• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 841
  • Last Modified:

AD Authentication through Firewall

Points of My Scenario
1. I am admin of Domain A only, which trusts Domain B
2. App server01 (Domain A member server) sits behind a firewall along with a DC from Domain A
3. Domain B has one DC (domain controller) - but it is NOT behind the firewall
4. Users from Domain A can logon to the application on server01 (Domain A member server)
5. Users from Domain B cannot logon to the application on server01 - because the app server can't pass credentials to DC of Domain-B
QUESTION:
What is ports to open in the firewall from server01 to Domain B's DC?
NOTE: I have no admin privileges on DC in domain B.
0
waltforbes
Asked:
waltforbes
  • 2
2 Solutions
 
Sarang TinguriaSr EngineerCommented:
you can use netmon/portquery/wireshark tools to check

Netmon http://download.cnet.com/NetMon/3000-2218_4-10812315.html
Wireshark http://www.wireshark.org/download.html
Portquery http://www.microsoft.com/en-us/download/details.aspx?id=17148

How to configure a firewall for domains and trusts
http://support.microsoft.com/kb/179442
0
 
waltforbesAuthor Commented:
To sarang_tinguria:
1. I do not need communication between the 'secure' DC (domain A) and LAN DC (domain B).
2. I need communication between the 'secure' App server (domain A) and the LAN DC (domain B): see attached JPEG

To sandeshdubey:
1. The 'secure' App server (domain A) needs to pass authentication requests coming from Domain B users (in the LAN) to LAN DC (domain B) - illustrated in attached JPEG.
2. There are some 19 ports required according to your link (AD Firewall Ports) .
QUESTION: Can I just use one or two ports between secure app server and LAN DC for passing authentication traffic?
0
 
waltforbesAuthor Commented:
To sarang_tinguria & sandeshdubey:
My apologies - I forgot to attach the JPEG. Here it is in this comment.
Ports-Required-01.jpg
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now