Koozali.org: home of the SME Server

Join domain through OpenVPN

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Join domain through OpenVPN
« on: February 25, 2016, 11:28:23 AM »
My sme server has windows clients connected via Lan and OpenVPN (Remotely). I have deployed openvpn bridge mode.
I have to Join one of the client to Sme server domain who sits in Switzerland to our sme server using OpenVPN. I can send him certificates and username passwords via email, and she can install openvpn GUI. How to join this client to domain?

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Join domain through OpenVPN
« Reply #1 on: February 25, 2016, 11:37:07 AM »
theorically speaking, she'd connect and try to join to the domain.. but I don't know if it will work..

that said, you'd find a way to connect to openvpn before user auth on the client (once done)..

IMO you'd think about a different solution.. for example, a RDP session.. BTW, can you tell us why you need a remote client joined to the domain?

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Re: Join domain through OpenVPN
« Reply #2 on: February 25, 2016, 11:42:52 AM »
because this client computer not used so long. Now the windows doesn't get to boot and it is now formated and installed as new pc.

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Join domain through OpenVPN
« Reply #3 on: February 25, 2016, 11:46:11 AM »
and this is a reason to join a remote client to a windows' domain via openvpn?

what do you want to achieve with domain joining?

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Re: Join domain through OpenVPN
« Reply #4 on: February 25, 2016, 11:54:11 AM »
access shared folders, sticker printers, and willing to grant access to new Account package

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Join domain through OpenVPN
« Reply #5 on: February 25, 2016, 12:02:42 PM »
you can achieve the same effect even without domain joining, as long as you use the right credentials..

I would not use your approach, but since the "issue" is on the client side (windows), we're going OT here..

I strongly suggest you to use "openvpn w7 client domain joined" search keys in google.. they gave me a lot of results.. find a guide, follow it..

there's almost anything that we can do on the SME's side.

moving to General discussion

Offline mmccarn

  • *
  • 2,653
  • +10/-0
Re: Join domain through OpenVPN
« Reply #6 on: February 25, 2016, 12:29:04 PM »
My openvpn is not hosted on a SME, but -

I had no problem joining a new laptop to my office LAN over an openVPN connection.

I suspect that your VPN would need to (as mine does):
* reset the default gateway to pass all traffic through the office LAN
* reset the DNS to use the active directory servers

I suspect the DNS bit is critical while the default gateway bit may not be -- as long as your remote workstation can access the active directory servers by the ip address(es) returned by the active directory DNS when queried...

You'll run into a fidgety bit after you've joined the domain and before your first domain login - you need to have the openVPN connection active in order to cache the user credentials locally so that you can login.  Easy if you can configure your openVPN client to start when your workstation boots; trickier if you have to start it manually (join domain -> reboot -> ??start openVPN connection?? -> login with domain credentials).

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Re: Join domain through OpenVPN
« Reply #7 on: February 25, 2016, 12:49:38 PM »
good to know your story MMCCARN. I can set Openvpn to start when windows boots. But my proble is how to openvpn to be connected before the client is logged on. how to enter username password and so on. will see

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: Join domain through OpenVPN
« Reply #8 on: February 25, 2016, 12:50:59 PM »
that's why I suggested you to search with google.. you're likely not the first to have such a necessity

please, if you manage in, report back, thank you

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Re: Join domain through OpenVPN
« Reply #9 on: February 25, 2016, 12:56:43 PM »
ok thanks