samba - Jan 2007 - Machine account in Users home

Hello, Am i suppose to see win machine names in users home? they are created
when users login using their workstations
here is my home directory

[cat@itbox CAD]$ ls -l
total 20
drwx------ 3 ad01$             Domain Computers   4096 Jan 17 17:57 ad01_
drwx------ 3 administrator   Domain Users       4096 Jan 17 17:59
administrator
drwx------ 3 cat                  Domain Users       4096 Jan 17 18:07 cat
drwx------ 4 mina.azer       Domain Users       4096 Jan 17 17:57 mina.azer
drwx------ 3 vdc2$

as u can see the first and last item are machine accounts .. is that right??


smb.conf
[global]
        security = ADS
        workgroup = CAD
        realm = CAD.TESTDOMAIN
        netbios name = itbox
        preferred master = no
        password server = 192.168.1.6
        client use spnego = yes
        server signing = auto
        encrypt passwords = yes
        nt acl support = no
        obey pam restrictions = yes
        winbind separator = +
        idmap uid = 1000-20000
        idmap gid = 1000-20000
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        winbind cache time = 0
        winbind nested groups = yes
        template homedir = /home/%D/%U
        template shell = /bin/bash
        log file = /var/log/samba/%m.log
        log level = 3
        max log size= 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        hosts allow = 192.168.1. 192.168.0. 127.
[homes]
        comment = Home Directories
        read only = No
        browseable = No
        directory mask = 0700
        create mask = 0700

On Wed, Jan 17, 2007 at 06:23:19PM -0500, M Azer wrote:
> Hello, Am i suppose to see win machine names in users home? they are
created
> when users login using their workstations
> here is my home directory
> 
> [cat@itbox CAD]$ ls -l
> total 20
> drwx------ 3 ad01$             Domain Computers   4096 Jan 17 17:57 ad01_
> drwx------ 3 administrator   Domain Users       4096 Jan 17 17:59
> administrator
> drwx------ 3 cat                  Domain Users       4096 Jan 17 18:07 cat
> drwx------ 4 mina.azer       Domain Users       4096 Jan 17 17:57 mina.azer
> drwx------ 3 vdc2$
> 
> as u can see the first and last item are machine accounts .. is that
right??
If your users only connect to the server through Samba then you can
utilize the "root preexec" option to run a script as root when a user
connects to the share.

In this script you can create the directory if it does not exist, set
permissions, set quotas, etc.  More applicable to your question though
is that you can create the directory only if it's not for a machine
account (i.e. create it if it doesn't end with an "_").  

The script would look something like:


#!/bin/bash
USERNAME=$1
LOGFILE=/var/log/mkhomedir.log
HOME_PATH=/home/MYDOMAIN

echo $USERNAME | egrep -q "[^_]$"
if [ $? -ne 0 ]; then
  # ends with _ so just exit
  echo "not creating directory for $USERNAME" >> $LOGFILE
  exit 1
fi

if [ ! -d "$HOME_PATH/$USERNAME" ]; then
  mkdir "$HOME_PATH/$USERNAME"
  chown "$USERNAME" "$HOME_PATH/$USERNAME"
fi


When I've used this method I would modify the regular expression to only
match our specific naming pattern for usernames.  So for example it
would be something like "[a-z]+[0-9]*" instead of "[^_]$",
but this obviously
varies from site to site.

Also, you'd probably want to add additional error checking and logging.
Remember that this runs as root so you really want to be careful with
what you're doing.

Once you have the script made up you can set it in smb.conf to be called when
someone connects to their home directory:

[homes]
  root preexec = /etc/samba/mkhomedir.sh '%U'

The %U represents the username but if you have more than one domain you
might want to use %D as well to pass the domain to the script too.  See
the smb.conf manpage for all other variables.


Ed Plese