[Samba] Windows cannot locate the server copy of your roaming profile

[Mailing List SVR]

Hi,

I'm exerimenting with samba+ldap pdc and I have "Windows cannot locate
the server copy of your roaming profile" on logon,

here is smb.conf:

[global]
 unix charset = LOCALE
 workgroup = CPE 
 netbios name = CPE-PDC
 server string = Samba Domain Controller
 enable privileges = yes
 interfaces = eth1,lo
 bind interfaces only = Yes
 passdb backend = ldapsam:ldap://192.168.10.124
# username map = /etc/samba/smbusers
 hide unreadable = yes 
 hide dot files = yes	
 log level = 1
 syslog = 0
 log file = /var/log/samba/%m
 max log size = 50
 smb ports = 137 138 139 445
 name resolve order = wins bcast hosts
 time server = Yes
 printcap name = CUPS
# map to guest = Never
# guest account = nobody
 wins support = Yes
 ldap suffix = dc=cpe,dc=it
 ldap machine suffix = ou=Computers
 ldap user suffix = ou=People
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap admin dn = cn=admin,dc=cpe,dc=it
 idmap backend = ldap:ldap://192.168.10.124
 idmap uid = 10000-20000
 idmap gid = 10000-20000 
 map acl inherit = Yes
 printing = cups
 #printer admin = Administrator
 veto files = /*.eml/*.nws/*.{*}/ 
 veto oplock files = /*.doc/*.xls/*.mdb/
 encrypt passwords = Yes
 obey pam restrictions = No
 ldap passwd sync = Yes
 mangling method = hash2

 logon script = scripts\logon.bat 
 logon path = \\%L\profiles\%U 
 logon drive = H: 
 logon home = \\%L\%U

 domain logons = Yes
 os level = 65
 preferred master = Yes
 domain master = Yes
 add user script = /usr/sbin/smbldap-useradd -m "%u"
 ldap delete dn = Yes
 add machine script = /usr/sbin/smbldap-useradd -w "%u"
 add group script = /usr/sbin/smbldap-groupadd -p "%g" 
 add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
 delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
 set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
 delete user script = /usr/sbin/smbldap-userdel “%u”
 delete group script = /usr/sbin/smbldap-groupdel “%g”

[netlogon]
	comment = Network Logon Service
    	path = /home/samba/netlogon/
	browseable = No
        read only = yes
	writable = No
	locking = No
	share modes= No

[profiles]
        path = /home/samba/profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        browseable = No
#        guest ok = No
        profile acls = yes
        csc policy = disable
	nt acl support = Yes
        valid users = %U
	admin users = @"Domain Admins"
	hide files = /desktop.ini/outlook*.lnk/*Briefcase*/
	root preexec = PROFILE=/home/samba/profiles/%u; if [ ! -e $PROFILE ];
then mkdir -pm700 $PROFILE; chown %u:%g $PROFILE;fi

[homes]
 comment = Home Directories
 valid users = %S
 read only = No
 browseable = No
 writable = yes


any hints?

regards
Nicola