[Samba] Controlling use of roaming profiles

[Andrew Bartlett]

On Thu, 2003-02-06 at 04:22, John H Terpstra wrote:
> On Wed, 5 Feb 2003, Andrew Bartlett wrote:
> 
> > If you want a 'real' read only profile, look into the
> > 'vfs_fake_perms.so' VFS module in Samba HEAD.  It fakes up the
> > permissions on the files being sent to the client, so that you don't
> > need to keep them read/write on the server.
> 
> Well done - you sure did not waste any time doingthis man!

Putting servers into production has that kind of effect on my activities
:-).

> > > By default all MS Windows roaming profiles are 'user' centric. I do not
> > > know of a way to do this on a 'machine-of-origin' basis. I am working on
> > > this for a presentation at the SambaXP conference so I am interested in
> > > any of your findings.
> >
> > I was thinking we could play silly buggers with %m to allow this - have
> > the PDC return different profile paths.  The interesting case here is
> > getting this to work when samba is a acting as a trusted domain.
> 
> Now that is neat! Why di M$ not think of that. It means we can set up a
> profile path for the user in the backend and still keep the profile
> mobile. Isn't that a bit twisted? I like it!
> 
> > (BTW, Samba 3.0 works very nicely being trusted by NT4 at my site).
> 
> Good, but how did you set up the trust relationships?

I just added the trust account to our SAM with 'smbpasswd', then used
usrmgr on the resource domains to set up the one-way trust.  They trust
me, I don't trust them (they are NT4).

> Keep up the good work, and the progress. This is exciting.

I'll certainly try :-)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030206/a58b26f5/attachment.bin