Re: [Samba] Netbios over VPN
This is right. Openvpn does the job perfectly fine here connecting our far away office in our network and Samba-Domain. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Ben Metcalfe Gesendet: Montag, 9. Juli 2012 01:35 Cc: samba@lists.samba.org Betreff: Re: [Samba] Netbios over VPN Additionally on Sebastian's point: http://openvpn.net/index.php/open-source/faq/75-general/293-what-is-the-prin ciple-behind-openvpn-tunnels.html People who are running applications that need the special features of ethernet (which won't work on an IP-only network) will often bridge their physical local ethernet with a tap device (using a utility such as brctl on Linux), then VPN the tap device to another similar setup at the other end. This allows OpenVPN to route ethernet broadcasts and non-IP protocols such as Windows NetBios over the VPN... -Ben. On 8 July 2012 23:27, Bob Miller b...@computerisms.ca wrote: Hello, I believe you can use WINS to solve this problem. It's been a while, my neurons may be rusty, but I had a similar set up using openswan. I believe winbind will do what you want; configure samba to use winbind and your road warriors with that as their wins server. If I remember correctly, the road warriors will register with the winbind server, then everyone on the network configured to use the winbind server should be able to find them... Check here for better information (or at least a place to start): http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrow sing.html#id2585378 On Thu, 2012-07-05 at 10:30 -0400, Andrew Mark wrote: I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca b...@computerisms.ca Network, Internet, Server, and Open Source Solutions -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
maybe because the name : john_laptop is not RFC. try changing it to : john-laptop and test again. read : http://en.wikipedia.org/wiki/Hostname#Restrictions_on_valid_host_names in short : While a hostname may not contain other characters, such as the underscore character (_), other DNS names may contain the underscore.[2] Systems such as DomainKeys and service records use the underscore as a means to assure that their special character is not confused with hostnames Louis -Oorspronkelijk bericht- Van: andr...@aimsystems.ca [mailto:samba-boun...@lists.samba.org] Namens Andrew Mark Verzonden: 2012-07-05 16:30 Aan: samba@lists.samba.org Onderwerp: [Samba] Netbios over VPN I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
Am Montag, 9. Juli 2012, 08:29:00 schrieb Daniel Müller: This is right. Openvpn does the job perfectly fine here connecting our far away office in our network and Samba-Domain. We can recommend OpenVPN too. The easiest way to connect to a Samba by VPN in the majority of scenarios should be the OpenVPN TAP mode (layer 2) - but security may more difficult to handle a bit. - see i.e.: http://openvpn.net/index.php/open-source/documentation/howto.html#samba for some basics about this... To solve name resolution questions i knew manies who are using a DNS with their samba / OpenVPN setup. Not shure how far samba / windows network browsing is working today over tap correctly (did not tried that in the past again) but may be there are more clever solutions possible today. hth best regards, Niels. -- --- Niels Dettenbach Syndicat IT Internet http://www.syndicat.com PGP: https://syndicat.com/pub_key.asc --- signature.asc Description: This is a digitally signed message part. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
Niels Dettenbach n...@syndicat.com escreveu: Am Montag, 9. Juli 2012, 08:29:00 schrieb Daniel Müller: This is right. Openvpn does the job perfectly fine here connecting our far away office in our network and Samba-Domain. We can recommend OpenVPN too. The easiest way to connect to a Samba by VPN in the majority of scenarios should be the OpenVPN TAP mode (layer 2) - but security may more difficult to handle a bit. - see i.e.: http://openvpn.net/index.php/open-source/documentation/howto.html#samba for some basics about this... To solve name resolution questions i knew manies who are using a DNS with their samba / OpenVPN setup. Not shure how far samba / windows network browsing is working today over tap correctly (did not tried that in the past again) but may be there are more clever solutions possible today. hth best regards, Niels. -- --- Niels Dettenbach Syndicat IT Internet http://www.syndicat.com PGP: https://syndicat.com/pub_key.asc --- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Hi there, We are using tun (routed) without problems. Just a matter of configuring wins and/or dns. []s, Fernando Lozano -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
did you have the dns service enabled? 2012/7/5 Andrew Mark andr...@aimsystems.ca: I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
Am 05.07.2012 16:30, schrieb Andrew Mark: I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba [...] I presume, you're using one or more TUN device(s) on OpenVPN? If so, I recommend switching to TAP devices instead, if possible. Bridging should save you from a lot of trouble around NetBIOS/SMB. Best Regards, Sebastian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
Hello, I believe you can use WINS to solve this problem. It's been a while, my neurons may be rusty, but I had a similar set up using openswan. I believe winbind will do what you want; configure samba to use winbind and your road warriors with that as their wins server. If I remember correctly, the road warriors will register with the winbind server, then everyone on the network configured to use the winbind server should be able to find them... Check here for better information (or at least a place to start): http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#id2585378 On Thu, 2012-07-05 at 10:30 -0400, Andrew Mark wrote: I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca b...@computerisms.ca Network, Internet, Server, and Open Source Solutions -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Netbios over VPN
Additionally on Sebastian's point: http://openvpn.net/index.php/open-source/faq/75-general/293-what-is-the-principle-behind-openvpn-tunnels.html People who are running applications that need the special features of ethernet (which won't work on an IP-only network) will often bridge their physical local ethernet with a tap device (using a utility such as brctl on Linux), then VPN the tap device to another similar setup at the other end. This allows OpenVPN to route ethernet broadcasts and non-IP protocols such as Windows NetBios over the VPN... -Ben. On 8 July 2012 23:27, Bob Miller b...@computerisms.ca wrote: Hello, I believe you can use WINS to solve this problem. It's been a while, my neurons may be rusty, but I had a similar set up using openswan. I believe winbind will do what you want; configure samba to use winbind and your road warriors with that as their wins server. If I remember correctly, the road warriors will register with the winbind server, then everyone on the network configured to use the winbind server should be able to find them... Check here for better information (or at least a place to start): http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#id2585378 On Thu, 2012-07-05 at 10:30 -0400, Andrew Mark wrote: I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca b...@computerisms.ca Network, Internet, Server, and Open Source Solutions -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Netbios over VPN
I am attempting to utilize BackupPC on a Fedora 14 server to backup a remote client. As I understand, it's primary mechanism for finding clients is performing a nmblookup clientname This works fine for computers connected to the local network. My issue is extending ?Samba's? search to encompass our other network - the point-to-point VPNs Using OpenVPN, we have a number of road warriors who connect their VPN to gain access to the samba server. Each has a unique static IP address in the 10.30.251 range and when connected, I can find them but not samba i.e. # ping john_laptop --- john.inspirah.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 9.900/14.764/24.388/6.805 ms # nmblookup john_laptop querying john_laptop on 127.255.255.255 querying john_laptop on 10.30.7.255 name_query failed to find name john_laptop How to I configure Samba or whatever Linux service is necessary to query the 10.30.251.255 network as well -- Cheers, Andrew Mark | Development Analyst | www.aimsystems.ca local: 519-837-1072 | fax: 519-837-4063 | int'l 800-465-2961 12-350 Speedvale Ave. W. | Guelph, ON | N1H 7M7 | Canada -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Netbios over VPN
Hi all, First of all let me describe my vpn config. I have 3 networks and 1 host connected through OpenVPN: LAN1: LAN IP: 192.168.0.0 VPN IP TO LAN2: 10.0.0.1 VPN IP TO LAN3: 10.0.1.1 VPN IP TO HOST1: 10.0.2.1 LAN2: LAN IP: 192.168.1.0 VPN IP TO LAN 1: 10.0.0.2 LAN3: LAN IP: 192.168.30.0 VPN IP TO LAN 1: 10.0.1.2 HOST1: VPN IP TO LAN 1: 10.0.2.2 As you can see, all vpn connections are going through a LAN1 server, so any traffic between the vpn is routed through this server. The problem is that I can access any host on the vpn from everywhere (including samba shares) with the IP address but not with the netbios name. Reverse nmblookup works (nmblookup -A 192.168.0.1) meaning that netbios ports are not filtered. As I understand I must have the right settings for *remote announce* and *remote browser sync* but don't know which are these settings since I tweaked them without any luck. Or maybe there are other options that must be configured. Thanks all for your replies, Arthur -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
