[Samba] Fwd: how to "Disable Samba Roaming profile"

[tms3 at tms3.com]

>
> --- Original message ---
> Subject: [Samba] Fwd: how to "Disable Samba Roaming profile"
> From: Muqtadir Kamal <smkamal2001 at gmail.com>
> To: <samba at lists.samba.org>
> Date: Thursday, 10/06/2010 10:31 PM
>
> ---------- Forwarded message ----------
> From: Muqtadir Kamal <smkamal2001 at gmail.com>
> Date: Fri, Jun 11, 2010 at 10:49 AM
> Subject: how to "Disable Samba Roaming profile"
> To: samba at lists.samba.org
>
>
> Hey all, please let's me know how to "Disable Samba Roaming profile" 
> In
> OpenLDAP+SAMBA SERVER [root at XXXXX ~]# testparmLoad smb config files 
> from
> /etc/samba/smb.confProcessing section "[homes]"Global parameter server
> signing found in service section!Global parameter server schannel 
> found in
> service section!Processing section "[netlogon]"Processing section
> "[Profiles]"WARNING: No path in service Profiles - making it 
> unavailable!NOTE:
> Service Profiles is flagged unavailable.
SNIP

OK, I have some N00b time.

First open in your favorite text editor smbldap.conf, and find the 
bits that look like this:

##############################################################################
#
# SAMBA Configuration
#
##############################################################################

# The UNC path to home drives location (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
home'
# directive and/or disable roaming profiles
# Ex: userSmbHome="\\PDC-SMB3\%U"
userSmbHome="\\<NetBIOS-ServerName or ip-addy>\<ShareName>"

# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
path'
# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="\\<NetBIOS-ServerName or ip-addy>\<ProfileDirectory>\%U"

# The default Home Drive Letter mapping
# (will be automatically mapped at logon time if home directory exist)
# Ex: userHomeDrive="H:"
userHomeDrive="z:"

Make sure that the shares and paths you have make sense.

Now edit smb.conf in your favorite text editor, and find your shares 
listings, and create something like this, that makes sense on your 
system:

[Profiles]
  path=/usr/home/sambashit/Profiles
  public = yes
   only guest = no
   browseable = yes
   writeable = yes
   printable = no
   create mask = 0700
   force create mode = 0700
   force directory mode = 0700
   directory security mask = 0700
   level2 oplocks = Yes

OK.  Now, simply mkdir the appropriate directories on your file 
system, and set the perms on the folder to something like

chmod Administrator:Domain\ Users /usr/home/sambashit/Profiles  <--- 
Do not go all recursive on this (no -R switch).

Now....If you prefer no roaming profiles, after doing the above, you 
can edit smbldap.conf thusly:

# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
path'
# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="\\%SystemDrive%\ %USERPROFILE%\%U"

see:

<http://en.wikipedia.org/wiki/Environment_variable>

for additional Windoze environment variables.

Of course, for existing users, you will need export and edit an .ldif 
file for the user, use an ldap gui editor, or delete users created 
prior to editing the above, and recreate the users.

Cheers,

TMS III