[Samba] Can't create profile directory

[Sylvestre Taburet]

Le Mercredi 26 Juin 2002 13:48, Wim Mevissen a écrit :
> ----- Original Message -----
> From: "Sylvestre Taburet" <staburet at mandrakesoft.com>
>
> >To: "Wim Mevissen" <mevissen at freeler.nl>; <samba at lists.samba.org>
> >Sent: 26 June 2002 11:31
> >Subject: Re: [Samba] Can't create profile directory
> >
> >Le Mercredi 26 Juin 2002 11:19, Wim Mevissen a écrit :
> >> Finally I got SAMBA acting as an PDC. I can see the users of my domain,
>
> my
>
> >> logon script is working, ...
> >>
> >> But my profile directory can't get created eventhough I have given
>
> everyone
>
> >> ALL rights (CHMOD 777). I still get the message beneath when logging in:
> >>
> >> "Windows cannot create profile directory
> >> \\srvlin\home\profiles\mevi.pds. You will be logged on with a local
> >> profile only.
> >> Changes to the profile will not be propagated to the server.
> >> Contact your network administrator.
> >>
> >> DETAIL - Access is denied."
> >>
> >> I added the next lines in SMB.CONF:
> >>
> >> logon script       = logon%U.bat
> >> logon drive        = H:
> >> logon home         = \\%L\%U\.profiles
> >> logon path         = \\%L\home\profiles\%U
> >>
> >> [profiles]
> >> comment           = Profiles (%h)
> >> writeable         = yes
> >> browseable        = no
> >> path              = /home/profiles
> >> create mask       = 0600
> >> directory mask    = 0700
> >>
> >> When I look to the directory properties from my WIN2K machine I see that
> >> I've got all the rights. Has anyone got an idea what's wrong?
> >>
> >> Thanks,
> >>
> >>
> >> Mevi
> >
> >Hi,
> >
> >Try adding:
> >
> >nt acl support = no
> >
> >to your [profiles] share definition. Another hint would be:
> >
> >"Are the domain accounts you're using members of the local group "users"
> > on your win2k/XP workstation???"
> >
> >This is a typical "my profiles are not working" mistake, especially when
>
> the
>
> >system is not able to create .pds files on the server ;o)
> >
> >Cheers
> >--
> >Sylvestre Taburet - Project Manager 1024D/030E1B7E
> >Mandrakesoft S.A. - 43, rue d'Aboukir, 75002 Paris - FRANCE
> >+33 (1) 40 41 00 41 - http://www.linux-mandrake.com
>
> Hi,
>
> I added  nt acl support = no to my [profiles] share definition and I added
> all the domain accounts to the local group "users" on
> my win2k workstation. So the members of the local group Users shows all
> members, something like <domainname>.mevi etc..
>
> Still I get the message? Is there something I can test to narrow the
> problem?
>
> ;-) Mevi

Yes, there is. make the [profiles] directory somewhere else than in your 
home. Try /var/lib/samba/profiles for instance (make sure your users can 
write in that directory). Put the win2k/XP profiles in the homedir is not a 
good idea AFAIK.

[...]
        logon home  = \\%L\%U\.profile
        logon drive = H:
        logon path  = \\%L\Profiles\%U
[...]
[Profiles]
        path = /var/lib/samba/profiles
        browseable = no
        guest ok = yes # (?)
        writable = yes
        nt acl support = no
-- 
Sylvestre Taburet - Project Manager 1024D/030E1B7E
Mandrakesoft S.A. - 43, rue d'Aboukir, 75002 Paris - FRANCE
+33 (1) 40 41 00 41 - http://www.linux-mandrake.com