[Samba] User profiles question

[Rowland Penny]

On Fri, 31 Mar 2017 12:16:09 -0300
Vinicius Bones Silva via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I'm facing an issue where most users receive the error "The Group
> Policy Client service failed the logon. Access denied.". The fix so
> far is to delete a registry folder on the client machine, but there
> are cases where this does not work. For one user, I had to delete the
> account and create it again. The domain uses 3 centos7 + samba 4.5.5,
> with a fileserver running 4.4.4.
> 
> Reading
> https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles shows
> me that our setup does not thing different from the suggested
> configuration:
> 
> We do not have a profiles share. Instead, we put the user profile
> inside the user's home folder.
> 
> Are there recomendations regarding the profile location? Is it ok to
> have the user profile inside the home drive, insteado of a specific
> share?

I wouldn't put the profiles there.

> 
> Here's the fileserver smb.conf, if it helps:
> 
> [global]

>          #idmap config *:backend = ad

You should change the above to:

           idmap config * : backend = tdb

>          idmap config *:range = 2000-9999
> 
>          idmap_ldb:use rfc2307 = yes

You should remove the above line, this isn't a DC

>          #[cp 13.Oct.2016] Reduzido o cache do Winbindd
>          idmap cache time = 30
>          idmap negative cache time = 30
>          winbind cache time = 30
> 

Do you really need the above lines ?

I suggest you follow this Samba wiki page:

https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles

Rowland