Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch

Hi Adam,

Thanks for your reply.  A couple a questions inline:

On 5/31/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:


This is a Windows issue, not a Samba issue.



All the information I've been able to find references windows tools - the
part I'm missing is where the windows tools stop and Samba takes over.  I
hope you don't mind me clarifying a couple of things below.



 Is there a simple howto that I've missed on this?  Thanks in advance for
any
 tips.

Yes, the Windows documentation.  O'Reilly has a title: Windows NT User
Administration  you need a book like that.  Most of the HOWTOs and what
not on the Internet are confusing garbage, or at best only half
complete,  my advise is to skip them entirely.



Thanks for the tip - I think half my problem is I'm not exactly sure what
I'm looking for.  I have Samba happily running as a Domain Controller and
have the computers on the network in the domain.  However, I don't have any
windows servers, and hence don't have a Windows Active Directory on my
network.  All my searching for information regarding policies and so on
aren't turning up much because they all seem to refer to AD.  Can I ask if
you (or anyone else) know if what I'm trying to do is possible using Samba
on its own (and the GPO approach)?  I'm assuming that I need to learn and
understand firstly how to create my policy (thanks for the help on this) and
how to distribute it.  I'm hoping that the distribution is simply a matter
of putting the appropriate file on a Samba share (once I know which share it
is).

Re the book, thanks - I've ordred a copy on amazon, unfortunately its not
available on Safari.



The *OFFICIAL* Samba documentation does cover this to some extend,
beyond that get a book.

http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html



I had read that, and thought I was doing the right thing (although missing
the link between POL and ADM files).  Not sure how I'm going to get my hands
on poledit.exe which I figure is my next step.

Thanks again for your help.

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch

Hi again,

On 6/1/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:


You are seeing documentation on GPOs / Group Policies.  You want NT4
Domain Policies.  You need to look at *OLD* Windows documentation.  If
it doesn't mention NT4, or it mentions AD, ignore it.



A... now that, makes sense.  Thanks a heap.


you (or anyone else) know if what I'm trying to do is possible using Samba
 on its own (and the GPO approach)?

No, Samba 3.x cannot use GPOs.



Right so that's why asking my windows mates for help has done nothing
but confuse me!

Thanks again - that makes a heap of sense, I feel like I have a much better
idea of what I'm after now.

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] roaming profiles in a home environment

2007-06-01 Thread Dmitri Colebatch

Hi Charles, Josh, et al,

Firstly, this is getting off topic a little, so don't read on unless you're
interested in how Samba might be used to make email usage easier in a home
environment with multiple computers.

On 6/2/07, Charles Marcus [EMAIL PROTECTED] wrote:


Josh Kelley wrote:
 On 5/31/07, Charles Marcus [EMAIL PROTECTED] wrote:
 I would recommend against doing this... Microsoft itself recommends
 against it, but I have also had problems with corruption in .pst files
 that are stored on a network share, both on Windows shares *and* Samba
 shares...

 Just to share my own experience, we've been running our PSTs off of
 Samba shares for several years now without seeing any corruption.  We
 used to have some locking errors with this setup, but adding the
 following line to smb.conf stopped them:

   veto oplock files = /*.pst/*.PST/

Yes, I tried that, but after the next corrupted file, moved them back to
local disk that gets synced at logout.



Something I hadn't really thought of is that my wife is likely (at some
point) to be logged onto two computers at once, and have outlook running on
both of them.  I assume this is a guarenteed road to disaster and I should
be ruling out sharing the .PST files based on this.

Thankfully, I don't have to deal with Outlook any  more, and all email

is served via IMAP...



Ok - really off topic now, what clients are you finding handing IMAP the
best?  My wife uses IMAP, and I suppose if I were to setup LDAP then I could
use that for her contacts (which are the main problem atm).

Feel free to reply off-list if you think its more appropriate as I realise
this question has absolutely nothing to do with Samba.

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch

Hi again,

I've now got this all working, and thought I'd outline what I did for
others:

On 6/1/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:


 Thanks for the tip - I think half my problem is I'm not exactly sure
what
 I'm looking for.

ADM files and POLEDIT.EXE



With that piece of information I found http://www.zisman.ca/poledit/ where I
downloaded poledit from.  When you run it on an XP machine it complains that
it cant find files in c:\windows\inf - this makes perfect sense as they
don't exist.  Ignore those errors and in the Options menu select Policy
template.  From there remove the missing policy files, and open the one you
want (I used custom.adm from http://www.pcc-services.com/custom_poledit.html.

From there its simply a matter of File - New Policy.  Double-click on

Default User and modify the policy as you want.  Then File - Save as
\\sambaserver\netlogon\ntconfig.pol and it will be used when you logon.

I hope this is useful for someone else as well.  Thanks a heap to Adam for
pointing out where I was going wrong, and for putting up with my windows
questions on the samba list.

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] policy files

2007-05-31 Thread Dmitri Colebatch

Hi,

I think I have two questions - one which is samba and one which is windows
policy files.  I'll try to limit this question to the samba side but will
give the full picture for completeness.

I'm trying to implement a simple policy to redirect a few simple folders
(for starters).  I have a policy file called NTConfig.POL that is available
on my share \\wilson\netlogon (wilson is the name of the server running
samba).  I'll append its contents at the end of this email in case that's
where my problem lies (although that's a windows question, so I don't expect
an answer here).

I don't have anything that mentions the policy file in my samba config, but
according to http://www.pcc-services.com/custom_poledit.html I don't need to
(other than having NTConfig.POL readable at \\wilson\netlogon\NTPolicy.POL,
which it is).  I've seen lots of stuff that suggests I need special windows
programs (that seem to only be available on NT or 2003) to edit these files,
and then other pages (such as the link above) that say they are just text
files.

Is there a simple howto that I've missed on this?  Thanks in advance for any
tips.

cheers
dim



CLASS USER

CATEGORY Custom Folder Redirection
   KEYNAME Software\Microsoft\Windows\CurrentVersion\Explorer\User
Shell Folders

   POLICY Custom Internet Cookies Folder
   PART Path to User's Internet Cookies Folder
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT Z:\Cookies
   VALUENAME Cookies
   END PART
   END POLICY

   POLICY Custom Internet Favorites Folder
   PART Path to User's Internet Favorites Folder
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT Z:\Favorites
   VALUENAME Favorites
   END PART
   END POLICY

   POLICY Custom Internet History Folder
   PART Path to User's Internet History Folder
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT Z:\History
   VALUENAME History
   END PART
   END POLICY

   POLICY Custom My Documents Folder
   PART Path to User's My Documents Folder
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT Z:\Documents
   VALUENAME Personal
   END PART
   END POLICY


END CATEGORY ;Custom Folder Redirection
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] roaming profiles in a home environment

2007-05-30 Thread Dmitri Colebatch

Hi all,

I think I know the answer to this, but I'll ask anyway to be sure that I've
got it right.  My home network consists of a Vista box that is used for TV
only, my workstation, and our laptop.  Both the workstation and the laptop
are used by my wife and me.  The laptop is on the wifi network.  I then have
a fedora FC6 box that is running samba and I'm trying to expand it from a
simple fileshare to a domain master.

My question is about the value of roaming profiles.  I really like the idea,
but I don't think I've prepared to pay the performance hit of copying
megabytes of data (a basic empty profile created for my last laptop login
was 2.3M).  The functionality I'm interested in (all nice to have, most have
workarounds) are:
 - same outlook setup for my wife on both laptop and pc
 - shared favourites, cookies

I'm assuming that I'd be better off not using roaming profiles, but instead
using folder redirection (in outlook's case simply put the files on the
share).

So - two questions:
1. Is the above a reasonable viewpoint?
2. Can I setup folder redirect through samba via a policy file, or will I
need to do it on each PC individually?

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] roaming profiles in a home environment

2007-05-30 Thread Dmitri Colebatch

On 5/31/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:


 I'm assuming that I'd be better off not using roaming profiles, but
instead
 using folder redirection (in outlook's case simply put the files on the
 share).

Yes.

 So - two questions:
 1. Is the above a reasonable viewpoint?
 2. Can I setup folder redirect through samba via a policy file, or will
I
 need to do it on each PC individually?

You can perform folder redirection via policies from a Samba PDC;  just
the same as if you were using an NT4 PDC (see older Windows NT domain
documentation;  this is really a Windows thing,  not specific to Samba).



Thanks Adam, much appreciated.

cheers,
dim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba