Hi,
I have 2 DCs on 2 distinct sites that can speak to each other - no port filter
I have 1 RODCs on each site. They can speak to each other - no port filter
I have 1 Application servers in a DMZ on each sites. They can speak to each other - no port filter
Each DC and RODC have FFA access to the local DMZ
Each DC and RODC do not have access to the remote site DMZ
Each application server can talk to the local DC hosting the namespace via the following ports:
* udp&tcp 137, udp 138, tcp 139, udp&tcp 389, tcp 135, udp&tcp 445, tcp and udp 49152 to 65535
(Which are the ones in the documentation as long as I got the right one)
Each application server authenticate against a local RODC in a shared DMZ. (As RODC don't seem to be able to host namespaces I had to open the DFS ports to the internal DC :( at least for now)
Question:
* The Application servers can't browse DFS Namespaces - How do I go about debugging what is missing, especially since the application servers authenticate against the RODCs but the namespaces are on the DC.
* Is there a way to configure the replication without allowing the DCs to access the remote DMZ ?
I honestly did not think this kind of setup would be so un-common :) Or I might have gone about it the wrong way
Thanks for any insight you can provide
Edit: I did a network capture and the 2 servers talk, but not sure how to find where / what fails. The error I get is: delegation information for the namespace cannot be queried the specified domain...
To get that error, I need to select the namespace server, then the namespace and this happens when I try to browse the namespace server and see the folders.