PDC over a subnet and VPN?
-
Hello everyone,
I have a Centos 5 Samba server as a PDC at our master site (192.168.0.0/24) and I have a remote site (192.168.1.0/24) connected with a IPSEC VPN (pfsense, boths ends are behind a NAT router). All ports and protocols are open through the pipe. All servers and routers are virtualized (proxmox KVM).
The VPN pipe is working fine. I can ping the PDC by short and long names and map windows shares (by IP not hostname) no problem. I can ping clients from both ends.
However, I am having difficulty adding computers on the remote site to the domain and when they are added new users are having difficulty logging in (no domain controllers can be found) and the samba login script does not run there.
I cannot "browse" the main site network from the remote site via Windows 7/Vista file manager.
Does anyone know how to resolve this issue?
Is the VPN a problem?
Does the PDC have an issue with a subnet?
I found one thread that recommended setting the KVM host network interfaces to "promiscuous mode". How can this be done in proxmox?
Is there a configuration change I can make to get this to work?
Thank you for your help.
Kevin
-
This is not about VPNs, not even pfSense or Samba, but basic Windows networking. On an NT style domain, PDC discovery is made through NetBIOS requests. So it will work "right away" only within the same subnet. For it to work on other subnets (no matter how they are connected), you need to set up Samba also as a WINS server and point all clients to it on their WINS configuration.
Regards!