MrKernel Network

In a previous post (http://www.mrkernel.net/?p=21) I talked about getting OCPE to work on a different subnet than a domain controller with a WINS server. I have found the solution a while ago and I finally got around to posting it.

Normally there is two ways to logon to Active Directory

 

Domain\username and username@domain.local

 

I have found that if you log into the phone using

 

domain.local\username

 

The phone is able to find the domain and download the certificate.

 

I found this out while doing a packet trace on the phone one day and found this search behavior

 

Netbios AD name: test

UPN Suffix: test.local

DNS Suffix: abc.com - this is given to the phone via DHCP

 

so the DNS queries from the phone was this

 

test

test.abc.com - e.g. domain + DNS sufix 

I can’t remember the rest of the top of my head, but if you do

 

test.local\username

 

the first query is

test.local