samba - May 2017 - Samba 4.5.8-Debian User Profiles on NFS-Share

Hello,

again I'd like to get help from this list.
After setting up the server, I'd like to store data an user profiles on an
nfs-server.
The share is writeable by the user, I can create files and directories.

But - by syncing the user profile to that share i stops, telling me that my user
profile is only synced partly.
In the log on the WS there is a "1509" noted. 
Only "Apps Data", ntuse.dat and ntuser.ini are there.
(Trying the same on a local share is working as expected).
I'm not sure if this is an nfs-related issue, or a samba configuration
issue.
Anyhow, I'm glad th get some input from you.

Thank you!
Franz



# Global parameters
[global]
	    netbios name = TEST-ADS
	    realm = REALM.BOKU.AC.AT
	    workgroup = REALM
	    dns forwarder = 8.8.8.8
	    server role = active directory domain controller
	    idmap_ldb:use rfc2307 = yes

	    unix charset = UTF8
		log level = 5

[profiles]
comment = Roaming Profiles
path = /data/data/profiles-nfs
read only = no	  
force create mode = 0600
force directory mode = 0700

The share ist exportet with this options:
/data/data
server.localdomain(rw,async,fsid=0,crossmnt,no_subtree_check,no_root_squash,insecure)


Error log in log.smbd

[2017/05/22 16:38:30.412365,  5]
../source3/smbd/dosmode.c:287(get_ea_dos_attribute)
  get_ea_dos_attribute: Cannot get attribute from EA on file
demo1.V4/AppData/Roaming/Microsoft/Network: Error = Operation not supported

On Mon, 22 May 2017 16:50:47 +0200
Franz Gansberger via samba <samba at lists.samba.org> wrote:
> Hello,
> 
> again I'd like to get help from this list.
> After setting up the server, I'd like to store data an user profiles
> on an nfs-server. 
Why ? profiles is a windows thing and NFS isn't
> [profiles]
> comment = Roaming Profiles
> path = /data/data/profiles-nfs
> read only = no	  
> force create mode = 0600
> force directory mode = 0700
> 
I take you haven't read this:

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Using_the_Domain_Controller_as_a_File_Server

Specifically this:

 the auto-enabled acl_xattr virtual file system (VFS) object enables
 you to only configure shares with Windows access control lists (ACL).
 Running shares with POSIX ACLs on a Samba DC is not supported.

i.e. you cannot use the 'force' lines in [profiles]

Rowland

You can setup you profiles like this: 

[profiles]
    browseable = yes
    path = /data/data/profiles-nfs
    read only = no
    acl_xattr:ignore system acl = yes

Configure the profiles share from withing windows.
That could work imo. 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: maandag 22 mei 2017 17:29
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba 4.5.8-Debian User Profiles on NFS-Share
> 
> On Mon, 22 May 2017 16:50:47 +0200
> Franz Gansberger via samba <samba at lists.samba.org> wrote:
> 
> > Hello,
> > 
> > again I'd like to get help from this list.
> > After setting up the server, I'd like to store data an user 
> profiles 
> > on an nfs-server.
> 
> Why ? profiles is a windows thing and NFS isn't
> 
> > [profiles]
> > comment = Roaming Profiles
> > path = /data/data/profiles-nfs
> > read only = no	  
> > force create mode = 0600
> > force directory mode = 0700
> > 
> 
> I take you haven't read this:
> 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active
> _Directory_Domain_Controller#Using_the_Domain_Controller_as_a_
> File_Server
> 
> Specifically this:
> 
>  the auto-enabled acl_xattr virtual file system (VFS) object 
> enables  you to only configure shares with Windows access 
> control lists (ACL).
>  Running shares with POSIX ACLs on a Samba DC is not supported.
> 
> i.e. you cannot use the 'force' lines in [profiles]
> 
> Rowland
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>