[Samba] How to prevent creation of unwanted user home directories with samba and winbind........

[Mehmet Özgün]

Hi all,

We're using NT4.0 server as a PDC.

I can easily logon the domain on Mandrake 10.1 with samba and winbind.
There is no problem with domain logons.

All we want is to create domain user home directory when the user
logon the computer locally.

But sometimes some domain user home directories are created at /home/NTDOMAIN
directory automatically even if they didn't logon the computer locally or didn't
access any shared resource remotelly.

I used tcpdump to find out the reasons of this home directory
creations. ( without logon locally )

I saw that Windows 2000 computers send netbios-ssn (port 139) packets
to network occasionally.
When a linux client receives these packets it creates a home directory
for the user which is loged on the windows computer that sends these
packets.



Is there way to prevent the creation of the user home directories on
the linux clients when they receive netbios-ssn packets from windows
2000 computers.


My smb.conf file is below.

Thanks.

--------------------------------------------------------------------------

[global]
  workgroup = NTDOMAIN
  netbios name = LNX01
  domain master = no
  local master = no
  preferred master = no
  os level = 0
  server string = %L
  log file = /var/log/samba/log.%m
  log level = 7
  local master = no
  max log size = 50
  security = domain
  password server = nt1, nt2
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd
  winbind uid = 10000-20000
  winbind gid = 10000-20000
  winbind use default domain = yes
  winbind enum users = yes
  winbind enum groups = yes
  winbind enable local accounts = yes
  template homedir = /home/%D/%u
  obey pam restrictions = yes
  template shell = /bin/bash
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  idmap uid = 10000-20000
  idmap gid = 10000-20000
  wins server = 10.10.0.10
  dns proxy = no
  dos charset = 857
  unix charset = ISO8859-9

--------------------------------------------------------------------------