[Samba] Error while opening a Excel VBA file in a Samba PDC client

[Prakash Velayutham]

Hi All,

Server OS - SuSE Pro 9.0
Samba server version - samba3-3.0.9-1 (SuSE rpm)
Client - Windows XP Pro SP 2
Office XP SP 2

I have everything working well like machines joining domain, users 
logging in, roaming profiles etc. But when a user of the Samba domain 
tries to open a Excel VBA document, the following error occurs.
"Error accessing the system registry"

Please note that the macro security settings are at LOW. If I say OK to 
the previous error, then the system opens a window titled "Identity 
Login" with 2 buttons "Log Off Identity" and "Manage Identities" and 2 
other buttons "OK" and "Cancel". No actual identities are shown in this 
window. And because of this reason "OK" button is greyed out. If I hit 
"Cancel", then the system opens up the Excel sheet, but with an error 
window saying essentially,

#############################################################
Microsoft Excel File Repair Log

Errors were detected in file 'C:\Documents and 
Settings\prakash\Desktop\autox4.xls'
The following is a list of repairs:

Lost Visual Basic project.
Lost ActiveX controls.
#############################################################

I googled around, and tried this article from Microsoft KB, 
"http://support.microsoft.com/kb/q269383/", but to no avail.

I turned on debugging on the server to 10, but does not help. I can see 
that the server complains about some DLL files being unavailable, but 
these errors don't show up when I try to open the excel sheet.

I am attaching the smb.conf file along; Please help.

Thanks,
Prakash


-------------- next part --------------
# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE
# Date: 2004-07-21
[global]
	unix charset = LOCALE
	workgroup = CMC-NT
	netbios name = MCPILDAP1
	server string = SAMBA-LDAP PDC Server

	ldap passwd sync = Yes
	passdb backend = ldapsam:ldap://127.0.0.1/
;	username map = /etc/samba/smbusers
	log level = 10
	syslog = 0
;	log file = /var/log/samba/%m
	max log size = 50
	smb ports = 139 445
	name resolve order = wins bcast hosts
	time server = yes
	printcap name = cups
	show add printer wizard = no
	printing = cups
	printer admin = @ntadmin, root, administrator
;	printcap cache time = 750
;	cups options = raw

	add user script = /usr/sbin/smbldap-useradd -a -m "%u"
	delete user script = /usr/sbin/smbldap-userdel "%u"
	add group script = /usr/sbin/smbldap-groupadd -p "%g"
	delete group script = /usr/sbin/smbldap-groupdel "%g"
	add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
	set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
	add machine script = /usr/local/sbin/smbldap-tools/smbldap-useradd.pl -w "%u"
	remote announce = 10.10.80.255 10.1.64.255

	logon script = scripts\logon.bat
;	logon path = \\MCPILDAP1\%U\%U
	logon drive = X:
;	homedir map = auto.users
;	NIS homedir = yes

	domain logons = yes
	preferred master = yes
	domain master = yes
	local master = yes
	wins support = no

	idmap backend = ldap:ldap://127.0.0.1/
	ldap admin dn = cn=Manager,o=tchrf,c=us
	ldap suffix = o=tchrf,c=us
	ldap group suffix = ou=PI-groups
	ldap user suffix = ou=PI-users
	ldap machine suffix = ou=PI-hosts
	ldap idmap suffix = ou=Idmap
;	idmap uid = 10000-20000
;	idmap gid = 10000-20000
	map acl inherit = yes
;	ldap ssl = start_tls

	ldap delete dn = yes
	encrypt passwords = yes
;	logon home = \\MCPILDAP1\homes
	os level = 33
	Dos charset = 850
	Unix charset = ISO8859-1
;	map to guest = Bad User
	guest account = nobody
	security = user

	wins server = 10.1.3.200 10.1.1.200
	winbind separator = +
	winbind uid = 10000-20000
	winbind gid = 10000-20000

[homes]
	comment = Home Directories
	valid users = %U
	read only = No
	create mask = 0664
	directory mask = 0775
	browseable = No
[profiles]
	comment = Roaming Profiles Share
	path = /var/lib/samba/profiles
	read only = No
	create mask = 0600
	directory mask = 0700
	browseable = No
	guest ok = yes
	profile acls = yes
	csc policy = disable
	force user = %U
	valid users = %U @"Domain Admins"
;	store dos attributes = Yes
[users]
	comment = All users
	path = /home
	read only = No
	inherit permissions = Yes
	veto files = /aquota.user/groups/shares/
[groups]
	comment = All groups
	path = /home/groups
	read only = No
	inherit permissions = Yes
[pdf]
	comment = PDF creator
	path = /var/tmp
	printable = Yes
	print command = /usr/bin/smbprngenpdf -J '%J' -c %c -s %s -u '%u' -z %z
	create mask = 0600
[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	create mask = 0600
	browseable = No
	printer admin = root,prakash
	guest ok = Yes
[print$]
	comment = Printer Drivers
	path = /var/lib/samba/drivers
	write list = @ntadmin root
	printer admin = @ntadmin root
	force group = ntadmin
	create mask = 0664
	directory mask = 0775
[netlogon]
	comment = Network Logon Service
	path = /var/lib/samba/netlogon
;	admin users = root,prakash
	guest ok = Yes
	read only = Yes
	browseable = No