samba - Jun 2008 - Windows cannot locate the server copy of your roaming profile

Hi,

I'm exerimenting with samba+ldap pdc and I have "Windows cannot locate
the server copy of your roaming profile" on logon,

here is smb.conf:

[global]
 unix charset = LOCALE
 workgroup = CPE 
 netbios name = CPE-PDC
 server string = Samba Domain Controller
 enable privileges = yes
 interfaces = eth1,lo
 bind interfaces only = Yes
 passdb backend = ldapsam:ldap://192.168.10.124
# username map = /etc/samba/smbusers
 hide unreadable = yes 
 hide dot files = yes	
 log level = 1
 syslog = 0
 log file = /var/log/samba/%m
 max log size = 50
 smb ports = 137 138 139 445
 name resolve order = wins bcast hosts
 time server = Yes
 printcap name = CUPS
# map to guest = Never
# guest account = nobody
 wins support = Yes
 ldap suffix = dc=cpe,dc=it
 ldap machine suffix = ou=Computers
 ldap user suffix = ou=People
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap admin dn = cn=admin,dc=cpe,dc=it
 idmap backend = ldap:ldap://192.168.10.124
 idmap uid = 10000-20000
 idmap gid = 10000-20000 
 map acl inherit = Yes
 printing = cups
 #printer admin = Administrator
 veto files = /*.eml/*.nws/*.{*}/ 
 veto oplock files = /*.doc/*.xls/*.mdb/
 encrypt passwords = Yes
 obey pam restrictions = No
 ldap passwd sync = Yes
 mangling method = hash2

 logon script = scripts\logon.bat 
 logon path = \\%L\profiles\%U 
 logon drive = H: 
 logon home = \\%L\%U

 domain logons = Yes
 os level = 65
 preferred master = Yes
 domain master = Yes
 add user script = /usr/sbin/smbldap-useradd -m "%u"
 ldap delete dn = Yes
 add machine script = /usr/sbin/smbldap-useradd -w "%u"
 add group script = /usr/sbin/smbldap-groupadd -p "%g" 
 add user to group script = /usr/sbin/smbldap-groupmod -m "%u"
"%g"
 delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
 set primary group script = /usr/sbin/smbldap-usermod -g "%g"
"%u"
 delete user script = /usr/sbin/smbldap-userdel ?%u?
 delete group script = /usr/sbin/smbldap-groupdel ?%g?

[netlogon]
	comment = Network Logon Service
    	path = /home/samba/netlogon/
	browseable = No
        read only = yes
	writable = No
	locking = No
	share modes= No

[profiles]
        path = /home/samba/profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        browseable = No
#        guest ok = No
        profile acls = yes
        csc policy = disable
	nt acl support = Yes
        valid users = %U
	admin users = @"Domain Admins"
	hide files = /desktop.ini/outlook*.lnk/*Briefcase*/
	root preexec = PROFILE=/home/samba/profiles/%u; if [ ! -e $PROFILE ];
then mkdir -pm700 $PROFILE; chown %u:%g $PROFILE;fi

[homes]
 comment = Home Directories
 valid users = %S
 read only = No
 browseable = No
 writable = yes


any hints?

regards
Nicola

On Sun, 29 Jun 2008, Mailing List SVR wrote:
> I'm exerimenting with samba+ldap pdc and I have "Windows cannot
locate
> the server copy of your roaming profile" on logon,
What does sambaProfilePath look like in the LDAP entry? Can the Windows 
machine resolve the address of the server?

-steve

Il giorno dom, 29/06/2008 alle 12.50 -0400, Steve Thompson ha
scritto:
> On Sun, 29 Jun 2008, Mailing List SVR wrote:
> 
> > Yes Steve, I changed that but still the same issue,
> 
> I would suggest trying to map \\cpe-pdc\test by hand once you get logged 
> in, and then,
manual mapping works fine ...
>  when it fails, look at the client logfile in /var/log/samba 
> to see why it failed. Also see if the Windows firewall settings on the 
> client allow file and printer sharing, and that the Windows machine entry 
> in LDAP is correct (that is, it is a domain member).
> 
> Steve

Hi all,

an update about this issue:

on centos 5.2 the same configuration works just fine,

seems something specific to ubuntu 8.04,

regards
Nicola

Il giorno dom, 29/06/2008 alle 18.56 +0200, Mailing List SVR ha
scritto:
> Il giorno dom, 29/06/2008 alle 12.50 -0400, Steve Thompson ha scritto:
> > On Sun, 29 Jun 2008, Mailing List SVR wrote:
> > 
> > > Yes Steve, I changed that but still the same issue,
> > 
> > I would suggest trying to map \\cpe-pdc\test by hand once you get
logged
> > in, and then,
> 
> manual mapping works fine ...
> 
> >  when it fails, look at the client logfile in /var/log/samba 
> > to see why it failed. Also see if the Windows firewall settings on the
> > client allow file and printer sharing, and that the Windows machine
entry
> > in LDAP is correct (that is, it is a domain member).
> > 
> > Steve
>