[Samba] Roaming Profiles with WinXP and Samba PDC

[kgmm at kgmm.co.uk]

Hello,

After a great deal of tweaking, I finally got the Samba server
working, so that it would accept domain logins. However, the problem I
now have regards roaming profiles, which refuse to function. After
successfully authenticating the user, the following 2 messages appear:

Message 1:
----------
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the
profile will not be copied to the server when you logoff. Possible
causes of this error include network problems or insufficient security
rights. If this problem persists, contact your network administrator.

DETAIL - The network path was not found. 


Message 2:
----------
Windows cannot find the local profile and is logging you on with a
temporary profile. Changes you make to this profile will be lost when
you log off.


I have included the smb.conf below for reference, in case there is a
mistake there. I have already applied the "sign or seal" registry
patch and have changed the following setting in gpedit:

"Do not check for user ownership of roaming profiles folders"
[Enabled]

The server is running Mandrake 9.2 (kernel version 2.4.22-10) and Samba 2.2.8.


smb.conf
--------

# /etc/samba/smb.conf
# samba configuration file
# last updated 23/03/04 by KMM

[global]

        ;basic server settings
        workgroup = home
        netbios name = host
        server string = Samba PDC running %v
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192

        ;PDC and master browser settings
        os level = 64
        preferred master = yes
        local master = yes
        domain master = yes

        ;security and logging settings
        security = user
        encrypt passwords = yes
        domain logons = yes
        log file = /var/log/samba/log.%m
        log level = 2
        max log size = 50
        hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0

        ;user profiles and home directory
        logon home = \\%L\%U\
        logon drive = H:
        logon path = \\L%\profiles\%U
        logon script = netlogon.bat
        add user script = /usr/sbin/useradd -d /dev/null -g machines
-s /bin/false -M %u

        ;sync UNIX passwords
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n
*Retype*new*UNIX*password* %n\n *Enter*new*UNIX*password* %n\n
*Retype*new*UNIX*password* %n\n *passwd:
*all*authentication*tokens*updated*successfully*

#---Shares---

[homes]

        comment = Home Directories
        browseable = no
        writeable = yes

[profiles]

        path = /home/samba/profiles
        writeable = yes
        browseable = no
        create mask = 0600
        directory mask = 0700
        nt acl support = yes
        profile acls = yes

[netlogon]
        path = /home/netlogon
        browseable = no
        write list = graham
        comment = Network Logon Service