Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?

2004-04-26 Thread Matthias Spork
Hello,

Can you use Samba to store an XP Pro profile?
 

Yep. Take a look at this:

ftp://de.samba.org/samba.org/docs/
http://samba.idealx.org/samba-ldap-howto.pdf
matze
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?

2004-04-26 Thread Mac

 Can you use Samba to store an XP Pro profile?

Yes, you can. Your error message suggests that the profile you are trying to 
overwrite does not belong to the current domain. ie: The user SID inside the 
NTUser.DAT file for the current user does not match the current SID.


This sounds highly likely.


The question in my mind though is where the Samba server gets a SID
from?  

The XP Pro client is authenticating into a AD domain, which is telling
it to store its profile on the Samba server.  I have joined the Samba
server to the AD domain in an attempt to coax this into working.  But to
no avail.  (i.e. the join worked and Samba is now authenticating from
the Windows server ('security=domain') but the SID error still occurs)


Do I need to set some sort of SID on the Samba server to match the
domain portion of the SID in the error message? (which I'm assuming is
the domain SID for the AD domain?)

Can I use 'net getsid' (or somesuch)?



(side question: when using tdbtool's dump command, how can I convert the
SIDs from secrets.tdb into SID-1-. format?)


   Mac
  Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
   Work: +44 1707 641565  Everything else: +44 7956 237670 (anytime)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?

2004-04-26 Thread Mac
Can you use Samba to store an XP Pro profile?
  

Yep. Take a look at this:

http://samba.idealx.org/samba-ldap-howto.pdf


Thanks for the pointers.


However, as far as I can see that info is for situations where the XP
Pro clients are using the Samba box as the PDC.

I'm not.  The XP Pro client PC is a member of an AD domain.  It's just
the profiles that are being stored on Samba.


   Mac
  Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
   Work: +44 1707 641565  Everything else: +44 7956 237670 (anytime)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?

2004-04-26 Thread RRuegner
Mac schrieb:

Hi all,

Can you use Samba to store an XP Pro profile?

I'm running Samba 3.0.2a (compiled from source) on Solaris 9.

Compiled it against OpenLDAP 2.1.30 and MIT Kerberos 1.3.3  (both
compiled from source from fresh downloads today).
Am now trying to get Windows XP Pro to store profiles on to this box.
The smbd and nmbd seem to run fine.
Every time XP Pro goes to create a user's profile it connects
(correctly) to:-
	\\firesun1\profiles\jsmith

but then we get:-

[2004/04/26 14:54:11, 1] smbd/service.c:make_connection_snum(705)
  dltest2 (212.219.217.98) connect to service profiles initially as user jsmith 
(uid=1935, gid=100) (pid 16145)
[2004/04/26 14:54:11, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
  create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 
to uid or gid.
and an ugly the security's wrong on the profile sort of message on the XP Pro 
client.

So, simple question.

Can you use Samba to store an XP Pro profile?

   Mac
  Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
   Work: +44 1707 641565  Everything else: +44 7956 237670 (anytime)
for sure samba store profiles from xp, your problem is
unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid.
regards
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba