name resolution not working

naerey

Preface: I am new to all of this, OpenVPN was previously configured by another guy to run Bridged, all worked - except a 3G-modem/router that wouldn't connect. I am now switching to Routed mode.

Problem: I can connect to OpenVPN server, can ping local address of server, but not other computers, unless I add routing to their configuration ( I have no access to router settings). I can also connect to smb://192.168.0.222 which is server address - but not smb://server. Same thing for smb://192.168.0.1 VS smb://serverfile

Config files:

/etc/openvpn/server.conf

local 192.168.0.222
port 1194
proto udp
dev tun1
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key  # This file should be kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt 0
push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
management localhost 7505

Client config

client
dev tun
proto udp
remote 123.123.123.123 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert lurano4.crt
key lurano4.key
comp-lzo
verb 3

/etc/samba/smb.conf

[global]
	workgroup = WRK-GRP
	netbios name = server
	domain logons = Yes
	domain master = Yes
	local master = Yes
	os level = 65
	security = user
	preferred master = Yes
	passdb backend = ldapsam:ldap://127.0.0.1
	wins support = Yes
	idmap backend = ldap:ldap://127.0.0.1
	ldap admin dn = cn=Administrator,dc=wrkgrp, dc=com
	ldap group suffix = ou=Groups
	ldap idmap suffix = ou=Idmap
	ldap machine suffix = ou=Machines
	ldap passwd sync = Yes
	ldap suffix = dc=wrkgrp, dc=com
	ldap user suffix = ou=Users
	#add machine script = /sbin/yast /usr/share/YaST2/data/add_machine.ycp %m$
	add machine script = /sbin/yast /usr/share/YaST2/data/add_machine.ycp %m$
	name resolve order = wins bcast host lmhosts
	winbind nested groups = Yes
	usershare allow guests = No
	map to guest = Bad User
	server string = server
	idmap gid = 1000-2000
	idmap uid = 10000-64999
	ldap ssl = Off
	logon home = 
	logon path = 
	guest account = nobody
		
[netlogon]
	comment = Server
	path = /var/lib/samba/netlogon
	write list = root

[profiles]
	inherit acls = Yes
	path = /var/lib/samba/profiles
	read only = No
	browseable = No
	create mask = 0600
	directory mask = 0700
	hide files = /desktop.ini
	store dos attributes = Yes

[various folders]....
        various configs....

ifconfig on server

server:/etc/openvpn # ifconfig
br0       Link encap:Ethernet  HWaddr 00:24:E8:7A:E1:E5  
          inet addr:192.168.0.222  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1314824 errors:0 dropped:0 overruns:0 frame:0
          TX packets:214789 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:172028159 (164.0 Mb)  TX bytes:138156038 (131.7 Mb)

eth0      Link encap:Ethernet  HWaddr 00:24:E8:7A:E1:E5  
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:30916950 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25383717 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:11596037956 (11058.8 Mb)  TX bytes:21587389567 (20587.3 Mb)
          Interrupt:16 

eth1      Link encap:Ethernet  HWaddr 00:24:E8:7A:E1:E6  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
          Interrupt:17 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1423159 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1423159 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:208834986 (199.1 Mb)  TX bytes:208834986 (199.1 Mb)

tap1      Link encap:Ethernet  HWaddr 3E:0C:6D:00:6B:AC  
          UP BROADCAST PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

tun1      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:7491 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7673 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:708598 (691.9 Kb)  TX bytes:7358211 (7.0 Mb)

ifconfig on client

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
	options=3<RXCSUM,TXCSUM>
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
	inet 127.0.0.1 netmask 0xff000000 
	inet6 ::1 prefixlen 128 
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=27<RXCSUM,TXCSUM,VLAN_MTU,TSO4>
	ether 60:fb:42:f3:eb:cc 
	media: autoselect
	status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	ether 04:1e:64:f2:8b:02 
	inet6 fe80::61e:64ff:fef2:8b02%en1 prefixlen 64 scopeid 0x5 
	inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255
	media: autoselect
	status: active
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
	ether 06:1e:64:f2:8b:02 
	media: autoselect
	status: inactive
vnic0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=3<RXCSUM,TXCSUM>
	ether 00:1c:42:00:00:08 
	inet 10.211.55.2 netmask 0xffffff00 broadcast 10.211.55.255
	media: autoselect
	status: active
vnic1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	options=3<RXCSUM,TXCSUM>
	ether 00:1c:42:00:00:09 
	inet 10.37.129.2 netmask 0xffffff00 broadcast 10.37.129.255
	media: autoselect
	status: active
tun0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	inet 10.8.0.10 --> 10.8.0.9 netmask 0xffffffff 
	open (pid 32506)

I was told to look into WINS, but as far as I can tell, it is already set up in smb.conf .. is there anything I'm missing?

What I want to achieve:
*allow remote windows computers to connect to SMB shares of Local LAN (through LDAP authentification)
*allow remote windows computers to connect to AS400 server on Local LAN
*be able to use names instead of IP's

maikcat

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

naerey

Thanks!

Had to add my WINS server IP (192.168.0.222) to the virtual TUN controller created by OpenVPN.
(properties > TCP/IP > Advanced > WINS)

Now need to check wether AS/400 will work(telnet) and if I can connect from local LAN to remote computers SMB share connected via OpenVPN.

As well as making the forwards in OpenSUSE fixed - so far only added them temporarely using

iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -I FORWARD -i tun0 -o eth0 -s 10.8.0.0/24 -d 192.168.0.0/24 -m conntrack --ctstate NEW -j ACCEPT

which I'm told will not persist after a reboot. Any tips? In YaST I don't have as many options to choose!

maikcat

unfortunately i dont have suse expirience..only centos/redhat/ubuntu

i am pretty confident that yast has the options to make them permenant though..

regards.

Michael.