Our organization has an on-premise, Windows, domain controller that we'd like eliminate in favor of a local DHCP/DNS server on either our Unify switch (first choice) or FortiGate VPN appliance (second choice).
As we've moved most of our infrastructure to Azure, there is little need for an on-premise, Windows domain controller.
What are the steps involved in this transition? What issues will we likely encounter?
I am attempting to connect to a service using OpenVPN.
There are a number of configuration files (.OVPN) that share a single certificate (ca.crt); all are located in the same directory. Canada.ovpn, for example:
client
dev tun
proto udp
remote ca.#########.com 443
resolv-retry 5
nobind
fast-io
float
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ca ca.crt
auth-user-pass
comp-lzo
route-delay 5 30
script-security 3 system
ping-restart 0
mute-replay-warnings
verb 3
When I attempt to connect:
sudo openvpn --config ./configs/canada.ovpn --auth-user-pass ./credentials.txt
I get an error that reads:
Options error: --ca fails with 'ca.crt': No such file or directory Options error: Please correct these errors. Use --help for more information.
It seems that openvpn is having difficultly with the relative path. I changed the relevant line to ca ./ca.crt, but that resulted in the same error.
Configuration files that have an in-line certificate work as expected.
What is the correct way to use a relative path to a certificate in an .OVPN file?
I'm using the Juniper client for OSX ('Network Connect') to access a client's VPN. It appears that the client is configured to not use split-routing. The client's VPN host is not willing to enable split-routing.
Is there a way for me to over-ride this configuration or do sometime on my workstation to get the non-client network traffic to by-pass the VPN? This wouldn't be a big deal, but none of my streaming radio stations (e.g. XM) work will connected to their VPN.
Apologies for any inaccuracies in the terminology.
** edit **
The Juniper client changes my system's resolve.conf file from:
nameserver 192.168.0.1
to:
search XXX.com [redacted]
nameserver 10.30.16.140
nameserver 10.30.8.140
I've attempted to restore my preferred DNS entry to the file
$ sudo echo "nameserver 192.168.0.1" >> /etc/resolv.conf
but this results in the following error:
-bash: /etc/resolv.conf: Permission denied
How does the super-user account not have access to this file? Is there a way to prevent the Juniper client from making changes to this file?
If my workstation has a VPN connection to a given network (a client's, for instance) and an open connection, what determines how a request for a network resource (e.g. a web page) is routed? Moreover, given that a resource (e.g. google.com) could be available via either route (i.e. VPN or non-VPN), how is this route determined? Is there a way to 'force' the routing to use a given route or the route with lower overhead?
I am attempting to connect to an Oracle server via a VPN. I have tried to do so, unsuccessfully, from OSX and, alternately, from a Windows XP VM machine (VMWare Fusion) running on OSX.
I can, however, connect to my Workstation (that is on the LAN) over a VPN using OSX and the Windows VM.
Is there anything that I can do to get remote access to the Oracle server?
Here's a summary of the environment:
Server
Workstation
OSX Client
VM Client
EDIT
I was informed:
"Since your VPN account is set up to only access the subnet where your laptop is, you won't be able to directly access anything else.".
Is there a way to by-pass this limitation?
I use an OSX Terminal session to start a VPN connection. The command that I execute at the prompt is:
/etc/netlock/cvc -c ::
This works as expected.
I would like to save this to a script file that I can simply double-click to start.
I created a file, 'vpn.command', added the command (list above), save it, and given execute permission:
chmod +x vpn.command
When I double-click the file, Terminal opens a BASH shell, executes the command, then exits. Upon closer inspection, the command is now '/etc/netlock/cvc -c ::; exit;'
Why is the extra '; exit;' appended to my command?
BTW, is there a way to execute another command, /etc/netlock/cvc -d, when the Terminal session is being closed so I can close the VPN automatically?
I've been using a hosted exchange server environment (dslExtreme) for years. Originally, I used it w/ Outlook, but now that I have a Mac, I use Entourage. I also use my iPhone to connect to my ES account. I've been the only user and I don't have any plans to change that.
It has been something of a hassle to deal w/ the periodic upgrades of the vendor's server environment and the need to have my MX record pointed to a different vendor than my web-hosting company. Moreover, microsoft's client-based spam filter is fairly useless.
What sorts of features can I expect to lose/gain if I migrate from a hosted, exchange-server 2007 environment to the IMAP/SMTP environment of my web-host?