[Samba] roaming profiles problem for new users

[Jon Wilson]

Due to hardware failure we had a rushed migration from a Samba v3.0.9 on 
FreeBSD 4, to v3.0.10 on Mandrake Linux 10.1. Since then I have had 
problems getting roaming profiles to work for new users. Things works 
fine for existing users, but things are broken for new ones. The setup 
is a fairly standard Samba PDC with Windows XP clients.

When users added since the upgrade log in, they then do not get proper 
use of roaming profiles. They get the following error and a temporary 
local profile.

"Windows cannot locate the server copy of your roaming profile and is 
attempting to log you on with your local profile. Changes to the profile 
will not be copied to the server when you logoff. Possible causes of 
this error include network problems or insufficient security rights. If 
this problem persists, contact your network administrator.  DETAIL - The 
filename, directory name, or volume label syntax is incorrect."

I'm not sure if there has been change in some defaults, or something 
related to the change in OS, or if there is a less than obvious config 
change that I have made accidentally. I've turned up debugging to 10, 
but there doesnt seem to be any error in the samba logs that I can 
relate to the windows error.

Previously, new users seemed to get a default profile (from the local 
machine, I guess) and a profiles directory on the server would get 
created on logout. I don't need to do anything with mandatory profiles; 
all I want is user settings to be synced to the server.

smb.conf extract follows. I can post other diagnostic information as 
required.

===================================

[global]
   netbios name = samba.uk
   netbios aliases = samba
   workgroup = DOMAIN-NAME
   server string = Samba file server
   hosts allow = 10.3. 127.0.0.1
   bind interfaces only = yes
   load printers = no
   log file = /var/log/samba/%m.log
   max log size = 50000
   log level = 10
   syslog = 0
   security = user
   encrypt passwords = yes
   update encrypted = Yes
   passdb backend = tdbsam
   private dir = /etc/samba/private
   socket options = TCP_NODELAY
   local master = yes
   os level = 99
   domain master = yes
   preferred master = yes
   wins support = yes
   dns proxy = yes
   domain logons = yes
   logon script = logon.bat
   admin users = administrator
   logon path = "\\samba.uk\profiles\%U"
   create mask = 0670
   directory mask = 0770
   inherit permissions = Yes
   time server = yes

[profiles]
    path = /home/samba/profiles
    browseable = yes
    directory mode = 0700
    create mode = 0600
    writable = yes
    profile acls = yes
    csc policy = disable