[Samba] Help! About SAMBA_PDC and SRVTOOLS

kunyliu kunyliu at gmail.com
Fri Aug 5 03:40:07 GMT 2005


I want to use NT4's SRVTOOLS to manage the Samba-PDC,But when i use it ,i 
mean ,when i add a account for windows,Samba can only receive the username 
from the tool. 
The others ,such as logon_path,Fullname and Description cannot be received 
by samba. Is some thing wrong with samba? 
what can i do ?
I add the information of a user to the LDAP-server by LDIF-file handly .It 
works fine.And the SRVTOOLS can read it correctly.
Can samba receive all the informations from SRVTOOLS?


And my smb.conf is configured as this :
------------------------------------------------------------------------------------------------------------------
# Global parameters
[global]
workgroup = TECH.JSLC 
netbios name = PDC-SRV
security = user
enable privileges = yes
server string = Samba Server %v
encrypt passwords = Yes
ldap passwd sync = Yes 
unix password sync = Yes
passwd program = /usr/sbin/smbldap-passwd %u 
passwd chat = "Changing password for*\nNew password*" %n\n "*Retype new 
password*" %n\n"
passwd chat debug = Yes 
log level = 0
syslog = 0
log file = /var/log/samba/log.%m
max log size = 100000
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
Dos charset = 850 
Unix charset = ISO8859-1
logon script = hello.vbs 
logon drive = H:
logon home = \\%L\%u
logon path = \\%N\profiles\%u 
domain logons = Yes 
domain master = Yes
os level = 65
preferred master = Yes
wins support = yes
passdb backend = ldapsam:ldap://127.0.0.1/
ldap admin dn = cn=admin,dc=tech,dc=jslc
ldap suffix = dc=tech,dc=jslc 
ldap group suffix = ou=Groups 
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u" 
add machine script = /usr/sbin/smbldap-useradd -w "%u" 
add group script = /usr/sbin/smbldap-groupadd -p "%g" 
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" 
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
[homes]
comment = Home Directories
browseable = no 
writable = no
create mask = 0700
directory mask = 0700
[netlogon]
path = /home/netlogon/
browseable = No
read only = yes

[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes

-------------------------------------------------------------------------------------------------------------------------------------------------------

When i use the SRVTOOLS to add someone ,for example , i add a account who is 
andy,and its User Profile Path is \\PDC-SRV\profiles\andy ,Logon Script Name 
is hello.vbs,and he is a member of Account Operators,Backup Operators,Domain 
Admins. 

When i add it, as the parameter "add user script =" is set to "add user 
script = /usr/sbin/smbldap-useradd -m "%u" " ,this mean that ,this script 
smbldap-useradd will be executed,but the script has only a argument ("%u"). 
I mean ,can the other information User Profile ,Logon Script Name ,etc. be 
received by samba ? I know that "%u" means andy.And what's for the others?


Off couse,when i write all the info. into a LDIF-File ,then i use ldapadd to 
add it to LDAP-Server. The SRVTOOLS can read it all.

Thanks.


More information about the samba mailing list