-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have win2k pro SP2 client trying to save/retrieve roaming profile from samba 2.2.3a PDC. I followed the SP2 suggestion by throwing "nt acl support = no" to the profiles share, it didn't help. I tried to look for some other solutions on the newsgroup, no luck so far. Here is the scnario: 1. If a new user (not being loged on before) log on to win2k pro, it works fine. The profiles are created at the server. Log this user out and re-login, I got the "you do not have permission to access your central profile". I can repeatedly produce this problem. Other observations: 1. There seems to be a pattern which if I leave the user log on for x amount of times and/or logout/relogin for the next number of times, I will not get the "you do not have permission ..." error message in the next logon, unfortunately, I couldn't find the clear pattern. 2. If I restart the samba server, I will not get the error message in the next logon 3. If I restart the client machine, I will not get the error message in the next logon. Any thoughts? Thanks. Wooi. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6-2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAjzya4cACgkQEEX9AGS2HCbAOACfffy/ct8GQHYq1FKw6T4gUZ7J WLsAn2RfgT1/JW3rZKggIH4E6GHBZw1n =N7oK -----END PGP SIGNATURE-----
hi, I want to avoid having roaming profile because it takes a long time to load user profile and there are a lot of user directory copy in the same workstation where users log on. Could you tell me how i can stop roaming profile. Thanks sincerelly
Hello, in addition to the regular logon entries, you need to have these entries in smb.conf (thanks to John Terpstra for showing me the way): logon drive = z: logon home logon path You can also make the last line in your logon script: net use z: /d That will make sure that there is no left over z: drive. You do need the logon drive for your logon scripts to execute cleanly. I made the same mistake, because Samba defaults to roaming profiles unless you specify non-answers here. I also recommend your reading the policies/profiles section at the following link: http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf My best, Dan ----- Original Message ----- From: "azzouz" <y.azzouz@iut.univ-paris8.fr> To: <samba@lists.samba.org> Sent: Monday, May 05, 2003 4:19 AM Subject: [Samba] roaming profile> hi, > > I want to avoid having roaming profile because it takes a long time to > load user profile and there are a lot of user directory copy in the same > workstation where users log on. > Could you tell me how i can stop roaming profile. > > Thanks > > sincerelly > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
hi, I want to disable the roaming profile from windows 2000. all the user acounte are under ldap and the file server is samba. no accounte under windows 2000 machine. how to disable the roaming profile sincerelly
G'day, According to Chapter 4 of Using Samba setting up roaming profiles should be a no brainer. I have followed the notes from Using Samba for an XP client. However when I goto create the profile I get permission denide. However, as you see below, the permissions I'm using on /etc/samba/profiles is 777 so that is a little confusing. Output from a script run is below, ideas greatfully recieved. Thanks Ashley Script started on Fri Sep 5 22:57:11 2003 root@Dwarf:/etc/samba# testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processing section "[netlogon]" Processing section "[profiles]" Loaded services file OK. Press enter to see a dump of your service definitions # Global parameters [global] coding system = client code page = 850 code page directory = /etc/codepages workgroup = MYWORKGROUP netbios name = netbios aliases = netbios scope = server string = dwarf interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = No password server = smb passwd file = /etc/samba/private/smbpasswd root directory = pam password change = No passwd program = /usr/bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = No restrict anonymous = No lanman auth = Yes use rhosts = No ssl = No ssl hosts = ssl hosts resign = ssl CA certDir = /etc/ssl/certs ssl CA certFile = ssl server cert = ssl server key = ssl client cert = ssl client key = ssl egd socket = ssl entropy file = ssl entropy bytes = 256 ssl require clientcert = No ssl require servercert = No ssl ciphers = ssl version = ssl2or3 ssl compatibility = No admin log = No log level = 0 syslog = 1 syslog only = No log file = /var/log/samba/samba.%m max log size = 50 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = Yes max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes acl compatibility = nt smb support = Yes nt pipe support = Yes nt status support = Yes announce version = 4.9 announce as = NT max mux = 50 max xmit = 16644 name resolve order = lmhosts host wins bcast max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No unix extensions = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 10000 name cache timeout = 660 read size = 16384 socket options = TCP_NODELAY stat cache size = 50 use mmap = Yes total print jobs = 0 load printers = Yes printcap name = /etc/printcap disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No mangling method = hash character set = mangled stack = 50 stat cache = Yes domain admin group = root admin administrator profile domain guest group = machine password timeout = 604800 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/fals -M %u delete user script = logon script = %U.bat logon path = \\%L\etc\samba\profiles\%U logon drive = logon home = \\%N\%U domain logons = Yes os level = 50 lm announce = Auto lm interval = 60 preferred master = Yes local master = Yes domain master = Yes browse list = Yes enhanced browsing = Yes dns proxy = No wins proxy = Yes wins server = wins support = Yes wins hook = kernel oplocks = Yes lock spin count = 3 lock spin time = 10 oplock break wait time = 0 add share command = change share command = delete share command = config file = preload = lock dir = /var/cache/samba pid directory = /var/run/samba utmp directory = wtmp directory = utmp = No default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 winbind enum users = Yes winbind enum groups = Yes winbind use default domain = No comment = path = alternate permissions = No username = guest account = nobody invalid users = valid users = admin users = read list = write list = printer admin = force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = 0777 force security mode = 00 directory mask = 0755 force directory mode = 00 directory security mask = 0777 force directory security mode = 00 force unknown acl user = 00 inherit permissions = No inherit acls = No guest only = No guest ok = No only user = No hosts allow = hosts deny = status = Yes nt acl support = Yes profile acls = Yes block size = 1024 max connections = 0 min print space = 0 strict allocate = No strict sync = No sync always = No write cache size = 0 max print jobs = 1000 printable = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = use client driver = No default devmode = No printer driver = printer driver file = /etc/samba/printers.def printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes hide unreadable = No delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes csc policy = manual fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = Yes oplock contention limit = 2 posix locking = Yes strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filemode = No dos filetimes = No dos filetime resolution = No fake directory create times = No vfs object = vfs options = msdfs root = No [homes] comment = Home Directories read only = No browseable = No [netlogon] comment = Network Logon Service path = /etc/samba/netlogon guest ok = Yes share modes = No [profiles] path = /etc/samba/profiles read only = No create mask = 0600 directory mask = 0700 browseable = No csc policy = disable root@Dwarf:/etc/samba# ls -al total 68 drwxr-xr-x 5 root root 4096 Sep 5 22:57 . drwxr-xr-x 42 root root 4096 Sep 4 14:20 .. drwxrwxrwx 2 root root 4096 Aug 6 09:27 netlogon drwx------ 2 root root 4096 Aug 6 09:29 private drwxrwxrwx 2 root root 4096 Sep 5 20:53 profiles -rw-r--r-- 1 root root 7201 Sep 5 20:52 smb.conf -rw-r--r-- 1 root root 9044 Mar 16 07:52 smb.conf-sample -rw-r--r-- 1 root root 23858 Aug 17 15:59 smb.conf.bak -rw-r--r-- 1 root root 4096 Sep 5 22:57 typescript root@Dwarf:/etc/samba# exit Script done on Fri Sep 5 22:57:48 2003
> I have followed the notes from Using Samba for > an XP client. However when I goto create the > profile I get permission denide. However, as > you see below, the permissions I'm using > on /etc/samba/profiles is 777 so that is a > little confusing. > ............................... > root@Dwarf:/etc/samba# testparm /etc/samba/smb.confThat wasn't necessary, Aschley. It would have been better to just show us your smb.conf, not all the defaults that smbd would assume. But before a smart Alec quotes your whole posting all over again, here is what I think is wrong:> [global] > ................. > logon script = %U.bat > logon path = \\%L\etc\samba\profiles\%U > logon drive = > logon home = \\%N\%U > ................. > [homes] > comment = Home Directories > read only = No > browseable = No > > [netlogon] > comment = Network Logon Service > path = /etc/samba/netlogon > guest ok = Yes > share modes = No > > [profiles] > path = /etc/samba/profiles > read only = No > create mask = 0600 > directory mask = 0700 > browseable = No > csc policy = disableThe profiles paths in [global] and in [profiles] are contradictory. The [profiles] path is OK if your profiles are on your samba server under /etc/samba/profiles. But the logon path in [global] should then be "\\%L\profiles\%U" because "profiles" is the share not "/etc/samba/profiles", which is just the path to it for samba to know what to export as share "profiles". The logon home is also ambiguous, unless your samba server is itself the NIS server. It would better be "\\%L\$U".> root@Dwarf:/etc/samba# ls -al > total 68 > drwxr-xr-x 5 0/0 4096 Sep 5 22:57 . > drwxr-xr-x 42 0/0 4096 Sep 4 14:20 .. > drwxrwxrwx 2 0/0 4096 Aug 6 09:27 netlogon > drwx------ 2 0/0 4096 Aug 6 09:29 private > drwxrwxrwx 2 0/0 4096 Sep 5 20:53 profiles > -rw-r--r-- 1 0/0 7201 Sep 5 20:52 smb.conf > -rw-r--r-- 1 0/0 9044 Mar 16 07:52 smb.conf-sample > -rw-r--r-- 1 0/0 23858 Aug 17 15:59 smb.conf.bak > -rw-r--r-- 1 0/0 4096 Sep 5 22:57 typescriptYou don't really want 777 perms for netlogn and profiles, 775 is OK if you don't mind everyone being able to know what users there are, 771 is much better, because it prevents everyone else from even finding out what users there are and still everyone can get his roaming profiles if you set proper perms on the individual subdirectories. ____________________________________________________________ Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail! http://login.mail.lycos.com/r/referral?aid=27005