[Samba] How to prevent creation of user profiles which they don't logon locally

[Collen]

Hello,

there might be several reasons for the fact that home dir's get created.
with the 'template homedir = /home/%D/%u' you can direct
a domain user's home dir to a specific place.
you could try to set it to an allround dir ea. 'template homedir = /tmp'

I'm not sure if samba/winbind create the actualy dir it self.!
it could also be the PAM module that create a homedir
(ea. pam_mkhomedir.so) you have to check that..

Good luck with it..
Collen.

Mehmet Özgün wrote:
> Hi all,
> 
> We're using NT4.0 server as a PDC.
> 
> I can easily logon the domain on Mandrake 10.1 with samba and winbind.
> There is no problem with domain logons.
> 
> But sometimes some domain user profiles are created at /home/NTDOMAIN
> directory even if they did't logon the computer locally or din't
> access any shared resource remotelly.
> 
> How can prevent the creation of the user profiles which didn't logon
> the computer locally.
> 
> All I want is the user profiles should be created if the user logons
> the system locally.
> 
> 
> My smb.conf file is below.
> 
> Thanks.
> 
> 
> --------------------------------------------------------------------------
> 
> [global]
>    workgroup = NTDOMAIN
>    netbios name = LNX01
>    domain master = no
>    local master = no
>    preferred master = no
>    os level = 0
>    server string = %L 
>    log file = /var/log/samba/log.%m
>    log level = 7 
>    local master = no
>    max log size = 50
>    security = domain
>    password server = nt1, nt2
>    encrypt passwords = yes
>    smb passwd file = /etc/samba/smbpasswd
>    winbind uid = 10000-20000
>    winbind gid = 10000-20000
>    winbind use default domain = yes
>    winbind enum users = yes
>    winbind enum groups = yes
>    winbind enable local accounts = yes
>    template homedir = /home/%D/%u
>    obey pam restrictions = yes
>    template shell = /bin/bash
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    wins server = 10.10.0.10
>    dns proxy = no
>    dos charset = 857
>    unix charset = ISO8859-9
> 
> --------------------------------------------------------------------------