[Samba] Roaming profiles

[Michael Funke]

Hey,

I want to use a debian stretch with samba 4 as a fileserver, but I have
problems with the access.

Here is what I did:

apt-get install samba winbind libpam-heimdal libnss-winbind
/etc/init.d/winbind stop
/etc/init.d/samba stop
nano /etc/krb5.conf    https://pastebin.com/rkBPJ2Wz
nano /etc/samba/smb.conf   https://pastebin.com/h1cJZ6sM
nano /etc/nsswitch.conf   https://pastebin.com/gxK2rJLU

getent hosts fs

smbd -b | egrep "LOCKDIR|STATEDIR|CACHEDIR|PRIVATE_DIR"
rm -v /var/run/samba/*.tdb /var/run/samba/*.ldb /var/lib/samba/*.tdb
/var/lib/samba/*.ldb /var/cache/samba/*.tdb /var/cache/samba/*.ldb
/var/lib/samba/private/*.tdb /var/lib/samba/private/*.ldb

reboot

net ads join -U administrator
/etc/init.d/winbind start

wbinfo --ping-dc
getent passwd
getent group

net rpc rights grant "EXAMPLE\Domänen-Admins" SeDiskOperatorPrivilege -U
"EXAMPLE\administrator"
net rpc rights list privileges SeDiskOperatorPrivilege -U
"EXAMPLE\administrator"

mkdir -p /home/EXAMPLE/profiles
chgrp -R domänen-benutzer /home/EXAMPLE/profiles/
chmod 1750 /home/EXAMPLE/profiles/

smbcontrol all reload-config

What did I wrong?