[Samba] Samba PDC not creating roaming profiles

Thu Sep 25 11:22:47 GMT 2003

Hi,

I tried adding "nt acl support = no" to my share as recommended.
This hasn't changed my problem. I have also made sure that my
SID is the same on both old and new server. (Perhaps it has changed
all together?) The closest I seem to get is the creation of the profile
directory, but nothing is stored in there.
Even with the 'new' SID I have rejoined them to the DOMAIN, the first time
I log in I get a error " Cannot open profile" yet it makes that profile
directory in the correct location, yet with nothing in it. Every login after that
results in no error and nothing changing on my server's profile for that user.

Help needed :P

>>> kurt weiss <input.maillists at kwnet.at> 09/22/03 06:16PM >>>

Lee Martin schrieb:

> Hi All,
> 
> I've tried pretty much everything I can, I have gotten a step further though.
> 
> When logging onto the domain only the profile directory is created for a user,
> unfortuanately with nothing in it.
> 
> 
>>>From earlier I was asked to have a look at the SID, I have updated my Solaris
> 
> 8 server with the 'smbpasswd -S' command yet this doesn't seem to have sorted
> out my problem.

stupid question:
u have read the SID from the original samba with smbpasswd -S and 
updated the solaris server with smbpasswd -W - right?

> 
> Yesterday, in desperation I installed ver 2.2.8a back on to my orginal Linux Server
> with my old config file, which resulted in the exact same thing.
> 

installed back? so it seems u have lost SID? - did u try to re-join one 
of the workstatins to the domain? (4 testing) is then the same problem?

u have *no* error messages, even on the client? (profile is syncronized 
at login *and* logoff)

> Any help would be greatly appreciated.
> 
> Thanks,
> Lee
> 
> 
>>>>"Mark W. Webb" <markwebb at adelphia.net> 09/22/03 12:47PM >>>
> 
> I am having a similar problem with samba 3.0 rc4. My roaming profile 
> gets loaded upon login, but never gets updated upon logout.  Just to 
> debug, I have made all permissions 777 on /home/profile/* and it does 
> not help.
> 
> any help would be greatly appreciated.
> 
> kurt weiss wrote:
> 
> 
>>maybe, u do not use the same SID, or the profiles on the clients are 
>>switched to "local based"??
>>
>>Lee Martin schrieb:
>>
>>
>>>Hi All,
>>>
>>>I have recently moved my PDC from a linux suse 7.0 box to a
>>>Solaris 8 server. I have downloaded the samba 2.2.8a and
>>>installed it without any errors.
>>>I used my old smb.conf and made the neccasry changes to it, I
>>>have pasted it below.
>>>
>>>I don't receive any errors, it just ends up using a local profile and
>>>doesn't bother to update it to the server.
>>>
>>>I have looked at countless documents going through the procedure
>>>of setting up the profiles but not any regarding problems.
>>>
>>>If anyone could help me or at least guide me in the right direction,
>>>I would greatly appreciate it.
>>>
>>>Thanks,
>>>Lee
>>>
>>>smb.conf:
>>>
>>># Global parameters
>>>[global]
>>>    workgroup = PROE
>>>    netbios name = CADADM
>>>    server string = CADADM Samba Server
>>>    interfaces = 192.9.201.29/24 192.9.202.129/24
>>>
>>># PDC Settings
>>>    encrypt passwords = Yes
>>>    passwd program = /usr/bin/passwd %u
>>>    passwd chat = *Enter*NEW*password* %n\n *Reenter*NEW*password* 
>>>%n\n     *Password*Changed*
>>>    passwd chat debug = Yes
>>>    unix password sync = Yes
>>>
>>># Logging Settings
>>>    log level = 2
>>>    log file = /var/samba/log.%m
>>>    max log size = 100
>>>
>>># Time-Sync Settings
>>>    time service = yes
>>>    dos filetimes = yes
>>>
>>># Roaming Profile Settings
>>>
>>>    domain admin group = root @ntadmin
>>>    add user script = /usr/sbin/useradd -d /dev/null -g 100 -s 
>>>/bin/false -M %u
>>>    logon script = startup.bat
>>>    logon path = \\%N\profiles\%U
>>>    domain logons = Yes
>>>    os level = 64
>>>    preferred master = Yes
>>>    domain master = Yes
>>>    wins support = Yes
>>>    remote announce = 192.9.202.255
>>>    admin users = root
>>>
>>>[netlogon]
>>>    comment = PROE domains logon service
>>>    path = /usr/local/samba/netlogon
>>>    write list = root
>>>    browseable = No
>>>    read only = Yes
>>>
>>>[profiles]
>>>    path = /usr/local/samba/ntprofile
>>>    read only = No
>>>    create mask = 0600
>>>    directory mask = 0700
>>>    browseable = Yes
>>>
>>>end smb.conf:
>>>
>>>
>>>
>>>
>>>------------------------------------------------------------------------------------------ 
>>>
>>>DISCLAIMER:
>>>The information contained in this communication is confidential and 
>>>may be legally privileged. It is intended solely for the use of the 
>>>individual or entity to whom it is addressed and others authorised to 
>>>receive it. If you are not the intended recipient please inform us of 
>>>its receipt by you. You are hereby notified that you must not 
>>>disclose, copy, distribute or take any action in reliance of the 
>>>contents of this information, which must be immediately deleted.
>>>
>>>This e-mail was checked by the e-Sweeper Service.
>>>For more information visit our website, Baltimore Technologies 
>>>e-Sweeper :
>>>http:// www.mimesweeper.baltimore.com/products/esweeper/ 
>>>------------------------------------------------------------------------------------------ 
>>>
>>>
>>
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------------------
> This e-mail was checked by the e-Sweeper Service.
> For more information visit our website, Baltimore Technologies e-Sweeper :
> http:// www.mimesweeper.baltimore.com/products/esweeper/ 
> ------------------------------------------------------------------------------------------
> 
> 
> 
> ------------------------------------------------------------------------------------------
> DISCLAIMER:
> The information contained in this communication is confidential and may be legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient please inform us of its receipt by you. You are hereby notified that you must not disclose, copy, distribute or take any action in reliance of the contents of this information, which must be immediately deleted.
> 
> This e-mail was checked by the e-Sweeper Service.
> For more information visit our website, Baltimore Technologies e-Sweeper :
> http:// www.mimesweeper.baltimore.com/products/esweeper/ 
> ------------------------------------------------------------------------------------------
> 

------------------------------------------------------------------------------------------
This e-mail was checked by the e-Sweeper Service.
For more information visit our website, Baltimore Technologies e-Sweeper :
http:// www.mimesweeper.baltimore.com/products/esweeper/ 
------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------
DISCLAIMER:
The information contained in this communication is confidential and may be legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient please inform us of its receipt by you. You are hereby notified that you must not disclose, copy, distribute or take any action in reliance of the contents of this information, which must be immediately deleted.

This e-mail was checked by the e-Sweeper Service.
For more information visit our website, Baltimore Technologies e-Sweeper :
http:// www.mimesweeper.baltimore.com/products/esweeper/
------------------------------------------------------------------------------------------