I have two domains which are on different subnets, connected by a routed
OpenVPN tunnel. The domains trust each other.
Domain A has the WINS server. Domain B is confused to use Domain A's WINS
server. The VPN pushes the WINS server as part of its DHCP options as
well.
>From either domain, I am able to use smbclient to see the shares on the
other domain's PDC. I have to specify -W <domainname> to get it to
work
which I assume is normal.
>From Domain B, I'm able to use nmblookup in unicast mode, to resolve
WINS
names on Domain A. I'm not able to do this from Domain A to Domain B,
except for domain B's PDC. I am able to reverse resolve from IP to WINS
name, for any client on Domain B.
Below I give some examples, to try to alleviate the confusion:
# Proving that I can communicate via IP between domains A and B:
pdc.domainA> /usr/sbin/traceroute 192.168.4.1
traceroute to 192.168.4.1 (192.168.4.1), 30 hops max, 40 byte packets
1 router.domainA (192.168.1.1) 0.618 ms 0.741 ms 0.784
4 pdc.domainB (192.168.4.1) 107.080 ms 115.237 ms 118.914 ms
pdc.domainB> /usr/sbin/traceroute 192.168.1.101
traceroute to 192.168.1.101 (192.168.1.101), 30 hops max, 40 byte packets
1 router.domainB 114.398 ms 123.207 ms 132.061 ms
4 pdc.domainA (192.168.1.101) 197.005 ms 205.892 ms 214.772 ms
# smbclient from domainB to domainA
pdc.domainB> smbclient -L corpsrv -W DomainA
(output proving it works)
# smbclient from domainA to domainB
pdc.domainA> smbclient -L DUTCHSRV -W DomainB -U root
(output proving it works)
# nmblookup unicast from domainB to domainA
pdc.domainB> nmblookup -U 192.168.1.101 -R 'ifss'
192.168.1.102 ifss<00>
# nmblookup unicast from domainA to domainB
pdc.domainA> nmblookup -U 192.168.1.101 -R 'rachel95'
querying rachel95 on 192.168.1.101
name_query failed to find name rachel95
# Reverse looking up same client after the IP is known
misty@baa:~> nmblookup -U 192.168.4.1 -A 192.168.4.100
Looking up status of 192.168.4.100
RACHEL95 <00> - M <ACTIVE>
DV <00> - <GROUP> M <ACTIVE>
RACHEL95 <03> - M <ACTIVE>
RACHEL95 <20> - M <ACTIVE>
DV <1e> - <GROUP> M <ACTIVE>
RACHEL <03> - M <ACTIVE>
MAC Address = 00-10-5A-02-59-2F
I am only able to browse shares on Domain B's PDC from Domain A, not any
other clients. I have a feeling that it's getting resolved by IP since
the DNS and WINS names of that PDC are the same.
Please let me know how I can resolve WINS names for Domain B and browse
their shares, relying on WINS alone and not on broadcast.
