samba - Mar 2002 - Antwort: roaming profiles Samba 2.2.3a and W2K SP2

Hi Rene,

I have found this in the "whats new" for Samba 2.2.3


Added/changed parameters.
-------------------------
...

nt acl support

This parameter has been changed to a per-share option, and is very
useful in enabling Windows 2000 SP2 to load/save profiles from a 
Samba share.
...

Maybe it helps!

Regards, Thomas



Bitte antworten an <rene.lenga@atacama.de>
Gesendet von:   samba-admin@lists.samba.org
An:     <samba@lists.samba.org>
Kopie: 
Thema:  [Samba] roaming profiles Samba 2.2.3a and W2K SP2


Hello samba-insiders,

we have a WinNT 4.0 SP5 PDC and our samba 2.2.3a is member of the domain.
The roaming profiles of our clients stored on the samba 2.2.3a server.
All seams to be perfect but clients with W2K SP2 cannot use there roaming
profiles.

---> "Access Denyed" is the W2K error message.

But if the same user loggs on on a client machine with W2K SP1 all things
are ok.

In the log.smb file I found the following error message:

[2002/03/05 11:34:42, 0] smbd/posix_acls.c:create_canon_ace_lists(762)
create_canon_ace_lists: unable to map SID
S-1-5-21-1482442952-1152601475-1307212239-1097 to uid or gid.

This is the smb.conf:

# Samba config file created using SWAT
# Date: 2002/02/25 20:41:29

# Global parameters
[global]
        workgroup = ATACAMA
        netbios name = ATACAMA02
        security = DOMAIN
        encrypt passwords = Yes
        password server = ATACAMA01
        username map = /usr/local/samba/lib/usermap.txt
        deadtime = 15
        character set = ISO8859-1
        wins server = 192.168.1.1
        invalid users = root admin bin
        create mask = 0770
        directory mask = 0770
        mangled names = No

[profiles]
        path = /usr/z_atacama_data/profiles
        read only = No
        browseable = No

[LW1]
        comment = allgemeine Daten
        path = /usr/z_atacama_data/lw1
        valid users = @domaene
        read only = No

Is there a solution?
I'm only a stupid beginner using samba.

Thank you for any advice!!



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Le Jeudi 7 Mars 2002 10:48, thomas_tiedtke@de.schindler.com a ?crit :

Hi!
Try this:

[profile]
        path = /usr/z_atacama_data/profiles
        create mask = 0600
        directory mask = 0700
        nt acl support = no
        read only = no

and check unix perms on /usr/z_atacama_data/profiles

Cheers,
Sly

[...]
> This is the smb.conf:
>
> # Samba config file created using SWAT
> # Date: 2002/02/25 20:41:29
>
> # Global parameters
> [global]
>         workgroup = ATACAMA
>         netbios name = ATACAMA02
>         security = DOMAIN
>         encrypt passwords = Yes
>         password server = ATACAMA01
>         username map = /usr/local/samba/lib/usermap.txt
>         deadtime = 15
>         character set = ISO8859-1
>         wins server = 192.168.1.1
>         invalid users = root admin bin
>         create mask = 0770
>         directory mask = 0770
>         mangled names = No
>
> [profiles]
>         path = /usr/z_atacama_data/profiles
>         read only = No
>         browseable = No
>
> [LW1]
>         comment = allgemeine Daten
>         path = /usr/z_atacama_data/lw1
>         valid users = @domaene
>         read only = No
>
> Is there a solution?
> I'm only a stupid beginner using samba.
>
> Thank you for any advice!!
-- 
Sylvestre Taburet - Project Manager
Mandrakesoft S.A. - 43, rue d'Aboukir, 75002 Paris - FRANCE
+33 (1) 40 41 00 41 - http://www.linux-mandrake.com