2k client using Nortel VPN doesn't log onto NT domain

[bolluxx]

At work we are using the Nortel Extranet 3.x and 4.x client on Win 2k workstations.

Is there a way to *force* the workstation to log into an NT domain when the Extranet client starts its connection process. IE - the user gets a Username, Password, and Domain logon box when the VPN initiates its connection?

To hopefully make a long story short, VPN users need to change their domain password when logged in on the VPN... sometimes it works, but most times it doesn't. Our users are logged in via dial up. Logging shows that they do "talk" to the domain controllers to "log in" but as far as the DCs are concerned the workstations are NOT logged into the domain.

The Extranet client is installed as an application, not a service. TCP/IP and other related network configuration don't seem to be the issue... name resolution etc. function normally. We are using RADIUS.

I hope I've given enough info...

Bill Dunlap

 

[bolluxx]

Oh, I guess I should metion that when the user hits ctrl+alt+del and attempts to change the password that the error message states that "No Domain Controller can be found".

nbtstat, net view, ping, and tracert all verify that the workstation can talk to the server and vice versa.

Bill

 

[Guest_imported]

yea im a zealot, you can run a fully qualifyed PDC over linux/samba ... you know what to do if you need help come to our irc network /join #good1 .. hmm roaming profiles rule!!!!!!!!

 

[Jpoandl]

Hey bill,

We are having a similar problem. WE use the Nortel Connectivity client v4_15.06

When I connect through the client (running as service) though my home cable modem, I connect just fine; however, I don't think I'm really authenticated to the domain. For example, if I type \\servername from a RUN command, I need to provide logon information. Also, if I launch Outlook, I need to provide logon information. This tells me that I am not authenticated.

In fact, in the client setup there is no option to authenticate to a domain? I think all's we are doing is authenticating to the switch.

Anyway, we are running a Windows 2000 domain (mixed mode). The site that I connect to does not have any Windows NT 4.0 domain controllers in it. Just 2K DC's.

Eventhough I have proper IP settings during a VPN session (DNS/WINS/IP...etc), I can not browse the network.

So..although, I can not offer any solutions at this point, I just wanted you to know that you are not alone. I am having many problems. I think I would have been better off using native RRAS for VPN. Nortel is a pain...

thanks...let me know if you figure anything out,.



Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com

 

[bolluxx]

Thanks for the info. It helps in the sense that I know we aren't misconfigured or anything...

I'll keep you posted as we go through different options.

Bill