[Samba] Profiles and Service Packs

[Greg Folkert]

On Tue, 2004-05-18 at 10:12, Dael wrote:
> Gerald (Jerry) Carter schrieb:
> 
> >
> > | A Friend told me, that the Profile Folder has to
> > | be inside the Home-Directory to get it work. Is this
> > | correct?? I do not want this.
> >
> > No.  storing profiles in  separate shares for NT4+ clients is
> > the recommended method.
> >
> this is good news, but how do i get it work?? I always get the wrong 
> Permission Error!

If you read the error you get from Windows when you login it tells you
how to fix the problem.

Basically, the actual profiles directories are supposed to be owned by
the profile user. A good measure would also to have the group as the
designated Domain-Admin group (mine is admins or @admins for the *NIX
group admins) I also have mapped a few Microsoft needed groups to the
proper *NIX groups.

Here is a listing of what I am saying:


from my smb.conf:
[global]
        logon script = login.bat
        logon path = \\myserver\profiles\%U
        logon drive = h:
        logon home = \\myserver\%U

[profiles]
        comment = Profiles
        path = /home/samba/profiles
        force user = %U
        force group = admins
        read only = No
        create mask = 0600
        directory mask = 0770

My login.bat:

TITLE Domain Login Script
net time \\myserver /set /y
net use h: /home
net use s: \\myserver\data
net use w: \\myserver\music
net use y: \\myserver\cvs
net use z: \\myserver\depot
 
:quit


that was a simplified login.bat

Here is other important pieces.


ls -ld /home/samba/profiles

        drwxrwxrwx   11 root     admins       4096 May 11 14:55 profiles

Listing of the profiles directory.

[greg at myserver:profiles]$ ls -l /home/samba/profiles/
total 36
drwxrwx---   13 greg     admins       4096 May  6 09:40 greg
drwxrwx---   18 user22   admins       4096 May 18 15:25 user22
drwxrwx---   16 user33   admins       4096 May 11 09:32 user33
drwxrwx---   13 user44   admins       4096 May 10 09:33 user44
drwxrwx---   14 user55   admins       4096 May 18 14:04 user55
drwxrwx---    2 user66   admins       4096 May  4 17:21 user66
drwxrwx---   13 user77   admins       4096 May  6 09:45 user77
drwxrwx---    2 user88   admins       4096 May  7 11:26 user88
drwxrwx---    2 user99   admins       4096 May  7 11:27 user99

Of course you see I have changed everything to be generic but correct.
This roaming profile setup works for me and will for you too.

Good luck.
-- 
greg at gregfolkert.net
REMEMBER ED CURRY! http://www.iwethey.org/ed_curry

Novell's Directory Services is a competitive product to Microsoft's
Active Directory in much the same way that the Saturn V is a competitive
product to those dinky little model rockets that kids light off down at
the playfield. -- Thane Walkup
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040518/68d4d621/attachment.bin