samba - Jun 2006 - Roaming profile error

Hi everybody! I'm a samba rookie, and I'm trying to make my own  
roaming profiles.

The situation is simple, a single debian samba server and a single  
windows xp client, with the signorseal value set to 0. I have my unix  
users with their home directories in /home/username, and I'd like  
them to have a windows login. Right now I don't care about mixing  
unix and windows files.

My smb.conf is this:

===BEGIN==[global]
workgroup = WINEXAMPLE
netbios name = SMB1
server string = Samba Domain Master
security = user
encrypt passwords = yes
username map = /etc/samba/smbusers
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
logon drive = Z:
logon path = \\%L\profiles\%U
domain logons = yes
preferred master = yes
local master = yes

[netlogon]
comment = Samba Domain Login Service
path = /home/%U
valid users = %S
read only = no

[profiles]
comment = Users Profiles Service
path = /home
valid users = %S
read only = no
guest ok = no
writable = yes
profile acls = yes
====END===

I create Samba users with smbpasswd -a for root and for testuser. The  
testuser can read and write in his home. I can join the domain using  
root.


By the way, I tried to set a standard user ``admin'' as the  
administrator in /etc/samba/smbusers:

===BEGIN==# Map admin to the Domain Administrator
admin = Administrator
====END===
But windows rejects to join the domain, just root works (of course  
admin exists on unix and samba). Can root be eliminated from samba  
configuration files and allow another user to join the domain?


I can log into windows, but it complains that the roaming profile  
cannot be accessed, and the login will create a temporary one, with  
the detail:

Access DENIED

Well, in the log files I find something that I don't understand,  
samba cannot find a service with the same name as my user:

===BEGIN==[2006/06/24 15:42:39, 0] smbd/server.c:main(798)
   smbd version 3.0.14a-Debian started.
   Copyright Andrew Tridgell and the Samba Team 1992-2004
[2006/06/24 15:42:59, 0] smbd/service.c:make_connection(794)
   client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:43:00, 0] smbd/service.c:make_connection(794)
   client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:48:16, 0] smbd/server.c:main(798)
   smbd version 3.0.14a-Debian started.
   Copyright Andrew Tridgell and the Samba Team 1992-2004
[2006/06/24 15:48:33, 0] smbd/service.c:make_connection(794)
   client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:48:34, 0] smbd/service.c:make_connection(794)
   client1 (193.204.161.3) couldn't find service testuser
====END===

What am I missing? I've tried some combinations:

[general]
logon path = \\%L\profiles\%U
[profiles]
path = /home


[general]
logon path = \\%L\profiles
[profiles]
path = /home/%U


But no success... Can anyone give me some hints?

Thanks!! :)

--
Sensei <senseiwa@mac.com>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true.      [J. Robert Oppenheimer]

On Jun 24, 2006, at 04:13pm, Sensei wrote:
> Hi everybody! I'm a samba rookie, and I'm trying to make my own  
> roaming profiles.
>
> The situation is simple, a single debian samba server and a single  
> windows xp client, with the signorseal value set to 0. I have my  
> unix users with their home directories in /home/username, and I'd  
> like them to have a windows login. Right now I don't care about  
> mixing unix and windows files.
>
> My smb.conf is this [...]

I respond myself: I was missing the home sharing.

===BEGIN==[global]
workgroup = WIN.EXAMPLE.EDU
netbios name = SMB1
server string = Samba Domain Master
security = user
encrypt passwords = yes
username map = /etc/samba/smbusers
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
add user script = /usr/sbin/useradd -m '%u'
domain logons = yes
preferred master = yes
local master = yes
inherit permissions = yes
inherit acls = yes

[netlogon]
comment = Samba Domain Login Service
path = /home/%U
valid users = %S
read only = no

[profiles]
comment = Users Profiles Service
path = /home/%U
valid users = %S
read only = no
guest ok = no
writable = yes
browsable = no

[homes]
comment = Users Home Directories
path = /home/%U
valid users = %S
read only = no
guest ok = no
writable = yes
browsable = yes
====END===


At the end of this quest, I've got 3 questions :)

The first is the same I asked in my post: is it possible to avoid  
using root into samba to join a domain?

The second is this: I'm getting the famous ``network name not
found''
sometimes when logging in and out with the same profile. Is there a  
way of avoiding this? It's not always, and I didn't play that much to  
recognize a pattern...

The last is about the notepad starting upon login. I solved by  
removing as MS says, so deleting the infamous Desktop.ini files from  
Default User and All Users. Do you recommend this practice before  
joining a domain?

Thanks!!


--
Sensei <senseiwa@mac.com>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true.      [J. Robert Oppenheimer]