[Samba] Re: Profiles share on BDC

[Danny Paul]

It occurs to me that I should have attached the smb.conf files
-------------- next part --------------

--PDC--
[global]
        workgroup = DOMAIN
        server string = "Primary Domain Controller"
        null passwords = Yes
        passdb backend = ldapsam:ldap://XXXXXXXXXX
        log level = 1
        syslog = 0
        name resolve order = wins hosts bcast
        time server = Yes
        socket options = TCP_NODELAY SO_SNDBUF=65536 SO_RCVBUF=65536
IPTOS_LOWDELAY
        show add printer wizard = No
        add user script = /var/lib/samba/sbin/smbldap-useradd.pl -a -m '%u'
        delete user script = /var/lib/samba/sbin/smbldap-userdel.pl '%u'
        add group script = /var/lib/samba/sbin/smbldap-groupadd.pl -p '%g'
        delete group script = /var/lib/samba/sbin/smbldap-groupdel.pl '%g'
        add user to group script = /var/lib/samba/sbin/smbldap-groupmod.pl
-m '%u' '%g'
        delete user from group script
= /var/lib/samba/sbin/smbldap-groupmod.pl-x '%u' '%g'
        set primary group script = /var/lib/samba/sbin/smbldap-usermod.pl -g
'%g' '%u'
        add machine script = /var/lib/samba/sbin/smbldap-useradd.pl -w '%u'
        logon script = netlogon.cmd
        logon path = \\XXXXXXXXXX\profiles\%U
        logon home = \\XXXXXXXXXX\profiles\%U
        domain logons = Yes
        os level = 75
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap admin dn = cn=Manager,XXXXXXXXXX
        ldap group suffix = ou=group
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=people
        ldap suffix = dc=XXXXXXXXXX
        ldap user suffix = ou=people
        idmap backend = ldap://XXXXXXXXXX
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        profile acls = Yes
        map acl inherit = Yes

[netlogon]
        comment = "Net logon share"
        path = /netlogon
        write list = root

[profiles]
        comment = "Roaming profile share"
        path = /profiles
        read only = No
        hide files = /desktop.ini/Desktop.ini/DESKTOP.INI/


--BDC--

[global]
        workgroup = DOMAIN
        server string = "Backup Domain Controller"
        passdb backend = ldapsam:ldap://172.22.10.23
        log level = 1
        syslog = 0
        logon path = \\pdc\profiles\%U
        logon home = \\pdc\profiles\%U
        domain logons = Yes
        domain master = No
        wins server = <pdc address>
        ldap admin dn = uid=root,ou=People,dc=columbia,dc=mo,dc=gov
        ldap group suffix = ou=group
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=people
        ldap suffix = dc=XXXXXXXXXX
        ldap user suffix = ou=people
        idmap backend = ldap://<bdc>
        idmap uid = 10000-20000
        idmap gid = 10000-20000

[genvol]
        comment = "General Storage"
        path = /data/genvol
        valid users = helpdesk
        read only = No

[webdata]
        comment = "Web data"
        path = /data/www
        valid users = helpdesk
        read only = No

[backup]
        comment = "Backup Volume"
        path = /data/backup
        valid users = helpdesk
        read only = No

[inventory]
        comment = "Inventory 2005"
        path = /data/www/secure/inventory2005
        valid users = inventory
        read only = No

[netlogon]
        comment = "Net logon share"
        path = /netlogon
        write list = root