GetDCName

5 posts / 0 new
Last post
audun.voldsrud@...
Offline
Last seen: 4 years 4 months ago
Joined: 10.05.2012 - 11:58
GetDCName

I bought CopSSH yesterday and I have a problem with GetDCName.

This problem occurs because CopSSH can't talk to a domain controller on ldap udp 389.

I have done some digging and found out that when CopSSH is looking/asking the DNS for the domain controller it uses this command:

_ldap._tcp.pdc._msdcs. DnsDomainName .

CopSSH should not ask DNS for the PDC(primary domain controller), but for the DC for the AD site in which the server resides.

CopSSH should use this command to find the correct DC:

_ldap._tcp. SiteName ._sites.dc._msdcs. DnsDomainName

https://technet.microsoft.com/en-us/library/cc961719.aspx

My PDC is in another subnet and blocked by firewall because of security reasons, so I can not use CopSSH with domain accounts as it is now.

Can you please fix this or give us a way to hardcode which DC CopSSH should talk to.

itefix
Offline
Last seen: 38 min 14 sec ago
Joined: 01.05.2008 - 21:33
Hi, Thanks for your findings.

Hi,

Thanks for your findings. I can confirm that Control Panel uses a mechanism which may lead to problems in complex and segmented networks as it tries to contact  a specific DC with PDC role. I am now preparing a fix to the problem. It will be available very soon.

audun.voldsrud@...
Offline
Last seen: 4 years 4 months ago
Joined: 10.05.2012 - 11:58
Thank you very much!  Will

Thank you very much!  Will the fix be available today, one week/month?

itefix
Offline
Last seen: 38 min 14 sec ago
Joined: 01.05.2008 - 21:33
Please download Control Panel

Please download Control Panel 2.1.3 from protected support downloads area. It should fix the problems you've met. Please let me know if the problem still persists.

audun.voldsrud@...
Offline
Last seen: 4 years 4 months ago
Joined: 10.05.2012 - 11:58
I can confirm that everything

I can confirm that everything works now. :)