[Samba] PDC with no roaming profiles ?

[Roberto Salvatierra]

hi ! thanks now I have my samba up and running fine.
I have it configured as a PDC, and all the roaming profiles work,
the management, etc. it's all fine. now, the client that I'm working for,
told me ( after some days of making it all work ) that he sees that the use
of roaming profiles in his network is useless.

ok now, he says no roaming profiles ! I have searched around the network and
i found that if I edit the windows policies, i can avoid the computer from
trying to create roaming profiles using this:

Start/Run/gpedit.msc
Local Computer Policy/Computer Configuration/Administrative
Templates/System/User Profiles/Only Allow Local User Profiles. Local
Computer Policy/Computer Configuration/Administrative Templates/System/User
Profiles

Enable both the Prevent Roaming Profile changes from propagating to the
server setting and the Only allow local user profiles setting.

and that works, but I was wondering is there a way to stop the roaming
profiles from the server, instead from each client ? i have tried some ways,
and I always get the I can't save or find the profile on the server, it
will be saved next time it's available every time I log on.

now... if i tweak [profiles] or [netlogon] is there a way to totally stop
the roaming profiles from the server ? just have the PDC to authenticate the
users, and to serve files to those users ?

thank you very much.

R. Salvatierra
http://www.advicemag.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Domain login Problem.

[Roberto Salvatierra]

Hi i setted up a samba server on debian sarge using samba version 3.0.14.

my configuration file is as follows:

 BOF ---

[global]
guest account = smbguest
security = user
workgroup = SMSERVER
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096

max log size = 1000
log level = 1
log file = /var/log/samba/000log.%m

encrypt passwords = yes
wins support = yes

os level = 99
domain master = yes
local master = yes
preferred master = yes
domain logons = yes


add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'

add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
set primary group script = /usr/sbin/usermod -g '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null '%u'

logon path = \\SMSERVER\samba\profiles\%Ufile://SMSERVER/samba/profiles/%25U
logon drive = z:
logon home = \\SMSERVER\home\samba\%U file://SMSERVER/home/samba/%25U
#logon script = logon.bat

name resolve order = lmhosts host wins bcast
dns proxy = no

[netlogon]
   path = /home/netlogon
   writeable = no
   guest ok = no

[profiles]
   create mask = 0600
   browseable = no
   directory mask = 0700
   comment = Profile Share
   writable = yes
   path = /home/samba/profiles
   profile acls = yes


[homes]
#   path = /home/U%
  read only = no
  browseable = yes

 EOF
---

now almost everything works fine. I can add workstations to the Domain =
SMSERVER, they work fine, I can see the shares ( I had shares before ), and
mout them as any user, root, user1,user2 etc.

now when i try to log as a user other than root, to a XP client, it does not
allows me, it recognizes the user, but I'm not allowed to log on.

i can only login as root, even on the linux machine. how can I allow the
other non root users to log in ?

here is the problem:

 Login in as root: ---

smserver:/etc/samba# net join -U root
root's password:
[2006/05/15 19:00:26, 0] utils/net_ads.c:ads_startup(191)
 ads_connect: No results returned
Joined domain SMSERVER.
---



--- Login in as another user:

smserver:/etc/samba# net join -U chuby
chuby's password:
[2006/05/15 19:01:19, 0] utils/net_ads.c:ads_startup(191)
 ads_connect: No results returned
[2006/05/15 19:01:19, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279)
 error setting trust account password: NT_STATUS_ACCESS_DENIED
Unable to join domain SMSERVER.


that unable to join domain, has given me headaches for 2 days now !,  Thanks
for any help !



R. Salvatierra
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba