samba - Apr 2002 - Access denied when using samba as a profile server

Hi,

I have been using samba for a long time, but since our windows 2000 machine
are becoming unreliable (fileserver problems). I want to move users profiles
onto our UNIX/SAMBA server.

The problem I am getting is that when a user logs onto a client it is
unable to copy the users profile from the SAMBA drive to the local C drive.

I.e. unable to copy \\UNIXhost\user\winntpro\Application Data\Microsoft\Internet
Explorer\brndlog.txt to C:\Document and Settings\user\winntpro\Application 
Data\Microsoft\Internet Explorer\brndlog.txt.

ACCESS DENIED.


Thanks

Andrew Watkins

Update to my eariler message.

I am running Samba 2.2.3a and can not copy a SAMBA profile to a PC cleint also
the domain controler is a windows 2000 box.
I  think the problem is that the users profile needs system/admin permissions, 
but when I try added these users to the samba drive I get the following error:

[2002/04/17 12:30:59, 0] smbd/posix_acls.c:create_canon_ace_lists(762)
  create_canon_ace_lists: unable to map SID 
S-1-5-21-1984182827-583073959-8547516-3573 to uid or gid.
  
I have tried to add a users.map but with out any luck

% cat users.map
andrew = Administrator
andrew = DOMAIN\Administrator
andrew = S-1-5-21-1984182827-583073959-8547516-2095

> Hi,
> 
> I have been using samba for a long time, but since our windows 2000 machine
> are becoming unreliable (fileserver problems). I want to move users
profiles
> onto our UNIX/SAMBA server.
> 
> The problem I am getting is that when a user logs onto a client it is
> unable to copy the users profile from the SAMBA drive to the local C drive.
> 
> I.e. unable to copy \\UNIXhost\user\winntpro\Application 
Data\Microsoft\Internet 
> Explorer\brndlog.txt to C:\Document and Settings\user\winntpro\Application 
> Data\Microsoft\Internet Explorer\brndlog.txt.
> 
> ACCESS DENIED.
> 
> 
> Thanks
> 
> Andrew Watkins

> I have been using samba for a long time, but since our windows 2000 machine
> are becoming unreliable (fileserver problems). I want to move users
profiles
> onto our UNIX/SAMBA server.
> 
> The problem I am getting is that when a user logs onto a client it is
> unable to copy the users profile from the SAMBA drive to the local C drive.
> 
> I.e. unable to copy \\UNIXhost\user\winntpro\Application
Data\Microsoft\Internet
> Explorer\brndlog.txt to C:\Document and Settings\user\winntpro\Application 
> Data\Microsoft\Internet Explorer\brndlog.txt.
> 
> ACCESS DENIED.
> 
> Thanks
> Andrew Watkins
We've had equal problems occasionally, they seem to
come up without any specific reason. I've traced the
reason to the local copy of the profile, located
at sth. like "C:\Documents and Settings\username" -
directory.

Check the permissions of the files and subdirectories,
Win2K seems to take away the user's access rights to
his/hers own local profile copy!

What I did was logon as Administrator, take ownership
of the directories under the profile, and delete them
all (they will be copied from Samba-server at next
logon, with correct permissions).

Hope this helps.

Best regards,
-- 
    Kimmo Akkanen
    IT-Officer
    Remedium Ltd./Oy

    phone.  +358 9 6226 7125
    cell.   +358 40 9000 125
    fax.    +358 9 6226 7114
    kimmo.akkanen@remedium.fi

Thanks. The following solved the problem and I wonder if and when will
solaris fully support acl/winbind.

Cheers

Andrew
> adding 
> nt acl support = no
> to smb.conf 
> solved the problem you described for me
> grtx
> mark
> 
> On 20-Apr-2002 Kimmo Akkanen wrote:
> >> I have been using samba for a long time, but since our windows
2000 machine
> >> are becoming unreliable (fileserver problems). I want to move
users
profiles
> >> onto our UNIX/SAMBA server.
> >> 
> >> The problem I am getting is that when a user logs onto a client it
is
> >> unable to copy the users profile from the SAMBA drive to the local
C drive.
> >> 
> >> I.e. unable to copy \\UNIXhost\user\winntpro\Application
> >> Data\Microsoft\Internet 
> >> Explorer\brndlog.txt to C:\Document and
Settings\user\winntpro\Application
> >> Data\Microsoft\Internet Explorer\brndlog.txt.
> >> 
> >> ACCESS DENIED.
> >> 
> >> Thanks
> >> Andrew Watkins
> > 
> > We've had equal problems occasionally, they seem to
> > come up without any specific reason. I've traced the
> > reason to the local copy of the profile, located
> > at sth. like "C:\Documents and Settings\username" -
> > directory.
> > 
> > Check the permissions of the files and subdirectories,
> > Win2K seems to take away the user's access rights to
> > his/hers own local profile copy!
> > 
> > What I did was logon as Administrator, take ownership
> > of the directories under the profile, and delete them
> > all (they will be copied from Samba-server at next
> > logon, with correct permissions).
> >