similar to: Still mandatory profiles, every user same profile

Hi, first of all: my name is uli... i'm from bavaria/germany and i'm working with linux quite a long time (maybe 10 years). Now my "problem": my samba is setup with ldap-backend. my configuration with mandatory profiles is working quite good. i created a Default User - Profile in my netlogon-share (migrated from a windows-xp client). ntuser.dat has been renamed to ntuser.man.

I tried using the fake_perms module to set up some read-only profiles and couldn't get it to work. Could someone please point out what I'm doing wrong? I created a copy of my regular [profiles] share with the fake_perms module loaded: [staticprofiles] path = /staticprofiles invalid users = root browseable = yes csc policy = disable veto oplock files = /prf*.tmp/

Hello! I am running samba 3.0 on fc2 in a win2000 network. I want to use only mandatory profiles in the network, but can't get this to work properly. I have set up a "perfect user" on my local machine", and copied this profile to \\server\netlogon\Default User. I have also made this default profile mandatory by renaming ntuser.dat to ntuser.man. In smb.conf I have added:

Hi, I want to use the module VFS_FAKE_PERMS for roaming profiles. When I use the option "writeable = yes" (see config [1]) the user profiles are write back the server (but they shouldn't, right?). If I delete the writeable-option (see [2]) windows brings an error when logging off: "Windows cannot update your roaming profile. Possible causes of this error include network

Hello all, I've been trying to figure out what the best way of doing the group policy thing is. We are running samba 3 on slackware 9 with winxp clients. We are a school. i'm unclear on how much AD is actually supported... OU GPO all that. so i decided to go the "administrative template" way (used to be .pol files) I'm thinking of having the students run off of a

Hello, I have a centOS 5.5 box acting as as a PDC with samba 3.4.9 and openldap 2.4.22. Then I joined the domain with a centOS box (samba 3.4.17) which hosts the homes and profiles. I have no problem with XP clients. I can join a windows 7 client to my domain but it is unable to load the profile when logging in. See below a level 2 log.smdb from the file server when I log in with a domain

Hello, I have a PDC and a File (member) server for homes and profiles (Samba 3.4.17). For XP clients I have mandatory profiles with all user shell folders redirected to their respective home share. Now I'm adding win 7 clients to the mix and I want the same thing. It's (almost) working but I think my procedure is a bit dirty (i.e. I use "windows enabler" to build my ntuser.man

Hello all. I recently upgraded to Samba 3.0 (CVS HEAD) and finally have a working Samba-PDC with Windows 2000 and XP clients. Right now, I'm working with the profiles and I'd like to force some mandatory settings. I read something about using NTUSER.MAN. Can someone further explain this file and how to create it? Here's what I'd like to do: 1) My Documents path = H:\My

Hi, Yesterday I found big problems concerning my roaming profiles. They seem to work on some computers where they are always used, on some other the did not load properly (i.e. a default profile was loaded instead). After some debugging with userenv.log I found the very strange problem: case sensitivity for ntuser.dat!: [...] IsCentralProfileReachable: Testing <F:\testuser\ntuser.dat>

After having migrated my machines and user to Samba 4.3.11 on Ubuntu 16.04.1 (no domain upgrade, new provision, all accounts new defined) and old data copied over to the new machines, I have now a broader testbed and notice issues I didn't see prior to that. Having roaming profiles (defined in the user object in LDB)... Seemingly at random smbd keeps locks on NTUSER.DAT and ntuser.ini for a

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I also have the problem that the notepad pops up (with desktop.ini opened), everytime I logon. I know the workaround that was mentioned a thousand times before: hide files = /desktop.ini/ntuser.ini/NTUSER.*/ I put the file to the [profile]-share, to the [global]-share, but it won't work! An extract of my smb.conf: [profiles]

I need a little advice on finishing off a Samba PDC. I have Samba 3.0.0RC1 installed and working as a PDC on a Redhat AS 3.0 machine. It authenticates users nicely but the "roaming" profiles don't work. Tailing the samba log, I see the an attempt to access the users ntuser.dat file, which doesn't exist before the first logon, when logging in. The profile directory

Hi, is it possible to create the user profiles by copying a template, change file ownership and modify the SID in NTUSER.DAT using the profile tool? We have many problems with broken profiles. This has become time consuming and frustrating - when a user experiences an error or weird behaviour of an application I can never be sure wether the cause is a "wrong user error", a broken

Hi I have a problem with the cmd : profiles. I want to change the sid in a ntuser.dat. I have already read many message in mailing list who explain how to use profiles but it's dont't work. i use profile like this: profiles -c S-1-5-21-my-old-sid -n S-1-5-21-my-new-sid ./ntuser.dat on the output i see the new sid like i want but the change take no effect on the file when i do

What are the implications of locking the ntuser.dat file on the user's server profile? That is, if I make the ntuser.dat file read-only, what affects will that have on the client?

Hi, I have a problem with winbind, could anyone help me? Version: root at leela:~# samba -V Version 4.0.5 root at leela:~# uname -a Linux leela 3.2.0-40-generic #64-Ubuntu SMP Mon Mar 25 21:22:10 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux - First everything went fine: root at leela:~# getent passwd root:x:0:0:root:/root:/bin/bash [...]

Hi experts I have a trouble in access rights I am running Samba 3.0.31 on Solaris 10 x86 64 bits as member server of an Active Directory 2003 R2 domain (MYDOMAIN) using Identity Management for Unix I set rights to access a sub folder of a Samba share. On Solaris the user "toto" jdoe can write a new file. From Windows, the same user can't. Itlooks like OK when the primary group

Hi there, Domaincontroller name: risky.home.schinz.de dig dig @risky -tANY risky.home.schinz.de. returns: ;; ANSWER SECTION: risky.home.schinz.de. 900 IN A 10.0.180.254 risky.home.schinz.de. 900 IN AAAA ::1 I have a strange behavior in my network. It's only concerning DNS, but maybe someone can help me. If a do a ssh on risky from another machine (exact command:

Hello, I've got problems with my fresh install of samba. Here is the background : We have an old machine on which I installed samba, release 3.0.9. It ran a linux from scratch system, but I was not well documented about samba at the time I did this install, so here is how we used to use it. The users accounts were both created in the system (/etc/password) and for samba (smbpasswd). All

Following TOSHARG and "Samba 3 by examples" I implemented Folder redirection plus some security restrictions by building a custom NTUSER.DAT which is the default profile of my users. The problem is that each user has read/write access to its profile share therefore he can replace its NTUSER.DAT. This is why I chose mandatory profiles. Is there another solution? The problem with