Re: [Samba] Samba 3, AD, and roaming profiles

2005-08-18 Thread Robert M. Martel

On 08/17/2005 12:46 AM, Ilia Chipitsine wrote:

I have access to User Manager for AD and have modified the profile 
entry for my test user to:


profile path  \\techops-test\profile
login script  \\techops-test\netlogon\mglcua.bat

Home directory  map  h:\  to \\techops-test\homes\marteltest

I have also tried:
profile path  \\techops-test\profile\marteltest



logon path ? logon home ? (depending on windows version)
not profile path :-)

logon path doesn't have to point to PDC (which is AD in your case), so 
You can specify samba UNC for that. just remember win2ksp4 and later are 
picky on profile ACLs, You should either use samba with ACL support or 
enable profile acls = yes on that share (believe me, You don't want 
that option enabled globally).


logon script is relative to \\PDC\netlogon, so You can just specify 
s.bat and it will look for \\PDC\netlogon\s.bat




I do have profile acls = yes for the share I want to store the 
profiles on.


Perhaps I was unclear, the parameters above are NOT in my Samba 
smb.conf, but from Microsoft's  Active Directory Users and Computers 
tool running from an XP client.  So on the profile tab for a user I 
have the following set:


Profile Path\\techops-test\profile\%USERNAME%

Logon Script\\techops-test\netlogon\mglcua.bat

Home Folder
(*) connect h:  to \\techops-test\homes\%USERNAME%

When I logon My home directory is mapped to h:\.  The logon script does 
not run, nor are any errors generated.  The Windows machine reports that 
it is unable to locate the server copy of my roaming profile because the 
 network path was not found.


The Samba resource \\techops-test\profile exists, and already has a 
subdirectory called marteltest waiting.


I then see the odd (to me) message in the smblog on the samba server for 
this client that says the profile path is being set to 
\\techops-test\marteltest\profile :



[2005/08/18 09:49:59, 4] lib/substitute.c:automount_server(337)
  Home server: techops-test
[2005/08/18 09:49:59, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
  pdb_set_profile_path: setting profile path 
\\techops-test\marteltest\profile,

was
[2005/08/18 09:49:59, 4] lib/substitute.c:automount_server(337)
  Home server: techops-test
[2005/08/18 09:49:59, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
  pdb_set_homedir: setting home dir \\techops-test\marteltest, was


When earlier in the process I see the profile path I want being passed:


[2005/08/18 09:49:59, 8] rpc_parse/parse_prs.c:prs_debug(82)
  0001c8 smb_io_unistr2 uni_profile_path
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
  01c8 uni_max_len: 0011
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
  01cc offset : 
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:prs_uint32(669)
  01d0 uni_str_len: 0011
[2005/08/18 09:49:59, 5] rpc_parse/parse_prs.c:dbg_rw_punival(841)
  01d4 buffer : \.\.t.e.c.h.o.p.s.\.p.r.o.f.i.l.e.
[2005/08/18 09:49:59, 8] rpc_parse/parse_prs.c:prs_debug(82)
  0001f6 smb_io_unistr2 uni_home_dir
-


I guess I should ask if I *can* store my user's roaming profiles on a 
samba server in an Active Directory environment before I ask what might 
be wrong with my configuration.  It looks like the Windows client is 
asking for the right path...but error messages on the windows client 
just say the network path is not found, but don't say what path it is 
looking for.


Thanks,
Bob Martel

--
***
Bob Martel,System Administrator  I met someone who looks a lot like you
Levin College of Urban Affairs   She does the things you do
Cleveland State University   But she is an IBM
(216) 687-2214
[EMAIL PROTECTED]-Jeff Lynne
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3, AD, and roaming profiles

2005-08-16 Thread Robert M. Martel

Greetings,

I have been working on getting Samba 3.0.20rc2 on a Sun Solaris box to 
play nice with our institution's Active Directory (AD) environment.  The 
AD set-up is pretty plain and I have no ability to make changes to its 
configuration - a different department runs that show.


Should I be able to store the roaming profile information on my Samba 
server in an AD environment?  The rest of the campus does not use 
roaming profiles so they provide no support or storage for them.  We've 
been using them for years and do not want to give them up - but we are 
being forced onto the AD system.  We will go, but I don't want my users 
to have to give up features to make the transition.



I have my Samba server as a member server belonging to the AD domain, I 
can log onto the Solaris host as an AD user, and Samba provides 
resources to the Windows clients - so far, so good.


What I need to be able to do for my group is store their roaming 
profiles on my samba server, and run our logon script from our samba server.


I have access to User Manager for AD and have modified the profile entry 
for my test user to:


profile path  \\techops-test\profile
login script  \\techops-test\netlogon\mglcua.bat

Home directory  map  h:\  to \\techops-test\homes\marteltest

I have also tried:
profile path  \\techops-test\profile\marteltest


When I try logging onto a windows machine it reports that it is unable 
to locate the server copy of your roaming profile and the detail says 
that The profile path cannot be found.


When I looked at the smblog file I saw the following:

[2005/08/16 13:52:48, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
  pdb_set_profile_path: setting profile path 
\\techops-test\marteltest\profile, was



Anyone know why the UNC was flipped to \\techops-test\marteltest\profile 
rather than \\techops-test\profile\marteltest?


The login script does not run.

The user's home directory *does* get mapped as the H:\ drive.

Thanks!
Bob Martel

--
***
Bob Martel,System Administrator  I met someone who looks a lot like you
Levin College of Urban Affairs   She does the things you do
Cleveland State University   But she is an IBM
(216) 687-2214
[EMAIL PROTECTED]-Jeff Lynne
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3, AD, and roaming profiles

2005-08-16 Thread Ilia Chipitsine


I have been working on getting Samba 3.0.20rc2 on a Sun Solaris box to play 
nice with our institution's Active Directory (AD) environment.  The AD set-up 
is pretty plain and I have no ability to make changes to its configuration - 
a different department runs that show.


Should I be able to store the roaming profile information on my Samba server 
in an AD environment?  The rest of the campus does not use roaming profiles 
so they provide no support or storage for them.  We've been using them for 
years and do not want to give them up - but we are being forced onto the AD 
system.  We will go, but I don't want my users to have to give up features to 
make the transition.



I have my Samba server as a member server belonging to the AD domain, I can 
log onto the Solaris host as an AD user, and Samba provides resources to the 
Windows clients - so far, so good.


What I need to be able to do for my group is store their roaming profiles on 
my samba server, and run our logon script from our samba server.


I have access to User Manager for AD and have modified the profile entry for 
my test user to:


profile path  \\techops-test\profile
login script  \\techops-test\netlogon\mglcua.bat

Home directory  map  h:\  to \\techops-test\homes\marteltest

I have also tried:
profile path  \\techops-test\profile\marteltest


logon path ? logon home ? (depending on windows version)
not profile path :-)

logon path doesn't have to point to PDC (which is AD in your case), so 
You can specify samba UNC for that. just remember win2ksp4 and later are 
picky on profile ACLs, You should either use samba with ACL support or 
enable profile acls = yes on that share (believe me, You don't want 
that option enabled globally).


logon script is relative to \\PDC\netlogon, so You can just specify s.bat 
and it will look for \\PDC\netlogon\s.bat





When I try logging onto a windows machine it reports that it is unable to 
locate the server copy of your roaming profile and the detail says that The 
profile path cannot be found.


When I looked at the smblog file I saw the following:

[2005/08/16 13:52:48, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
 pdb_set_profile_path: setting profile path 
\\techops-test\marteltest\profile, was



Anyone know why the UNC was flipped to \\techops-test\marteltest\profile 
rather than \\techops-test\profile\marteltest?


The login script does not run.

The user's home directory *does* get mapped as the H:\ drive.

Thanks!
Bob Martel

--
***
Bob Martel,System Administrator  I met someone who looks a lot like you
Levin College of Urban Affairs   She does the things you do
Cleveland State University   But she is an IBM
(216) 687-2214
[EMAIL PROTECTED]-Jeff Lynne
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba