DC and IP mapping

graabir · 07-29-2010, 08:09 AM

I am running Windows 2008 Server and trying to use the Directory Connector to access the Active Directory. This part works and I get a complete list of users and groups.

The problem is I think with the script as the mapping from IP addresses to usernames is not populating.

So everything I have setup in Policy Manager is usless.

Ive followed the suggestions from posts here and the script is setup in the GPU Ive made any of the recommend changes and I dont get any errors in my log.

Can anyone suggest some sets to troubleshoot this issue?

dmorris · 07-29-2010, 08:50 AM

if you run the script manually on a PC - do they show up on the status panel?

did you disable internal HTTP administration?

graabir · 07-29-2010, 09:39 AM

Internal Administration is enabled. Should this be disabled?

One thing I just noticed.

I cannot access the interface using h*tp://192.168.1.15 locally, hadn't tried it before
I have always used h*tps://64.x.x.x:3390.

I'm assuming this is part of the issue?

Also the script doesn't work locally

dmorris · 07-29-2010, 10:17 AM

Quote:

Originally Posted by graabir

I cannot access the interface using h*tp://192.168.1.15 locally, hadn't tried it before
I have always used h*tps://64.x.x.x:3390.

I'm assuming this is part of the issue?

Yep! Thats the issue - is 192.168.1.15 the internal IP?
What is your client IP? Why can't it reach that IP? Can it ping it?

mrunkel · 07-29-2010, 10:34 AM

Give our support team a call, they would love to help you get this working.

graabir · 07-29-2010, 10:53 AM

Quote:

Originally Posted by dmorris

Yep! Thats the issue - is 192.168.1.15 the internal IP?
What is your client IP? Why can't it reach that IP? Can it ping it?

I am able to ping it.

Untangle box is 192.168.1.15 and
Client box is 192.168.1.5

We have SPP setup and it uses port 80. What are the odds I can change internal admin port for untangle?

graabir · 07-29-2010, 10:54 AM

Quote:

Originally Posted by mrunkel

Give our support team a call, they would love to help you get this working.

I'd rather use this as a last resort the company is a not-for-profit funding can be tight.

graabir · 07-29-2010, 11:03 AM

Just some more information

Internally:
http://192.168.1.15 doesnt work
https://192.168.1.15:3390 works
https://externalip:3390 works

Externally:
https://externalip:3390 works

SharePoint does use port 80.

mrunkel · 07-29-2010, 11:14 AM

You're trying to get a paid product working. Please give our support team a call, they would love to help you with this issue without charge.

sky-knight · 07-29-2010, 12:36 PM

I'm going to ditto what mrunkel said.

The directory connector is an interesting beast that takes some getting used to. The settings for it aren't as obvious as they appear, and a small error will make the entire thing not work.

It's just more efficient to handle this type of issue, because of it's unique combination of training and expertise required to fix it, over the phone.

07-29-2010, 08:09 AM	#1 (permalink)
graabir Newbie Join Date: May 2010 Posts: 9	DC and IP mapping I am running Windows 2008 Server and trying to use the Directory Connector to access the Active Directory. This part works and I get a complete list of users and groups. The problem is I think with the script as the mapping from IP addresses to usernames is not populating. So everything I have setup in Policy Manager is usless. Ive followed the suggestions from posts here and the script is setup in the GPU Ive made any of the recommend changes and I dont get any errors in my log. Can anyone suggest some sets to troubleshoot this issue?

07-29-2010, 08:50 AM	#2 (permalink)
dmorris Untangle Junkie Join Date: Nov 2006 Location: San Mateo, CA URLs submitted: 10 Posts: 10,611	if you run the script manually on a PC - do they show up on the status panel? did you disable internal HTTP administration? __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

07-29-2010, 09:39 AM	#3 (permalink)
graabir Newbie Join Date: May 2010 Posts: 9	Internal Administration is enabled. Should this be disabled? One thing I just noticed. I cannot access the interface using htp://192.168.1.15 locally, hadn't tried it before I have always used htps://64.x.x.x:3390. I'm assuming this is part of the issue? Also the script doesn't work locally Last edited by graabir; 07-29-2010 at 09:48 AM..

07-29-2010, 10:34 AM	#5 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	Give our support team a call, they would love to help you get this working. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

07-29-2010, 11:14 AM	#9 (permalink)
mrunkel Join Date: Jul 2008 Posts: 2,766	You're trying to get a paid product working. Please give our support team a call, they would love to help you with this issue without charge. __________________ m. Big Frickin Disclaimer: While I'm pretty sure, I can't guarantee that I know what I'm doing. There might be a better way to do this, and this way might actually suck. Make sure you understand the implications of what you're doing before trying to follow these directions. It often helps troubleshooting if you have a good network map. Look here if you want my advice on how to draw one. Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

Protect

Filter

Perform

Connect

Manage

Add-Ons

07-29-2010, 11:03 AM	#8 (permalink)
graabir Newbie Join Date: May 2010 Posts: 9	Just some more information Internally: http://192.168.1.15 doesnt work https://192.168.1.15:3390 works https://externalip:3390 works Externally: https://externalip:3390 works SharePoint does use port 80.

07-29-2010, 12:36 PM	#10 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	I'm going to ditto what mrunkel said. The directory connector is an interesting beast that takes some getting used to. The settings for it aren't as obvious as they appear, and a small error will make the entire thing not work. It's just more efficient to handle this type of issue, because of it's unique combination of training and expertise required to fix it, over the phone. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879