[Samba] Roaming profiles

[Mugo Martin]

Hi all, thanks for your replies

I got the profiles to work, did not remove the

profile acls = Yes

line. This is my profiles section;

[profiles]
        comment = User profiles
        path = /var/lib/samba/profiles
        read only = No
        profile acls = Yes
        valid users = %U
        force user = %U

That together with the other mentioned configs and commands.
Added a line not in the Samba 3.0.28 master configuration files however.
Dont know whether this is right.

John, the SIDs are different and I had to use this guide to migrate them
because the UIDs and passwords are different on either server.

http://lists.samba.org/archive/samba/2005-December/115326.html

ps: My setup (CentOS 5.1, Samba 3.0.28, Openldap 2.x.x)

Best regards,
Martin.

On Tue, Aug 19, 2008 at 5:59 PM, <devel at thom.fr.eu.org> wrote:

> Maybe you could provide a level 10 log of when the first error happens
> (for a new user).
>
> Are all your users member of the group "users" ?
> Are all the underlying directories (/var /var/lib /var/lib/samba ...) set
> with at least the o+x permission on the file system ?
>
> François
>
> > Hi people. Im in need of help as far as roaming profiles are concerned.
> > Allow me as I know this issue has been discussed timelessly but let me
> > just
> > ask it because I have been unable to get it to work.
> >
> > My Samba + Ldap setup is fine and XP users can authenticate alright. Im
> > using samba 3.0.28. However when logging in for the first time, they get
> > the
> > message;
> >
> > Windows cannot locate a server copy....    -Access is denied
> >
> > When logging off,
> >
> > Windows cannot update your roaming profile... -Access is denied
> >
> > I copied the profiles across from another server, so the first error does
> > not come up except for new users and the old profiles are mapped onto the
> > users machines just fine.
> >
> > I think I've done everything for roaming profiles to work including
> >
> > mkdir -p /var/lib/samba/profiles
> > chown root:users /var/lib/samba/profiles
> > chmod 2775 /var/lib/samba/profiles
> >
> > chown -R user /var/lib/samba/profiles/user/
> >
> > The samba logs don't  show any errors.
> >
> > Below is my smb.conf file
> > [global]
> >         workgroup = EXAMPLE
> >         netbios name = EXAMPLE_SERVER
> >         server string = Samba Server Version %v
> >         passdb backend = ldapsam:ldap://example.org/
> >         log file = /var/log/samba/%m.log
> >         max log size = 50
> >         add user script = /usr/sbin/adduser -m "%u"
> >         add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100
> > -s
> > /bin/false -M %u
> >         logon script = %u.bat
> >         logon path = \\EXAMPLE_SERVER\profiles\%U
> >         logon home = \\EXAMPLE_SERVER\%U
> >         domain logons = Yes
> >         domain master = Yes
> >         ldap admin dn = "cn=config"
> >         ldap group suffix = ou=groups
> >         ldap machine suffix = ou=machines
> >         ldap passwd sync = Yes
> >         ldap suffix = dc=example,dc=org
> >         ldap user suffix = ou=people
> >         cups options = raw
> > [homes]
> >         comment = Home Directories
> >         validusers = %S
> >         read only = No
> >         browseable = No
> >         writable = Yes
> >         create mask= 0700
> >         directory mask = 0700
> > [netlogon]
> >         comment = Network Logon Service
> >         path = /var/lib/samba/netlogon
> >         share modes = No
> >         guest ok = Yes
> > [profiles]
> >         path = /var/lib/samba/profiles
> >         read only = No
> >         writable = Yes
> >         profile acls = Yes
> >         comment = User profiles
> >         create mask = 0600
> >         browsable = no
> >         directory mask = 0700
> >
> > My searches on the web have not helped much. I am running on a Red Hat
> > like
> > system (CentOS 5).
> >
> > Someone please help. I will be eternally grateful.
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> >
>
>
> --
>
>
>