[Samba] samba 4 questions (status, roaming profiles, etc)
aarons-samba at aberrant.org
Thu Aug 26 11:37:10 MDT 2010
So I tried a new user, and it didn't work, so I debugged a little and
discovered that I was missing a \ when I changed from setting the
profile path per-user to setting it via group policy. After fixing
that, my profile folders were automatically recreated on the server, and
windows attempted to copy my local profile over. It copied a bunch of
stuff, but started failing with a bunch of "The specified network name
is no longer available" errors.
When I logged back in I got the message telling me it was using my local
copy, which is fine since the server copy is incomplete, but in the
event viewer I saw this:
> Windows cannot locate the server copy of your roaming profile and is
> attempting to log you on with your local profile. Changes to the
> profile will not be copied to the server when you log off. This error
> may be caused by network problems or insufficient security rights.
> DETAIL - The program issued a command but the command length is
I have seen that command length error fairly often recently. I have no
idea what causes it, and the web isn't being very helpful.
I got the same error when opening the group policy management app just now.
Anyone know how to debug this?
On 8/25/2010 2:57 AM, Daniel_Müller wrote:
> First of all try with a new user to be shure your setup of profiles
> is working. If it does: You can remove the profile of the user which
> does not working profiles on your machine.
> 1.Press on Start > Run >Regedit 2.Navigate to the following registry
> key :“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\ProfileList” 3.Under ProfileList navigate to
> binary key’s like this :S-1-5-21-3656904587-1668747452-4095529-500
> 4.On the right side under ProfileImagePath you’’ll see the username
> and profile path. 5.Chose the one with the desired user and delete
> the long reg key like
> If you deleted the profile of the user on linux Login as
> administrator do again:
> On your windows client start Active Directory Users and Comupters.
>> click,properties, then profil tab: Profile path: Yourpathtothe
>> profiles along with %Username% EX: \\mydomain\profiles\%USERNAME%
> Then logon as this user to your machine.
> ----------------------------------------------- EDV Daniel Müller
> Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str.
> 24 72076 Tübingen
> Tel.: 07071/206-463, Fax: 07071/206-499 eMail:
> mueller at tropenklinik.de Internet: www.tropenklinik.de
> ----------------------------------------------- -----Ursprüngliche
> Nachricht----- Von: Aaron Solochek [mailto:aarons-samba at aberrant.org]
> Gesendet: Dienstag, 24. August 2010 16:40 An:
> mueller at tropenklinik.de Betreff: Re: AW: [Samba] samba 4 questions
> (status, roaming profiles, etc)
> Yeah, that is all setup properly. My issue is that the profile was
> there, but somehow corrupted, so I moved it out of the way. Now
> windows is not recreating it, but just complaining that it can't find
> it. I need a way to make the samba or windows (which ever is the
> problem) think the roaming profile should be created from scratch.
> On 8/24/2010 10:33 AM, Daniel_Müller wrote:
>> Make profiles ready in windows7:
>> In your smb.conf:
>> [profiles] path= /yourprofilepath/profiles read only= no
>> mkdir /yourprofilepath/profiles
>> On your windows client start Active Directory Users and Comupters.
>> Right click,properties, then profil tab: Profile path:
>> Yourpathtothe profiles along with %Username% EX:
>> ----------------------------------------------- EDV Daniel Müller
>> Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str.
>> 24 72076 Tübingen
>> Tel.: 07071/206-463, Fax: 07071/206-499 eMail:
>> mueller at tropenklinik.de Internet: www.tropenklinik.de
>> -----Ursprüngliche Nachricht----- Von:
>> samba-bounces at lists.samba.org
>> [mailto:samba-bounces at lists.samba.org]
>> Auftrag von Aaron Solochek Gesendet: Dienstag, 24. August 2010
>> 15:58 An: samba at lists.samba.org Betreff: [Samba] samba 4 questions
>> (status, roaming profiles, etc)
>> I'm testing samba 4 (pulling from git) on my ubuntu 10.4 box and
>> have a bunch of questions I can't seem to find answers for on the
>> 1) There is some problem with my roaming profile such that windows
>> complains and logs me in using my most recently saved profile.
>> I've tried moving my profile on the server out of the way, but
>> windows doesn't seem to recreate it. How do I make it recreate a
>> roaming profile? The client is windows 7.
>> 2) My AD domain is FOO.COM, but the actual domain internally is
>> bar.foo.com. I ran into some issues with this, this biggest of
>> which was that clients would try to pull their group policy from
>> //FOO.COM/sysvol/foo.com/... which meant that the server needed to
>> be exposed externally. I solved this by having foo.com resolve to
>> the local IP internally, but I was wondering if there is some more
>> elegant way to tell clients that the controller for FOO.COM is
>> <some arbitrary host> for these purposes. Also, am I going to run
>> into other pain by having a flat AD domain scheme? Creating a
>> BAR.FOO.COM domain seems like it would be a pain at this point.
>> 3) What is the status of printing in samba4? The most recent thing
>> I could find online was from 2005 and said it wasn't implemented
>> yet. All our printers are IP printers, and my goal is to have them
>> automatically added to machines via group policy.
>> 4) What's the deal with the Users and Computers sections of group
>> policy objects? If I already have my users and computers separated
>> into People and Machines groups in active directory, and have two
>> group policy objects People_GP and Machines_GP applied to their
>> respective groups, will settings in the Users section of
>> Machines_GP apply to any user that logs in to a machine in the
>> Machines group?
>> 5) Where can I find all the smb.conf options that are actually
>> valid for samba4?
>> 6) I can't seem to edit the unix attributes for users in AD. I'd
>> really like to be able to pull account information down via ldap on
>> unix machines. Is this possible?
>> Ok, I think that's enough for now. I really appreciate any help
>> people can offer.
More information about the samba