[Samba] Samba 3, AD, and roaming profiles

Robert M. Martel bob at urban.csuohio.edu
Thu Aug 18 14:50:42 GMT 2005


On 08/17/2005 12:46 AM, Ilia Chipitsine wrote:

>> I have access to User Manager for AD and have modified the profile 
>> entry for my test user to:
>>
>> profile path  \\techops-test\profile
>> login script  \\techops-test\netlogon\mglcua.bat
>>
>> Home directory  map  h:\  to \\techops-test\homes\marteltest
>>
>> I have also tried:
>> profile path  \\techops-test\profile\marteltest
> 
> 
> logon path ? logon home ? (depending on windows version)
> not "profile path" :-)
> 
> "logon path" doesn't have to point to PDC (which is AD in your case), so 
> You can specify samba UNC for that. just remember win2ksp4 and later are 
> picky on profile ACLs, You should either use samba with ACL support or 
> enable "profile acls = yes" on that share (believe me, You don't want 
> that option enabled globally).
> 
> logon script is relative to \\PDC\netlogon, so You can just specify 
> s.bat and it will look for \\PDC\netlogon\s.bat
> 

I do have "profile acls = yes" for the share I want to store the 
profiles on.

Perhaps I was unclear, the parameters above are NOT in my Samba 
smb.conf, but from Microsoft's  "Active Directory Users and Computers" 
tool running from an XP client.  So on the "profile" tab for a user I 
have the following set:

Profile Path    \\techops-test\profile\%USERNAME%

Logon Script    \\techops-test\netlogon\mglcua.bat

Home Folder
	(*) connect h:  to \\techops-test\homes\%USERNAME%

When I logon My home directory is mapped to h:\.  The logon script does 
not run, nor are any errors generated.  The Windows machine reports that 
it is unable to locate the server copy of my roaming profile because the 
  network path was not found.

The Samba resource \\techops-test\profile exists, and already has a 
subdirectory called "marteltest" waiting.

I then see the odd (to me) message in the smblog on the samba server for 
this client that says the profile path is being set to 
"\\techops-test\marteltest\profile" :

------------
[2005/08/18 09:49:59, 4] lib/substitute.c:automount_server(337)
   Home server: techops-test
[2005/08/18 09:49:59, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
   pdb_set_profile_path: setting profile path 
\\techops-test\marteltest\profile,
was
[2005/08/18 09:49:59, 4] lib/substitute.c:automount_server(337)
   Home server: techops-test
[2005/08/18 09:49:59, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
   pdb_set_homedir: setting home dir \\techops-test\marteltest, was
------------

When earlier in the process I see the profile path I want being passed:

------------
[2005/08/18 09:49:59, 8] rpc_parse/parse_prs.c:prs_debug(82)
               0001c8 smb_io_unistr2 uni_profile_path
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
                   01c8 uni_max_len: 00000011
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
                   01cc offset     : 00000000
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
                   01d0 uni_str_len: 00000011
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841)
                   01d4 buffer     : \.\.t.e.c.h.o.p.s.\.p.r.o.f.i.l.e.
[2005/08/18 09:49:59, 8] rpc_parse/parse_prs.c:prs_debug(82)
               0001f6 smb_io_unistr2 uni_home_dir
-------------


I guess I should ask if I *can* store my user's roaming profiles on a 
samba server in an Active Directory environment before I ask what might 
be wrong with my configuration.  It looks like the Windows client is 
asking for the right path...but error messages on the windows client 
just say the network path is not found, but don't say what path it is 
looking for.

Thanks,
Bob Martel

-- 
***********************************************************************
Bob Martel,System Administrator  I met someone who looks a lot like you
Levin College of Urban Affairs   She does the things you do
Cleveland State University       But she is an IBM
(216) 687-2214
bob at urban.csuohio.edu                                -Jeff Lynne
***********************************************************************


More information about the samba mailing list