[Samba] smb.conf for around 2500 users

[Lukasz Zalewski]

On 03/07/12 08:40, steve wrote:
> On 02/07/12 23:44, Lukasz Zalewski wrote:
>> On 02/07/2012 21:20, steve wrote:
>>> On 02/07/12 18:50, Lukasz Zalewski wrote:
>>>> On 02/07/12 17:20, steve wrote:
>>>>> On 02/07/12 17:49, Jonathan Buzzard wrote:
>>>>>>
>>>>>> On Mon, 2012-07-02 at 17:39 +0200, steve wrote:
>
>> Hi Steve,
>> Maybe I have misunderstood what you are trying to do but if you already
>> have automounter doing the right thing - maybe for the sake of argument
>> mapping
>> /home2/students/year7/year7a/student1
>> /home2/students/year7/year7a/student2
>> ...
>> ...
>> /home2/students/year13/year13a/student2500
>> to
>> /homes/student1
>> /homes/student2
>> ...
>> ...
>> /homes/student250
>>
>> then you need only [homes] share in the smb.conf,
>> and then (similarly to Matthieu's suggestion) provide
>> \\servername\%username%
>> for homeDirectory attribute (and profilePath if you want roaming
>> profiles)?
>>
>>
>> HTH
>>
>> L
> Hi Lukasz
Hi Steve
> No, you have understood perfectly
>
> Is you [homes] a winbind [homes]?
No, We do not use winbind at all. Our main directory service is still 
openldap (which is used on all of the linux infrastructure + legacy s3 
domain) and Samba4 is used purely as a Windows DC. We have plans to move 
to only Samba4 directory service but that will take some time
>
> If so, we'd rather avoid having everyone in the same folder even if they
> are only links to the real data. We'd like to separate students from
> e.g. [staff] [admin] [webstuff] ... if only for readability purposes e.g.
In our case the separation is done on the posix permission/group 
membership and physical location of the data - staff and students live 
on the separate partitions/volumes

We do do a separation trick (akin to the symlinks that you mentioned but 
slightly coarse grained) for profiles again through automounter maps. 
Our profiles stanza is smb.conf is
[profiles]
         path = /profiles/%G

and /profiles will include
/profiles/staff
/profiles/ug
profiles/msc
...

But again single smb share
>
> [students]
> path = /home/students/data
> read only = No
> browsable = No
>
> then
>
> ln -s /home2/students/year7/year7a/student1 /home/students/data/student1
>
> In AD that becomes:
>
> unixHomeDirectory: /home2/students/year7/year7a/student1
> homeDirectory: \\server\students\student1
> homeDrive: Z:
>
> How does that look?
>
> Cheers and thanks for your time,
> Steve
>