samba - Apr 2004 - Problems with Samba 3 and XP Roaming Profiles

I've got some annoying Problems with roaming profiles. Perhaps someone is
able to help me...
I would like to use Samba as a PDC and for storing NT roaming profiles. When
I first installed Samba 3.02 and XP SP1 (Before that I used Samba 2.2.8a and
XP without SP1), XP downloaded the old profiles it found. But upon shutdown
or logoff, changes to the profiles were not written to the server. I checked
the XP event log and found entrys about rights and some offline stuff. I
added
csc policy = disable
profile acls = yes
to the profiles share, and there where no more errors in the event log. But
profiles are still not written to the server. All I get on the XP side are
many warnings from COM+ that I do not understand. They may not be of much
use, since they are in German, but I include some anyway:

1. Das COM+-Ereignissystem konnte keine Instanz des Abonnenten
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{D3938AB0-5B9D-11D1-8DD
2-00AA004ABD5E} erstellen. CoGetObject gab HRESULT 80070422 zurück.
2. Das COM+-Ereignissystem hat versucht, das
EventObjectChange::ChangedSubscription-Ereignis auszulösen, hat aber einen
ungültigen Rückgabecode erhalten. HRESULT war 80040201.

They are just warnings (the problems I had before were error messages). They
do not occur when I log off, but roughly once per day.

On the side of the server I find entrys like this:
...
[2004/04/23 01:41:36, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/04/23 01:41:36, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
...

These entrys occur when I log on to the server. When I log off, I just get
somthing like this:
..
[2004/04/27 04:03:33, 1] smbd/service.c:make_connection_snum(705)
  server (10.0.0.10) connect to service profiles initially as user frank
(uid=500, gid=100) (pid 16947)
[2004/04/27 04:03:38, 1] smbd/service.c:close_cnum(887)
  server (10.0.0.10) closed connection to service profiles
...

I tried removing the old profiles, but this did not help. No new profiles
were created on the server. I include my smb.conf:

[global]

   workgroup = FREUNDE

  netbios name = schluesselmann

   server string = Samba Server %v

map acl inherit = yes
time server = yes

   log file = /var/log/samba3log.%m

   max log size = 50

   hosts allow = 10.0.0.0/24 127.0.0.0/8

  map to guest = bad user

   security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/private/smbpasswd

unix password sync = Yes
pam password change = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Re*ype*new*UNIX*password* %n\n \
*passwd:*all*authentication*tokens*updated*successfully*

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   interfaces = eth0

   local master = yes

   os level = 33

   domain master = yes

   preferred master = yes

   domain logons = yes

   logon path = \\%N\profiles\%U

  logon home = \\%N\%U\profile

   wins support = yes

   dns proxy = no

   dos charset = 850
   unix charset = ISO8859-1


#============================ Share Definitions
=============================[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   veto files = /.*/
   create mode = 0600
   directory mode = 0700
 [netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
[profiles]
    path = /home/profiles
    browseable = yes
    csc policy = disable
    share modes = no
    profile acls = yes
    create mode = 0600
    directory mode = 0700
    read only = no
    writable = yes
[transfer]
       comment = Jeder darf schreiben
       path = /shares/transfer
       writeable = Yes
       create mode = 0666
       directory mode = 0777

Caitiff schrieb:
>I've got some annoying Problems with roaming profiles. Perhaps someone
is
>able to help me...
>I would like to use Samba as a PDC and for storing NT roaming profiles. When
>I first installed Samba 3.02 and XP SP1 (Before that I used Samba 2.2.8a and
>XP without SP1), XP downloaded the old profiles it found. But upon shutdown
>or logoff, changes to the profiles were not written to the server. I checked
>the XP event log and found entrys about rights and some offline stuff. I
>added
>csc policy = disable
>profile acls = yes
>to the profiles share, and there where no more errors in the event log. But
>profiles are still not written to the server. All I get on the XP side are
>many warnings from COM+ that I do not understand. They may not be of much
>use, since they are in German, but I include some anyway:
>
>  
>
Which Virusscan do you have installed? Remov it, and try again.

matze

Just to let everyone know: I managed to solve all my problems. The simple
solution comes from another answer in this newsgroup: Disable the
NVIDIA Display Driver Service. I did not want to believe this, so i tried it
out. Disabled the service, restarted the computers and everything was fine.
After reboot, the profiles were updated after each log off.
BTW: I do not know what this service does. The video cards still just work
fine. So it is not necessary to have this service enabled to use windows.
Thanx everyone. =)

"Caitiff" <caitiff@gmx.net> schrieb im Newsbeitrag
news:c6maal$jru$1@sea.gmane.org...
> I've got some annoying Problems with roaming profiles. Perhaps someone
is
> able to help me...
> I would like to use Samba as a PDC and for storing NT roaming profiles.
When
> I first installed Samba 3.02 and XP SP1 (Before that I used Samba 2.2.8a
and
> XP without SP1), XP downloaded the old profiles it found. But upon
shutdown
> or logoff, changes to the profiles were not written to the server. I
checked
> the XP event log and found entrys about rights and some offline stuff. I
> added
> csc policy = disable
> profile acls = yes
> to the profiles share, and there where no more errors in the event log.
But
> profiles are still not written to the server. All I get on the XP side are
> many warnings from COM+ that I do not understand. They may not be of much
> use, since they are in German, but I include some anyway:
>
> 1. Das COM+-Ereignissystem konnte keine Instanz des Abonnenten
>
partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{D3938AB0-5B9D-11D1-8DD
> 2-00AA004ABD5E} erstellen. CoGetObject gab HRESULT 80070422 zurück.
> 2. Das COM+-Ereignissystem hat versucht, das
> EventObjectChange::ChangedSubscription-Ereignis auszulösen, hat aber einen
> ungültigen Rückgabecode erhalten. HRESULT war 80040201.
>
> They are just warnings (the problems I had before were error messages).
They
> do not occur when I log off, but roughly once per day.
>
> On the side of the server I find entrys like this:
> ...
> [2004/04/23 01:41:36, 0]
rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
>   failed to decode PDU
> [2004/04/23 01:41:36, 0]
rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
>   process_request_pdu: failed to do schannel processing.
> ...
>
> These entrys occur when I log on to the server. When I log off, I just get
> somthing like this:
> ..
> [2004/04/27 04:03:33, 1] smbd/service.c:make_connection_snum(705)
>   server (10.0.0.10) connect to service profiles initially as user frank
> (uid=500, gid=100) (pid 16947)
> [2004/04/27 04:03:38, 1] smbd/service.c:close_cnum(887)
>   server (10.0.0.10) closed connection to service profiles
> ...
>
> I tried removing the old profiles, but this did not help. No new profiles
> were created on the server. I include my smb.conf:
>
> [global]
>
>    workgroup = FREUNDE
>
>   netbios name = schluesselmann
>
>    server string = Samba Server %v
>
> map acl inherit = yes
> time server = yes
>
>    log file = /var/log/samba3log.%m
>
>    max log size = 50
>
>    hosts allow = 10.0.0.0/24 127.0.0.0/8
>
>   map to guest = bad user
>
>    security = user
>   encrypt passwords = yes
>   smb passwd file = /etc/samba/private/smbpasswd
>
> unix password sync = Yes
> pam password change = yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *New*UNIX*password* %n\n *Re*ype*new*UNIX*password* %n\n \
> *passwd:*all*authentication*tokens*updated*successfully*
>
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
>    interfaces = eth0
>
>    local master = yes
>
>    os level = 33
>
>    domain master = yes
>
>    preferred master = yes
>
>    domain logons = yes
>
>    logon path = \\%N\profiles\%U
>
>   logon home = \\%N\%U\profile
>
>    wins support = yes
>
>    dns proxy = no
>
>    dos charset = 850
>    unix charset = ISO8859-1
>
>
> #============================ Share Definitions
> =============================> [homes]
>    comment = Home Directories
>    browseable = no
>    writable = yes
>    veto files = /.*/
>    create mode = 0600
>    directory mode = 0700
>  [netlogon]
>    comment = Network Logon Service
>    path = /home/netlogon
>    guest ok = yes
>    writable = no
> [profiles]
>     path = /home/profiles
>     browseable = yes
>     csc policy = disable
>     share modes = no
>     profile acls = yes
>     create mode = 0600
>     directory mode = 0700
>     read only = no
>     writable = yes
> [transfer]
>        comment = Jeder darf schreiben
>        path = /shares/transfer
>        writeable = Yes
>        create mode = 0666
>        directory mode = 0777
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>