Re: Active Directory Controllers?
From: Paul McGuire (paulmcguire_at__no_spam_hotmail.com)
Date: 04/28/04
- Next message: Laura E. Hunter \(MVP\): "Re: domain controller"
- Previous message: Aimme Lirette MSFT: "Re: failed to promote server"
- In reply to: Matt: "Active Directory Controllers?"
- Next in thread: Cary Shultz [A.D. MVP]: "Re: Active Directory Controllers?"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 27 Apr 2004 20:03:13 -0500
Sounds like you need to open the correct ports for AD Authinication. Start
with pinging by name. If this works than DNS is working. DNS locates the
DC. I am not sure which other ports are used. You should be able to find a
KB article on this. If you can map a drive by ip then you atleast know
netbios is open. a quick port scan on the firewalls will tell you what you
have open and what is closed or stealth.
HTH
Paul McGuire
"Matt" <matth+newsgroups@matthoppes.org> wrote in message
news:c6m4ik03h8@enews4.newsguy.com...
> Here's what our network looks like:
>
>
>
> FIREWALL 1:
> Outside: 63.174.x.x network (OUTSIDE)
> AD Controllers: 10.200.1.x network (DMZ)
> Clients: 172.16.1.x network (INTERNAL)
>
> FIREWALL 2:
> Outside: 63.174.x.x network (OUTSIDE)
> Clients: 10.200.1.x network (DMZ)
>
> We are trying to get the clients from behind firewall2 to behind the
> INTERNAL of firewall1. The issue is that right now they are able to
> authenticate and all is happy. They go from firewall2 to firewall 1
> across the outside interfaces and then through a map to the DMZ to get
> to the AD controllers.
>
> When I try to move the clients behind the INTERNAL on FIREWALL1 I get
> 'No domain controllers are available to service your login request'.
> I have a hosts file in place for the two domain controllers and have a
> map going across from 172.16.1.x to 10.200.1.x. I can ping the DCs.
> If I'm on a machine NOT on the domain I can connect to the DCs via
> filesharing and their 172.16.1.x map. however, if I try that same thing
> with a machine on the domain behind the INTERNAL I get the 'no domain
> controller' message.
>
> Any ideas?
>
- Next message: Laura E. Hunter \(MVP\): "Re: domain controller"
- Previous message: Aimme Lirette MSFT: "Re: failed to promote server"
- In reply to: Matt: "Active Directory Controllers?"
- Next in thread: Cary Shultz [A.D. MVP]: "Re: Active Directory Controllers?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
