Re: [Samba] policy files
Hi Adam, Thanks for your reply. A couple a questions inline: On 5/31/07, Adam Tauno Williams [EMAIL PROTECTED] wrote: This is a Windows issue, not a Samba issue. All the information I've been able to find references windows tools - the part I'm missing is where the windows tools stop and Samba takes over. I hope you don't mind me clarifying a couple of things below. Is there a simple howto that I've missed on this? Thanks in advance for any tips. Yes, the Windows documentation. O'Reilly has a title: Windows NT User Administration you need a book like that. Most of the HOWTOs and what not on the Internet are confusing garbage, or at best only half complete, my advise is to skip them entirely. Thanks for the tip - I think half my problem is I'm not exactly sure what I'm looking for. I have Samba happily running as a Domain Controller and have the computers on the network in the domain. However, I don't have any windows servers, and hence don't have a Windows Active Directory on my network. All my searching for information regarding policies and so on aren't turning up much because they all seem to refer to AD. Can I ask if you (or anyone else) know if what I'm trying to do is possible using Samba on its own (and the GPO approach)? I'm assuming that I need to learn and understand firstly how to create my policy (thanks for the help on this) and how to distribute it. I'm hoping that the distribution is simply a matter of putting the appropriate file on a Samba share (once I know which share it is). Re the book, thanks - I've ordred a copy on amazon, unfortunately its not available on Safari. The *OFFICIAL* Samba documentation does cover this to some extend, beyond that get a book. http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html I had read that, and thought I was doing the right thing (although missing the link between POL and ADM files). Not sure how I'm going to get my hands on poledit.exe which I figure is my next step. Thanks again for your help. cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] policy files
Hi again, On 6/1/07, Adam Tauno Williams [EMAIL PROTECTED] wrote: You are seeing documentation on GPOs / Group Policies. You want NT4 Domain Policies. You need to look at *OLD* Windows documentation. If it doesn't mention NT4, or it mentions AD, ignore it. A... now that, makes sense. Thanks a heap. you (or anyone else) know if what I'm trying to do is possible using Samba on its own (and the GPO approach)? No, Samba 3.x cannot use GPOs. Right so that's why asking my windows mates for help has done nothing but confuse me! Thanks again - that makes a heap of sense, I feel like I have a much better idea of what I'm after now. cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profiles in a home environment
Hi Charles, Josh, et al, Firstly, this is getting off topic a little, so don't read on unless you're interested in how Samba might be used to make email usage easier in a home environment with multiple computers. On 6/2/07, Charles Marcus [EMAIL PROTECTED] wrote: Josh Kelley wrote: On 5/31/07, Charles Marcus [EMAIL PROTECTED] wrote: I would recommend against doing this... Microsoft itself recommends against it, but I have also had problems with corruption in .pst files that are stored on a network share, both on Windows shares *and* Samba shares... Just to share my own experience, we've been running our PSTs off of Samba shares for several years now without seeing any corruption. We used to have some locking errors with this setup, but adding the following line to smb.conf stopped them: veto oplock files = /*.pst/*.PST/ Yes, I tried that, but after the next corrupted file, moved them back to local disk that gets synced at logout. Something I hadn't really thought of is that my wife is likely (at some point) to be logged onto two computers at once, and have outlook running on both of them. I assume this is a guarenteed road to disaster and I should be ruling out sharing the .PST files based on this. Thankfully, I don't have to deal with Outlook any more, and all email is served via IMAP... Ok - really off topic now, what clients are you finding handing IMAP the best? My wife uses IMAP, and I suppose if I were to setup LDAP then I could use that for her contacts (which are the main problem atm). Feel free to reply off-list if you think its more appropriate as I realise this question has absolutely nothing to do with Samba. cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] policy files
Hi again, I've now got this all working, and thought I'd outline what I did for others: On 6/1/07, Adam Tauno Williams [EMAIL PROTECTED] wrote: Thanks for the tip - I think half my problem is I'm not exactly sure what I'm looking for. ADM files and POLEDIT.EXE With that piece of information I found http://www.zisman.ca/poledit/ where I downloaded poledit from. When you run it on an XP machine it complains that it cant find files in c:\windows\inf - this makes perfect sense as they don't exist. Ignore those errors and in the Options menu select Policy template. From there remove the missing policy files, and open the one you want (I used custom.adm from http://www.pcc-services.com/custom_poledit.html. From there its simply a matter of File - New Policy. Double-click on Default User and modify the policy as you want. Then File - Save as \\sambaserver\netlogon\ntconfig.pol and it will be used when you logon. I hope this is useful for someone else as well. Thanks a heap to Adam for pointing out where I was going wrong, and for putting up with my windows questions on the samba list. cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] policy files
Hi, I think I have two questions - one which is samba and one which is windows policy files. I'll try to limit this question to the samba side but will give the full picture for completeness. I'm trying to implement a simple policy to redirect a few simple folders (for starters). I have a policy file called NTConfig.POL that is available on my share \\wilson\netlogon (wilson is the name of the server running samba). I'll append its contents at the end of this email in case that's where my problem lies (although that's a windows question, so I don't expect an answer here). I don't have anything that mentions the policy file in my samba config, but according to http://www.pcc-services.com/custom_poledit.html I don't need to (other than having NTConfig.POL readable at \\wilson\netlogon\NTPolicy.POL, which it is). I've seen lots of stuff that suggests I need special windows programs (that seem to only be available on NT or 2003) to edit these files, and then other pages (such as the link above) that say they are just text files. Is there a simple howto that I've missed on this? Thanks in advance for any tips. cheers dim CLASS USER CATEGORY Custom Folder Redirection KEYNAME Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders POLICY Custom Internet Cookies Folder PART Path to User's Internet Cookies Folder EDITTEXTREQUIREDEXPANDABLETEXT DEFAULT Z:\Cookies VALUENAME Cookies END PART END POLICY POLICY Custom Internet Favorites Folder PART Path to User's Internet Favorites Folder EDITTEXTREQUIREDEXPANDABLETEXT DEFAULT Z:\Favorites VALUENAME Favorites END PART END POLICY POLICY Custom Internet History Folder PART Path to User's Internet History Folder EDITTEXTREQUIREDEXPANDABLETEXT DEFAULT Z:\History VALUENAME History END PART END POLICY POLICY Custom My Documents Folder PART Path to User's My Documents Folder EDITTEXTREQUIREDEXPANDABLETEXT DEFAULT Z:\Documents VALUENAME Personal END PART END POLICY END CATEGORY ;Custom Folder Redirection -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] roaming profiles in a home environment
Hi all, I think I know the answer to this, but I'll ask anyway to be sure that I've got it right. My home network consists of a Vista box that is used for TV only, my workstation, and our laptop. Both the workstation and the laptop are used by my wife and me. The laptop is on the wifi network. I then have a fedora FC6 box that is running samba and I'm trying to expand it from a simple fileshare to a domain master. My question is about the value of roaming profiles. I really like the idea, but I don't think I've prepared to pay the performance hit of copying megabytes of data (a basic empty profile created for my last laptop login was 2.3M). The functionality I'm interested in (all nice to have, most have workarounds) are: - same outlook setup for my wife on both laptop and pc - shared favourites, cookies I'm assuming that I'd be better off not using roaming profiles, but instead using folder redirection (in outlook's case simply put the files on the share). So - two questions: 1. Is the above a reasonable viewpoint? 2. Can I setup folder redirect through samba via a policy file, or will I need to do it on each PC individually? cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profiles in a home environment
On 5/31/07, Adam Tauno Williams [EMAIL PROTECTED] wrote: I'm assuming that I'd be better off not using roaming profiles, but instead using folder redirection (in outlook's case simply put the files on the share). Yes. So - two questions: 1. Is the above a reasonable viewpoint? 2. Can I setup folder redirect through samba via a policy file, or will I need to do it on each PC individually? You can perform folder redirection via policies from a Samba PDC; just the same as if you were using an NT4 PDC (see older Windows NT domain documentation; this is really a Windows thing, not specific to Samba). Thanks Adam, much appreciated. cheers, dim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba