| Author | Messages | |
MThommes
Posts:106
 | | 07/20/2007 3:23 AM |
| (I’m reaching here, guys and gals!).
Shortly after we applied the July 07 monthly MS patches, we noticed a change in
the behavior of one of our WINS servers that also happens to run AFS (Andrew
File System, http://openafs.org). Basically,
what happened was that a WINS request would come into the public IP but now would
be answered on a 10.10.x.x private IP that is assigned to the Microsoft
Loopback Adapter used by AFS. WINS clients running any kind of firewall
would say “Whoa, I sent this request to 99.99.99.99 but the answer came
back from 10.10.x.x ! Something’s not right here so I’m
throwing away the response!” And consequently, our WINS client
never gets a response. We currently have a couple of workarounds but we’d
like to understand what happened.
This WINS server was operating fine with
AFS within minutes of these patches being applied. I suspect it was patch
KB936357 but there is nothing in the writeup mentioning anything about the
loopback adapter. Is there anyone out there that is running WINS and AFS
and noticed this same behavior? I know this is really a long shot.
I hope to open up a trouble ticket with
Microsoft in a few days; I’m just trying to gather some info since it
does involve 3rd party software.
TIA!
Mike Thommes | | | |
| baiken
Posts:0
| | 07/20/2007 4:12 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
st1\:*{behavior:url(#default#ieooui) }
I’m not familiar with AFS, but WINS
and DNS servers aren’t supposed to be multi-homed for precisely this
reason.
However, you might try disabling TCP/IP
over NetBIOS on the loopback adapter, removing the WINS entries configured on
that adapter, or removing everything but TCP/IP from the adapter. You
could also try defining a static mapping in WINS for the WINS server’s
LAN adapter, but I’m not convinced that will do what is desired, either.
--
Brandon
Aiken
CS/IT Systems Engineer
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Thommes, Michael M.
Sent: Friday, July 20, 2007 15:24
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] (OT) July MS
patches affect AFS?
(I’m reaching here, guys and
gals!). Shortly after we applied the July 07 monthly MS patches, we
noticed a change in the behavior of one of our WINS servers that also happens
to run AFS (Andrew File System, http://openafs.org).
Basically, what happened was that a WINS request would come into the
public IP but now would be answered on a 10.10.x.x private IP that is assigned
to the Microsoft Loopback Adapter used by AFS. WINS clients running any
kind of firewall would say “Whoa, I sent this request to 99.99.99.99 but
the answer came back from 10.10.x.x ! Something’s not right here so
I’m throwing away the response!” And consequently, our WINS
client never gets a response. We currently have a couple of workarounds
but we’d like to understand what happened.
This WINS server was operating fine with
AFS within minutes of these patches being applied. I suspect it was patch
KB936357 but there is nothing in the writeup mentioning anything about the
loopback adapter. Is there anyone out there that is running WINS and AFS
and noticed this same behavior? I know this is really a long shot.
I hope to open up a trouble ticket with
Microsoft in a few days; I’m just trying to gather some info since it
does involve 3rd party software.
TIA!
Mike Thommes
** LEGAL DISCLAIMER **Statements made in this e-mail may or may not reflect the views and opinions of Wineman Technology, Inc. or its employees.
This e-mail message and any attachments may contain legally privileged, confidential or proprietary information. If you are not the intended recipient(s), or the employee or agent responsible for delivery of this message to the intended recipient(s), you are hereby notified that any dissemination, distribution or copying of this e-mail message is strictly prohibited. If you have received this message in error, please immediately notify the sender and delete this e-mail message from your computer. | | | |
| baiken
Posts:0
| | 07/20/2007 4:15 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
st1\:*{behavior:url(#default#ieooui) }
Just found this:
http://support.microsoft.com/kb/135404
Says to disable NetBIOS over TCP/IP on the
loopback and enable it on the LAN adapter.
It’s under “Microsoft Loopback
adaptor” as well as the workaround section.
--
Brandon
Aiken
CS/IT Systems Engineer
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Thommes, Michael M.
Sent: Friday, July 20, 2007 15:24
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] (OT) July MS
patches affect AFS?
(I’m reaching here, guys and
gals!). Shortly after we applied the July 07 monthly MS patches, we
noticed a change in the behavior of one of our WINS servers that also happens
to run AFS (Andrew File System, http://openafs.org).
Basically, what happened was that a WINS request would come into the
public IP but now would be answered on a 10.10.x.x private IP that is assigned
to the Microsoft Loopback Adapter used by AFS. WINS clients running any
kind of firewall would say “Whoa, I sent this request to 99.99.99.99 but
the answer came back from 10.10.x.x ! Something’s not right here so
I’m throwing away the response!” And consequently, our WINS
client never gets a response. We currently have a couple of workarounds
but we’d like to understand what happened.
This WINS server was operating fine with
AFS within minutes of these patches being applied. I suspect it was patch
KB936357 but there is nothing in the writeup mentioning anything about the
loopback adapter. Is there anyone out there that is running WINS and AFS
and noticed this same behavior? I know this is really a long shot.
I hope to open up a trouble ticket with
Microsoft in a few days; I’m just trying to gather some info since it
does involve 3rd party software.
TIA!
Mike Thommes
** LEGAL DISCLAIMER **Statements made in this e-mail may or may not reflect the views and opinions of Wineman Technology, Inc. or its employees.
This e-mail message and any attachments may contain legally privileged, confidential or proprietary information. If you are not the intended recipient(s), or the employee or agent responsible for delivery of this message to the intended recipient(s), you are hereby notified that any dissemination, distribution or copying of this e-mail message is strictly prohibited. If you have received this message in error, please immediately notify the sender and delete this e-mail message from your computer. | | | |
|
|