samba - Mar 2016 - samba4: Separation of DC from the File Server and Roaming Profiles

Hello @ALL

planning to set my first samba4 ad-dc (coming from Samba3 NT-domain).

Trying to fulfill the recommendation to separate the domain controller from
the file server and needing roaming profiles, I do not understand where I
have to declare and locate the Profiles and Home shares.

Is it possible to declare the profiles and homes on the DC (smb.conf) and
point their paths to the member server?

Or I have to define all this in GPOs for each user, pointing there to the
member server?

I'd try to minimize the need of administering samba4 trough Windows-Tools
but use smb.conf and samba-tool. Would it be possible?

Thank you!




--
View this message in context:
http://samba.2283325.n4.nabble.com/samba4-Separation-of-DC-from-the-File-Server-and-Roaming-Profiles-tp4699689.html
Sent from the Samba - General mailing list archive at Nabble.com.

Hello,

Am 15.03.2016 um 15:28 schrieb rawi:
> Trying to fulfill the recommendation to separate the domain controller from
> the file server and needing roaming profiles, I do not understand where I
> have to declare and locate the Profiles and Home shares.
> 
> Is it possible to declare the profiles and homes on the DC (smb.conf) and
> point their paths to the member server?
> 
> Or I have to define all this in GPOs for each user, pointing there to the
> member server?
https://wiki.samba.org/index.php/User_home_drives#Define_the_users_home_folder_in_the_account_settings
https://wiki.samba.org/index.php/Implementing_roaming_profiles#In_an_AD_environment


It's also possible to do this both via GPO. There are many tutorials on
the internet, how to do.


> I'd try to minimize the need of administering samba4 trough
Windows-Tools
> but use smb.conf and samba-tool. Would it be possible?
If you set the attributes in the user objects, you can use ldbedit. To
do it via GPO, you have to use the Windows tools. However it allows you
to define it per domain or container, so you only have to do it once,
until you need to change something.


Regards,
Marc

Marc, thank you very much!

Yes, I saw many tutorials, but many are showing how to set a DC and also the
shares on it self; what it is not recommended.
Others are showing how to manage Users with Windows tools.
> If you set the attributes in the user objects, you can use ldbedit. To
> do it via GPO, you have to use the Windows tools. However it allows you
> to define it per domain or container, so you only have to do it once,
> until you need to change something.
Would exist an alternative to declare in an AD-DC once the logon or profiles
path and the home path in the smb.conf, pointing to another file server
like:

homes path = //MEMBER-SERVER.abc.local/homes ?

Best regards




--
View this message in context:
http://samba.2283325.n4.nabble.com/samba4-Separation-of-DC-from-the-File-Server-and-Roaming-Profiles-tp4699689p4699728.html
Sent from the Samba - General mailing list archive at Nabble.com.