[Samba] Need local profiles in win2k/sp2

Darren Spruell darren_spruell at sento.com
Fri Apr 11 16:35:14 GMT 2003


Greetz all,

I am setting up a comain controller for a windows 2000 network and I 
think I have everything squared away. The problem that I am having right 
now is that all of the documentation/howtos that I have thusfar seen 
assume that a user wishes to implement roaming profiles in Samba. We 
want to preserve local profiles (local on the client.)

I had seen a posting suggesting to set the local path for the profiles 
with the logon path option; it seems to almost work but when I try to 
log in with a user in the samba domain, they are met with errors 
relating that they are recieving a temporary profile and changes made to 
it will not be saved. The bottom of the event error gives the reason 
"access denied". I notice that the default, if the logon path option is 
not used, is to set a profile up in the unix user's home directory.

Below is included my running smb.conf. (Forgive the lengthy inclusion.)

I set logon path = C:\Documents and Settings\%U hoping that it would 
create the profile using the name of the user logging in as their login 
name. Here is the error recieved at login, when logging in as Samba user 
"test":

=====================================================================
Windows cannot create profile directory C:\Documents and 
Settings\test.pds. You will be logged on with a local profile only. 
Changes to the profile will not be propogated to the server. Contact 
your network administrator.

Detail - Access is denied.
=====================================================================

When the user is logged in and given thier temporary profile 
(C:\Documents and Settings\TEMP), this is seen in the machine error log 
in Samba:

================================================================
[2003/04/11 10:17:08, 0] smbd/service.c:make_connection(251)
   darren-laptop (172.16.10.2) couldn't find service test
[2003/04/11 10:17:08, 0] smbd/service.c:make_connection(251)
   darren-laptop (172.16.10.2) couldn't find service test
================================================================

What does that mean? It is trying to find a share at \\server\test?

And how can I make the local profiles work ?

TIA,

DS

================================================================
Load smb config files from /etc/samba/smb.conf
Processing section "[netlogon]"
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
[global]
         coding system =
         client code page = 850
         code page directory = /usr/share/samba/codepages
         workgroup = PGPCORP
         netbios name = PGPPROXY
         netbios aliases =
         netbios scope =
         server string = Samba Server
         interfaces =
         bind interfaces only = No
         security = USER
         encrypt passwords = Yes
         update encrypted = No
         allow trusted domains = Yes
         hosts equiv =
         min passwd length = 5
         map to guest = Never
         null passwords = No
         obey pam restrictions = Yes
         password server =
         smb passwd file = /etc/samba/smbpasswd
         root directory =
         pam password change = Yes
         passwd program = /usr/bin/passwd %u
         passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentic
ation*tokens*updated*successfully*
         passwd chat debug = No
         username map =
         password level = 0
         username level = 0
         unix password sync = Yes
         restrict anonymous = No
         lanman auth = Yes
         use rhosts = No
         admin log = No
         log level = 0
         syslog = 1
         syslog only = No
         log file = /var/log/samba/%m.log
         max log size = 0
         timestamp logs = Yes
         debug hires timestamp = No
         debug pid = No
         debug uid = No
         protocol = NT1
         large readwrite = Yes
         max protocol = NT1
         min protocol = CORE
         read bmpx = No
         read raw = Yes
         write raw = Yes
         nt smb support = Yes
         nt pipe support = Yes
         nt status support = Yes
         announce version = 4.9
         announce as = NT
         max mux = 50
         max xmit = 16644
         name resolve order = lmhosts host wins bcast
         max ttl = 259200
         max wins ttl = 518400
         min wins ttl = 21600
	time server = No
         unix extensions = No
         change notify timeout = 60
         deadtime = 0
         getwd cache = Yes
         keepalive = 300
         lpq cache time = 10
         max smbd processes = 0
         max disk size = 0
         max open files = 10000
         name cache timeout = 660
         read size = 16384
         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
         stat cache size = 50
         use mmap = Yes
         total print jobs = 0
         load printers = Yes
         printcap name = /etc/printcap
         disable spoolss = No
         enumports command =
         addprinter command =
         deleteprinter command =
         show add printer wizard = Yes
         os2 driver map =
         strip dot = No
         mangling method = hash
         character set =
         mangled stack = 50
         stat cache = Yes
         domain admin group =
         domain guest group =
         machine password timeout = 604800
         add user script =
         delete user script =
         logon script =
         logon path = C:\Documents and Settings\%U
         logon drive =
         logon home = \\%N\%U
         domain logons = Yes
         os level = 36
         lm announce = Auto
         lm interval = 60
         preferred master = Yes
         local master = Yes
         domain master = Yes
         browse list = Yes
         enhanced browsing = Yes
         dns proxy = No
         wins proxy = No
         wins server =
         wins support = Yes
         wins hook =
         kernel oplocks = Yes
         lock spin count = 3
         lock spin time = 10
         oplock break wait time = 0
         add share command =
         change share command =
         delete share command =
         config file =
         preload =
         lock dir = /var/cache/samba
         pid directory = /var/run/samba
         utmp directory =
         wtmp directory =
         utmp = No
         default service =
	message command =
         dfree command =
         valid chars =
         remote announce =
         remote browse sync =
         socket address = 0.0.0.0
         homedir map = auto.home
         time offset = 0
         NIS homedir = No
         source environment =
         panic action =
         hide local users = No
         winbind uid =
         winbind gid =
         template homedir = /home/%D/%U
         template shell = /bin/false
         winbind separator = \
         winbind cache time = 15
         winbind enum users = Yes
         winbind enum groups = Yes
         winbind use default domain = No
         comment =
         path =
         alternate permissions = No
         username =
         guest account = nobody
         invalid users = bin daemon adm lp sync shutdown halt mail
		news uucp operator games gopher ftp vcsa mailnull
		rpm ntp rpc xfs rpcuser nfsnobody nscd ident radvd
		apache squid pcap mysql sshd
         valid users =
         admin users =
         read list =
         write list =
         printer admin =
         force user =
         force group =
         read only = Yes
         create mask = 0744
         force create mode = 00
         security mask = 0777
         force security mode = 00
         directory mask = 0755
         force directory mode = 00
         directory security mask = 0777
         force directory security mode = 00
         force unknown acl user = 00
         inherit permissions = No
         inherit acls = No
         guest only = No
         guest ok = No
         only user = No
         hosts allow = 172.16.10. 127.
         hosts deny =
         status = Yes
         nt acl support = Yes
         profile acls = No
         block size = 1024
         max connections = 0
         min print space = 0
         strict allocate = No
         strict sync = No
         sync always = No
         write cache size = 0
         max print jobs = 1000
         printable = No
         postscript = No
         printing = lprng
	print command = lpr -r -P%p %s
         lpq command = lpq -P%p
         lprm command = lprm -P%p %j
         lppause command =
         lpresume command =
         queuepause command =
         queueresume command =
         printer name =
         use client driver = No
         default devmode = No
         printer driver =
         printer driver file = /etc/samba/printers.def
         printer driver location =
         default case = lower
         case sensitive = No
         preserve case = Yes
         short preserve case = Yes
         mangle case = No
         mangling char = ~
         hide dot files = Yes
         hide unreadable = No
         delete veto files = No
         veto files =
         hide files =
         veto oplock files =
         map system = No
         map hidden = No
         map archive = Yes
         mangled names = Yes
         mangled map =
         browseable = Yes
         blocking locks = Yes
         csc policy = manual
         fake oplocks = No
         locking = Yes
         oplocks = Yes
         level2 oplocks = Yes
         oplock contention limit = 2
         posix locking = Yes
         strict locking = No
         share modes = Yes
         copy =
         include =
         exec =
         preexec close = No
         postexec =
         root preexec =
         root preexec close = No
         root postexec =
         available = Yes
         volume =
         fstype = NTFS
         set directory = No
         wide links = Yes
         follow symlinks = Yes
         dont descend =
         magic script =
         magic output =
         delete readonly = No
         dos filemode = No
         dos filetimes = No
         dos filetime resolution = No
         fake directory create times = No
         vfs object =
         vfs options =

[netlogon]
         comment = Network Logon Service
         path = /usr/local/samba/lib/netlogon
         browseable = No
         share modes = No

================================================================

-- 
Darren Spruell
Sento I.S. Department
darren_spruell at sento.com



More information about the samba mailing list