samba - Apr 2005 - How to prevent creation of user profiles which they don't logon locally

Hi all,

We're using NT4.0 server as a PDC.

I can easily logon the domain on Mandrake 10.1 with samba and winbind.
There is no problem with domain logons.

But sometimes some domain user profiles are created at /home/NTDOMAIN
directory even if they did't logon the computer locally or din't
access any shared resource remotelly.

How can prevent the creation of the user profiles which didn't logon
the computer locally.

All I want is the user profiles should be created if the user logons
the system locally.


My smb.conf file is below.

Thanks.


--------------------------------------------------------------------------

[global]
   workgroup = NTDOMAIN
   netbios name = LNX01
   domain master = no
   local master = no
   preferred master = no
   os level = 0
   server string = %L 
   log file = /var/log/samba/log.%m
   log level = 7 
   local master = no
   max log size = 50
   security = domain
   password server = nt1, nt2
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   winbind use default domain = yes
   winbind enum users = yes
   winbind enum groups = yes
   winbind enable local accounts = yes
   template homedir = /home/%D/%u
   obey pam restrictions = yes
   template shell = /bin/bash
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   wins server = 10.10.0.10
   dns proxy = no
   dos charset = 857
   unix charset = ISO8859-9

--------------------------------------------------------------------------

Hello,

there might be several reasons for the fact that home dir's get created.
with the 'template homedir = /home/%D/%u' you can direct
a domain user's home dir to a specific place.
you could try to set it to an allround dir ea. 'template homedir = /tmp'

I'm not sure if samba/winbind create the actualy dir it self.!
it could also be the PAM module that create a homedir
(ea. pam_mkhomedir.so) you have to check that..

Good luck with it..
Collen.

Mehmet ?zg?n wrote:
> Hi all,
> 
> We're using NT4.0 server as a PDC.
> 
> I can easily logon the domain on Mandrake 10.1 with samba and winbind.
> There is no problem with domain logons.
> 
> But sometimes some domain user profiles are created at /home/NTDOMAIN
> directory even if they did't logon the computer locally or din't
> access any shared resource remotelly.
> 
> How can prevent the creation of the user profiles which didn't logon
> the computer locally.
> 
> All I want is the user profiles should be created if the user logons
> the system locally.
> 
> 
> My smb.conf file is below.
> 
> Thanks.
> 
> 
> --------------------------------------------------------------------------
> 
> [global]
>    workgroup = NTDOMAIN
>    netbios name = LNX01
>    domain master = no
>    local master = no
>    preferred master = no
>    os level = 0
>    server string = %L 
>    log file = /var/log/samba/log.%m
>    log level = 7 
>    local master = no
>    max log size = 50
>    security = domain
>    password server = nt1, nt2
>    encrypt passwords = yes
>    smb passwd file = /etc/samba/smbpasswd
>    winbind uid = 10000-20000
>    winbind gid = 10000-20000
>    winbind use default domain = yes
>    winbind enum users = yes
>    winbind enum groups = yes
>    winbind enable local accounts = yes
>    template homedir = /home/%D/%u
>    obey pam restrictions = yes
>    template shell = /bin/bash
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    wins server = 10.10.0.10
>    dns proxy = no
>    dos charset = 857
>    unix charset = ISO8859-9
> 
> --------------------------------------------------------------------------