Greetz all,
I am setting up a comain controller for a windows 2000 network and I
think I have everything squared away. The problem that I am having right
now is that all of the documentation/howtos that I have thusfar seen
assume that a user wishes to implement roaming profiles in Samba. We
want to preserve local profiles (local on the client.)
I had seen a posting suggesting to set the local path for the profiles
with the logon path option; it seems to almost work but when I try to
log in with a user in the samba domain, they are met with errors
relating that they are recieving a temporary profile and changes made to
it will not be saved. The bottom of the event error gives the reason
"access denied". I notice that the default, if the logon path option
is
not used, is to set a profile up in the unix user's home directory.
Below is included my running smb.conf. (Forgive the lengthy inclusion.)
I set logon path = C:\Documents and Settings\%U hoping that it would
create the profile using the name of the user logging in as their login
name. Here is the error recieved at login, when logging in as Samba user
"test":
====================================================================Windows
cannot create profile directory C:\Documents and
Settings\test.pds. You will be logged on with a local profile only.
Changes to the profile will not be propogated to the server. Contact
your network administrator.
Detail - Access is denied.
====================================================================
When the user is logged in and given thier temporary profile
(C:\Documents and Settings\TEMP), this is seen in the machine error log
in Samba:
===============================================================[2003/04/11
10:17:08, 0] smbd/service.c:make_connection(251)
darren-laptop (172.16.10.2) couldn't find service test
[2003/04/11 10:17:08, 0] smbd/service.c:make_connection(251)
darren-laptop (172.16.10.2) couldn't find service test
===============================================================
What does that mean? It is trying to find a share at \\server\test?
And how can I make the local profiles work ?
TIA,
DS
===============================================================Load smb config
files from /etc/samba/smb.conf
Processing section "[netlogon]"
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
[global]
coding system client code page = 850
code page directory = /usr/share/samba/codepages
workgroup = PGPCORP
netbios name = PGPPROXY
netbios aliases netbios scope server string = Samba
Server
interfaces bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = Yes
password server smb passwd file = /etc/samba/smbpasswd
root directory pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentic
ation*tokens*updated*successfully*
passwd chat debug = No
username map password level = 0
username level = 0
unix password sync = Yes
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 0
syslog = 1
syslog only = No
log file = /var/log/samba/%m.log
max log size = 0
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts host wins bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
name cache timeout = 660
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = /etc/printcap
disable spoolss = No
enumports command addprinter command deleteprinter
command show add printer wizard = Yes
os2 driver map strip dot = No
mangling method = hash
character set mangled stack = 50
stat cache = Yes
domain admin group domain guest group machine
password timeout = 604800
add user script delete user script logon script
logon path = C:\Documents and Settings\%U
logon drive logon home = \\%N\%U
domain logons = Yes
os level = 36
lm announce = Auto
lm interval = 60
preferred master = Yes
local master = Yes
domain master = Yes
browse list = Yes
enhanced browsing = Yes
dns proxy = No
wins proxy = No
wins server wins support = Yes
wins hook kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command change share command delete share
command config file preload lock dir =
/var/cache/samba
pid directory = /var/run/samba
utmp directory wtmp directory utmp = No
default service message command dfree command valid
chars remote announce remote browse sync socket
address = 0.0.0.0
homedir map = auto.home
time offset = 0
NIS homedir = No
source environment panic action hide local users = No
winbind uid winbind gid template homedir =
/home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment path alternate permissions = No
username guest account = nobody
invalid users = bin daemon adm lp sync shutdown halt mail
news uucp operator games gopher ftp vcsa mailnull
rpm ntp rpc xfs rpcuser nfsnobody nscd ident radvd
apache squid pcap mysql sshd
valid users admin users read list write list
printer admin force user force group read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow = 172.16.10. 127.
hosts deny status = Yes
nt acl support = Yes
profile acls = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = lprng
print command = lpr -r -P%p %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command lpresume command queuepause command
queueresume command printer name use client driver = No
default devmode = No
printer driver printer driver file = /etc/samba/printers.def
printer driver location default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files hide files veto oplock files map
system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
copy include exec preexec close = No
postexec root preexec root preexec close = No
root postexec available = Yes
volume fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend magic script magic output
delete readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object vfs options
[netlogon]
comment = Network Logon Service
path = /usr/local/samba/lib/netlogon
browseable = No
share modes = No
===============================================================
--
Darren Spruell
Sento I.S. Department
darren_spruell@sento.com
