I am having issues with my roaming profiles setup (small home network)
On login I get errors like..

  Windows cannot copy the file \\midget\profiles\darius\Application 
  Data\Ventrilo to location C:\Documents and Settings\darius\Application 
  Data\Ventrilo. Possible causes include network problems or insufficient 
  security rights. If this problem persists, contact your network 
  administrator.

  DETAIL - Configuration information could not be read from the domain 
  controller, either because the machine is unavailable, or access has been 
  denied.

On logout I have seen errors like the following..
  Windows cannot copy file C:\Documents and Settings\darius\Recent\Temp 
  (2).lnk to location \\midget\profiles\darius\Recent\Temp (2).lnk. Possible 
  cases of this error include network problems or insufficient access rights.  
  If this problem persists, contact your network administrator.

  DETAIL - Cannot create a file when that file already exists.

Although I suspect that is from when I rsync'd my profile to save me losing 
some data. (I didn't specify --delete)

If I login as the machine admin I can remove the profile from it and then 
login to the domain successfully. This is a bit of a drag (I have to reboot 
before Windows will try re-reading the profile from the network, plus the 
time taken to delete and re-copy the profile)

I believe this corresponds with a Samba upgrade (to 3.0.23d) , however I did 
also change my main workstation at around the same time so isolating the 
source of the problem is difficult :(

I've attached my smb.conf and I would attach a log file but I am not sure what 
a good debug level to use to get enough but not too much information.

Note that originally profiles were stored in home directories but I read on 
the Samba Wiki this is not a good idea, however moving them to a separate 
share had no effect on the problem.

Authentication is done via OpenLDAP and the whole lot runs on a FreeBSD 6.x 
system. (All built from ports).

Any input gratefully received.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
# Global parameters
[global]
        workgroup = LABF
        server string = Midget
        encrypt passwords = Yes
        log file = /var/log/samba/log.%m
        max log size = 1024
        log level = 1
        wins support = Yes
        guest account = ftp
        level2 oplocks = Yes
        printing = CUPS
        #logon script = scripts\logon.bat
        logon path = \\%L\profiles\%U
        logon home = \\%L\%U
        logon drive = H:
        domain logons = Yes
        os level = 35
        preferred master = Yes
        domain master = Yes
        passdb backend = ldapsam:"ldap:///var/run/openldap/ldapi";
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod -x 
"%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -i -w "%u"
        ldap suffix = dc=dons,dc=net,dc=au
        ldap admin dn = cn=Manager,dc=dons,dc=net,dc=au
        ldap machine suffix = ou=Computers
        ldap user suffix = ou=People
        ldap group suffix = ou=Groups
        ldap idmap suffix = ou=Idmap
        idmap backend = ldap:ldap:///var/run/openldap/ldapi
        idmap uid = 10000-20000
        idmap gid = 10000-20000

[homes]
        comment = Home Directories
        read only = No
        valid users = %S
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /var/db/samba/netlogon
        admin users = root
        guest ok = Yes
        browseable = No

[profiles]
        comment = Roaming Profile Share
        path = /data/samba-profiles
        read only = No
        profile acls = Yes
        create mask = 0600
        directory mask = 0700
        hide files = /desktop.ini/outlook*.lnk/*Briefcase*/

[tmp]
        comment = Temp
        path = /tmp
        read only = No
        guest ok = Yes

[cdrom]
        comment = CD-Rom
        path = /cdrom
        read only = Yes

[storage]
        comment = Archives
        path = /data/storage
        read only = No
        guest ok = Yes

[images]
        comment = Images
        path = /data/images/
        read only = No
        browseable = No

[mods]
        comment = Mod Archive
        path = /usr/local/mods/
        read only = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        print ok = Yes
        browseable = Yes
        printable = Yes
        guest ok = Yes

[print$]
        comment = Printer drivers
        path = /data/samba-print
        browseable = yes
        guest ok = yes
        read only = yes
        write list = @wheel, root

[mp3]
        comment = MP3 Collection
        path = /usr/local/mp3
        read only = No
        guest ok = Yes

[www]
        comment = WWW directories
        path = /usr/local/www
        read only = No

Attachment: pgpqoeXxO3QNp.pgp
Description: PGP signature

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to