[Samba] Profiles and Service Packs
greg at gregfolkert.net
Tue May 18 22:57:51 GMT 2004
On Tue, 2004-05-18 at 10:12, Dael wrote:
> Gerald (Jerry) Carter schrieb:
> > | A Friend told me, that the Profile Folder has to
> > | be inside the Home-Directory to get it work. Is this
> > | correct?? I do not want this.
> > No. storing profiles in separate shares for NT4+ clients is
> > the recommended method.
> this is good news, but how do i get it work?? I always get the wrong
> Permission Error!
If you read the error you get from Windows when you login it tells you
how to fix the problem.
Basically, the actual profiles directories are supposed to be owned by
the profile user. A good measure would also to have the group as the
designated Domain-Admin group (mine is admins or @admins for the *NIX
group admins) I also have mapped a few Microsoft needed groups to the
proper *NIX groups.
Here is a listing of what I am saying:
from my smb.conf:
logon script = login.bat
logon path = \\myserver\profiles\%U
logon drive = h:
logon home = \\myserver\%U
comment = Profiles
path = /home/samba/profiles
force user = %U
force group = admins
read only = No
create mask = 0600
directory mask = 0770
TITLE Domain Login Script
net time \\myserver /set /y
net use h: /home
net use s: \\myserver\data
net use w: \\myserver\music
net use y: \\myserver\cvs
net use z: \\myserver\depot
that was a simplified login.bat
Here is other important pieces.
ls -ld /home/samba/profiles
drwxrwxrwx 11 root admins 4096 May 11 14:55 profiles
Listing of the profiles directory.
[greg at myserver:profiles]$ ls -l /home/samba/profiles/
drwxrwx--- 13 greg admins 4096 May 6 09:40 greg
drwxrwx--- 18 user22 admins 4096 May 18 15:25 user22
drwxrwx--- 16 user33 admins 4096 May 11 09:32 user33
drwxrwx--- 13 user44 admins 4096 May 10 09:33 user44
drwxrwx--- 14 user55 admins 4096 May 18 14:04 user55
drwxrwx--- 2 user66 admins 4096 May 4 17:21 user66
drwxrwx--- 13 user77 admins 4096 May 6 09:45 user77
drwxrwx--- 2 user88 admins 4096 May 7 11:26 user88
drwxrwx--- 2 user99 admins 4096 May 7 11:27 user99
Of course you see I have changed everything to be generic but correct.
This roaming profile setup works for me and will for you too.
greg at gregfolkert.net
REMEMBER ED CURRY! http://www.iwethey.org/ed_curry
Novell's Directory Services is a competitive product to Microsoft's
Active Directory in much the same way that the Saturn V is a competitive
product to those dinky little model rockets that kids light off down at
the playfield. -- Thane Walkup
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040518/68d4d621/attachment.bin
More information about the samba