are you using getfattr to check ntacl attributes? getfattr -d -m ".*" <folder> should dump all extended attributes, itll return a "Not available" on security.NTACL if there are no extended attributes.
On Mon, Apr 22, 2013 at 7:24 PM, Rob Beard <r...@mareandfoal.org> wrote: > > > On 17/04/2013 16:32, Rob Beard wrote: > >> Hi folks, >> >> I've got a bit of an issue with roaming profiles and I wondered if someone >> might be able to help please? :-) >> >> We've started rolling out Samba 4 across our network. Currently it's on 3 >> of our 4 sites, one site has two Samba servers and two sites have one >> Samba >> server each (well one site has two Samba 4 servers but one of the servers >> was an oldish test box which I'm planning on removing from AD when I can >> work out how to, but that's a separate issue). >> >> I've managed to get roaming profiles working for the users on each site. >> Each user is currently configured to store their roaming profile on the >> server on the site that they're based at. This seems to work pretty well >> with our Windows 7 clients and the users are happy that they can now login >> to any PC and get their desktop icons etc. >> >> Now my boss would like the ability to be able to login to a PC on a remote >> site (as in, not the site where his roaming profile is stored) and have >> the >> profile available. It seems to work without making any changes but it is >> quite slow logging on and off (I put this down to the fairly slow ADSL >> links we have between the sites). >> >> I was giving the issue some thought and tried creating a test user and >> changing the profile path to >> %logonserver%\profiles\user.**name<http://user.name>which when >> logging on created a profile on the logon server of whichever site I was >> at. >> >> However, I tried then rsyncing this profile across from one server at one >> site to another server (I've also tried it between two servers on the same >> site) but the permissions seem to get corrupted... >> >> If I look at the permissions in a Linux terminal I get the following... >> >> Output from ls -lh on Server 1: >> drwxrwx---+ 14 3000060 users 4.0K Apr 17 16:15 charles.carmichael.V2 >> >> Output from ls -lh on Server 2: >> drwxrwx---+ 14 3000060 users 4.0K Apr 17 16:15 charles.carmichael.V2 >> >> So the permissions look okay to me unless I'm missing something. >> >> If I check the permissions of the two profile folders in Windows 7 I get >> the following: >> >> Server 1 Permissions: >> >> SYSTEM - Full Control >> Charles.Carmichael - Full Control >> >> Server 2 Permissions: >> >> Everyone - None >> RANDOMPC$ - Full Control >> Random Group - Full Control >> Domain Users - None >> CREATOR OWNER - Special >> CREATOR GROUP - Special >> >> On Server 1 the owner is the user of the profile, on Server 2 the owner is >> RANDOMPC$. >> >> Both Server 1 and Server 2 are running Samba 4.0.3, Debian Squeeze AMD64 >> with the kernel 2.6.32-5-amd64. If it helps the filesystems are ext4 and >> have the options user_xattr,acl,barrier=1 in fstab. >> >> What we'd like to do is run an rsync overnight and copy the differences >> between the servers, but as we're coming across these issues we're a bit >> stuck. >> >> If anyone could help, or maybe suggest another way of syncing the roaming >> profiles between the servers that would be great. >> >> Thanks in advance, >> >> Rob >> >> > Hi folks, > > Further to Ricky's reply, I've had a look at the xattr's and acl's of the > profiles folder after running an rsync with the -p, -A and -X switches. > > Checking the permissions on both servers they appear to be the same, the > have the same owner and groups. Having checked the acls and xattrs they > match on both servers. > > I've restarted Samba on the second server after rsyncing to it and checked > the permissions again but I'm still getting the incorrect permissions :-( > > I wondered if there might be anywhere I can check where the permissions > might be stored? > > Ta, > > > Rob > -- > To unsubscribe from this list go to the following URL and read the > instructions: > https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
