[Samba] Fwd: Samba 4.5.8-Debian User Profiles on NFS-Share

[L.P.H. van Belle]

You config should work with debian wheezy/jessie/stretch and samba 4.1.x up to 4.6.x

On jessie, if you change to NFSv4, also adjust you /etc/default/nfs-* files. 

And depending on user/group on profiles you may need to change the : 
create mask and directory mask

Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Franz Gansberger via samba
> Verzonden: woensdag 24 mei 2017 13:57
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Fwd: Samba 4.5.8-Debian User Profiles on NFS-Share
> 
> 
> 
> 
> Hi,
> 
> regarding to this problem I made some progress. After going 
> back to Jessie, and samba 4.2.14 the following configuration works.
> 
> 
> Storage Client Wheezy 7.11)
> /etc/exports on nfs-server (version 1.2.6-4):
> /data/data 
> 141.244.123.4(rw,sec=sys,async,no_root_squash,subtree_check)
> 
> DC
> Version nfs-client: 1.2.8-9
> Samba: Samba version 4.2.14-Debian
> 
> profiles share on samba DC
> [profiles]
> # roaming profiles
>  comment = Roaming Profiles
>  path = /data/data-nfs-vw/profiles-ads/
> 	   read only = no
>   create mask = 0775
> directory mask = 0775
> 
> nsswitch.conf
> passwd:		 compat winbind
> group:		  compat winbind
> shadow:		 compat
> gshadow:	    files
> 
> /etc/idmap.conf
> [General]
> Verbosity = 0
> Pipefs-Directory = /run/rpc_pipefs
>  Domain = boku.ac.at
> [Mapping]
> Nobody-User = nobody
> Nobody-Group = nogroup
> 
> Even die UID-Mapping is working between Storage Server, and 
> DC - without the in this version ignored setting via 
> ADUC-Unix-Atrributes.
> The Userprofile gets fully synchronized as expected.
> 
> I'm quite astonished...
> 
> What I'll do next - transfer this config to a different version
> 
> Franz
> 
> 
> 
> 
> >>> "Franz Gansberger" <franz.gansberger at boku.ac.at> 22.05.2017 16:50 
> >>> >>>
> Hello,
> 
> again I'd like to get help from this list.
> After setting up the server, I'd like to store data an user 
> profiles on an nfs-server.
> The share is writeable by the user, I can create files and 
> directories.
> 
> But - by syncing the user profile to that share i stops, 
> telling me that my user profile is only synced partly. 
> In the log on the WS there is a "1509" noted. 
> Only "Apps Data", ntuse.dat and ntuser.ini are there.
> (Trying the same on a local share is working as expected).
> I'm not sure if this is an nfs-related issue, or a samba 
> configuration issue.
> Anyhow, I'm glad th get some input from you.
> 
> Thank you!
> Franz
> 
> 
> 
> # Global parameters
> [global]
> 	    netbios name = TEST-ADS
> 	    realm = REALM.BOKU.AC.AT
> 	    workgroup = REALM
> 	    dns forwarder = 8.8.8.8
> 	    server role = active directory domain controller
> 	    idmap_ldb:use rfc2307 = yes
> 
> 	    unix charset = UTF8
> 		log level = 5
> 
> [profiles]
> comment = Roaming Profiles
> path = /data/data/profiles-nfs
> read only = no	  
> force create mode = 0600
> force directory mode = 0700
> 
> The share ist exportet with this options:
> /data/data 
> server.localdomain(rw,async,fsid=0,crossmnt,no_subtree_check,n
> o_root_squash,insecure)
> 
> 
> Error log in log.smbd
> 
> [2017/05/22 16:38:30.412365,  5] 
> ../source3/smbd/dosmode.c:287(get_ea_dos_attribute)
>   get_ea_dos_attribute: Cannot get attribute from EA on file 
> demo1.V4/AppData/Roaming/Microsoft/Network: Error = Operation 
> not supported
> 
> 
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>