The PDC and Domain is in lmhosts. Under NT4 it only works with this Entry on the clients in another subnet, but W2K does not. The only thing i could not try is to change the name of the Domain. Under W2K there is a strange behavior with underline "_", it didnt let create a computername with an _ in it. And the Domain contains an _ Maybe in my situation is this the Problem. Andreas Kreiter -----Ursprüngliche Nachricht----- Von: Michael Appeldorn [mailto:appeldorn@codixx.de] Gesendet am: Donnerstag, 16. Mai 2002 12:18 An: 'mario ohnewald'; Andreas Kreiter Cc: suse-security@suse.com Betreff: Re: AW: [suse-security] SuSEFirewall2 - Primary Domain Controller There is a file called lmhosts where you can define pdc and domains by ips Did it to call user-managment from y2k to a nt-pdc in another subnet Try this and call back wether suceed or not Michael Appeldorn

I guess its the same Problem i have with W2K-Server and an NT4 PDC, when they are in the same subnet, all is ok. But when they are in different subnets, they get no securityinfo from the PDC. I can access the shares, ping it by name. When i try to join the Domain, it gives an Error. When i'm in the same subnet and join domain, everythings ok. When i then change the subnet back, then W2K only gets the S-Numbers instead of the names from Users. I haven't found a fix for this Problem yet. My solution was a second Network only for the Servers, to connect W2K with NT4 in the same subnet.

Andreas Kreiter

-----Ursprüngliche Nachricht----- Von: mario ohnewald [mailto:mario.ohnewald@gmx.de] Gesendet am: Donnerstag, 16. Mai 2002 09:59 An: suse-security@suse.com Betreff: Re: [suse-security] SuSEFirewall2 - Primary Domain Controller

doooh! Well, not really solved yet ;( Working with names works now, but my w2k Client still cant find my PDC (when i wanna join my domain), but it can ping it "ping pdc". do i have to enable some ports for internal routing? Protect from Internal is off.

Any Ideas?

Cheers, Mario

...

Ahhh, now it works! Thanks a LOT!

Mario

...

...

Yes, i did that. I can reach all the ips in each net, so the routing seems to work, i can just not work with Names.

Mario

So put the ip of the pdc as wins-server in the settings of your clients in the other subnet :O)

Yours Michael Appeldorn

-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here

-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here