Windows Forum

Ask something
Discussion Locked

Missing Domain Controller

0 helpful
3 replies

by bconklin

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all....
We have recently implemented a fire wall using Netware Border Manager and built a VPN for all our servers. After moving our 6 NT servers to their new IP address none of the Servers or the NT4 or Win2K workstations are able to find the Domain Controller. The machine shows up in Network Neighborhood and you can connect ot it as well as browse it. Pinging its address indicates that it is indeed on the network. After going over all the settings on all the suspect machines I have come upwith a blank. We also use the Novell netware client to validate our log ons as well as NDS for NT to manage the entire network. We are using TCP/Ip as the transport protocol and as far as I can see it should work. Everything was fine and functioningwell prior to moving the machines behind the firewall. Any ideas as to where to go to next?

3 replies

by ntoz

Keep in mind that just because you can browse an item doesnt mean it can be seen through other sources. You havent mentioned what ports you have opened with your Netware Border Manager but first you must have the following ports open:

PORT 135 (TCP or UDP) for Remote Procedure Call(RPC)Service
PORT 137 (UDP) for NetBIOS Name Service
PORT 138 (UDP) for NetBIOS datagram (Browsing)
PORT 139 (TCP) for NetBIOS session (NET USE)
ALL PORTS above 1024 for RPC Communication

For Windows2000 AD
You will also need:

LDAP for the active Directory will need the following ports opened:

LDAP_PORT 389
LDAP SSL 636
LDAP GC PORT 3268
LDAP SSL GC PORt 3269
KERBEROS 88

You will also need to either use lmhosts files on each server or a wins server to keep track of things like Domain Controlers, Server names, Workstation names and other service Netbios names.

Finaly for those remote users, you must again have lmhosts files for them to be able to see everything corretly. You will have to also configure them properly so they can browse past the RAS server your using.

Pete

This discussion is closed to new replies.