[Samba] UNIX paths vs UNC names in [profile]

[Andrew Bartlett]

On Tue, 2003-11-18 at 07:28, John H Terpstra wrote:
> On Mon, 18 Nov 2003, Andrew Bartlett wrote:
> 
> > On Tue, 2003-11-18 at 05:56, John H Terpstra wrote:
> > > On Mon, 17 Nov 2003, Jeff Gardiner wrote:
> > >
> > > > QUESTION
> > > > My question therefore is this - I have multiple /home/subdomain directories,
> > > > like
> > > > /home/disk1
> > > > /home/disk2
> > > > /home/backupdisk3b  ... etc
> > > >
> > > > How do I store the profile in the users home dir.  My rationale is that as all
> > > > of my OSX users, and Unix/Linux users have to adhere to a quota - I'd rather
> > > > force my windows users to adhere to the same quota by storing their profile
> > > > in /home/disk?/user/profile and I could do that using \\%L\%U\profile.  Now
> > > > one solution is to apply the quote to say /var/lib/samba/profile/%U but I'd
> > > > rather keep the profile in or off of the home dir anyway.
> > > >
> > > > resolving /home/disk?/user/profil using Unix path names is difficult because I
> > > > have so many disks with home dirs.
> > > >
> > > > BTW I've tried:
> > > > path = ~%U/profile
> > >
> > > You could try:
> > >
> > > path = %H/profile
> >
> > What's wrong with not having a [profile] share at all, and instead using
> > the [homes] share, and a profile subdirectory?
> >
> > This has the advantage that windows knows they are different files for
> > each user, and will not attempt to 'optimise' the file locking between
> > users (remember, MS has a strictly one-to-one mapping between shares and
> > real disk paths).
> >
> > > >
> > > > hoping that ~user would resolve correctly. It didn't seem to work.
> > >
> > > The problem is that the profile handling may do some anonymous file access
> > > to the Windows users' profile. This may fail if you store the profile in
> > > the home directory and 'others' do not have access rights to this location
> > > on disk.
> >
> > I know this happens with netlogon - but have you really seen it with
> > profiles?
> 
> Yes. With Win2K Pro clients. In the final stages of writing the profile
> to the server, only when the profile existed before login. I have not seen
> this with XPPro though.

I presume it's fixed in a service pack, given that such an operation
would fail against Microsoft servers too.  

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20031118/7502cb5e/attachment.bin