspot Activation register new user via Mobilephone?
- E-Learning (teacher send Homework to students via Mobilephone)?
- Report - manage hotspot (user online/offline)
- Modem HSDPA/3G USB/Com Port )
everything in workstation control by server, but server can control via mobilephone.
for map of networking under contruction.
Have any idea for this solution?
have just set up first Clear OS install and can't seem to get the XP Pro clients to connect.
When I click on change to change from workgroup to domain I get prompted for a username and
password to which I provide the winadmin login and password
After 30 seconds or so I get the following error
Computer Name Changes
The following error occurred attempting to join the domain 'tmpsrv':
Access is denied.
Any suggestions ?
Thanks
Mike
Hi,
maybe a silly question: what "winadmin" user did you use? Have you also used the password you had to setup during installation?
I have now setup a ClearOS5.2.
Created users and groups in Ldap
Connected my win pc's to the domain (yes, I'm using ClearOS a a PDC)
I have created Flexshares for users and groups to use for sharing docs within their dpts.
My issue:
Connecting to the ftp via the default port (21) I get into the user's own directory.
Connecting to port 2121 I get to a ??root?? directory which shows me all manually created flexshares. I can get into the ones I have access rights to, but I can't get back to be able to browse from one share to another.
Also, I am seeing the shares I have no acces access rights for.
Solution I am looking for:
- What to do to be able to browse from share to share, inlcuding the personal one
- How to hide non accessible shares (I hve seen there is already a request for this...but never know)
I guess now would be as good of a time as any to as this question...
This is how my network is setup as far as this post is concerned.
I am using smoothwall for my webserver so one 18mbps line is dedicated to it. Its very simple and does a wonderful job.
This is not the correct way of doing this at all though. As far as I know, servers shouldn't be "multi homed".
If I were to add the other static cable line to my COS box, is it possible to make it so all traffic to and from that IP would go directly to the webserver, and only to the webserver, but still have access to it from the lan?