samba - Jan 2018 - Home folder: a simple mapping or something more?

Probably this email is connected with my previous one, about folder
redirection.

Looking at:

	https://wiki.samba.org/index.php/User_Home_Folders

for AD there's three method to set home folder. ADUC and ldbedit is the
same, simply using different interfaces.


But setting a folder mapping via GPO, AFAI've understood, it is not exactly
the same as setting home folder.
Or better, setting a home folder trigger automatically a folder
mapping, but probably do something more, eg define some more variables
(HOMEDRIVE, HOMEPATH, ...), and even doing something more.
For example, i think that folder redirection does not work, because
there's no 'home drive', i'm using policy.

Probably these variables are used in installers on in softwares too...


Someone can confirm this? Someone have some clue on the differences in
using 'home drive' or a simple mapped network drive?


Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

Hai Marco, 

If it does not work, that it probely has todo with "NT
Authority\SYSTEM" and winbindd bugs.

And howto test that. 
Create a few shares and on one set :  
acl_xattr:ignore system acl = yes

If you setup like this: ( which matches the MS preffered setting ) 
\\server\users\%username% 
\\server\profiles\%username% 

And same for any software deploy folder. ( same also for the Sysvol folder ) 
These al work much better if you setup with acl_xattr:ignore system acl = yes.
! Beware, if you setup like this you MUST set all rights again, share and
file/folder rights.

Now i have not tested this lately since my setup uses acl_xattr:ignore system
acl = yes a lot,
on all places only windows is accessing my shares and this results in a much
better working setup.

And all my redirected folders point to UNC path's, not driver letters, i
have these also and both work fine.

https://wiki.samba.org/index.php/Configuring_Windows_Profile_Folder_Redirections
Is a bad example imo.., this part is the "bad" part of it. ! There is
no need to make registry keys. !
If setup correctly, this works fine as it should. 

Set the following:
 Action: Replace
 Hive: HKEY_CURRENT_USER
 Key Path: Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
 Value name: For example, to redirect the Documents folder, enter: Personal
For a list of other registry keys of folders you can redirect, see the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell
Folders entry in your local Windows registry. Value type: REG_EXPAND_SZ
 Value data: For example: \\server\%USERNAME%\Documents
Windows automatically replaces the %USERNAME% variable with the name of the
current user when the policy is applied.

There is only one "but"... 
If you setup with RFC2307, and you did add the profiles and/or user homedir in (
like : \\server\users\%username% )
And you add an UID after that, you wont be able to use the user home folder
since it was created with an other UID!.

The order of what you do and how you do it is important here.


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: maandag 15 januari 2018 12:52
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Home folder: a simple mapping or something more?
> 
> 
> Probably this email is connected with my previous one, about folder
> redirection.
> 
> Looking at:
> 
> 	https://wiki.samba.org/index.php/User_Home_Folders
> 
> for AD there's three method to set home folder. ADUC and 
> ldbedit is the
> same, simply using different interfaces.
> 
> 
> But setting a folder mapping via GPO, AFAI've understood, it 
> is not exactly
> the same as setting home folder.
> Or better, setting a home folder trigger automatically a folder
> mapping, but probably do something more, eg define some more variables
> (HOMEDRIVE, HOMEPATH, ...), and even doing something more.
> For example, i think that folder redirection does not work, because
> there's no 'home drive', i'm using policy.
> 
> Probably these variables are used in installers on in softwares too...
> 
> 
> Someone can confirm this? Someone have some clue on the differences in
> using 'home drive' or a simple mapped network drive?
> 
> 
> Thanks.
> 
> -- 
> dott. Marco Gaiarin				        GNUPG 
> Key ID: 240A3D66
>   Associazione ``La Nostra Famiglia''          
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al 
> Tagliamento (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   
> f +39-0434-842797
> 
> 		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
> 	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Mandi! L.P.H. van Belle via samba
  In chel di` si favelave...
> If it does not work, that it probely has todo with "NT
Authority\SYSTEM" and winbindd bugs.
No, it is not a permission trouble, i'm not speaking about that.

I'm simply saying that this wiki page:

	https://wiki.samba.org/index.php/User_Home_Folders#In_an_Active_Directory

is probably wrong, or at least ''misleading'', because setting a
mapping for the home folder it is not exactly the same as defining the
home folder/drive in user options.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)