Hi all, Can you use Samba to store an XP Pro profile? I'm running Samba 3.0.2a (compiled from source) on Solaris 9. Compiled it against OpenLDAP 2.1.30 and MIT Kerberos 1.3.3 (both compiled from source from fresh downloads today). Am now trying to get Windows XP Pro to store profiles on to this box. The smbd and nmbd seem to run fine. Every time XP Pro goes to create a user's profile it connects (correctly) to:- \\firesun1\profiles\jsmith but then we get:- [2004/04/26 14:54:11, 1] smbd/service.c:make_connection_snum(705) dltest2 (212.219.217.98) connect to service profiles initially as user jsmith (uid=1935, gid=100) (pid 16145) [2004/04/26 14:54:11, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid. and an ugly "the security's wrong on the profile" sort of message on the XP Pro client. So, simple question. Can you use Samba to store an XP Pro profile? Mac Assistant Systems Adminstrator @nibsc.ac.uk dmccann@nibsc.ac.uk Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
Matthias Spork
2004-Apr-26 15:05 UTC
[Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
Hello,>Can you use Samba to store an XP Pro profile? > >Yep. Take a look at this: ftp://de.samba.org/samba.org/docs/ http://samba.idealx.org/samba-ldap-howto.pdf matze
>> >> Can you use Samba to store an XP Pro profile? > >Yes, you can. Your error message suggests that the profile you are trying to >overwrite does not belong to the current domain. ie: The user SID inside the >NTUser.DAT file for the current user does not match the current SID. >This sounds highly likely. The question in my mind though is where the Samba server gets a SID from? The XP Pro client is authenticating into a AD domain, which is telling it to store its profile on the Samba server. I have joined the Samba server to the AD domain in an attempt to coax this into working. But to no avail. (i.e. the join worked and Samba is now authenticating from the Windows server ('security=domain') but the SID error still occurs) Do I need to set some sort of SID on the Samba server to match the domain portion of the SID in the error message? (which I'm assuming is the domain SID for the AD domain?) Can I use 'net getsid' (or somesuch)? (side question: when using tdbtool's "dump" command, how can I convert the SIDs from secrets.tdb into SID-1-..... format?) Mac Assistant Systems Adminstrator @nibsc.ac.uk dmccann@nibsc.ac.uk Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
RRuegner
2004-Apr-26 22:03 UTC
[Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
Mac schrieb:> Hi all, > > > Can you use Samba to store an XP Pro profile? > > > I'm running Samba 3.0.2a (compiled from source) on Solaris 9. > > Compiled it against OpenLDAP 2.1.30 and MIT Kerberos 1.3.3 (both > compiled from source from fresh downloads today). > > > Am now trying to get Windows XP Pro to store profiles on to this box. > The smbd and nmbd seem to run fine. > > Every time XP Pro goes to create a user's profile it connects > (correctly) to:- > > \\firesun1\profiles\jsmith > > but then we get:- > > [2004/04/26 14:54:11, 1] smbd/service.c:make_connection_snum(705) > dltest2 (212.219.217.98) connect to service profiles initially as user jsmith (uid=1935, gid=100) (pid 16145) > [2004/04/26 14:54:11, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) > create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid. > > and an ugly "the security's wrong on the profile" sort of message on the XP Pro > client. > > > So, simple question. > > > Can you use Samba to store an XP Pro profile? > > > Mac > Assistant Systems Adminstrator @nibsc.ac.uk > dmccann@nibsc.ac.uk > Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)for sure samba store profiles from xp, your problem is unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid. regards
Matthew J. DiBattista
2004-Apr-27 14:37 UTC
[Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
Did you try control panel, system advanced and then select roaming profiles. Do you have a /logon/netlogon/ share? -----Original Message----- From: Mac [mailto:mac@nibsc.ac.uk] Sent: Monday, April 26, 2004 10:13 AM To: samba@samba.org Subject: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ? Hi all, Can you use Samba to store an XP Pro profile? I'm running Samba 3.0.2a (compiled from source) on Solaris 9. Compiled it against OpenLDAP 2.1.30 and MIT Kerberos 1.3.3 (both compiled from source from fresh downloads today). Am now trying to get Windows XP Pro to store profiles on to this box. The smbd and nmbd seem to run fine. Every time XP Pro goes to create a user's profile it connects (correctly) to:- \\firesun1\profiles\jsmith but then we get:- [2004/04/26 14:54:11, 1] smbd/service.c:make_connection_snum(705) dltest2 (212.219.217.98) connect to service profiles initially as user jsmith (uid=1935, gid=100) (pid 16145) [2004/04/26 14:54:11, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid. and an ugly "the security's wrong on the profile" sort of message on the XP Pro client. So, simple question. Can you use Samba to store an XP Pro profile? Mac Assistant Systems Adminstrator @nibsc.ac.uk dmccann@nibsc.ac.uk Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)