[Samba] Roaming profils cannot sync four files

Rowland Penny rpenny at samba.org
Tue May 15 09:10:11 UTC 2018


On Tue, 15 May 2018 10:53:26 +0200
Michael Funke <maniac.macpain at gmail.com> wrote:

> thank you, but it was only a copy/paste mistake. My config looks like
> this: [global]
>         security = ADS
>         workgroup = EXAMPLE
>         realm = EXAMPLE.LOCAL
> 
>         log file = /var/log/samba/%m.log
>         log level = 1
> 
>         # Default ID mapping configuration for local BUILTIN accounts
>         # and groups on a domain member. The default (*) domain:
>         # - must not overlap with any domain ID mapping configuration!
>         # - must use a read-write-enabled back end, such as tdb.
>         # - Adding just this is not enough
>         # - You must set a DOMAIN backend configuration, see below
>         idmap config * : backend = tdb
>         idmap config * : range = 3000-7999
>         idmap config EXAMPLE : backend = rid
>         idmap config EXAMPLE : range = 1000000 - 1999999
>         winbind enum users = yes
>         winbind enum groups = yes
>         winbind use default domain = yes
>         winbind refresh tickets = yes
>         template shell = /bin/bash
> 
>         vfs objects = acl_xattr
>         map acl inherit = yes
>         store dos attributes = yes
> 
>         acl allow execute always = yes
> 
> [profiles]
>         path = /home/EXAMPLE/profiles/
>         read only = no
> 
> But it doesn't work with this configuration.

It should.

> 
> Or does I need these lines also? I don't need a login of the
> domainusers.
> 
> # Template settings for login shell and home directory
> winbind nss info = template
> template shell = /bin/bash
> template homedir = /home/%U

You only need those lines for users to log into the Unix domain member.

Have you read this:

https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles

Rowland

> 
> 



More information about the samba mailing list