Re: [Openvpn-users] new to openVPN

["John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>]

On Tue, 2006-10-10 at 11:38 +0200, Roland_Lepper@xxxxxxxxxxxx wrote:
> I recently installed OpenVPN on a Suse machine.
> The main purpose is to connect laptop users via VPN to our Terminal Server.
> The laptops are using WindowsXP as their OS and installed OpenVPNGui on it.
> I configured the OpenVPN server for Tun.
> 
> I can create the tunnel between the laptop and the VPN machine and the Terminal server.
> I can ping the OpenVPN machine, the Terminal Server as also other machine in my LAN from a VPN
> session.
> I can make a secure RDP connection.
> This is what I first wanted, but I want more.
> 
> So far so good, but....
> I've read that I can see the other machines (eg fileserver on Windows) in my network places. The
> problem is that I can't.
> I can see the domain listed, but I can't see the machine their.
> I can map them via a loginscript on the laptop, but have to specify the admin username and password
> to connect.
> After the connection is made, a laptop user can't edit any files, because of the domain permissions.
> 
> So how can i configure OpenVPN that I can edit my files on the fileserver with the domain username
> and password?
> I can do this in RDP, but when I don't have a terminal server, I have to give my users full control
> on the files on my fileserver and that's a bad news.
> 
> Hope somebody can help me.
> 
> thanks in advance.
<snip>
I believe there were some recent posts on this subject on the mailing
list.

Network browsing requires WINS to function across a router even in a
full AD network.  You will need to configure a WINS server and point
your remote users to it.

You will also need to prevent them from assuming responsibility for
maintaining the browse list. This is done with a couple of registry
changes:

HKLM\System\CurrentControlSet\Services\Browser\Parameters, make sure
that IsDomainMaster and MaintainServerList are both set to FALSE.

Of course, any firewalling you are doing in the tunnel will need to
allow the underlying NetBIOS traffic.  Hope that helps - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@xxxxxxxxxxxxxxxxxxx

Financially sustainable open source development
http://www.opensourcedevel.com

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users