[Samba] sometimes, roaming profile is not found

[sylvain.david at etranges-libellules.fr]

Hi,

The problem is solved : To avoid the problem of "sometimes my roaming 
profile is not found on the server" this 2 options are needed :
- offline files must be disabled, or the profile synchronisation 
behaviour could be bizarre
- the security policy must be touched like this :
    use gpedit.msc and activate : local computer strategy / computer 
config / management template / system / opening session / "allways wait 
for network at computer boot and opening session" (NB : my computer is 
in french, so I had to translate, the "official" path is probably 
slightly different )

Thank you Rune!

Rune Tønnesen a écrit :
> Hi
>
> Is offline files disabled or enabled? Enabled offline files can 
> sometimes cause problems.
>
> Venlig Hilsen (Best Regards)
> Rune Tønnesen
>
>
>
> sylvain.david at etranges-libellules.fr skrev:
>> Hi,
>>
>> I use samba 3.0.22 on Debian Sarge as PDC for windows XP SP1 and SP2. 
>> Sometimes, users get the message "Windows cannot found the roaming 
>> profile on server so user will get a default profile". (sorry, it's 
>> not the official message,  I had to translate, because I get the 
>> message in french) This error comes only if user log in quickly after 
>> the boot. If they wait a little (15/30 seconds) they didn't get the 
>> message.
>> When they get this error, I tell them just to close their session, 
>> and re open it. And it works fin, they didn't get any error message.
>>
>> At first I think it was an ACLs problem, but .... it works if user 
>> wait a few seconds before login.
>> So I think this problem deals with something about a netbios refresh 
>> or windows is not fully ready when it display the login screen. Is 
>> there a workaround for this problem, like delaying the login screen 
>> with a nice registry key, or perhaps it cames from my samba 
>> configuration ?
>>
>> Thank you.
>>
>> Here's my smb.conf :
>>
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> # Global parameters
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> [global]
>>        dos charset = 850
>>        unix charset = ISO8859-1
>>        workgroup = elb-lyon
>>        netbios name = server02
>>        server string = server02.elb-lyon
>>        os level = 65
>>        domain logons = Yes
>>        domain master = Yes
>>        local master = Yes
>>        preferred master = Yes
>>        wins support = Yes
>>
>>        obey pam restrictions = Yes
>>        passdb backend = tdbsam, guest
>>        passwd program = /usr/bin/passwd %u
>>        passwd chat = *New*UNIX*password* %n\n 
>> *ReType*new*UNIX*password* %n\n 
>> *passwd:*all*authentication*tokens*updated*successfully*
>>        passwd chat debug = Yes
>>        pam password change = Yes
>>        unix password sync = Yes
>>
>>        syslog = 0
>>        log level = 2
>>        # log level max = 10
>>        log file = /var/log/samba/log.%m
>>        max log size = 25600
>>        dns proxy = No
>>        panic action = /usr/share/samba/panic-action %d
>>        invalid users = root2
>>
>>        # paramètres samba utilisateur par defaut
>>        logon drive = P:
>>        logon home = \\server02\%U
>>        logon path = \\server02\profiles\%U
>>        logon script = %U.cmd
>>
>>        # gestion des comptes posix automatique
>>        # Gestion des comptes POSIX
>>        add machine script = /usr/sbin/useradd -g sambamachines -c 
>> Machine -d /dev/null -s /bin/false '%u'
>>        add user script = /usr/sbin/useradd -g sambausers -c 
>> Utilisateur -d /dev/null -s /bin/false '%u'
>>        add group script = /usr/sbin/groupadd '%g'
>>        add user to group script = /usr/bin/gpasswd -a '%u' '%g'
>>        delete user script = /usr/sbin/userdel -r '%u'
>>        delete group script = /usr/sbin/groupdel '%g'
>>        delete user from group script = /usr/bin/gpasswd -d '%u' '%g'
>>        set primary group script = /usr/sbin/usermod -g '%g' '%u'
>>
>>        veto files = /lost+found/ .recycle/ aquota.user/ aquota.group/
>>
>>        guest account = guest
>>
>>        hosts allow = 192.168.0. 127.
>>
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> # Necessaire Domaine
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> [homes]
>>        path = /mnt/SAN01/vd3_home2/home2/%u
>>        comment = Home Directories
>>        valid users = %S
>>        guest ok = No
>>        writable = Yes
>>        create mask = 0700
>>        directory mask = 0700
>>        browseable = No
>>
>> [netlogon]
>>        path = /mnt/SAN01/vd3_home2/netlogon
>>        comment = Partage NetLogon
>>        valid users = @sambausers @sambaguests root
>>        guest ok = No
>>        read only = Yes
>>        browseable = No
>>
>> [profiles]
>>        path = /mnt/SAN01/vd3_home2/profiles
>>        comment = Profils utilisateurs
>>        valid users = @sambausers @sambaguests root
>>        guest ok = No
>>        writable = Yes
>>        create mode = 0700
>>        browseable = No
>>
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> # Imprimantes
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> [printers]
>>        path = /tmp
>>        comment = All printers
>>        valid users = @sambausers
>>        guest ok = No
>>        create mask = 0700
>>        printable = Yes
>>        browseable = No
>>
>> [print$]
>>        comment = Printer Drivers
>>        path = /var/lib/samba/printers
>>
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> # Partages
>> # 
>> ----------------------------------------------------------------------------- 
>>
>> [vd1_echange]
>>        path = /mnt/SAN01/vd1_echange
>>        valid users = root @sambaadmins @sambaguests @User_Standard
>>        guest ok = No
>>        writable = Yes
>>        create mask = 0770
>>        directory mask = 0770
>>        browseable = yes
>>        inherit acls = yes
>>        hide unreadable = Yes
>>
>>
>>

-- 
Sylvain DAVID / administrateur réseau

         adr : Etranges Libellules
  .~.          17 Rue des Archers
  /v\          69002 LYON
 /(°)\   tel : 04 72 40 24 72
 ^^-^^   fax : 04 72 40 27 19

  www.etranges-libellules.fr
                                   --