samba - Jun 2019 - W10, NT domain, profiles that work for some users and not for others...

As subject say, we are trying to ''integrate'' some W10 machine
on a NT
domain, with samba as PDB/BDC, OpenLDAP backend.

profile share is defined as:

 [profiles]
	comment = Network Profiles Share
	path = /srv/samba/profiles
	read only = No
	create mask = 0600
	directory mask = 0700
	store dos attributes = Yes
	browseable = No
	csc policy = disable
	root preexec = /etc/samba/createprofile "%u"

where clearly '/etc/samba/createprofile' is the script that create the
various '<loginname>.VX' folders.
This share worker flawlessy for XP, worked too for Win7, but have some
strange behaviour for W10.

For some users, W10 complain about 'roaming profile does not work,
using a temp profile' an save NOTHING on '.V6' folder.
For another user ('casually' on domain administrator group ;) profile
work as expected.


I've put log level to 5 and tried to find something relevant; the only
thing i've got is:

[2019/06/27 15:27:59.536724,  5] ../source3/lib/username.c:181(Get_Pwnam_alloc)
  Finding user profile
[2019/06/27 15:27:59.536745,  5]
../source3/lib/username.c:120(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is profile
[2019/06/27 15:27:59.536763,  5]
../source3/lib/username.c:141(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is PROFILE
[2019/06/27 15:27:59.536780,  5]
../source3/lib/username.c:153(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in profile
[2019/06/27 15:27:59.536796,  5]
../source3/lib/username.c:159(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [profile]!

but appear equally for working and nonworking users. ;-)


Some hint on loglevel to set, to better spot the trouble? Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

On 27/06/2019 14:53, Marco Gaiarin via samba wrote:
> As subject say, we are trying to ''integrate'' some W10
machine on a NT
> domain, with samba as PDB/BDC, OpenLDAP backend.
>
> profile share is defined as:
>
>   [profiles]
> 	comment = Network Profiles Share
> 	path = /srv/samba/profiles
> 	read only = No
> 	create mask = 0600
> 	directory mask = 0700
> 	store dos attributes = Yes
> 	browseable = No
> 	csc policy = disable
> 	root preexec = /etc/samba/createprofile "%u"
>
> where clearly '/etc/samba/createprofile' is the script that create
the
> various '<loginname>.VX' folders.
> This share worker flawlessy for XP, worked too for Win7, but have some
> strange behaviour for W10.
>
> For some users, W10 complain about 'roaming profile does not work,
> using a temp profile' an save NOTHING on '.V6' folder.
> For another user ('casually' on domain administrator group ;)
profile
> work as expected.
>
>
> I've put log level to 5 and tried to find something relevant; the only
> thing i've got is:
>
> [2019/06/27 15:27:59.536724,  5]
../source3/lib/username.c:181(Get_Pwnam_alloc)
>    Finding user profile
> [2019/06/27 15:27:59.536745,  5]
../source3/lib/username.c:120(Get_Pwnam_internals)
>    Trying _Get_Pwnam(), username as lowercase is profile
> [2019/06/27 15:27:59.536763,  5]
../source3/lib/username.c:141(Get_Pwnam_internals)
>    Trying _Get_Pwnam(), username as uppercase is PROFILE
> [2019/06/27 15:27:59.536780,  5]
../source3/lib/username.c:153(Get_Pwnam_internals)
>    Checking combinations of 0 uppercase letters in profile
> [2019/06/27 15:27:59.536796,  5]
../source3/lib/username.c:159(Get_Pwnam_internals)
>    Get_Pwnam_internals didn't find user [profile]!
Try it with '%U' instead of '%u', it seems to be using the
service name
instead of the username.

Rowland

Mandi! Rowland penny via samba
  In chel di` si favelave...
> Try it with '%U' instead of '%u', it seems to be using the
service name
> instead of the username.
OK, good hint but... for test users we have created by hand the
profiles folders, so surely the script is not the culprit...


Anyway, thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)