openvpn samba question (sshd keep alive cont..)
Hello On 29/04/2004 I asked for the sshd keep alive option of ssh. In that days I used the KeepAlive and ClientAliveInterval without success. Some people told me about other alternatives like ipsec, openvpn., well I have began to use openvpn and it works very fine, I can connect to the vncserver, cvs etc etc now I also want to share my samba volumes through the vpn, but I can reach the samba server. From my windows I try to connect to the server but It´s like there isn´t any samba on the ip Perhaps there is something wrong on my vpnconfig or in my smb.conf file ¿any idea? I run this comand to make the vpn in my windows: "c:\archivos de programa\openvpn\bin\openvpn.exe" --remote SERVER --dev tap --ifconfig 10.4.0.1 255.255.255.0 --verb 3 --secret "c:\archivos de programa\openvpn\config\key.txt" in the linux /usr/local/sbin/openvpn --remote MYPC --dev tap --ifconfig 10.4.0.2 255.255.255.0 --verb 3 --secret key.txt -- Emiliano Sutil García
Hi, you need to configure a bridge on the openvpn Server. Read this links from openvpn: http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html Hope it helps! El Martes, 25 de Mayo de 2004 19:43, Emiliano Sutil escribió:
Hello
On 29/04/2004 I asked for the sshd keep alive option of ssh. In that days I used the KeepAlive and ClientAliveInterval without success. Some people told me about other alternatives like ipsec, openvpn., well I have began to use openvpn and it works very fine, I can connect to the vncserver, cvs etc etc now I also want to share my samba volumes through the vpn, but I can reach the samba server. From my windows I try to connect to the server but It´s like there isn´t any samba on the ip Perhaps there is something wrong on my vpnconfig or in my smb.conf file ¿any idea?
I run this comand to make the vpn in my windows: "c:\archivos de programa\openvpn\bin\openvpn.exe" --remote SERVER --dev tap --ifconfig 10.4.0.1 255.255.255.0 --verb 3 --secret "c:\archivos de programa\openvpn\config\key.txt" in the linux /usr/local/sbin/openvpn --remote MYPC --dev tap --ifconfig 10.4.0.2 255.255.255.0 --verb 3 --secret key.txt
-- Emiliano Sutil García
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
-- --------------------------------------------------------------------------------- Manuel Balderrábano e-mail: garibolo@wanadoo.es ---------------------------------------------------------------------------------
Manuel Balderrábano wrote:
Hi, you need to configure a bridge on the openvpn Server.
Read this links from openvpn:
http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html
Hope it helps!
Thanks, I don´t understand very well this instrucctions but It doesn´t matter I´ll study them and I hope I´ll finally understand it. but I have one question, in the windows side is necessary any chage to make this work? thanks again -- Emiliano Sutil García
Hi again. El Miércoles, 26 de Mayo de 2004 12:18, Emiliano Sutil escribió:
Manuel Balderrábano wrote:
Hi, you need to configure a bridge on the openvpn Server.
Read this links from openvpn:
http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html
Hope it helps!
Thanks, De nada ;-) I don´t understand very well this instrucctions but It doesn´t matter I´ll study them and I hope I´ll finally understand it.
That's how I allways work...studing and asking the SuSE lists! :-) There is an excellent slide show by James Yonan: http://openvpn.sourceforge.net/papers/BLUG-talk/
but I have one question, in the windows side is necessary any chage to make this work?
You need to install an openvpn client. It can even be started as a service... Look in the download area, there are auto-installable exes, look for the exact version you have on the Linux server.
thanks again
-- Emiliano Sutil García
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
-- --------------------------------------------------------------------------------- Manuel Balderrábano e-mail: garibolo@wanadoo.es ---------------------------------------------------------------------------------
Alle 19:49, martedì 25 maggio 2004, Manuel Balderrábano ha scritto:
Hi, you need to configure a bridge on the openvpn Server.
Read this links from openvpn:
http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html
Hope it helps!
There is no need for a bridging configuration. I have it working without it. Without a bridging configuration a WINS server helps a lot, and local master browsers should usually be the gateways. If you do not have a complex vpn, bridging should be easier. Praise
Hi. El Miércoles, 26 de Mayo de 2004 13:07, Praise escribió:
Alle 19:49, martedì 25 maggio 2004, Manuel Balderrábano ha scritto:
Hi, you need to configure a bridge on the openvpn Server.
Read this links from openvpn:
http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html
Hope it helps!
There is no need for a bridging configuration. I have it working without it. Without a bridging configuration a WINS server helps a lot, and local master browsers should usually be the gateways. For security reasons, I would never use my local master browser as the gateway. Anyway: Is it true what Robert Rasp says? If I put a Wins server avaliable for all windows clients in the VPN, then they will not make broadcast calls at all?
If you do not have a complex vpn, bridging should be easier. I think you mean ppp conection instead of bridging.
Praise
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
-- --------------------------------------------------------------------------------- Manuel Balderrábano e-mail: garibolo@wanadoo.es ---------------------------------------------------------------------------------
Praise wrote:
Alle 19:49, martedì 25 maggio 2004, Manuel Balderrábano ha scritto:
Hi, you need to configure a bridge on the openvpn Server.
Read this links from openvpn:
http://openvpn.sourceforge.net/bridge.html http://openvpn.sourceforge.net/INSTALL-win32.html
Hope it helps!
There is no need for a bridging configuration. I have it working without it. Without a bridging configuration a WINS server helps a lot, and local master browsers should usually be the gateways.
If you do not have a complex vpn, bridging should be easier.
Praise
I´d prefer not to use bridging configuration (I have try it without success, and I have halted the server several times, aghh... ) But I don´t understand how I can do it. When I open the vpn I can ping the server, in fact If I use smbclient -L server (vpn address) -U user, I get response from it, but I cant see the server from the windows explorer. I also have put the name and ip in the lmhosts.sam file but it doesn´t work any suggestion? thanks -- Emiliano Sutil García
The lmhost.sam is the sample file, the right file is lmhost _without_ extension! regards Andreas -----Ursprüngliche Nachricht----- Von: Emiliano Sutil [mailto:emiliano@iranon.com] Gesendet: Mittwoch, 26. Mai 2004 13:59 An: suse-security@suse.com Betreff: Re: [suse-security] openvpn samba question (sshd keep alive cont..) I also have put the name and ip in the lmhosts.sam file but it doesn´t work any suggestion? thanks -- Emiliano Sutil García -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
Andreas Kreiter wrote:
The lmhost.sam is the sample file, the right file is lmhost _without_ extension!
regards Andreas
glups what a newbie stupid question, (I always wonder what was the sam extension for) Well I have put this in the lmhosts 10.4.0.2 serverlinux But I can´t see it through the vpn. I reached by ping, cvs, vnc, but not samba. -- Emiliano Sutil García
participants (4)
-
Andreas Kreiter -
Emiliano Sutil -
Manuel Balderrábano -
Praise