similar to: samba4 profiles problems

On 04/07/15 02:37 PM, Rowland Penny wrote: > On 04/07/15 18:51, Gary Dale wrote: >> On 04/07/15 04:22 AM, Rowland Penny wrote: >>> On 04/07/15 00:58, Gary Dale wrote: >>>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>>> On 03/07/15 17:45, Gary Dale wrote: >>>>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>>>>

On 04/07/15 18:51, Gary Dale wrote: > On 04/07/15 04:22 AM, Rowland Penny wrote: >> On 04/07/15 00:58, Gary Dale wrote: >>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>> On 03/07/15 17:45, Gary Dale wrote: >>>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>>> I've got roaming profiles for one account on a Debian/Jessie AD

On 04/07/15 22:53, Gary Dale wrote: > On 04/07/15 02:37 PM, Rowland Penny wrote: >> On 04/07/15 18:51, Gary Dale wrote: >>> On 04/07/15 04:22 AM, Rowland Penny wrote: >>>> On 04/07/15 00:58, Gary Dale wrote: >>>>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>>>> On 03/07/15 17:45, Gary Dale wrote: >>>>>>> On

On 04/07/15 04:22 AM, Rowland Penny wrote: > On 04/07/15 00:58, Gary Dale wrote: >> On 03/07/15 01:21 PM, Rowland Penny wrote: >>> On 03/07/15 17:45, Gary Dale wrote: >>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>>> server but I can't get them to work for

Could you try giving domain users rwx control of profile folder this way: setfacl -m g:users:rwx On Jul 4, 2015 1:53 PM, "Gary Dale" <garydale at torfree.net> wrote: > On 04/07/15 04:22 AM, Rowland Penny wrote: > >> On 04/07/15 00:58, Gary Dale wrote: >> >>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>> >>>> On 03/07/15 17:45, Gary

On 04/07/15 00:58, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

Dear Mark, It looks like you are trying to do the same as I did. Did you read the thread I had some days ago with subject "How to copy roaming profiles to new server ? ("Group policy client service failed. The logon access is denied")" ? This could help you. Other suggestions : Not sure if [profiles.V2] is still required but maybe you should try to add it ? We also

Hello, I set up Samba as an AD-controller as described in the documentation, that is with "samba-tool domain provision --use-rfc2307 --interactive", https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO. I used Debian 7.8 as basis and the current packages (last Friday) from Sernet for Samba 4.1. Now I try to set up roaming profiles as described by Microsoft here:

On my test system I can only get 'getent -V' to respond. Member server smb.conf file: root at mbr01:~# cat /etc/samba/smb.conf [global] workgroup = TEST security = ADS realm = TEST.BOB netbios name = mbr01 domain master = no host msdfs = no dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab client signing = if_required ## map id's outside to

Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins

Hello, I'm trying to join a win2k3 ADS domain using a working config on a debian 'Lenny' (arm processor) from another machine running gentoo (x86 processor) (only changed the netbios name). Samba versions are 3.0.26a on both the machines. I'm pretty sure this is not a kerberos or ldap problem, anyone has a clue what else it could be? # net -d 3 ads join -U administrator

Hi all, I need help to set roaming profiles in my network environment. I follow the samba wiki steps from here: https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles#Implementing_Roaming_Profiles_with_Samba The user's creation is made by Gosa software, and the settings are the same in smb.conf. If i comment all the options related with profiles in smb.conf, the home folder is mapped and

I'm configuring a new samba 4.1 server with NT4 style domain. I've copied most of the configuration from our working 3.6 server, making some changes as needed for the newer samba version. So far, I have been unable to get roaming profiles to work. It seems like the users cannot write in the profiles directory, but I don't see why not. Here is the relevant part of smb.cond [global]

Hi all, I'm quite stuck here at the moment. I have tried this multiple times to get built and can't seem to get it working properly. I have a test virtual server running as a domain controller with Samba 4.1.15 using (9.10.1) bind_dlz as the back end and all works properly. I have the server setup as domain controller and have added a user and I can look that user up with the samba-tool

Hi Bob, Set the rights like this. > /home 775 > > /home/samba 775 > > /home/samba/DT***RM 775 > > /home/samba/DT***RM/profiles 777 for the profiles, after you set the rights in windows, user profiles folders wil be created with the correct rights. and only accessable by the user.. and from here you shoule be able to set the correct rights. Can you give it a try?

Bob, to the following.. set the in smb.conf not more not less. On the member server. [profiles$] path = /home/samba/TEST/profiles read only = no acl_xattr:ignore system acl = yes restart samba now type chown root:root /home/samba/TEST/profiles chmod 1777 /home/samba/TEST/profiles Now go to the wiki and set the correct rights for a profile share. and ONLY for AD! ( not the POSIX )

Good morning!! Hi, my name is Fermin, and I have problems implementing roaming profiles with samba. I follow the follow example:? http://wiki.samba.org/index.php/Samba_%26_Windows_Profiles#Creating_a_profiles_share_and_setting_permissions In the part where it settings the permissions in the folder: Log on to a Windows machine as Domain Administrator Go to ?\\Servername?. You'll see the new

On 06/03/15 17:45, Bob of Donelson Trophy wrote: > > Okay, so I did this to myself. I overlooked an important sentence on the > "https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles". The > sentence that instructs to do "Profile share using Windows ACLs" > ***OR*** "Profile share with using POSIX ACLs". > > So, I have reset the

I am familiar with the contents of https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles#Profile_share_using_POSIX_ACLs. Reading that given my set up (Samba-4.4.3_1 on FreeBSD10.3 and ZFS); and given that smbd -b | grep HAVE_LIBACL produces nothing; I infer that setting up roaming profiles using Windows ACLs are not going to work. I am correct? Which implies that I will have to use the

On 03/07/15 01:21 PM, Rowland Penny wrote: > On 03/07/15 17:45, Gary Dale wrote: >> On 03/07/15 02:44 AM, Gary Dale wrote: >>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>> server but I can't get them to work for the other accounts. The >>> differences are that the one account is also a Linux account in the >>> AD DC