Windows share wont work in openvpn.. please help

basil1987

I am trying to configure a script to install a software remotely in all openvpn client machines. But I am getting this error when trying to use administrative share.

Command I used. 10.0.0.X is the IP address of the client machine and I am running below command from openvpn server:

C:\>net use s: \\10.0.0.X\c$ /USER:administrator PASS

Error:
System error 67 has occurred.
The network name cannot be found.

Could someone please shed some lights on this..?

The openvpn server configuration file looks like:

===================
port 1194
proto udp
dev tun
dev-node Tap_1194
ca "c:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "server.crt"
key "server.key" # This file should be kept secret
dh "dh1024.pem"
server 10.0.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
route 192.168.2.0 255.255.255.0
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
===============

openvpn client configuration file looks like:

===============
client
dev tun
dev-node stageTap
proto udp
remote PUBLIC_IP 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca stage-ca.crt
cert file.crt
key file.key

comp-lzo
verb 3
===============

Mimiko

Please state the winows version of the problem client. Does it ping?

It's not a OpenVPN problem, it's something windows's problem.

basil1987

Mimiko wrotePlease state the winows version of the problem client. Does it ping?

It's not a OpenVPN problem, it's something windows's problem.

Thank you for your reply. Yes the server and client can ping each other. The connectivity is just fine.

I dont know if the problem is with windows or openvpn, but I found the following thread in FAQ section. I am wondering if it has some thing to do with the problem.

http://openvpn.net/index.php/open-source/faq/75-general/309-what-is-the-difference-between-bridging-and-routing.html

Though I am not sure whether I am using rouring or bridge network..? If I am not using bridge, is there any way to switch the settings to bridge..?

Mimiko

You didn't write the windows version of client.

You are using routing method. But routing and bridging is no difference for share access.

Check firewall on your client.

basil1987

I am using windows 2003 as server and windows 7 as client.

The command works perfect if I run it from client machine itself.

If I run the command remotely from windows 2003 server, it gives the error.

I already turned off firewall/antivirus on both server and client without luck.

Mimiko

That's why I asked about client's windows version. Read this to help you http://www.howtogeek.com/howto/windows-vista/enable-mapping-to-hostnamec-share-on-windows-vista/

basil1987

Mimiko wroteThat's why I asked about client's windows version. Read this to help you http://www.howtogeek.com/howto/windows-vista/enable-mapping-to-hostnamec-share-on-windows-vista/

Thanks Mimiko.! But I already tried that too..

On my windows 7 client, the registry entry was not there at beginning. I added the entry and after that, I was able to execute the command from client machine itself, but when I try to execute the command from windows 2003 server, it gives me error.

janjust

I am using windows 2003 as server and windows 7 as client.
The command works perfect if I run it from client machine itself.
If I run the command remotely from windows 2003 server, it gives the error.
I already turned off firewall/antivirus on both server and client without luck.

let me get this straight: you've set up a VPN connection and now, from the windows 2003 server, you want to access an administrative share on the windows 7 client, right?
Is the tap-win32 adapter on the windows 7 box trusted (i.e. part or a non-public network) ? is it possible at all to remotely connect to an administrative share on windows 7?

if you can ping the client from the server and if you do things like a 'wget' then the VPN is set up correctly: everything after that is Windows specific and a little off-topic for this forum.

basil1987

You're right..

Also if try to connect to the same windows 7 client from a different network, it works. So I thought something has to be done in openvpn configurations..

janjust

make sure the tap-win32 adapter is 'private' , not 'public' - I think windows 7 refuses access to public adapters

Mimiko

What will be if you try acces to \\10.11.0.38\c$ from explorer?

In windows 7 is very simple to misunderstan the firewall settings. Us janjust stated - verify in what profile did your tap adapder gone.

To completely disable firewall try this on windows 7:

netsh firewall set opmode disable
netsh advfirewall set allprofiles state off

basil1987

Thanks Mimiko..! I figured it out myself.

The following link helped me.
http://support.microsoft.com/kb/875441

I had to install ipv6 to fix the problem.

Thanks again for your time!

Mimiko

This link resolves the problem when you want to connect to some computer using ids FQDN, like computer1.company.com . May be installing ipv6 did resolved some misconfiguration in your client's system. Did you set in config file --tun-ipv6?

basil1987

I installed ipv6 on server, not the client..

And I only use tun (not ipv6) in the openvpn configuration.

I think you're right. when ipv6 was installed, it may have solved any misconfigurations in server network.. may be a windows 2003 specific problem, not sure though..

Whatever the problem was, I am happy that it worked at last.. 😃