[Samba] Roaming Profiles

[Tom]

Hello,

there is still something that does not work: Sometimes, when session is 
open, there is an error about user profile : "Problem with your local 
profile. Your session was opened unsing yuour local profile saved 
previously".

In the Event Observer, I can see this error : the process cannot access 
the file because it is being used by another process

But wich file ? No idea... This is not indicated



Le 19/06/2019 à 14:36, Tom a écrit :
> Hello Rowland,
>
> Actually chmod is set to 1770 just for /srv/samba/profiles folder :
>
> drwxrwx--T   4 root DOMAIN\domain users  4096 18 juin  17:30 profiles
>
> Then, when a w7 user session is open, user.V2 is automatically created 
> with this rights :
>
> drwxrwx---+ 14 DOMAIN\utest   BUILTIN\administrators 4096 18 juin 
> 17:21 utest.V2
>
> Only this user can access to this directory. I tested with another : 
> no access.
>
> This is profiles part of my smb.conf :
>
> ------------------------------------------
> [profiles]
> comment = Profils Utilisateurs
> path = /data/profiles/
> browseable = no
> read only = No
> force create mode = 0600
> force directory mode = 0700
> csc policy = disable
> store dos attributes = yes
> vfs objects = acl_xattr
> ------------------------------------------
>
> is it working properly for you ?
>
>
> Le 18/06/2019 à 17:11, Rowland penny via samba a écrit :
>> On 18/06/2019 15:58, Tom via samba wrote:
>>> Hello,
>>>
>>> I created a GPO Roaming Profiles redirection in my AD as shown on 
>>> this page 
>>> (https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#The_Windows_Roaming_Profile_Versions). 
>>> The data are stored in a sharing file server (samba member domain).
>>>
>>> When I open a windows user session it doesn't work. Event observer 
>>> says "Access denied".
>>>
>>> So I changed 'chmod 1750 /srv/samba/profiles/' for 'chmod 1770' and 
>>> it works.
>>>
>>> Finally, is it a mistake on the Wiki ? Or should I do otherwise ?
>>
>> It looks like your user is possibly unknown to the OS, but your group 
>> (Domain Users ??) isn't and you have now given the group write access 
>> to the profile.
>>
>> Can you post the smb.conf from the server holding the profiles.
>>
>> Rowland
>>
>>
>>
>