I can now login to my domain from an XP Pro client, as a normal user. Only problem is, I get this: Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator. DETAIL - The network path was not found. Here are the relevant snippets: [profiles] path = /home/samba/profiles read only = no create mask = 0600 directory mask = 0700 browseable = no profile acls = yes [netlogon] comment = Network Logon Service path = /home/samba/netlogon guest ok = yes writable = no share modes = no browseable = no server:~# ls -l /home/samba total 8 drwxr-sr-x 2 root users 4096 Jan 14 20:19 netlogon drwxrwxrwt 3 root users 4096 Jan 15 23:03 profiles /home/samba/profiles is empty. Should the user subdirectory be created when the user first logs in? Is there any definitive guide to the minimum required permissions / ownership for the above two directories? Googling gives wildly differing answers. Antony
Hello,
I had the same problem. This is my current config:
[global]
logon path = %U\profile
[netlogon]
comment = Network Logon Service
path = /home/netlogon
share modes = No
[profiles]
path = /home/%U/profile
browseable = No
I am able to logon to my domain without errors.
Mike
-----Original Message-----
From: samba-bounces+maldrich=i-centrix.com@lists.samba.org
[mailto:samba-bounces+maldrich=i-centrix.com@lists.samba.org]On Behalf
Of Antony Gelberg
Sent: Thursday, January 15, 2004 10:22 AM
To: samba@lists.samba.org
Subject: [Samba] PDC - initial profile creation
I can now login to my domain from an XP Pro client, as a normal user. Only
problem is, I get this:
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you logoff. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.
DETAIL - The network path was not found.
Here are the relevant snippets:
[profiles]
path = /home/samba/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = no
profile acls = yes
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = yes
writable = no
share modes = no
browseable = no
server:~# ls -l /home/samba
total 8
drwxr-sr-x 2 root users 4096 Jan 14 20:19 netlogon
drwxrwxrwt 3 root users 4096 Jan 15 23:03 profiles
/home/samba/profiles is empty. Should the user subdirectory be created when
the user first logs in?
Is there any definitive guide to the minimum required permissions /
ownership for the above two directories? Googling gives wildly differing
answers.
Antony
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hi all, I'm still suffering from the problem whereby a user can login to the domain, but a message comes up saying "Windows cannot locate the server copy of your roaming profile... DETAIL - The network path was not found.". I have now found these entries in the logs: [2004/01/20 12:31:27, 1] smbd/service.c:make_connection_snum(698) pulse-laptop (192.168.0.101) connect to service netlogon initially as user antgel (uid=1003, gid=100) (pid 5659) [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850) pulse-laptop (192.168.0.101) couldn't find service %u [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850) pulse-laptop (192.168.0.101) couldn't find service %u [2004/01/20 12:31:34, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain sid for domain CHHAUSMANN -> S-1-5-21-3247875428-2940378000-2436062379 [2004/01/20 12:31:34, 0] rpc_server/srv_util.c:get_domain_user_groups(371) get_domain_user_groups: primary gid of user [antgel] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that [2004/01/20 12:31:34, 0] rpc_server/srv_util.c:get_alias_user_groups(219) get_alias_user_groups: gid of user antgel doesn't exist. Check your /etc/passwd and /etc/group files Clearly the two issues are "couldn't find service %u" and the primary gid error. However user antgel has a primary group of users, which is mapped to Domain Users. Can anyone shed any light on this? Antony
Repost - didn't get through first time. Antony Gelberg wrote:> Hi all, > > I'm still suffering from the problem whereby a user can login to the > domain, but a message comes up saying "Windows cannot locate the > server copy of your roaming profile... DETAIL - The network path was > not found.". > > I have now found these entries in the logs: > > [2004/01/20 12:31:27, 1] smbd/service.c:make_connection_snum(698) > pulse-laptop (192.168.0.101) connect to service netlogon initially > as user antgel (uid=1003, gid=100) (pid 5659) > [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850) > pulse-laptop (192.168.0.101) couldn't find service %u > [2004/01/20 12:31:31, 0] smbd/service.c:make_connection(850) > pulse-laptop (192.168.0.101) couldn't find service %u > [2004/01/20 12:31:34, 2] > rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain > sid for domain CHHAUSMANN -> S-1-5-21-3247875428-2940378000-2436062379 > [2004/01/20 12:31:34, 0] > rpc_server/srv_util.c:get_domain_user_groups(371) > get_domain_user_groups: primary gid of user [antgel] is not a Domain > group ! get_domain_user_groups: You should fix it, NT doesn't like > that [2004/01/20 12:31:34, 0] > rpc_server/srv_util.c:get_alias_user_groups(219) > get_alias_user_groups: gid of user antgel doesn't exist. Check your > /etc/passwd and /etc/group files > > Clearly the two issues are "couldn't find service %u" and the primary > gid error. However user antgel has a primary group of users, which > is mapped to Domain Users. > > Can anyone shed any light on this? > > Antony
I had similar issues, with existing unix user accounts that were mgirated across to a samba 3.0.1-2 PDC on a debian unstable system. It's simply a matter of reassigning the Primary Group for the user through NT user manager. Perhaps the automated migration of unix accounts should assign the primary group to the Domain Users group by default, or at least alert and refer to the required process? Cheers, Lewis Shobbrook> I know the user exists, because I personally made the users > and set their passwords, I also added them to the smbpasswd > file. Do they need to be a specific group? If so, that was > my problem. I know I made the users, and added them, but all > I did was "useradd username", and then "passwd username" and > then "smbpasswd -a username". I never added them to a group. > > Also, when adding to smbpasswd, it says "Ignoring unknown > parameter "logon name". I'm wondering if that's important? > > Thanks! > Robert > > > On Jan 21, 2004, at 2:47 AM, Collen wrote: > > > Hmm.. looks like you user has not group assigned to him.. > or no entry > > at all in the passwd & group file. > > > > did you add your user to the linux account's as wel to the samba > > account's ?? > > > > as far the windows error tell's, Network path not found.. > > look's like the win box can't acces the network share where your > > profile's are stored.. > > > > the share might be correct, but if there is no user entry in the > > passwd and/or samba.. > > it simply say's acces denied. and there is your problem.. > > > > I gues.. > > > > L8r > > Collen (MLHJ) > > > > At 13:43 20/01/2004, you wrote: > >> Hi all, > >> > >> I'm still suffering from the problem whereby a user can > login to the > >> domain, but a message comes up saying "Windows cannot locate the > >> server copy of your roaming profile... DETAIL - The > network path was > >> not found.". > >> > >> I have now found these entries in the logs: > >> > >> [2004/01/20 12:31:27, 1] smbd/service.c:make_connection_snum(698) > >> pulse-laptop (192.168.0.101) connect to service netlogon > initially > >> as user antgel (uid=1003, gid=100) (pid 5659) [2004/01/20 > 12:31:31, > >> 0] smbd/service.c:make_connection(850) > >> pulse-laptop (192.168.0.101) couldn't find service %u > [2004/01/20 > >> 12:31:31, 0] smbd/service.c:make_connection(850) > >> pulse-laptop (192.168.0.101) couldn't find service %u > [2004/01/20 > >> 12:31:34, 2] > >> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) > >> Returning domain sid for domain CHHAUSMANN -> > >> S-1-5-21-3247875428-2940378000-2436062379 > >> [2004/01/20 12:31:34, 0] > >> rpc_server/srv_util.c:get_domain_user_groups(371) > >> get_domain_user_groups: primary gid of user [antgel] is not a > >> Domain group ! > >> get_domain_user_groups: You should fix it, NT doesn't like that > >> [2004/01/20 12:31:34, 0] > >> rpc_server/srv_util.c:get_alias_user_groups(219) > >> get_alias_user_groups: gid of user antgel doesn't exist. > Check your > >> /etc/passwd and /etc/group files > >> > >> Clearly the two issues are "couldn't find service %u" and > the primary > >> gid error. However user antgel has a primary group of > users, which > >> is mapped to Domain Users. > >> > >> Can anyone shed any light on this? > >> > >> Antony > >> > >> > >> -- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > ~Robert Brugman~ > This e-mail is X.509 happy ;-) > GPG Fingerprint: D710 B8D9 C72A AB56 174F 71AC 3619 9F32 8250 6034 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > >