返回
-
标题
Deploying Foreign Forest CA Agents -
说明
For foreign forest agents, what all is required for agent to communicate back to Coordinator server? -
原因
N/A -
解决办法
For foreign forest installed agents to work properly the following is needed:
- Network connectivity between the foreign server and coordinators in the remote forest
- A routable network path between the foreign forest computer and the coordinator servers
- Name resolution of domain controllers and the coordinator servers from the foreign forest server. This is required regardless of whether DNS server configuration, NetBIOS/WINS configuration or local hosts file entries are used. The foreign forest agent will need to be able to do name resolution for the coordinator's domain to locate domain controllers, the domain controllers to locate the SCP as well as the coordinator for offloading events
- You will likely need to have firewall ports opened up for DNS and LDAP (regular and GC queries) as well as the agent port (which is set by the coordinator)