Re: [Samba] Roaming Profile synchronization errors on new samba

[Zane Zakraisek]

Yeah, I found that I had error messages very similar to the ones you were
having in the subdirectories of my Windows 8 profile. I added my two cents
to the bug report. I haven't enabled folder redirection, since the files
that aren't getting synced aren't too important (mostly just stored
passwords and such for internet explorer), but I will if the bug doesn't
get taken care of.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Roaming Profile synchronization errors on new samba

[Diego Remolina]

On 02/22/2013 06:23 PM, Zane Zakraisek wrote:

I too have been experiencing the same issues with my Samba server and
Windows 8. I am currently running Samba 4.0.3. My Windows 7 client's
profiles are synchronizing, but I am receiving that same error on my
Windows 8 machines. The user has full permissions over their roaming
profile directory, so I'm not too sure what the issue is.



I have opened a bugzilla request at:

https://bugzilla.samba.org/show_bug.cgi?id=9678

You should also provide some information in there stating that 4.0.3 is 
at not working either with windows 8.


If you look at event viewer in your Windows 8 client, do you have lots 
of errors related to the "Low" folders which are part of the Roaming 
profile?


My current workaround for this is to combine Folder Redirection and 
Roaming profiles on Windows 8. Seems like all the problematic folders 
are redirected if you choose to redirect AppData from group policy and 
the roaming profile allows configurations of programs to stick when 
users change computers.


Diego
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Roaming Profile synchronization errors on new samba

[Zane Zakraisek]

I too have been experiencing the same issues with my Samba server and
Windows 8. I am currently running Samba 4.0.3. My Windows 7 client's
profiles are synchronizing, but I am receiving that same error on my
Windows 8 machines. The user has full permissions over their roaming
profile directory, so I'm not too sure what the issue is.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Roaming Profile synchronization errors on new samba server

[Diego Remolina]

I must add, that from the Windows client, if I go to the directories 
where the eventvwr says there is a failure creating the folders, I can 
create the folders just fine manually, so it is not really a permissions 
issue, at least not when trying to use explorer to create the folders, 
however during the process of copying files back when login off, the 
folder creation seems to fail.


Any ideas? I would really appreciate help, I am stuck at this point.

Diego

On 02/21/2013 03:28 PM, Diego Remolina wrote:

Hi,

I am running an old CentOS 4 server with samba 3.4.9 and am trying to
move to a new server running Centos 6 and the latest stock samba
3.5.10-125.

Upon trying to switch over to the new server, I noticed that accessing
shares and copying files worked perfectly fine, however upon login off,
the roaming profile fails with error message:

Your roaming profile was not completely synchronized. See the event log
for details or contact administrator.

Further inspection of the event viewer shows several entries like:

-
Windows cannot copy file \\?\C:\Users\dijuremo\Favorites\Links to
location \\?\UNC\p3file\Users\dijuremo\.winprofile.V2\Favorites\Links.
This error may be caused by network problems or insufficient security
rights.

DETAIL - The parameter is incorrect.
-

The client logs show messages such as:

-
[2013/02/21 15:03:09.737537, 2] smbd/open.c:2508(open_directory)
open_directory: unable to create
dijuremo/.winprofile.V2/Favorites/Links. Error was
NT_STATUS_OBJECT_NAME_COLLISION
-

I have tried upgrading to 3.6.9 using the SRPM from RHEL 6.4 and also
even build the latest 3.6.12 sources from samba.org with the spec file
from redhat and the problem seems to persist.

I have deleted the profile totally from both server and workstation to
try and get a new profile and the problem persist. The problem occurs on
both Windows 7 and 8 clients, but most of the testing I have done with
Windows 8.

I would appreciate if I can get some help with this. I can upload log
files or open a bugzilla if appropriate.

Thanks,

Diego


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Roaming Profile synchronization errors on new samba server

[Diego Remolina]

Hi,

I am running an old CentOS 4 server with samba 3.4.9 and am trying to 
move to a new server running Centos 6 and the latest stock samba 3.5.10-125.


Upon trying to switch over to the new server, I noticed that accessing 
shares and copying files worked perfectly fine, however upon login off, 
the roaming profile fails with error message:


Your roaming profile was not completely synchronized. See the event log 
for details or contact administrator.


Further inspection of the event viewer shows several entries like:

-
Windows cannot copy file \\?\C:\Users\dijuremo\Favorites\Links to 
location \\?\UNC\p3file\Users\dijuremo\.winprofile.V2\Favorites\Links. 
This error may be caused by network problems or insufficient security 
rights.


 DETAIL - The parameter is incorrect.
-

The client logs show messages such as:

-
[2013/02/21 15:03:09.737537,  2] smbd/open.c:2508(open_directory)
  open_directory: unable to create 
dijuremo/.winprofile.V2/Favorites/Links. Error was 
NT_STATUS_OBJECT_NAME_COLLISION

-

I have tried upgrading to 3.6.9 using the SRPM from RHEL 6.4 and also 
even build the latest 3.6.12 sources from samba.org with the spec file 
from redhat and the problem seems to persist.


I have deleted the profile totally from both server and workstation to 
try and get a new profile and the problem persist. The problem occurs on 
both Windows 7 and 8 clients, but most of the testing I have done with 
Windows 8.


I would appreciate if I can get some help with this. I can upload log 
files or open a bugzilla if appropriate.


Thanks,

Diego
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Roaming profile problems - XP profiles not being saved (Windows 7 profiles work)

[Joss Stubblefield]

We are having a very similar problem. I was wondering if you ever made any 
headway on this issue?

Thank You
--
Joss Stubblefield
Director of Technology 
The Derryfield School
2108 River Road
Manchester NH, 03104
603 669 4524 x 2244
joss-at-derryfield.org



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Roaming profile on Windows 7 not loading "computer was not able to set up a secure session with a domain controller"

[Mike A. Leonetti]

 After following this guide http://wiki.samba.org/index.php/Windows7 to
get Windows 7 on a Samba domain and the profile actually syncing for a
user first I get the following error. I tried disjoining and rejoining
to the domain and that works fine. However, logging in seems to result
in not syncing the profile. This is with samba version 3.4.6.
> Log Name: System
> Source: NETLOGON
> Date: 8/19/2010 12:56:34 PM
> Event ID: 5719
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: CE-MAUREEN.CONTRACTORS
> Description:
> This computer was not able to set up a secure session with a domain
> controller in domain CONTRACTORS due to the following:
> There are currently no logon servers available to service the logon
> request.
> This may lead to authentication problems. Make sure that this computer
> is connected to the network. If the problem persists, please contact
> your domain administrator.
> ADDITIONAL INFO
> If this computer is a domain controller for the specified domain, it
> sets up the secure session to the primary domain controller emulator
> in the specified domain. Otherwise, this computer sets up the secure
> session to any domain controller in the specified domain.
> Event Xml:
> http://schemas.microsoft.com/win/2004/08/events/event";>
> 
> 
> 5719
> 2
> 0
> 0x80
> 
> 8420
> System
> CE-MAUREEN.CONTRACTORS
> 
> 
> 
> CONTRACTORS
> %%1311
> 5EC0
> 
> 
-- 
Mike A. Leonetti
As warm as green tea

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Fwd: how to "Disable Samba Roaming profile"

[tms3]

Whoops...edited below





--- Original message ---
Subject: Re: [Samba] Fwd: how to "Disable Samba Roaming profile"
From: 
To: 
Cc: 
Date: Thursday, 10/06/2010 11:03 PM








--- Original message ---
Subject: [Samba] Fwd: how to "Disable Samba Roaming profile"
From: Muqtadir Kamal 
To: 
Date: Thursday, 10/06/2010 10:31 PM

-- Forwarded message --
From: Muqtadir Kamal 
Date: Fri, Jun 11, 2010 at 10:49 AM
Subject: how to "Disable Samba Roaming profile"
To: samba@lists.samba.org


Hey all, please let's me know how to "Disable Samba Roaming profile"
In
OpenLDAP+SAMBA SERVER [r...@x ~]# testparmLoad smb config files
from
/etc/samba/smb.confProcessing section "[homes]"Global parameter server
signing found in service section!Global parameter server schannel
found in
service section!Processing section "[netlogon]"Processing section
"[Profiles]"WARNING: No path in service Profiles - making it
unavailable!NOTE:
Service Profiles is flagged unavailable.

SNIP

OK, I have some N00b time.

First open in your favorite text editor smbldap.conf, and find the
bits that look like this:

##
#
# SAMBA Configuration
#
##

# The UNC path to home drives location (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon
home'
# directive and/or disable roaming profiles
# Ex: userSmbHome="\\PDC-SMB3\%U"
userSmbHome="\\\"

# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon
path'
# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="%U"

# The default Home Drive Letter mapping
# (will be automatically mapped at logon time if home directory exist)
# Ex: userHomeDrive="H:"
userHomeDrive="z:"

Make sure that the shares and paths you have make sense.

Now edit smb.conf in your favorite text editor, and find your shares
listings, and create something like this, that makes sense on your
system:

[Profiles]
path=/usr/home/sambashit/Profiles
public = yes
only guest = no
browseable = yes
writeable = yes
printable = no
create mask = 0700
 force create mode = 0700
force directory mode = 0700
directory security mask = 0700
level2 oplocks = Yes

OK.  Now, simply mkdir the appropriate directories on your file
system, and set the perms on the folder to something like


chown Administrator:Domain\ Users /usr/home/sambashit/Profiles
chmod 770  /usr/home/sambashit/Profiles

<---
Do not go all recursive on this (no -R switch).

NowIf you prefer no roaming profiles, after doing the above, you
can edit smbldap.conf thusly:

# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon
path'
# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="\\%SystemDrive%\ %USERPROFILE%\%U"

see:

<http://en.wikipedia.org/wiki/Environment_variable>

for additional Windoze environment variables.

Of course, for existing users, you will need export and edit an .ldif
file for the user, use an ldap gui editor, or delete users created
prior to editing the above, and recreate the users.

Cheers,

TMS III



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Fwd: how to "Disable Samba Roaming profile"

[tms3]

--- Original message ---
Subject: [Samba] Fwd: how to "Disable Samba Roaming profile"
From: Muqtadir Kamal 
To: 
Date: Thursday, 10/06/2010 10:31 PM

-- Forwarded message --
From: Muqtadir Kamal 
Date: Fri, Jun 11, 2010 at 10:49 AM
Subject: how to "Disable Samba Roaming profile"
To: samba@lists.samba.org


Hey all, please let's me know how to "Disable Samba Roaming profile" 
In
OpenLDAP+SAMBA SERVER [r...@x ~]# testparmLoad smb config files 
from

/etc/samba/smb.confProcessing section "[homes]"Global parameter server
signing found in service section!Global parameter server schannel 
found in

service section!Processing section "[netlogon]"Processing section
"[Profiles]"WARNING: No path in service Profiles - making it 
unavailable!NOTE:

Service Profiles is flagged unavailable.

SNIP

OK, I have some N00b time.

First open in your favorite text editor smbldap.conf, and find the 
bits that look like this:


##
#
# SAMBA Configuration
#
##

# The UNC path to home drives location (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
home'

# directive and/or disable roaming profiles
# Ex: userSmbHome="\\PDC-SMB3\%U"
userSmbHome="\\\"

# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
path'

# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="%U"

# The default Home Drive Letter mapping
# (will be automatically mapped at logon time if home directory exist)
# Ex: userHomeDrive="H:"
userHomeDrive="z:"

Make sure that the shares and paths you have make sense.

Now edit smb.conf in your favorite text editor, and find your shares 
listings, and create something like this, that makes sense on your 
system:


[Profiles]
 path=/usr/home/sambashit/Profiles
 public = yes
  only guest = no
  browseable = yes
  writeable = yes
  printable = no
  create mask = 0700
  force create mode = 0700
  force directory mode = 0700
  directory security mask = 0700
  level2 oplocks = Yes

OK.  Now, simply mkdir the appropriate directories on your file 
system, and set the perms on the folder to something like


chmod Administrator:Domain\ Users /usr/home/sambashit/Profiles  <--- 
Do not go all recursive on this (no -R switch).


NowIf you prefer no roaming profiles, after doing the above, you 
can edit smbldap.conf thusly:


# The UNC path to profiles locations (%U username substitution)
# Just set it to a null string if you want to use the smb.conf 'logon 
path'

# directive and/or disable roaming profiles
# Ex: userProfile="\\camarillo\profiles\%U"
userProfile="\\%SystemDrive%\ %USERPROFILE%\%U"

see:

<http://en.wikipedia.org/wiki/Environment_variable>

for additional Windoze environment variables.

Of course, for existing users, you will need export and edit an .ldif 
file for the user, use an ldap gui editor, or delete users created 
prior to editing the above, and recreate the users.


Cheers,

TMS III



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] how to "Disable Samba Roaming profile"

[David Harrison]

On Fri, Jun 11, 2010 at 5:19 PM, Muqtadir Kamal wrote:

>  Hey all, please let's me know how to "Disable Samba Roaming profile" In
> OpenLDAP+SAMBA SERVER  Regards
> Kamal <https://lists.samba.org/mailman/options/samba>


To disable roaming profiles set the 'logon path' parameter in your smb.conf
to nothing.
e.g.
[global]
logon path =
logon home =

('logon home' is the legacy Win9x/NT equivalent)


If you have Windows computers with roaming profiles installed you'll need to
convert them to be local, or the next time users login they may have their
profile reset. On each desktop with roaming profiles:
- Right click on My Computer and select Properties.
- Go to the Advanced tab in the User Profiles section press the Settings
button.
- Select the appropriate roaming profile, press the Change Type button and
select local.


David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Fwd: how to "Disable Samba Roaming profile"

[Muqtadir Kamal]

-- Forwarded message --
From: Muqtadir Kamal 
Date: Fri, Jun 11, 2010 at 10:49 AM
Subject: how to "Disable Samba Roaming profile"
To: samba@lists.samba.org


Hey all, please let's me know how to "Disable Samba Roaming profile" In
OpenLDAP+SAMBA SERVER [r...@x ~]# testparmLoad smb config files from
/etc/samba/smb.confProcessing section "[homes]"Global parameter server
signing found in service section!Global parameter server schannel found in
service section!Processing section "[netlogon]"Processing section
"[Profiles]"WARNING: No path in service Profiles - making it unavailable!NOTE:
Service Profiles is flagged unavailable.Loaded services file OK.Server role:
ROLE_DOMAIN_PDCPress enter to see a dump of your service definitions
[global]workgroup = interfaces = X .X. X. X
 passdb backend = ldapsam:ldap://127.0.0.1pam password change = Yes
 passwd program = /usr/bin/passwd '%u'passwd chat = "*New UNIX
password*" %n\n "*Retype new UNIX password*" %n\n "*Changing password
for*\nNew password*" %n\n "*Retype new password*" %n\n" "*updated
successfully*"username map = /etc/samba/smbuserslog level =
3log file = /var/log/samba/log.%mmax log size = 10
 time server = Yesprintcap name = cupsadd user script =
/usr/sbin/smbldap-useradd -m "%u"delete user script =
/usr/sbin/smbldap-userdel "%u"add group script =
/usr/sbin/smbldap-groupadd -p "%g"delete group script =
/usr/sbin/smbldap-groupdel "%g"add user to group script =
/usr/sbin/smbldap-groupmod -m "%u" "%g"delete user from group script
= /usr/sbin/smbldap-groupmod -x "%u" "%g"set primary group script =
/usr/sbin/smbldap-usermod -g "%g" "%u"add machine script =
/usr/sbin/smbldap-useradd -w "%u"logon script = logon.bat
 logon drive = H:domain logons = Yesos level = 35
 preferred master = Yesdomain master = Yeswins support = Yes
 ldap admin dn = cn=Manager,dc=,dc=netldap delete dn = Yes
 ldap group suffix = ou=Groupsldap idmap suffix = ou=Idmap
 ldap machine suffix = ou=Hostsldap passwd sync = Yesldap
suffix = dc=XXX,dc=netldap ssl = noldap user suffix =
ou=Peoplesidmap uid = 1-5idmap gid = 1-5
   admin users = administra...@smbadmins
[homes]comment = Home Directoriesvalid users = %S
 read only = Nobrowseable = No
[netlogon]comment = Network Logon Servicepath =
/var/lib/samba/netlogonvalid users = %Uadmin users =
Administratorguest ok = Yesbrowseable = No
[Profiles]read only = Nocreate mask = 0600directory
mask = 0700profile acls = Yesavailable = No

Regards
Kamal
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] how to "Disable Samba Roaming profile"

[Indexer]

On 11/06/2010, at 2:49 PM, Muqtadir Kamal wrote:

> Hey all, please let's me know how to "Disable Samba Roaming profile" In
> OpenLDAP+SAMBA SERVER  Regards
> Kamal
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Can you please send your smb.conf next time, it would help greatly.

Incidentally, comment out lines that appear similar to the following (this is 
my roaming profiles configuration)

  logon home = \\%L\%U\.9xprofile
  logon path = \\%L\profiles\%U
  logon drive = P:

[Profiles]
  comment = Network Profiles Service
  path = /storage/samba/profiles
  read only = No
  profile acls = yes
  hide files = /desktop.ini/ntuser.ini/NTUSER.*/
  profile acls = Yes
create mask = 0600
directory mask = 0700
store dos attributes = Yes
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] how to "Disable Samba Roaming profile"

[Muqtadir Kamal]

 Hey all, please let's me know how to "Disable Samba Roaming profile" In
OpenLDAP+SAMBA SERVER  Regards
Kamal
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Roaming profile problems - XP profiles not being saved (Windows 7 profiles work)

[Richard Basch]

Ever since I upgraded Samba from 3.0.x to 3.4.x, and reconfigured it to
support Windows 7 clients, I am having issues with roaming profiles on my
Windows XP clients.

All the machines have been rejoined to the domain, domain authentication
appears to be working fine, the home drive is mounted ok, and the profile
information is even read, but never updated upon logout.  A user with no
profile will have an empty profile directory created.  I used to have the
profile under 'homes', which I changed after reading several articles about
not configuring as such, but to no avail.

I can't find any obvious errors in the Samba logs, using a variety of
debugging levels, but I probably haven't configured logging correctly (so if
Samba logs are requested, please let me know the logging I should enable).

The key item is Windows 7 profiles DO WORK.  It is annoying it requires a
separate profile, but c'est le vie.  Only my Windows XP clients are failing.
I have suspected it may be a registry setting in Windows XP, but I can't
seem to identify which parameter.

I did change the setting using the Policy Editor of:
Do not check for user ownership of Roaming Profile Folders = Enabled
(on one computer), to no avail.

In my smb.conf, you will see references to LDAP... all the users are
configured with:
SambaProfilePath = \\\profiles\
(No variables are referenced.)

/home/profiles is mode 1777, owned by root.  Anyone can write there (and as
I previously said, I have seen the profile directory being created, just not
populated... and it is the same mountpoint that is also used for my Windows
7 (.V2) profiles, which work properly.

Enclosed is my smb.conf... any suggestions would be welcome.  This list is
full of helpful people.  My last issue to get Windows 7 domain joining was
great... I had to set StrongKeys = Required in the client's registry (I
never imagined Required would have been synonymous with if you don't do
this, it won't bother to negotiate the stronger setting).

smb.conf 

[global]
;include = /etc/samba/dhcp.conf

workgroup = N2HA
realm = INTERNAL.BRIGHT-PROSPECTS.COM
security = user
map to guest = Bad User
usershare allow guests = Yes

server string = %h (Samba %v)
hosts allow = 192.168.0.0/16
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
smb ports = 445 139
;os level = 65
local master = yes
domain master = yes
preferred master = yes
domain logons = yes
winbind use default domain = yes
netbios aliases = SAMBA

;printing = cups
;printcap name = cups
;printcap cache time = 750
;cups options = raw

name resolve order = wins lmhosts bcast
wins support = yes
dns proxy = no
ea support = yes
enable asu support = yes
time server = yes
deadtime = 10
max log size = 4096
hide dot files = no
hide special files = yes
hide unreadable = yes
template shell = /bin/false
veto oplock files = /*.pst/*.nsf/*.doc/*.xls/*.mdb/

client lanman auth = no
client ntlmv2 auth = yes
client plaintext auth = no
encrypt passwords = yes
lanman auth = no
ntlm auth = yes
null passwords = yes
server signing = auto
server schannel = auto

passdb backend = ldapsam:ldaps://ldap.internal.bright-prospects.com/
obey pam restrictions = no
ldap ssl = no
ldap admin dn = "uid=ntadmin,ou=User,dc=bright-prospects,dc=com"
ldap suffix = dc=bright-prospects,dc=com
ldap machine suffix = sambaDomainName=N2HA,ou=Network
ldap user suffix = ou=User
ldap group suffix = ou=Group
ldap idmap suffix = ou=IdMap,ou=Network
ldap passwd sync = yes
ldap delete dn = no

;add user script = /home/admin/bin/smbldap-useradd -m %u
;delete user script = /home/admin/bin/smbldap-userdel %u
;add group script = /home/admin/bin/smbldap-groupadd -p %g
;delete group script = /home/admin/bin/smbldap-groupdel %g
add machine script = /home/admin/bin/smbldap-useradd -w %u
add user to group script = /home/admin/bin/smbldap-groupmod -m %u %g
delete user from group script = /home/admin/bin/smbldap-groupmod -x
%u %g
set primary group script = /home/admin/bin/smbldap-usermod -g %g %u
passwd program = /home/admin/bin/smbldap-passwd %u

vfs objects = recycle
recycle: directory_mode = 0770
recycle: keeptree = 1
recycle: touch = 1
recycle: minsize = 1
recycle: maxsize = 500
recycle: exclude = *.tmp *.temp ~$* *.obj *.~??
recycle: exclude_dir = /RealTimeBackup
;vscan-clamav: config-file = /etc/samba/vscan-clamav.conf

;log level = 3 auth:5 smb:10

[homes]
comment = Home Directories
   

Re: [Samba] Samba roaming profile with folder redirection

[Yauheni Labko]

The problem was resolved after rejoining the domain. It looks like the policy 
was not updated though I rebooted the machine and did gpupdate.
 
Yauheni Labko (Eugene Lobko)
Junior System Administrator
Chapdelaine & Co.
(212)208-9150

On Monday 19 October 2009 01:42:09 pm Yauheni Labko wrote:
> Hi,
> 
> I have a domain controller which was configured to use the local profiles.
>  We have a relatively small group whose work required it. Now we are moving
>  toward using the domain for all machine with roaming profile. There are a
>  lot of posts dealing with the roaming profiles and the folder redirection.
>  But I've met some issues.
> 
> My configuration:
> NS3 and SMB are hostnames of our servers.
> PDC is located on NS3  and file server containing profiles and home shares
>  on SMB.
> 
> This is NS3 configuration:
> # Global parameters
> [global]
> workgroup = CHAPPY-MS
> netbios name = DS01
> server string = Chappy Samba LDAP PDC Server
> interfaces = 192.168.40.8/255.255.255.0
> passdb backend = ldapsam:ldap://ds01/
> enable privileges = Yes
> passwd program = /usr/sbin/smbldap-passwd -u "%u"
> syslog = 0
> log file = /var/log/samba/log.%m
> max log size = 1000
> printcap name = cups
> add user script = /usr/sbin/smbldap-useradd -m "%u"
> add group script = /usr/sbin/smbldap-groupadd -p "%g"
> add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
> delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
> "%g"
> set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
> add machine script = /usr/sbin/smbldap-useradd -w "%u"
> logon path = \\smb\profiles\%U\%a
> logon drive = H:
> logon home = \\smb\homes
> domain logons = Yes
> os level = 65
> preferred master = Yes
> domain master = Yes
> wins support = Yes
> ldap admin dn = cn=admin,dc=chappy,dc=com
> ldap delete dn = Yes
> ldap group suffix = ou=groups
> ldap idmap suffix = ou=idmap,dc=chappy,dc=com
> ldap machine suffix = ou=computers
> ldap passwd sync = Yes
> ldap suffix = dc=chappy,dc=com
> ldap user suffix = ou=people
> panic action = /usr/share/samba/panic-action %d
> idmap uid = 15000-2
> idmap gid = 15000-2
> printing = cups
> print command =
> lpq command = %p
> lprm command =
> 
> [netlogon]
> path = /var/lib/samba/netlogon
> browseable = No
> 
> 
> This is SMB configuration:
> 
> [global]
> workgroup = CHAPPY-MS
> server string = file server
> interfaces = 192.168.40.43
> map to guest = Bad User
> passdb backend = ldapsam:ldap://ds01
> syslog = 0
> log file = /var/log/samba/log.%m
> max log size = 2048
> keepalive = 0
> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
> SO_RCVBUF=8192 SO_SNDBUF=8192
> hostname lookups = Yes
> load printers = No
> dns proxy = No
> wins server = 192.168.40.8
> kernel oplocks = No
> ldap admin dn = cn=admin,dc=chappy,dc=com
> ldap delete dn = Yes
> ldap group suffix = ou=groups
> ldap idmap suffix = ou=idmap,dc=chappy,dc=com
> ldap machine suffix = ou=computers
> ldap suffix = dc=chappy,dc=com
> ldap ssl = no
> ldap user suffix = ou=people
> panic action = /usr/share/samba/panic-action %d
> 
> [homes]
> comment = Home Share
> path = /san/export/home/%S
> valid users = %S
> write list = %S
> force create mode = 0600
> force directory mode = 0700
> hide special files = Yes
> browseable = No
> 
> [profiles]
> comment = Profiles Share
> path = /san/export/samba/profiles
> read only = No
> force create mode = 0664
> force directory mode = 0775
> profile acls = Yes
> hide files = /Application Data/Cookies/Local\
> Settings/NetHood/PrintHood/Recent/SendTo/NTUSER.DAT/
> store dos attributes = Yes
> browseable = No
> csc policy = disable
> 
> 
> Netlogon on NS3 has a Default User configuration redirecting Desktop, My
> Documents, My Pictures, My Music, Personal to the appropriate directories
>  on %HOMEDRIVE%:
> Desktop - %HOMEDRIVE%\Desktop
> My Documents - %HOMEDRIVE%\My Documents
> My Pictures - %HOMEDRIVE%\My Documents\My Pictures
> etc..
> 
> The local group policy disables the offline files and the roaming profile
> synchronization for Desktop, My Documents and Application Data. These
>  settings were based on Samba by Examples, ch.5 and 6.
> 
> During the first log in  the user grabs the configured profile from
>  netlogon share and correctly setup all files. But when user logged off it
>  watched sync

[Samba] Samba roaming profile with folder redirection

[Yauheni Labko]

Hi, 

I have a domain controller which was configured to use the local profiles. We 
have a relatively small group whose work required it. Now we are moving toward 
using the domain for all machine with roaming profile. There are a lot of 
posts dealing with the roaming profiles and the folder redirection. But I've 
met some issues.

My configuration:
NS3 and SMB are hostnames of our servers.
PDC is located on NS3  and file server containing profiles and home shares on 
SMB.

This is NS3 configuration:
# Global parameters
[global]   
workgroup = CHAPPY-MS
netbios name = DS01  
server string = Chappy Samba LDAP PDC Server
interfaces = 192.168.40.8/255.255.255.0 
passdb backend = ldapsam:ldap://ds01/   
enable privileges = Yes
passwd program = /usr/sbin/smbldap-passwd -u "%u"
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
printcap name = cups
add user script = /usr/sbin/smbldap-useradd -m "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" 
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
logon path = \\smb\profiles\%U\%a
logon drive = H:
logon home = \\smb\homes
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
ldap admin dn = cn=admin,dc=chappy,dc=com
ldap delete dn = Yes
ldap group suffix = ou=groups
ldap idmap suffix = ou=idmap,dc=chappy,dc=com
ldap machine suffix = ou=computers
ldap passwd sync = Yes
ldap suffix = dc=chappy,dc=com
ldap user suffix = ou=people
panic action = /usr/share/samba/panic-action %d
idmap uid = 15000-2
idmap gid = 15000-2
printing = cups
print command =
lpq command = %p
lprm command =

[netlogon]
path = /var/lib/samba/netlogon
browseable = No


This is SMB configuration:

[global]
workgroup = CHAPPY-MS
server string = file server
interfaces = 192.168.40.43 
map to guest = Bad User
passdb backend = ldapsam:ldap://ds01
syslog = 0  
log file = /var/log/samba/log.%m
max log size = 2048 
keepalive = 0   
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE 
SO_RCVBUF=8192 SO_SNDBUF=8192
hostname lookups = Yes  
  
load printers = No  
  
dns proxy = No  
  
wins server = 192.168.40.8
kernel oplocks = No
ldap admin dn = cn=admin,dc=chappy,dc=com
ldap delete dn = Yes
ldap group suffix = ou=groups
ldap idmap suffix = ou=idmap,dc=chappy,dc=com
ldap machine suffix = ou=computers
ldap suffix = dc=chappy,dc=com
ldap ssl = no
ldap user suffix = ou=people
panic action = /usr/share/samba/panic-action %d

[homes]
comment = Home Share
path = /san/export/home/%S
valid users = %S
write list = %S
force create mode = 0600
force directory mode = 0700
hide special files = Yes
browseable = No

[profiles]
comment = Profiles Share
path = /san/export/samba/profiles
read only = No
force create mode = 0664
force directory mode = 0775
profile acls = Yes
hide files = /Application Data/Cookies/Local\ 
Settings/NetHood/PrintHood/Recent/SendTo/NTUSER.DAT/
store dos attributes = Yes
browseable = No
csc policy = disable


Netlogon on NS3 has a Default User configuration redirecting Desktop, My 
Documents, My Pictures, My Music, Personal to the appropriate directories on 
%HOMEDRIVE%:
Desktop - %HOMEDRIVE%\Desktop
My Documents - %HOMEDRIVE%\My Documents
My Pictures - %HOMEDRIVE%\My Documents\My Pictures
etc..

The local group policy disables the offline files and the roaming profile 
synchronization for Desktop, My Documents and Application Data. These settings 
were based on Samba by Examples, ch.5 and 6.

During the first log in  the user grabs the configured profile from netlogon 
share and correctly setup all files. But when user logged off it watched 
synchronizing window where it syncs the user home directory.
At the same time the user can write/read home drive with no problems. The 
popup message "offline files - working offline" is rather annoying. 

Could anybody give me an idea what is wro

[Samba] roaming profile corruption with windows xp client and samba PDC

[roudoudou]

Hi,
I have roaming profile issue on my SAMBA PDC with an LDAP backend
running on FreeBSD 6.3. It seems that randomly, user's profile get
"corrupted" on windows XP. When that happens, the user log in as usual
(%userprofile% variable is set and all the share are properly
connected) but he gets  a default desktop configuration (default
wallpaper, english keyboard layout...while i'm running windows xp
french edition...) and every desktop settings he try to modify are not
saved back on his profile and restored next logon. I don't know if
it's relevant but the NTUSER.DAT file is renamed Ntuser.dat when that
happens.

While trying to debug this issue, i saw a lot of the following lines
on the XP clients in %windir%\Debug\UserMode/Userenv.log file and i'm
wondering if those error messages could be related to my issue please
?

USERENV(330.334) 12:37:13:343 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:13:390 CUserProfile::GetRefCountAndFlags:
RegQueryValueEx failed, key =
S-1-5-21-2211716236-2719219400-558165280-22480, error = 0002

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Can
not get ref count and flags

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:13:390 CUserProfile::CleanupUserProfile: Ref
Count is not 0

USERENV(330.334) 12:37:32:187 GetUserGuid: Failed to get user guid with 1355.

USERENV(330.334) 12:37:32:187 GetUserGuid: Failed to get user guid with 1355.

USERENV(330.334) 12:37:32:468 GetUserGuid: Failed to get user guid with 1355.

USERENV(330.334) 12:37:32:500 GetExclusionList: Failed to get file
size of 

USERENV(330.334) 12:37:35:015 ReconcileFile: Unable to open temporary file

USERENV(330.334) 12:38:14:726 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.334) 12:38:15:153 GetUserGuid: Failed to get user guid with 1355.

USERENV(330.334) 12:38:15:153 GetUserGuid: Failed to get user guid with 1355.

USERENV(368.3d8) 12:38:15:206 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(368.3d8) 12:38:15:278 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.334) 12:38:15:669 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.238) 12:38:16:524 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.644) 12:38:16:542 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.164) 12:38:16:809 PolicyChangedThread: UpdateUser failed with 6.

USERENV(4e0.67c) 12:38:23:575 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(4e0.67c) 12:38:23:771 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(4e0.1d4) 12:38:26:157 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(330.3b0) 12:38:33:743 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(878.884) 12:38:54:986 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332

USERENV(878.884) 12:38:55:004 GetUserDNSDomainName:  MyGetUserNameEx
failed for NameDnsDomain style name with 1332


By the way, I tried to debug the issue by loading one of those
Ntuser.dat corrupted roaming profile and it seems related to a
permissiosn issue as the user hasn't full control of the
HKEY_CURRENT_USER hive ?? For example, when logged in with the
credentials of one those users, i can't create a DWORD registry key
under 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
To workaround this issue, i have to rename the user's  profile
directory on the samba server (aka  mv ~user/profile
~user/profile.bak) right now...till the next time it'll happen :(

I have read a lot about this issue and it seems that it could be
related to either:
* Symantec Antivirus corporate 10. And i have this software running on
some of the domain computers but not all
* Enabling "The Cache Option for Offline Files" . And indeed, i forgot
to disable this option on some of the computers (the same where
symantec is running by the way :(
I'm on my way to fix those configurations problems but would really
appreciate any help on the userenv.log error messages pasted above
please :-

Re: [Samba] Roaming profile & f-secure problem

[Scott Lovenberg]

Marcus Sobchak <[EMAIL PROTECTED]> wrote:

Hi,

are there any know problems with f-secure scanner and roaming profiles?
We have a lot of users with problems syncing their roaming profile from
the domain server. It seems to be a problem with f-secure's on-access
scanning (may be timeout problem?). Some users have to login three or
four times, before getting their roaming profile and not the default
profile.

System:  3.0.24-6etch9

Ciao,
Marcus


  
I'm running f-prot 6 w/ on access scanning and haven't had any problems 
specific to roaming profiles.  We've also got redirected folders 
(desktop, start menu, etc.), but I have seen this problem once or twice. 

Every now and then we'll log in and get a default profile.  The next 
login always works.  I see this maybe once a month. 

Are you sure you're not close to the max Cat 5e length?  I've heard of 
things like this once you start getting towards the upper limits of a 
cable length.  Fprot is somewhat... cranky... so YMMV.  Can you provide 
logs for us?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile & f-secure problem

[Marcus Sobchak <[EMAIL PROTECTED]>]

Hi,

are there any know problems with f-secure scanner and roaming profiles?
We have a lot of users with problems syncing their roaming profile from
the domain server. It seems to be a problem with f-secure's on-access
scanning (may be timeout problem?). Some users have to login three or
four times, before getting their roaming profile and not the default
profile.

System:  3.0.24-6etch9

Ciao,
Marcus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile works for all users except one

[Alex Strasheim]

I've inherited a small office network I didn't build.  We're running
Novell's eDirectory, and using Samba as a PDC.

Everyone's profile roams but mine.

I didn't build our smb.conf file, but I've read tutorials on roaming
profiles, and it seems to be set up correctly.  I've included the text
of that file at the end of this message.

I bungled creating my account in eDirectory, deleted it, and recreated
it with the same name.  In particular, I didn't have the profile
directory set up properly the first time I tried to login.  I don't
know if that could have caused problems.  My account seems to be set
up like the older ones now.

Also, logon.bat doesn't seem to run for me.  I end up with the X:
drive mapped, but logon.bat sets up other shares for every other user
that I don't get.  I see a command prompt window flash by on the
screen when I start, but it doesn't work.  I tried to put a "pause" in
logon.bat, to stop the command prompt, but it flashed by just the
same.

I'm really puzzled by this.  Everything I've read suggests that the
action happens in smb.conf, which doesn't differentiate between users
-- so I don't understand how I could manage to break it for one
account.

Anyway, here is my smb.conf -- we had a lot of comments from the
example file, which I've removed for brevity.

Thanks in advance.

--

#=== Global Settings =
[global]

# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
   workgroup = DOMINION
   netbios name = MAXIMUS
   server string = EnsembleTravel FileServer
   security = user
   hosts allow = 192.168.128. 192.168.60. 127.
   printing = cups
   printcap name = cups
   load printers = yes
   log file = /usr/local/samba/var/log.%m
   max log size = 500
   interfaces = 192.168.128.0/24
   local master = yes
   os level = 33
   domain master = yes
   preferred master = yes
   domain logons = yes
   wins support = yes
   nt acl support = yes
   time server = yes
   encrypt passwords = yes
   obey pam restrictions = No
   unix password sync = No
   dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
   show add printer wizard = yes
   log level = 0

###
#  this is for roaming profiles
###
   logon path = \\%L\profiles\%U
###
   logon script = logon.bat
   logon drive = X:

   passdb backend = NDS_ldapsam:ldap://mailserver.ensembletravel.net

   ldap admin dn = cn=admin,ou=users,o=EnsembleTravel
   ldap suffix = o=EnsembleTravel
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=Users
   add user script = /usr/sbin/smbldap-useradd -m "%u"
   ldap delete dn = Yes
   #delete user script = /usr/sbin/smbldap-userdel "%u"
   add machine script = /usr/sbin/smbldap-useradd -w "%u"
   add group script = /usr/sbin/smbldap-groupadd -p "%g"
   #delete group script = /usr/sbin/smbldap-groupdel "%g"
   add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
   delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
   set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"

# Share Definitions ==

[netlogon]
path = /usr/local/samba/netlogon
browseable = No
read only = Yes

[profiles]
path = /data/profiles
writeable = Yes
read only = No
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
   profile acls = Yes
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U @"Domain Admins"
[homes]
comment = Home directory for %U
writeable = Yes
read only = No
browseable = No
create mask = 0700
directory mask = 0700
force directory mode = 0700

[printers]
comment = Printers
printable = Yes
path = /usr/local/samba/spool
browseable = Yes
guest ok = Yes
public = Yes
read only = Yes
writable = No


[print$]
path = /usr/local/samba/drivers
guest ok =Yes
browseable = Yes
read only = No
valid users = @"Domain Users"
write list = @"Domain Admins"

[public]
comment = Public directory
path = /data/common
public = yes
browseable = yes
guest ok = Yes
read only = No

[sales]
comment = Sales
path = /data/sales
browseable = Yes
guest ok = Yes
read only = No
create mask = 0777
force create mode = 0777
directory mask = 0777
force directory mode = 0777

[apps]
comment = APPS
path = /data/apps
browseable = Yes
guest ok 

Re: [Samba] samba roaming profile

[John Drescher]

Second. Is there a reason I can't delete Icons on the desktop on
windows xp. It tells me access denied.


If you created icons as an admin and it put them in the Default User
or All Users desktop a regular user will get Access Denied trying to
delete these.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba roaming profile

[Lukasz Szybalski]

On 7/19/07, Felipe Augusto van de Wiel <[EMAIL PROTECTED]> wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Lukasz Szybalski wrote, On 18-07-2007 13:13:
[...]

Profiles are sort of ninja magic, sometimes it works,
sometimes it doesn't and as the documentation says, it can be
the heaven for some people and the hell for others. BTW, did
you check the "Desktop Profile Management" in Samba HOWTO?

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html


> [profiles]
> comment = Network PRofiles Share
> path = /home/samba/profiles
> #read only = No
> #store dos attributes = Yes
> #create mask = 0600
> #directory  mask = 0700
> #browseable = no
> #guest ok = no
> #printable = no
> writable = yes

Here is an example of profiles that we used for
quite some time on our company:

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


I am used your settings.




> [profiles]
> admin users = newuser2
>
> This means that newuser2 can act root.
> In my profile I get another folder created automatically only for newuser2
> 1. Why is the folder created only for newuser2 and not newuser?
>
> drwxr-xr-x  2 root   newuser2 4096 2007-07-18 09:20 newuser2

Sounds related to the permissions.

Or not since admin users = newuser2, which lets the account work as
root. Is that normal behavior?





> 2. Why is the /home/samba/profiles/newuser2 empty? It is not filled
> with roaming profile after I logging  out of windows XP?

That can be a WinXP problem. If for some reason, your
user and/or workstation has any setup to act as a local profile,
then it wouldn't upload anything to the server.

Local policies can be modified to force only local
profiles, you can also change some settings on how your roaming
profile works.


> I log in to newuser:
> cannot load a  roaming profile, loading your local profile
> cannot locate local profile
>
> I log in to newuser2:
> cannot locate roaming profile on server
>
> 3. How do I make the roaming profile working. It is the case that
> setting up the users and adding logon path, logon home, profiles to
> smb.conf is not enough?
> What else needs to be done?

'logon path' and 'logon home' are used by different
clients, sometimes (and specially for XP) you need the
'csc policy' option.



What bothers me the most is the fact that out of 5 newusers I have created, on
2 of them the roaming profiles has created properly but it won't for
the rest. With no special order.

Second. Is there a reason I can't delete Icons on the desktop on
windows xp. It tells me access denied.

Are there any manual tests i can do to check on the profile status?

Is there a domain users group that i maybe should create in samba or anywhere?
Lucas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba roaming profile

[John Drescher]

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


profile acls = yes

This is very important with XP.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba roaming profile

[Felipe Augusto van de Wiel]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Lukasz Szybalski wrote, On 18-07-2007 13:13:
[...]

Profiles are sort of ninja magic, sometimes it works,
sometimes it doesn't and as the documentation says, it can be
the heaven for some people and the hell for others. BTW, did
you check the "Desktop Profile Management" in Samba HOWTO?

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html


> [profiles]
> comment = Network PRofiles Share
> path = /home/samba/profiles
> #read only = No
> #store dos attributes = Yes
> #create mask = 0600
> #directory  mask = 0700
> #browseable = no
> #guest ok = no
> #printable = no
> writable = yes

Here is an example of profiles that we used for
quite some time on our company:

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


> [profiles]
> admin users = newuser2
>
> This means that newuser2 can act root.
> In my profile I get another folder created automatically only for newuser2
> 1. Why is the folder created only for newuser2 and not newuser?
> 
> drwxr-xr-x  2 root   newuser2 4096 2007-07-18 09:20 newuser2

Sounds related to the permissions.


> 2. Why is the /home/samba/profiles/newuser2 empty? It is not filled
> with roaming profile after I logging  out of windows XP?

That can be a WinXP problem. If for some reason, your
user and/or workstation has any setup to act as a local profile,
then it wouldn't upload anything to the server.

Local policies can be modified to force only local
profiles, you can also change some settings on how your roaming
profile works.


> I log in to newuser:
> cannot load a  roaming profile, loading your local profile
> cannot locate local profile
> 
> I log in to newuser2:
> cannot locate roaming profile on server
> 
> 3. How do I make the roaming profile working. It is the case that
> setting up the users and adding logon path, logon home, profiles to
> smb.conf is not enough?
> What else needs to be done?

'logon path' and 'logon home' are used by different
clients, sometimes (and specially for XP) you need the
'csc policy' option.

Hope this helps.
Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGn3kYCj65ZxU4gPQRCAoQAJ9cq8st/g3fmVCpVEQf6pOz07CmdACfaJCa
pOayniJjTwdvWn7lwsfqVb4=
=php4
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba roaming profile

[Lukasz Szybalski]

Debian stable: Samba -3.0.24-6etch2
I set up a samba server as a pdc.

smb.conf
logon path = \\%L\profiles\%U
logon home = \\%L\%U

[profiles]
comment = Network PRofiles Share
path = /home/samba/profiles
#read only = No
#store dos attributes = Yes
#create mask = 0600
#directory  mask = 0700
#browseable = no
#guest ok = no
#printable = no
writable = yes

I created the folders
/home/samba
drwxr-xr-x 4 root  root   4096 2007-07-16 10:09 samba

/home/samba/profiles
drwxr-xr-x 3 root root 4096 2007-07-17 10:27 netlogon
drwxr-xr-x 7 root root 4096 2007-07-17 12:36 profiles

I create user and add it to samba
adduser newuser
adduser newuser2
smbpasswd -a newuser
smbpasswd -a newuser2

I am able to log in.
Then I get an error from windows XP saying that it is not able to
update/get my profile on the server.

I read the
http://lists.samba.org/archive/samba/2004-September/093587.html
so I decided to add

[profiles]
admin users = newuser2

This means that newuser2 can act root.
In my profile I get another folder created automatically only for newuser2
1. Why is the folder created only for newuser2 and not newuser?

drwxr-xr-x  2 root   newuser2 4096 2007-07-18 09:20 newuser2

2. Why is the /home/samba/profiles/newuser2 empty? It is not filled
with roaming profile after I logging  out of windows XP?



I log in to newuser:
cannot load a  roaming profile, loading your local profile
cannot locate local profile

I log in to newuser2:
cannot locate roaming profile on server

3. How do I make the roaming profile working. It is the case that
setting up the users and adding logon path, logon home, profiles to
smb.conf is not enough?
What else needs to be done?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile - Folder redirection - Erase file on server

[Thierry Lacoste]

Maybe a problem with offline files.
Did you disable them?
If not try to do it with gpedit.msc

Thierry.

On Saturday 30 June 2007 03:01, Patrik Dufresne wrote:
> [I post the same message on Ubuntu forum]
>
> Hi,
>
> I need help to fix a problem with Samba as PDC and Folder redirection on a
> Roaming Profile. I know it's not the best place to post this, but I don't
> know any better place. So if you have suggestion, tell me.
>
> Here my problem :
>
> I'm in a testing environement with a Samba server setup as a PDC with some
> share (netlogon, profiles) to support roaming profile. My "smb.conf" file
> contain the good configuration parameters for "logon path" and "logon home"
> etc ..
>
> For my roaming profile, I setup a Folder redirection using the
> "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\User
> Shell Folders" registery key. I modify the value of AppData, Cookies,
> Desktop, Favorites, My Pictures, Personal. Every folder are redirect to the
> network share with %LOGONSERVER% and %USERNAME% variable. There is no
> problem with the redirection, when I connect every thing are correctly
> redirect.
>
> For example, if I create a file named "textfile.txt" on my desktop, I see
> it on the shared folder. (I do a "ls" command with ssh directly on the
> server to be sure). I can add, remove, edit file on the desktop and every
> thing are OK.
>
> The problem come when I logout The window client do some sort of
> synchronization of a local folder with the shared folder. For example,
> C:\Documents and Seetings\admin\Desktop\ with
> \\MyServer\profiles\admin\Desktop. I fact, it's not a synchronization, it's
> just delete the shared folder and replace it by the content of the local
> folder. The result is that every modification done on the desktop (that are
> redirected) are lost at the logout.
>
> It's a very annoying problem that I can't solve by my self. I search
> everywhere without any tips.
>
> I try some config with "ExcludeProfileDirs" registry key without success.
> It's possible that I don't use it correctly.
>
> Thank for you help and comment.
>
> [global]
> dos charset = 850
> unix charset = UTF8
> workgroup = ENTREPRISESMD
> server string = Samba server
> passdb backend = ldapsam:ldap://127.0.0.1/
> time server = Yes
> deadtime = 15
> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
> SO_SNDBUF=8192
> load printers = No
> add user script = /usr/sbin/smbldap-useradd -m "%u"
> delete user script = /usr/sbin/smbldap-userdel "%u"
> add group script = /usr/sbin/smbldap-groupadd -p "%g"
> delete group script = /usr/sbin/smbldap-groupdel "%g"
> add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
> delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
> "%g" set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" add
> machine script = /usr/sbin/smbldap-useradd -w "%u"
> logon script = login.bat OR %U.bat
> logon path = \\%L\PROFILES\%U
> logon drive = h:
> logon home = \\%L\PROFILES\%U
> domain logons = Yes
> os level = 40
> domain master = Yes
> dns proxy = No
> wins support = Yes
> ldap admin dn = cn=admin,dc=entreprisesmd,dc=homeip,dc=net
> ldap delete dn = Yes
> ldap group suffix = ou=Group
> ldap idmap suffix = ou=People
> ldap machine suffix = ou=Computers
> ldap passwd sync = Yes
> ldap suffix = dc=entreprisesmd,dc=homeip,dc=net
> ldap user suffix = ou=People
> winbind use default domain = Yes
> inherit permissions = Yes
> inherit acls = Yes
> inherit owner = Yes
> case sensitive = No
> hide files = /desktop.ini/ntuser.ini/NTUSER.*/
> msdfs root = Yes
>
> [netlogon]
> comment = Network Logon Service
> path = /data/usersdata/netlogon
> read only = No
> browseable = No
>
> [PROFILES]
> comment = User profiles
> path = /data/usersdata/profiles
> read only = No
> create mask = 0600
> directory mask = 0700
> inherit permissions = No
> inherit acls = No
> inherit owner = No
> profile acls = Yes
> browseable = No
> csc policy = disable
>
>
>
> I take a look in the log file c:\windows\debug\usermode\userenv.txt and
> it's clear that the windows workstation just remove the file I add on the
> desktop
>
> USERENV(25c.260) 20:36:52:752 SyncItems: removing  Text Document.txt>
>
>
> --
> Patrik Dufresne

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile - Folder redirection - Erase file on server

[Patrik Dufresne]

[I post the same message on Ubuntu forum]

Hi,

I need help to fix a problem with Samba as PDC and Folder redirection on a
Roaming Profile. I know it's not the best place to post this, but I don't
know any better place. So if you have suggestion, tell me.

Here my problem :

I'm in a testing environement with a Samba server setup as a PDC with some
share (netlogon, profiles) to support roaming profile. My "smb.conf" file
contain the good configuration parameters for "logon path" and "logon home"
etc ..

For my roaming profile, I setup a Folder redirection using the
"HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\User
Shell Folders" registery key. I modify the value of AppData, Cookies,
Desktop, Favorites, My Pictures, Personal. Every folder are redirect to the
network share with %LOGONSERVER% and %USERNAME% variable. There is no
problem with the redirection, when I connect every thing are correctly
redirect.

For example, if I create a file named "textfile.txt" on my desktop, I see it
on the shared folder. (I do a "ls" command with ssh directly on the server
to be sure). I can add, remove, edit file on the desktop and every thing are
OK.

The problem come when I logout The window client do some sort of
synchronization of a local folder with the shared folder. For example,
C:\Documents and Seetings\admin\Desktop\ with
\\MyServer\profiles\admin\Desktop. I fact, it's not a synchronization, it's
just delete the shared folder and replace it by the content of the local
folder. The result is that every modification done on the desktop (that are
redirected) are lost at the logout.

It's a very annoying problem that I can't solve by my self. I search
everywhere without any tips.

I try some config with "ExcludeProfileDirs" registry key without success.
It's possible that I don't use it correctly.

Thank for you help and comment.

[global]
   dos charset = 850
   unix charset = UTF8
   workgroup = ENTREPRISESMD
   server string = Samba server
   passdb backend = ldapsam:ldap://127.0.0.1/
   time server = Yes
   deadtime = 15
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192
   load printers = No
   add user script = /usr/sbin/smbldap-useradd -m "%u"
   delete user script = /usr/sbin/smbldap-userdel "%u"
   add group script = /usr/sbin/smbldap-groupadd -p "%g"
   delete group script = /usr/sbin/smbldap-groupdel "%g"
   add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
   delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
   set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
   add machine script = /usr/sbin/smbldap-useradd -w "%u"
   logon script = login.bat OR %U.bat
   logon path = \\%L\PROFILES\%U
   logon drive = h:
   logon home = \\%L\PROFILES\%U
   domain logons = Yes
   os level = 40
   domain master = Yes
   dns proxy = No
   wins support = Yes
   ldap admin dn = cn=admin,dc=entreprisesmd,dc=homeip,dc=net
   ldap delete dn = Yes
   ldap group suffix = ou=Group
   ldap idmap suffix = ou=People
   ldap machine suffix = ou=Computers
   ldap passwd sync = Yes
   ldap suffix = dc=entreprisesmd,dc=homeip,dc=net
   ldap user suffix = ou=People
   winbind use default domain = Yes
   inherit permissions = Yes
   inherit acls = Yes
   inherit owner = Yes
   case sensitive = No
   hide files = /desktop.ini/ntuser.ini/NTUSER.*/
   msdfs root = Yes

[netlogon]
   comment = Network Logon Service
   path = /data/usersdata/netlogon
   read only = No
   browseable = No

[PROFILES]
   comment = User profiles
   path = /data/usersdata/profiles
   read only = No
   create mask = 0600
   directory mask = 0700
   inherit permissions = No
   inherit acls = No
   inherit owner = No
   profile acls = Yes
   browseable = No
   csc policy = disable



I take a look in the log file c:\windows\debug\usermode\userenv.txt and it's
clear that the windows workstation just remove the file I add on the desktop

USERENV(25c.260) 20:36:52:752 SyncItems: removing 


--
Patrik Dufresne
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging outfor the first time

[Tomasz Chmielewski]

Gary Dale schrieb:
No. XP is closing your mapped drives, not your profile share. That's 
something that Windows knows about, just like it knows which server to 
validate your password against.


I doubt that the server speed is an issue either. However, I am 
concerned about you running the "bleeding edge" version of Samba. I 
doubt that it came with your distribution. Do you really need 3.0.24? 
Was there some feature that wasn't in your distro's version?


As a rule of thumb, I follow "if it ain't broke, don't fix it". My 
server ran quite happily on an antique 3.0.14 version until I wanted to 
try a newer version of CUPS and ended up upgrading to a more recent 
version of my distro. Now I'm running some 3.0.23 variant. My CUPS 
problem is fixed so I'm happy but I can't tell the difference in my 
server operation other than that.


Indeed, when I downgraded to samba 3.0.14a-3sarge4 (ARM architecture), I 
don't have this issue anymore...


So it's a regression.

I reported it here: https://bugzilla.samba.org/show_bug.cgi?id=4450


--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging outfor the first time

[Tomasz Chmielewski]

Gary Dale schrieb:
No. XP is closing your mapped drives, not your profile share. That's 
something that Windows knows about, just like it knows which server to 
validate your password against.


I doubt that the server speed is an issue either. However, I am 
concerned about you running the "bleeding edge" version of Samba. I 
doubt that it came with your distribution. Do you really need 3.0.24? 
Was there some feature that wasn't in your distro's version?


Yes, Debian Etch comes with 3.0.24.
But I'll try an older version, thanks for the hint.


--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging outfor the first time

[Gary Dale]

No. XP is closing your mapped drives, not your profile share. That's 
something that Windows knows about, just like it knows which server to 
validate your password against.


I doubt that the server speed is an issue either. However, I am 
concerned about you running the "bleeding edge" version of Samba. I 
doubt that it came with your distribution. Do you really need 3.0.24? 
Was there some feature that wasn't in your distro's version?


As a rule of thumb, I follow "if it ain't broke, don't fix it". My 
server ran quite happily on an antique 3.0.14 version until I wanted to 
try a newer version of CUPS and ended up upgrading to a more recent 
version of my distro. Now I'm running some 3.0.23 variant. My CUPS 
problem is fixed so I'm happy but I can't tell the difference in my 
server operation other than that.




Dennis McLeod wrote:

I *THINK* it has to do with the logoff process. I'm on XP.
I have been experiencing on this today, in fact. 
Most of my profile copied to the server, but it would ultimately pop up an

error.
When you watch XP log off, the first thing it displays is "closing network
connections", then "saving settings"...
If the Saving Settings part is saving my profile, and XP has just
disconnected my network connections, how can it then succeed?
I suspect in my case it starts the save before the connections are closed,
but doesn't finish in time. Hence the message.
(This may explain why the log level settings affect it, though...)
Anyway, I hope this helps somehow.
I was actually trying to turn OFF roaming profiles, but my test machine kept
saving them anyway.
Found the GPEDIT.MSC setting to fix it, so I never really explored the
actual cause of the profile error.
Dennis


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tomasz Chmielewski
Sent: Wednesday, March 14, 2007 5:57 AM
To: Jason Baker
Cc: samba
Subject: Re: [Samba] roaming profile not uploaded correctly when logging
outfor the first time

Tomasz Chmielewski schrieb:
  

Jason Baker schrieb:



  
When logging out, an error window shows up, and in Samba [profile] dir 
for the user, in SendTo, are some random temporary files (names like 
prf7EE.tmp, prf7EF.tmp etc.).


This is extremely hard to debug - why this happens only for files in 
"C:\Documens and Settings\username\SendTo"?



Another thing that makes debugging so hard is that the issue happens when I
have "log level" lower than 9, but not anymore when I increase it to 10.

Samba 3.0.24 is running on a rather slow machine: 266 MHz ARM with 64 MB RAM
(Debian Etch). Setting "log level" to 10 makes the logout process noticeably
slower (does making Samba slower works around the problem?), and I doubt
it's a proper solution to Samba problems.


--
Tomasz Chmielewski
http://wpkg.org


  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] roaming profile not uploaded correctly when logging outfor the first time

[Dennis McLeod]

I *THINK* it has to do with the logoff process. I'm on XP.
I have been experiencing on this today, in fact. 
Most of my profile copied to the server, but it would ultimately pop up an
error.
When you watch XP log off, the first thing it displays is "closing network
connections", then "saving settings"...
If the Saving Settings part is saving my profile, and XP has just
disconnected my network connections, how can it then succeed?
I suspect in my case it starts the save before the connections are closed,
but doesn't finish in time. Hence the message.
(This may explain why the log level settings affect it, though...)
Anyway, I hope this helps somehow.
I was actually trying to turn OFF roaming profiles, but my test machine kept
saving them anyway.
Found the GPEDIT.MSC setting to fix it, so I never really explored the
actual cause of the profile error.
Dennis


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tomasz Chmielewski
Sent: Wednesday, March 14, 2007 5:57 AM
To: Jason Baker
Cc: samba
Subject: Re: [Samba] roaming profile not uploaded correctly when logging
outfor the first time

Tomasz Chmielewski schrieb:
> Jason Baker schrieb:

> When logging out, an error window shows up, and in Samba [profile] dir 
> for the user, in SendTo, are some random temporary files (names like 
> prf7EE.tmp, prf7EF.tmp etc.).
> 
> This is extremely hard to debug - why this happens only for files in 
> "C:\Documens and Settings\username\SendTo"?

Another thing that makes debugging so hard is that the issue happens when I
have "log level" lower than 9, but not anymore when I increase it to 10.

Samba 3.0.24 is running on a rather slow machine: 266 MHz ARM with 64 MB RAM
(Debian Etch). Setting "log level" to 10 makes the logout process noticeably
slower (does making Samba slower works around the problem?), and I doubt
it's a proper solution to Samba problems.


--
Tomasz Chmielewski
http://wpkg.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging out for the first time

[Tomasz Chmielewski]

Tomasz Chmielewski schrieb:

Jason Baker schrieb:


When logging out, an error window shows up, and in Samba [profile] dir 
for the user, in SendTo, are some random temporary files (names like 
prf7EE.tmp, prf7EF.tmp etc.).


This is extremely hard to debug - why this happens only for files in 
"C:\Documens and Settings\username\SendTo"?


Another thing that makes debugging so hard is that the issue happens 
when I have "log level" lower than 9, but not anymore when I increase it 
to 10.


Samba 3.0.24 is running on a rather slow machine: 266 MHz ARM with 64 MB 
RAM (Debian Etch). Setting "log level" to 10 makes the logout process 
noticeably slower (does making Samba slower works around the problem?), 
and I doubt it's a proper solution to Samba problems.



--
Tomasz Chmielewski
http://wpkg.org


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging out for the first time

[Tomasz Chmielewski]

Jason Baker schrieb:
I experienced this same issue and it turned out to be a permissions 
problem in the windows client. I had copied some files from the users 
old machine profile to their new domain profile and then logged out. It 
complained that it could not write to the roaming profile. I went back 
into the account, in your case it would be C:\Documents and 
Settingsd\user\SendTo\31/2Floppy(A).lnk and right click the file and go 
to Sharing and Security. You need to make sure the domain user has read 
write access to that file. After I changed the permissions, logout was 
successful.


Hmm, this must be something else.

First of all, it happens for Windows 2000 SP4 clients, German version (I 
didn't check XP or any other language versions).



In my case, permissions on a Windows side are surely not a problem - the 
error happens for newly created accounts from a freshly installed 
Windows machine.


Second weird thing, is that it only happens for files stored in:

C:\Documens and Settings\username\SendTo


If I move contents of the SendTo directory somewhere else (i.e., to 
user's Desktop), I can log out without problems.


Also, when I copy some other (random) files into ...\username\SendTo, I 
can log out without problems.



The files in question in that directory are:

3½-Diskette (A).lnk
Desktop (Verknüpfung erstellen).DeskLink
E-Mail-Empfänger.MAPIMail
Eigene Dateien.mydocs


When logging out, an error window shows up, and in Samba [profile] dir 
for the user, in SendTo, are some random temporary files (names like 
prf7EE.tmp, prf7EF.tmp etc.).


This is extremely hard to debug - why this happens only for files in 
"C:\Documens and Settings\username\SendTo"?




--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile not uploaded correctly when logging out for the first time

[Jason Baker]

I experienced this same issue and it turned out to be a permissions 
problem in the windows client. I had copied some files from the users 
old machine profile to their new domain profile and then logged out. It 
complained that it could not write to the roaming profile. I went back 
into the account, in your case it would be C:\Documents and 
Settingsd\user\SendTo\31/2Floppy(A).lnk and right click the file and go 
to Sharing and Security. You need to make sure the domain user has read 
write access to that file. After I changed the permissions, logout was 
successful.


*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com 

-BEGIN GEEK CODE BLOCK- 
Version: 3.1

GIT$ d- s: a C++$ LU+++$ P+ L++>L !E--- W+++ N o? K?
w !O M !V PS PE- Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- 
r+++ y+++

--END GEEK CODE BLOCK--



On 3/14/2007 7:33 AM, Tomasz Chmielewski wrote:

I have a strange issue with roaming profiles.

It only happens for users which has no roaming profile on a Samba 
server yet.


When a user logs out for the first time, some files can't be copied from:

C:\Documents and Settings\username\SendTo\

to a profiles directory on the server.

(Files like 31/2Floppy(A).lnk, some *.tmp files etc.).


Only very rarely, a first-time logout process happens without any 
problems.

Second and any later logouts are without problems.


I found another reference on the list:

lists.samba.org/archive/samba/2002-December/057885.html


"When user logoff it appear

Windows cannot copy file C:\Documents and 
Settingsd\user\SendTo\31/2Floppy(A).lnk to location 
\\192.168.0.1\domain\profiles\user\SendTo\3 1/2 Floppy(A).lnk. Contact 
your network administrator


Are there someone found like me?"


Is it a Windows problem, or Samba problem?

I'm using Samba 3.0.24.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile not uploaded correctly when logging out for the first time

[Tomasz Chmielewski]

I have a strange issue with roaming profiles.

It only happens for users which has no roaming profile on a Samba server 
yet.


When a user logs out for the first time, some files can't be copied from:

C:\Documents and Settings\username\SendTo\

to a profiles directory on the server.

(Files like 31/2Floppy(A).lnk, some *.tmp files etc.).


Only very rarely, a first-time logout process happens without any problems.
Second and any later logouts are without problems.


I found another reference on the list:

lists.samba.org/archive/samba/2002-December/057885.html


"When user logoff it appear

Windows cannot copy file C:\Documents and 
Settingsd\user\SendTo\31/2Floppy(A).lnk to location 
\\192.168.0.1\domain\profiles\user\SendTo\3 1/2 Floppy(A).lnk. Contact 
your network administrator


Are there someone found like me?"


Is it a Windows problem, or Samba problem?

I'm using Samba 3.0.24.


--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile problem BDC

[Florian Zierer]

Hi all,

I have a problem with my PDC - BDC LDAP setup with roaming profiles. 
Both are in the same network.


Both servers get the user homes and profiles from a NAS so they are 
always up to date.


I configured to get the profiles and the homes from the logon server like

logon path = \\%L\profiles\%U
logon home = \\%L\%U

The home directories work as expected. %L is translated to the logon 
server, but there are problems with the profiles.


The Win XP machines remember the old profile path in a registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows 
NT\CurrentVersion\ProfileList\...


CentralProfile \\path\to\profile

The problem is if the responsible domain controller fails, the XP client 
does not find its profile again.


Sometimes it works after a reboot of the machine but only logging out 
and logging in again does not do its job.


I tried it also with a dfs share but in the registry the path to the 
server is saved and not the dfs path :-(


Do you have a solution to make this scenario work? How can I force the 
XP client to forget the profiles path and to get the actual correct 
pathfrom the domain controller?


Thanks in advance
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile gets deleted

[Florian Zierer]

Hi Achim,

Achim Gottinger wrote:

Have you tried to debug whats going on on the winxp client during 
profile load?


yes I did this and found that it was a problem with casesensitive.

There was an NTUSER.DAT and winxp wanted to read ntuser.dat

After inserting

 case sensitive = No
 preserve case = No

to the Profiles section in smb.conf everything now works as expected.

Thx for your help.
Flo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile gets deleted

[Achim Gottinger]

Florian Zierer schrieb:

Hi Cleper,

Cleber P. de Souza wrote:

On your Samba server, have you set up the Profile Path for the user?


Yes of course. The profiles are working if I log in and log out and so 
on on the same WinXP machine. But, the Profiles are only working, 
until I delete the profile on the Win XP machine (as another user) or 
I log in on an Win XP machine where the profile is  not yet loaded. 
Then the profile on the samba machine gets overwritten and a new 
"default" profile gets created.


Any hints where I have to look to solve my problem?

Thx
Flo
Have you tried to debug whats going on on the winxp client during 
profile load?



-
Guide to Microsoft® Windows NT® 4.0 Profiles and Policies


Troubleshooting User Profiles with the UserEnv.log File
The UserEnv.log is an invaluable tool for troubleshooting the process of 
loading

and unloading User Profiles. Each step in the User Profile process is
recorded in the log, including informational and error-related messages.
The checked version of the UserEnv.dll is the same dynamic link library
(.dll) as the retail version, except that it contains debug flags that 
you can set

and use with the kernel debugger. This file, which is included in both the
Windows NT Device Driver Kit (DDK) and the Windows NT Software Development
Kit (SDK), when used in conjunction with a registry entry, generates a
log file that can be used in troubleshooting and debugging problems with
roaming profiles and system policies on Windows NT 4.0 clients.
To enable logging:
1. Rename the file UserEnv.dll in the %systemroot%\SYSTEM32 directory to
UserEnv.old or to a unique name of your choice.
2. Copy the checked version of UserEnv.dll to the
%systemroot%\SYSTEM32 directory of the client machine that you want
to debug. The checked version of the UserEnv file must match the version
of the operating system and Service Pack installed on the client computer.
3. Start REGEDT32 and locate the following path:
HKEY_LOCAL_MACHINE
\SOFTWARE
\Microsoft
\WindowsNT
\CurrentVersion
\Winlogon
4. Create a new value called UserEnvDebugLevel as a REG_DWORD type.
Assign the hex value 10002.
5. Reboot the computer.
Logging information will be recorded in the root directory of the C drive as
UserEnv.log. You can use Notepad to view the log file. A sample log is 
provided

next.
--


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile gets deleted

[Florian Zierer]

Hi Cleper,

Cleber P. de Souza wrote:

On your Samba server, have you set up the Profile Path for the user?


Yes of course. The profiles are working if I log in and log out and so 
on on the same WinXP machine. But, the Profiles are only working, until 
I delete the profile on the Win XP machine (as another user) or I log in 
on an Win XP machine where the profile is  not yet loaded. Then the 
profile on the samba machine gets overwritten and a new "default" 
profile gets created.


Any hints where I have to look to solve my problem?

Thx
Flo
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile gets deleted

[Cleber P. de Souza]

On your Samba server, have you set up the Profile Path for the user?

On 11/3/06, Florian Zierer <[EMAIL PROTECTED]> wrote:

Hi there,

I try to move our W2K Domain to samba.

I managed to dump a list of the old users with its SID's and created
them on the samba domain which has the same sid like the old W2k domain.
Then the users should be able to use their old roaming profile without
changing the profiles sid.

This works if the computer which acesses the domain has already the
profile on its disk.
If the profile is not there, the default profile gets loaded and the
profile on the samba server gets overwritten.
It is the same for new computers without any user profile. The samba
profile does not get loaded but the default one and whe closing the
session the samba profile gets overwritten.

If I use this default profile all works well or if the profile already
exists I can work as exspected.

If I delete the local Profile in c:\Documents and Settings\
and then log in once more, the default profile gets loaded instead of
mine on the samba domain and my original gets overwritten.



Does anybod know where the problem is or where i can get more information.

If you need parts of the logfiles, just mail.

Thanks in advance
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba




--
***
Cleber P. de Souza
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile gets deleted

[Florian Zierer]

Hi there,

I try to move our W2K Domain to samba.

I managed to dump a list of the old users with its SID's and created 
them on the samba domain which has the same sid like the old W2k domain. 
Then the users should be able to use their old roaming profile without 
changing the profiles sid.


This works if the computer which acesses the domain has already the 
profile on its disk.
If the profile is not there, the default profile gets loaded and the 
profile on the samba server gets overwritten.
It is the same for new computers without any user profile. The samba 
profile does not get loaded but the default one and whe closing the 
session the samba profile gets overwritten.


If I use this default profile all works well or if the profile already 
exists I can work as exspected.


If I delete the local Profile in c:\Documents and Settings\
and then log in once more, the default profile gets loaded instead of 
mine on the samba domain and my original gets overwritten.




Does anybod know where the problem is or where i can get more information.

If you need parts of the logfiles, just mail.

Thanks in advance
Florian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile Folders Pulled Over Read-Only

[Justin Churchey]

Hello,

I'm using Samba 3.0.14a-3 on Debian 3.1 (Sarge). It's functioning as a 
domain controller for a lot of WinXP SP2 machines. As such, it serves up 
roaming profiles for most of our staff. I've noticed that all of the 
folders in the root of the profile are pulled over as read-only. The 
UNIX permissions for a user's profile on the server is 700, and I'm not 
sure why WinXP is interpreting this as read-only.


Everywhere I read, as long as a user as write permission on the server, 
it's not read-only. I've tried maping the system, archive, and hidden 
bits in the configuration and changing the permissions to 600, but no 
luck there.


The only real issue that this has been causing is problems with IE 
cookies. The read-only bit is keeping IE from using the Cookies folder 
properly, causing problems with logging in with some websites. It's 
mostly interfering with our company website and its functionality.


Any ideas?

--
Justin Churchey
Network Engineer
Mount de Sales Academy
851 Orange Street
Macon, GA  31201
(478) 751-3240 ext. 179
jchurchey -at- mountdesales -dot- net
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile and Javascript problem

[Nehal]

Hi,

We are using samba 3.0.10-1.4E on linux ES-4 in our
company. We are facing one strange problem. As soon as
we logon to domain in samba with samba configured
user, we are not able to run any javascript like page
in internet explorer. However we are able to run
javascript pages from local users accounts which are
configured locally on pc.

I think this is problem with roaming profiles. but
what causing problem that we do not know.

I am giving our smb.conf file.
[global]
netbios name = samba
workgroup = BC
os level = 33
preferred master = auto
domain master = yes
local master = yes
security = user
domain logons = yes
logon path = \\%N\profiles\%U
logon drive = Z:
logon home = \\samba\%U
logon script = logon.cmd
add machine script = /usr/sbin/useradd -d
/var/lib/nobody -g nobody -s /bin/fals
e -M %u

[netlogon]
path = /home/netlogon
read only = yes

[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700

[home]
path = /home/%U
read only = no
create mask = 0600
directory mask = 0700


Can any body help us.?

Thanks in Advance.

Yours truly,

Nehal Patel.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile unusable after smb ports = 139

[Philippe Strauss]

Hello,

I have a big problem with a samba setup.
After I tried the config option

smb ports = 139

in the global section, 90% of the roaming profiles are not
usable by the windows XP clients.
Removing the smb ports options didn't help.

No errors in the samba logfile.

erasing the profiles seems to fix the issue, but I cannot
afford losing all my users profile data!

here is my smb.conf.
It's a ldap based setup, using latest smbldap-tools.
samba is 3.0.22 RPMs from samba.org, OS is fedora core4.

[global]
log level = 1
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
enable privileges = Yes
delete user from group script =
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
time server = Yes
level2 oplocks = No
oplocks = No
cups options = "raw"
ldap passwd sync = Yes
logon script = logon.bat
workgroup = FHS-SAMBA
os level = 65
ldap admin dn = cn=admin,dc=fhs,dc=ch
printcap name = cups
add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u
"
directory mode = 700
ldap user suffix = ou=Users
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
map acl inherit = Yes
delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
add user to group script = /opt/IDEALX/sbin/smbldap-groupmod
 -m "%u" "%g"
logon drive = H:
username map = /etc/samba/smbusers
domain master = Yes
passdb backend = ldapsam:ldap://ldap/
logon home =
case sensitive = No
wins support = Yes
ldap delete dn = Yes
server string =
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap suffix = dc=fhs,dc=ch
#logon path =
set primary group script = /opt/IDEALX/sbin/smbldap-usermod
-g "%g" "%u"
create mode = 700
ldap idmap suffix = ou=Users
domain logons = Yes

[homes]
comment = repertoire de %U, %u
read only = No
create mask = 0644
directory mask = 0775
browseable = No

[netlogon]
path = /home/samba/netlogon/
browseable = No

[profiles]
path = /home/samba/profiles
valid users = %U, "@Domain Admins"
force user = %U
read only = No
create mask = 0600
directory mask = 0700
guest ok = Yes
profile acls = Yes
browseable = No
csc policy = disable

[donnee]
comment = Donnees
path = /data/donnee
read only = No

[system]
path = /data/system
read only = No

[cdrom]
comment = CD-ROM economie suisse
path = /media/cdrom

[Novell Services Vol1]
path = /mnt/noveltest

[Novell Services Sys]
path = /mnt/novelsys

[Novell Prod Vol2]
path = /mnt/novelprodvol2

[Novell Prod Vol3]
path = /mnt/novelprodvol3

[sgbd]
comment = bases de donnees
path = /data/sgbd
read only = No

[appl]
comment = Applications
path = /data/appl
read only = No
 

-- 
Network & System Engineer
Goelaan SA, Switzerland
Tel. +41-22-960 98 20
Fax +41-22-960 98 21
http://www.goelaan.ch

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile error

[Sensei]

On Jun 24, 2006, at 04:13pm, Sensei wrote:

Hi everybody! I'm a samba rookie, and I'm trying to make my own  
roaming profiles.


The situation is simple, a single debian samba server and a single  
windows xp client, with the signorseal value set to 0. I have my  
unix users with their home directories in /home/username, and I'd  
like them to have a windows login. Right now I don't care about  
mixing unix and windows files.


My smb.conf is this [...]



I respond myself: I was missing the home sharing.

===BEGIN===
[global]
workgroup = WIN.EXAMPLE.EDU
netbios name = SMB1
server string = Samba Domain Master
security = user
encrypt passwords = yes
username map = /etc/samba/smbusers
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
add user script = /usr/sbin/useradd -m '%u'
domain logons = yes
preferred master = yes
local master = yes
inherit permissions = yes
inherit acls = yes

[netlogon]
comment = Samba Domain Login Service
path = /home/%U
valid users = %S
read only = no

[profiles]
comment = Users Profiles Service
path = /home/%U
valid users = %S
read only = no
guest ok = no
writable = yes
browsable = no

[homes]
comment = Users Home Directories
path = /home/%U
valid users = %S
read only = no
guest ok = no
writable = yes
browsable = yes
END



At the end of this quest, I've got 3 questions :)

The first is the same I asked in my post: is it possible to avoid  
using root into samba to join a domain?


The second is this: I'm getting the famous ``network name not found''  
sometimes when logging in and out with the same profile. Is there a  
way of avoiding this? It's not always, and I didn't play that much to  
recognize a pattern...


The last is about the notepad starting upon login. I solved by  
removing as MS says, so deleting the infamous Desktop.ini files from  
Default User and All Users. Do you recommend this practice before  
joining a domain?


Thanks!!


--
Sensei <[EMAIL PROTECTED]>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true.  [J. Robert Oppenheimer]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile error

[Sensei]

Hi everybody! I'm a samba rookie, and I'm trying to make my own  
roaming profiles.


The situation is simple, a single debian samba server and a single  
windows xp client, with the signorseal value set to 0. I have my unix  
users with their home directories in /home/username, and I'd like  
them to have a windows login. Right now I don't care about mixing  
unix and windows files.


My smb.conf is this:

===BEGIN===
[global]
workgroup = WINEXAMPLE
netbios name = SMB1
server string = Samba Domain Master
security = user
encrypt passwords = yes
username map = /etc/samba/smbusers
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
logon drive = Z:
logon path = \\%L\profiles\%U
domain logons = yes
preferred master = yes
local master = yes

[netlogon]
comment = Samba Domain Login Service
path = /home/%U
valid users = %S
read only = no

[profiles]
comment = Users Profiles Service
path = /home
valid users = %S
read only = no
guest ok = no
writable = yes
profile acls = yes
END


I create Samba users with smbpasswd -a for root and for testuser. The  
testuser can read and write in his home. I can join the domain using  
root.



By the way, I tried to set a standard user ``admin'' as the  
administrator in /etc/samba/smbusers:


===BEGIN===
# Map admin to the Domain Administrator
admin = Administrator
END

But windows rejects to join the domain, just root works (of course  
admin exists on unix and samba). Can root be eliminated from samba  
configuration files and allow another user to join the domain?



I can log into windows, but it complains that the roaming profile  
cannot be accessed, and the login will create a temporary one, with  
the detail:


Access DENIED

Well, in the log files I find something that I don't understand,  
samba cannot find a service with the same name as my user:


===BEGIN===
[2006/06/24 15:42:39, 0] smbd/server.c:main(798)
  smbd version 3.0.14a-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2006/06/24 15:42:59, 0] smbd/service.c:make_connection(794)
  client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:43:00, 0] smbd/service.c:make_connection(794)
  client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:48:16, 0] smbd/server.c:main(798)
  smbd version 3.0.14a-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2006/06/24 15:48:33, 0] smbd/service.c:make_connection(794)
  client1 (193.204.161.3) couldn't find service testuser
[2006/06/24 15:48:34, 0] smbd/service.c:make_connection(794)
  client1 (193.204.161.3) couldn't find service testuser
END


What am I missing? I've tried some combinations:

[general]
logon path = \\%L\profiles\%U
[profiles]
path = /home


[general]
logon path = \\%L\profiles
[profiles]
path = /home/%U


But no success... Can anyone give me some hints?

Thanks!! :)

--
Sensei <[EMAIL PROTECTED]>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true.  [J. Robert Oppenheimer]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile problem

[mallapadi niranjan]

hi all

i have a samba 3.0.21c with openldap as PDC on Subnet 192.168.129.0, and BDC
with slave ldap
server on subnet 192.168.130.0 subnet (netbios name fosrv001),
we have a group of users for whom i would like to have
roaming profile enabled. the profile share is in BDC ie
192.168.130.0subnet. But for users' for
whom i have enabled roaming profile are unable to get roaming profile, ie in
profile share, the desktop,
application data, etc are not getting saved in profile share.
the remote profiles share can be accessed without any problem, from any
subnet,

if the profile share is in another subnet, and if the user is different
subnet, will the roaming
profile share work for the user. ?


The following is the bdc samba smb.conf

[global]
unix charset = LOCALE
 workgroup = msdpl.com
 netbios name = fosrv001
 passdb backend = ldapsam:ldap://192.168.130.3
 enable privileges = Yes
 server string = Factory Backup Domain Controller
 log level = 1
 remote announce = 192.168.129.20
 remote browse sync = 192.168.129.20
 hosts allow = 192.168.129. 192.168.128. 192.168.130. 127.
 syslog = 0
 log file = /usr/local/samba-fo/var/%U.%m.log
 max log size = 100
 smb ports = 139
 printcap name = cups
 show add printer wizard = no
 logon script = %u.bat
 logon path =
 logon drive = X:
 logon home =
 domain logons = yes
 wins support = No
 domain master = No
 preferred master = yes
 hide unreadable = yes
 deadtime = 15
 wins support = no
 wins server = 192.168.129.20
 ldap passwd sync = yes
 add user script = /usr/local/sbin/smbldap-useradd -m "%u"
 delete user script = /usr/local/sbin/smbldap-userdel "%u"
 add machine script = /usr/local/sbin/smbldap-useradd -w "%m"
 add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
 add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
 delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u"
"%g"
 set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
 ldap delete dn = Yes
 name resolve order = lmhosts wins bcast hosts
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 #interfaces = eth0, lo
 #bind interfaces only = yes
 hide dot files = yes
 dns proxy = no
 nt acl support = yes
 ldap passwd sync = yes
 ldap suffix = dc=msdpl,dc=com
 ldap admin dn = cn=foreplica,dc=msdpl,dc=com
 ldap group suffix = ou=Groups
 ldap user suffix = ou=People
 ldap machine suffix = ou=Computers
 ldap idmap suffix = ou=Idmap
 ldap ssl = no
 ldap timeout = 50
 idmap backend = ldap:ldap://192.168.130.3
 idmap uid = 1-2
 idmap gid = 1-2
 map acl inherit = yes
 printing = cups
[homes]
  comment = Home Directories
  valid users = %S
  browseable = no
  read only = no
  nt acl support = Yes

# Un-comment the following and create the netlogon directory for Domain
Logons
[netlogon]
  comment = Network Logon Service
  path = /netlogon/scripts
  guest ok = yes
  browseable = no
  write list = root
#Profiles Share
[profiles]
   comment = Profiles Share
   path = /profiles/%U
   #read only = No
   browseable = yes
   writeable = yes
   public = yes
###[homes]
  comment = Home Directories
  valid users = %S
  browseable = no
  read only = no
  nt acl support = Yes

# Un-comment the following and create the netlogon directory for Domain
Logons
[netlogon]
  comment = Network Logon Service
  path = /netlogon/scripts
  guest ok = yes
  browseable = no
  write list = root
#Profiles Share
[profiles]
   comment = Profiles Share
   path = /profiles/%U
   #read only = No
   browseable = yes
   writeable = yes
   public = yes


Regards
Niranjan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: AW: [Samba] Roaming Profile won't upload to workstation that didn'tcreate it

[Rob Mason]

Many thanks - I've made the change and the profile now loads  ...but the 
profile will not permit changes.  e.g. Recycle Bin is inaccessible, and 
desktop wallpapers/themes are not saveable???


Any ideas what might be causing this new problem?


Oeltze, Benjamin wrote:

Hi,
I´ve had this problem to.
put a # in front of profile acls = yes
I think the behavior of this changed from 3.0.14 to 3.0.20
 
 
 



*Von:* 
[EMAIL PROTECTED] im 
Auftrag von Rob Mason

*Gesendet:* Mo 13.02.2006 11:16
*An:* samba@lists.samba.org
*Betreff:* [Samba] Roaming Profile won't upload to workstation that 
didn'tcreate it


Hi,

I believe I've had a 'hidden' roaming profiles problem with Samba for a
while (I have no idea when it first manifested itself - sometime between
3.0.2 and 3.0.21a).

When I create a new user, their client workstation creates and updates
the profile without any problems.  Existing profiles used by existing
client workstations are also fine.  However, when I try to logon as an
existing user to a new workstation client, the existing saved profile
will not upload - the client hangs for about fifteen! minutes before
loading a minimal profile.  The only log file clue I have is:

[2006/02/13 09:27:27, 0] lib/util_sock.c:read_data(526)
  read_data: read failure for 4 bytes to client 192.168.200.6. Error =
Operation timed out
[2006/02/13 09:27:27, 1] smbd/service.c:close_cnum(839)


To summarise:
===
New User + New Workstation = OK
New User + Existing Workstation = OK
Exisitng User + Existng Workstation = OK
Existing User + New Workstation= NO LOAD ???


smb.conf:

# Global parameters
[global]
workgroup = BSDBOX
netbios name = SERVER
server string = BSDBox
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384
SO_RCVBUF=16384
hosts allow = 192.168.200., 127.0.0.1

passdb backend = tdbsam
passwd program = /usr/local/bin/passchange.sh %u
passwd chat = *Password* %n\n *Password* %n\n *Changed*\n
unix password sync = Yes
username map = /usr/local/etc/samba/smbusers

log level = 1
log file = /var/log/samba/%m.log
max log size = 100

printing = cups
printcap name = cups

logon script = netlogon.cmd
logon path = \\%L\profiles\%U
logon drive = Z:
logon home = \\%L\%U
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
remote announce = 192.168.200.8
time server = yes

admin users = root
hide unreadable = Yes
create mask = 0644
add group script = /usr/local/etc/samba/smbgrpadd.sh "%g"
delete group script = /usr/local/etc/samba/smbgrpdel.sh "%g"

veto oplock files = /*.doc/*.xls/*.mdb/

[profiles]
path = /usr/local/profiles
read only = No
browseable = No
profile acls = yes
csc policy = disable
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
write list = @ntuser @wheel
create mask = 0600
directory mask = 0700

[netlogon]
path = /home/netlogon
write list = root
browseable = No
read only = Yes
locking = No

[homes]
comment = Home Directories
read only = No
create mask = 0600
directory mask = 0700
browseable = No

[tmp]
comment = Temporary file space
path = /tmp
read only = No
directory mask = 0775
guest ok = Yes
browseable = No

[backup]
comment = BSDBox backup
path = /usr/local/backup
valid users = masonr
write list = masonr

[PDF]
comment = PDF Spool Directory
path = /var/spool/cups-pdf
write list = masonr
guest ok = yes

[printers]
comment = All Printers
path = /var/spool/samba
#printer admin = root, masonr
guest ok = yes
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /usr/local/share/cups/drivers
write list = root, masonr
guest ok = no

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 
<https://pdbvpn1.fujitsu-siemens.com/https/0/lists.samba.org/mailman/listinfo/samba>




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

AW: [Samba] Roaming Profile won't upload to workstation that didn'tcreate it

[Oeltze, Benjamin]

Hi,
I´ve had this problem to.
put a # in front of profile acls = yes
I think the behavior of this changed from 3.0.14 to 3.0.20
 
 
 



Von: [EMAIL PROTECTED] im Auftrag von Rob Mason
Gesendet: Mo 13.02.2006 11:16
An: samba@lists.samba.org
Betreff: [Samba] Roaming Profile won't upload to workstation that didn'tcreate 
it



Hi,

I believe I've had a 'hidden' roaming profiles problem with Samba for a
while (I have no idea when it first manifested itself - sometime between
3.0.2 and 3.0.21a).

When I create a new user, their client workstation creates and updates
the profile without any problems.  Existing profiles used by existing
client workstations are also fine.  However, when I try to logon as an
existing user to a new workstation client, the existing saved profile
will not upload - the client hangs for about fifteen! minutes before
loading a minimal profile.  The only log file clue I have is:

[2006/02/13 09:27:27, 0] lib/util_sock.c:read_data(526)
  read_data: read failure for 4 bytes to client 192.168.200.6. Error =
Operation timed out
[2006/02/13 09:27:27, 1] smbd/service.c:close_cnum(839)


To summarise:
===
New User + New Workstation = OK
New User + Existing Workstation = OK
Exisitng User + Existng Workstation = OK
Existing User + New Workstation= NO LOAD ???


smb.conf:

# Global parameters
[global]
workgroup = BSDBOX
netbios name = SERVER
server string = BSDBox
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384
SO_RCVBUF=16384
hosts allow = 192.168.200., 127.0.0.1

passdb backend = tdbsam
passwd program = /usr/local/bin/passchange.sh %u
passwd chat = *Password* %n\n *Password* %n\n *Changed*\n
unix password sync = Yes
username map = /usr/local/etc/samba/smbusers

log level = 1
log file = /var/log/samba/%m.log
max log size = 100

printing = cups
printcap name = cups

logon script = netlogon.cmd
logon path = \\%L\profiles\%U
logon drive = Z:
logon home = \\%L\%U
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
remote announce = 192.168.200.8
time server = yes

admin users = root
hide unreadable = Yes
create mask = 0644
add group script = /usr/local/etc/samba/smbgrpadd.sh "%g"
delete group script = /usr/local/etc/samba/smbgrpdel.sh "%g"

veto oplock files = /*.doc/*.xls/*.mdb/

[profiles]
path = /usr/local/profiles
read only = No
browseable = No
profile acls = yes
csc policy = disable
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
write list = @ntuser @wheel
create mask = 0600
directory mask = 0700

[netlogon]
path = /home/netlogon
write list = root
browseable = No
read only = Yes
locking = No

[homes]
comment = Home Directories
read only = No
create mask = 0600
directory mask = 0700
browseable = No

[tmp]
comment = Temporary file space
path = /tmp
read only = No
directory mask = 0775
guest ok = Yes
browseable = No

[backup]
comment = BSDBox backup
path = /usr/local/backup
valid users = masonr
write list = masonr

[PDF]
comment = PDF Spool Directory
path = /var/spool/cups-pdf
write list = masonr
guest ok = yes

[printers]
comment = All Printers
path = /var/spool/samba
#printer admin = root, masonr
guest ok = yes
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /usr/local/share/cups/drivers
write list = root, masonr
guest ok = no

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 
<https://pdbvpn1.fujitsu-siemens.com/https/0/lists.samba.org/mailman/listinfo/samba>
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile won't upload to workstation that didn't create it

[Rob Mason]

Hi,

I believe I've had a 'hidden' roaming profiles problem with Samba for a 
while (I have no idea when it first manifested itself - sometime between 
3.0.2 and 3.0.21a).


When I create a new user, their client workstation creates and updates 
the profile without any problems.  Existing profiles used by existing 
client workstations are also fine.  However, when I try to logon as an 
existing user to a new workstation client, the existing saved profile 
will not upload - the client hangs for about fifteen! minutes before 
loading a minimal profile.  The only log file clue I have is:


[2006/02/13 09:27:27, 0] lib/util_sock.c:read_data(526)
 read_data: read failure for 4 bytes to client 192.168.200.6. Error = 
Operation timed out

[2006/02/13 09:27:27, 1] smbd/service.c:close_cnum(839)


To summarise:
===
New User + New Workstation = OK
New User + Existing Workstation = OK
Exisitng User + Existng Workstation = OK
Existing User + New Workstation= NO LOAD ???


smb.conf:

# Global parameters
[global]
   workgroup = BSDBOX
   netbios name = SERVER
   server string = BSDBox
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 
SO_RCVBUF=16384

   hosts allow = 192.168.200., 127.0.0.1

   passdb backend = tdbsam
   passwd program = /usr/local/bin/passchange.sh %u
   passwd chat = *Password* %n\n *Password* %n\n *Changed*\n
   unix password sync = Yes
   username map = /usr/local/etc/samba/smbusers

   log level = 1
   log file = /var/log/samba/%m.log
   max log size = 100

   printing = cups
   printcap name = cups

   logon script = netlogon.cmd
   logon path = \\%L\profiles\%U
   logon drive = Z:
   logon home = \\%L\%U
   domain logons = Yes
   os level = 65
   preferred master = Yes
   domain master = Yes
   wins support = Yes
   remote announce = 192.168.200.8
   time server = yes

   admin users = root
   hide unreadable = Yes
   create mask = 0644
   add group script = /usr/local/etc/samba/smbgrpadd.sh "%g"
   delete group script = /usr/local/etc/samba/smbgrpdel.sh "%g"

   veto oplock files = /*.doc/*.xls/*.mdb/

[profiles]
   path = /usr/local/profiles
   read only = No
   browseable = No
   profile acls = yes
   csc policy = disable
   hide files = /desktop.ini/ntuser.ini/NTUSER.*/
   write list = @ntuser @wheel
   create mask = 0600
   directory mask = 0700

[netlogon]
   path = /home/netlogon
   write list = root
   browseable = No
   read only = Yes
   locking = No

[homes]
   comment = Home Directories
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No

[tmp]
   comment = Temporary file space
   path = /tmp
   read only = No
   directory mask = 0775
   guest ok = Yes
   browseable = No

[backup]
   comment = BSDBox backup
   path = /usr/local/backup
   valid users = masonr
   write list = masonr

[PDF]
   comment = PDF Spool Directory
   path = /var/spool/cups-pdf
   write list = masonr
   guest ok = yes

[printers]
   comment = All Printers
   path = /var/spool/samba
   #printer admin = root, masonr
   guest ok = yes
   printable = Yes
   browseable = No

[print$]
   comment = Printer Drivers
   path = /usr/local/share/cups/drivers
   write list = root, masonr
   guest ok = no

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba roaming profile problem

[Eric Feldhusen]

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] 
Namens Ethan Chai

Verzonden: woensdag 9 november 2005 3:05
Aan: samba@lists.samba.org
Onderwerp: [Samba] Samba roaming profile problem

We are using the samba that come with RHEL 4 U2 as a PDC. Recently we 
found out that the roaming profile will generate a lot of funny funny 
icon, other users docs and files and the login become extremely slow. 
Any one have the experiences before? any solutions?


Appreciated if someone can provide with the solutions

Louis van Belle wrote:
yes, 
set profile acls = no


and test this with a new user.

Louis


The other thing you could do is enable acl support for ext3.  This has 
helped considerably with our RHEL4 server doing samba.


In your /etc/fstab, change this

/dev/sda1  /  ext3   defaults   1 1

to

/dev/sda1  /  ext3   defaults,acl   1 1

--
Eric Feldhusen
System Administrator http://www.remc1.org
PO Box 270  (906) 482-4520  x239
809 Hecla St(906) 482-5031 fax
Hancock, MI  49930  (906) 370 6202 mobile
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba roaming profile problem

[Louis van Belle]

and dont forget to set 
nt acl support = yes
map acl inherit = yes
map hidden = no
map system = no
map archive = no
store dos attributes = yes
ea support = yes 

to make it complete


>-Oorspronkelijk bericht-
>Van: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] 
>Namens Louis van Belle
>Verzonden: woensdag 9 november 2005 12:22
>Aan: samba@lists.samba.org
>Onderwerp: RE: [Samba] Samba roaming profile problem
>
>yes, 
>set profile acls = no
>
>and test this with a new user.
>
>Louis
>
>
>>-Oorspronkelijk bericht-
>>Van: [EMAIL PROTECTED] 
>>[mailto:[EMAIL PROTECTED] 
>>Namens Ethan Chai
>>Verzonden: woensdag 9 november 2005 3:05
>>Aan: samba@lists.samba.org
>>Onderwerp: [Samba] Samba roaming profile problem
>>
>>We are using the samba that come with RHEL 4 U2 as a PDC. Recently we 
>>found out that the roaming profile will generate a lot of funny funny 
>>icon, other users docs and files and the login become extremely slow. 
>>Any one have the experiences before? any solutions?
>>
>>Appreciated if someone can provide with the solutions
>>-- 
>>Ethan Chai
>>Linux system Engineer
>>My Directory Sdn. Bhd.
>>-- 
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  https://lists.samba.org/mailman/listinfo/samba
>>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba roaming profile problem

[Louis van Belle]

yes, 
set profile acls = no

and test this with a new user.

Louis


>-Oorspronkelijk bericht-
>Van: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] 
>Namens Ethan Chai
>Verzonden: woensdag 9 november 2005 3:05
>Aan: samba@lists.samba.org
>Onderwerp: [Samba] Samba roaming profile problem
>
>We are using the samba that come with RHEL 4 U2 as a PDC. Recently we 
>found out that the roaming profile will generate a lot of funny funny 
>icon, other users docs and files and the login become extremely slow. 
>Any one have the experiences before? any solutions?
>
>Appreciated if someone can provide with the solutions
>-- 
>Ethan Chai
>Linux system Engineer
>My Directory Sdn. Bhd.
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba roaming profile problem

[Ethan Chai]

We are using the samba that come with RHEL 4 U2 as a PDC. Recently we 
found out that the roaming profile will generate a lot of funny funny 
icon, other users docs and files and the login become extremely slow. 
Any one have the experiences before? any solutions?


Appreciated if someone can provide with the solutions
--
Ethan Chai
Linux system Engineer
My Directory Sdn. Bhd.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile problem--file in use

[Zach]

Right,  I have no idea why Zone Alarm is holding files hostage
preventing them from being written.  After analyzing the debugging
output from userenv.dll, My first suspects was McAffee Antivirus, and
the indexing service, both of which turned out not to be the problem.

I really like Zone Alarm, but I hated it when it thinks it's smarter than me.

On 9/29/05, Chadley Wilson <[EMAIL PROTECTED]> wrote:
> On Thursday 29 September 2005 12:33, Zach wrote:

> That's just weird!!
>
> Anyway is good that your sorted...
>
> --
> --
> Chadley Wilson
> Production Line Superintendant
> Pinnacle Micro
> Manufacturers of Proline Computers
> 
> Exercise freedom, Use LINUX
> =
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile problem--file in use

[Chadley Wilson]

On Thursday 29 September 2005 12:33, Zach wrote:
> I believe I have found the problem to be Zone Alarm!
> I ran across this forum post:
> http://forums.winforums.org/showthread.php?t=10791
> After uninstalling zone alarm, the problem hasn't re-occurred.  I must
> have been running a slightly different version on that machine than on
> others, which may explain why it worked fine on every other machine
> except this one.  Anyway thanks for the input.  I'll definitely take a
> look at that profiles entry in my smb.conf.  Your suggestion does seem
> to be more correct.

That's just weird!! 

Anyway is good that your sorted...

-- 
--
Chadley Wilson
Production Line Superintendant
Pinnacle Micro
Manufacturers of Proline Computers

Exercise freedom, Use LINUX
=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile problem--file in use

[Zach]

I believe I have found the problem to be Zone Alarm!
I ran across this forum post:
http://forums.winforums.org/showthread.php?t=10791
After uninstalling zone alarm, the problem hasn't re-occurred.  I must
have been running a slightly different version on that machine than on
others, which may explain why it worked fine on every other machine
except this one.  Anyway thanks for the input.  I'll definitely take a
look at that profiles entry in my smb.conf.  Your suggestion does seem
to be more correct.

On 9/29/05, Chadley Wilson <[EMAIL PROTECTED]> wrote:
> On Wednesday 28 September 2005 14:24, Zach wrote:
> > [Profiles]
> > path = /home/samba/profiles
> > browseable = No
> > writeable = yes
> > profile acls = yes
>
> Here is where I suspect the problem to be?
> What should happen here is the winodws PC will look in /home/samba/profiles/%u
> for the %u folder ( the user folder ) If it doesn't exist and the user
> doesn't own it your Winblows will swear.
> Winblows is so lazy it also will not create it.
> You must also make sure you can rwx to the whole folder as the user ad group..
> (I know arguable topic with perms)
> That how I did it here my samba config file:
>
> with roaming profiles and login script to map other drives.
>
> See if this helps you a bit more:
>
> There is also an excellent site to use for information
> http://66.249.93.104/linux?q=cache:IsVI0fM_iaQJ:www.linux.com/howtos/Samba-Authenticated-Gateway-HOWTO-6.shtml+samba+join+windows+to+linux+pdc&hl=en
>
> --
> --
> Chadley Wilson

>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile problem--file in use

[Zach]

On 9/28/05, Zach <[EMAIL PROTECTED]> wrote:
> On 9/28/05, Zach <[EMAIL PROTECTED]> wrote:
> > On 9/28/05, Chadley Wilson <[EMAIL PROTECTED]> wrote:
> > > On Wednesday 28 September 2005 12:42, Zach wrote:
> > > > Hi,
> > > >
> > > > I'm having a problem with roaming profiles.  I just built a new
> > > > machine and put it on the network.  When I log on with a domain user,
> > > > I get an error when it tries to load the roaming profile.  The error
> > > > is that certain file, which is part of the profile, can't be
> > > > overwritten because it is in use.  Then it goes on to attempt to load
> > > > a local profile, which, of course, it can't find.  The even generated
> > > > in the event list is ID 1509.
> > > >
> > > > When this initially occurred, I had just started configuring the
> > > > system.  After messing around with it for about an hour, I decided
> > > > that this was just an anomaly, since I had never had this problem on
> > > > any other machine.  Rather than troubleshoot it further, I took the
> > > > easy way out and reinstalled windows (which I would never do had it
> > > > been Linux).  The problem did not come back after
> > > > reinstallation--until last night.  Now I know it's a recurring
> > > > problem, so I've got to fix it.
> > > >
> > > > What I have done so far, without success:
> > > > --attempt to log on with a user account that previously had not
> > > > exhibited the problem
> > > > --attempt to log on with a user account that had not previously logged
> > > > on to that machine
> > > > --manually delete the cached profile from c:\Documents and Settings\
> > > > and try again
> > > > --Do System Restore back to a point when the problem was not occurring.
> > > > --Reboot (sigh) the samba server, ruining a really nice uptime record
> > > >
> > > > I am using an early version of Samba 3 on Red Hat 9 on the server/PDC
> > > > Windows XP SP2 on the offending client.
> > > > Other Windows XP SP2 clients don't exhibit this problem.
> > > >
> > > > Has anyone seen this problem?  Does anyone know what might cause it or
> > > > how to fix it?  Please help.  I am at wit's end.
> > > >
> > > > Thanks
> > > > Zach
> > > > --
> > >
> > > Same OLD - Same OLD
> > > Typical typical typical...
> > > Then it gives you a temporary profile and another message about loosing it
> > > when you log out...
> > >
> > > Firstly a copy of your precious smb.conf file and all you secret details
> > > replaced with fake details would be in order. :)
> > >
> > > Secondly an exact type out (He he) of the Winblows errors and the order in
> > > which they occur is important.
> > >
> > > Thirdly ...  have you applied the registry patch to the winblows PCs?
> > >
> > > Lastly where is your profile on the server and does the %U user have the
> > > correct perms on the folder and in smb.conf under that users shares.
> > > 777 perms might work but usually don't I prefer 774 or 775 then its happy.
> > > If you made like me ( RAMBO ) and decided it would be better to have the 
> > > user
> > > profile in /home/username/profile/ then I suggest that if you want it to 
> > > work
> > > you'd better create the folder appropriately. Otherwise dumb, stupid 
> > > windows
> > > won't create it. And then gets cheeky and swears at you.
> > >
> > > I have found that between samba PDC and windows PDC I have a problem 
> > > deciding
> > > which one of the two will send me to a mental home first. They both have 
> > > pro
> > > and CONs. But the linux one once correctly administrated just runs and 
> > > runs
> > > and runs an.. OK! :}
> > >
> > >
> > > If you want my advise, use samba with LDAP and use webmin to cluster your
> > > servers for easy administration.
> > >
> > > But be warned, first setup up all your services manually and make backups,
> > > webmin on occasion misses the point of the setup you created and messes
> > > things up.
> > >
> > > Chow for NOW and good luck...
> > > --
> > > Chadley Wilson
> >
> >
> > Yep, you nailed the problem exactly.
> >
> > I'll post my smb.conf when I get a chance, hopefully later today.
> > However, the weird thing is that it's working, and has been working,
> > A-Ok for the other XP SP2 machines.  This *feels* machine-specific,
> > which doesn't make sense.
> >
> > As far as the registry patch, I assume you mean the Sign or Seal one?
> > I believe so, but I'll double check.  However that wouldn't explain
> > why it was working fine, then all of a sudden the problem popped up
> > again for no good reason.
> >
> > As far as the way the profile directories, etc are laid out, it's not
> > the most sensible scheme, because I was still a n00b a few years ago
> > (Remember, RH9) when I was setting it up.  But the profiles directory
> > itself is set to 777, and the individual users' profile directories,
> > e.g. profiles/user1/; are 740 and are owed user1:sambausers.
> >
> > I do plan to move to a samba/ldap combination soon, but it's a work in
> > progress on the workbench right now :-).

Re: [Samba] roaming profile problem--file in use

[Zach]

On 9/28/05, Zach <[EMAIL PROTECTED]> wrote:
> On 9/28/05, Chadley Wilson <[EMAIL PROTECTED]> wrote:
> > On Wednesday 28 September 2005 12:42, Zach wrote:
> > > Hi,
> > >
> > > I'm having a problem with roaming profiles.  I just built a new
> > > machine and put it on the network.  When I log on with a domain user,
> > > I get an error when it tries to load the roaming profile.  The error
> > > is that certain file, which is part of the profile, can't be
> > > overwritten because it is in use.  Then it goes on to attempt to load
> > > a local profile, which, of course, it can't find.  The even generated
> > > in the event list is ID 1509.
> > >
> > > When this initially occurred, I had just started configuring the
> > > system.  After messing around with it for about an hour, I decided
> > > that this was just an anomaly, since I had never had this problem on
> > > any other machine.  Rather than troubleshoot it further, I took the
> > > easy way out and reinstalled windows (which I would never do had it
> > > been Linux).  The problem did not come back after
> > > reinstallation--until last night.  Now I know it's a recurring
> > > problem, so I've got to fix it.
> > >
> > > What I have done so far, without success:
> > > --attempt to log on with a user account that previously had not
> > > exhibited the problem
> > > --attempt to log on with a user account that had not previously logged
> > > on to that machine
> > > --manually delete the cached profile from c:\Documents and Settings\
> > > and try again
> > > --Do System Restore back to a point when the problem was not occurring.
> > > --Reboot (sigh) the samba server, ruining a really nice uptime record
> > >
> > > I am using an early version of Samba 3 on Red Hat 9 on the server/PDC
> > > Windows XP SP2 on the offending client.
> > > Other Windows XP SP2 clients don't exhibit this problem.
> > >
> > > Has anyone seen this problem?  Does anyone know what might cause it or
> > > how to fix it?  Please help.  I am at wit's end.
> > >
> > > Thanks
> > > Zach
> > > --
> >
> > Same OLD - Same OLD
> > Typical typical typical...
> > Then it gives you a temporary profile and another message about loosing it
> > when you log out...
> >
> > Firstly a copy of your precious smb.conf file and all you secret details
> > replaced with fake details would be in order. :)
> >
> > Secondly an exact type out (He he) of the Winblows errors and the order in
> > which they occur is important.
> >
> > Thirdly ...  have you applied the registry patch to the winblows PCs?
> >
> > Lastly where is your profile on the server and does the %U user have the
> > correct perms on the folder and in smb.conf under that users shares.
> > 777 perms might work but usually don't I prefer 774 or 775 then its happy.
> > If you made like me ( RAMBO ) and decided it would be better to have the 
> > user
> > profile in /home/username/profile/ then I suggest that if you want it to 
> > work
> > you'd better create the folder appropriately. Otherwise dumb, stupid windows
> > won't create it. And then gets cheeky and swears at you.
> >
> > I have found that between samba PDC and windows PDC I have a problem 
> > deciding
> > which one of the two will send me to a mental home first. They both have pro
> > and CONs. But the linux one once correctly administrated just runs and runs
> > and runs an.. OK! :}
> >
> >
> > If you want my advise, use samba with LDAP and use webmin to cluster your
> > servers for easy administration.
> >
> > But be warned, first setup up all your services manually and make backups,
> > webmin on occasion misses the point of the setup you created and messes
> > things up.
> >
> > Chow for NOW and good luck...
> > --
> > Chadley Wilson
>
>
> Yep, you nailed the problem exactly.
>
> I'll post my smb.conf when I get a chance, hopefully later today.
> However, the weird thing is that it's working, and has been working,
> A-Ok for the other XP SP2 machines.  This *feels* machine-specific,
> which doesn't make sense.
>
> As far as the registry patch, I assume you mean the Sign or Seal one?
> I believe so, but I'll double check.  However that wouldn't explain
> why it was working fine, then all of a sudden the problem popped up
> again for no good reason.
>
> As far as the way the profile directories, etc are laid out, it's not
> the most sensible scheme, because I was still a n00b a few years ago
> (Remember, RH9) when I was setting it up.  But the profiles directory
> itself is set to 777, and the individual users' profile directories,
> e.g. profiles/user1/; are 740 and are owed user1:sambausers.
>
> I do plan to move to a samba/ldap combination soon, but it's a work in
> progress on the workbench right now :-).
>
As promised, here is my smb.conf.  I've stripped out comments for
compactness.  Also, just a caveat: I put this together a few years
ago.  I was a noob back then so if there are some things that are
wacky that's why.  I'm in the process of building a new system to
replace

Re: [Samba] roaming profile problem--file in use

[Zach]

On 9/28/05, Chadley Wilson <[EMAIL PROTECTED]> wrote:
> On Wednesday 28 September 2005 12:42, Zach wrote:
> > Hi,
> >
> > I'm having a problem with roaming profiles.  I just built a new
> > machine and put it on the network.  When I log on with a domain user,
> > I get an error when it tries to load the roaming profile.  The error
> > is that certain file, which is part of the profile, can't be
> > overwritten because it is in use.  Then it goes on to attempt to load
> > a local profile, which, of course, it can't find.  The even generated
> > in the event list is ID 1509.
> >
> > When this initially occurred, I had just started configuring the
> > system.  After messing around with it for about an hour, I decided
> > that this was just an anomaly, since I had never had this problem on
> > any other machine.  Rather than troubleshoot it further, I took the
> > easy way out and reinstalled windows (which I would never do had it
> > been Linux).  The problem did not come back after
> > reinstallation--until last night.  Now I know it's a recurring
> > problem, so I've got to fix it.
> >
> > What I have done so far, without success:
> > --attempt to log on with a user account that previously had not
> > exhibited the problem
> > --attempt to log on with a user account that had not previously logged
> > on to that machine
> > --manually delete the cached profile from c:\Documents and Settings\
> > and try again
> > --Do System Restore back to a point when the problem was not occurring.
> > --Reboot (sigh) the samba server, ruining a really nice uptime record
> >
> > I am using an early version of Samba 3 on Red Hat 9 on the server/PDC
> > Windows XP SP2 on the offending client.
> > Other Windows XP SP2 clients don't exhibit this problem.
> >
> > Has anyone seen this problem?  Does anyone know what might cause it or
> > how to fix it?  Please help.  I am at wit's end.
> >
> > Thanks
> > Zach
> > --
>
> Same OLD - Same OLD
> Typical typical typical...
> Then it gives you a temporary profile and another message about loosing it
> when you log out...
>
> Firstly a copy of your precious smb.conf file and all you secret details
> replaced with fake details would be in order. :)
>
> Secondly an exact type out (He he) of the Winblows errors and the order in
> which they occur is important.
>
> Thirdly ...  have you applied the registry patch to the winblows PCs?
>
> Lastly where is your profile on the server and does the %U user have the
> correct perms on the folder and in smb.conf under that users shares.
> 777 perms might work but usually don't I prefer 774 or 775 then its happy.
> If you made like me ( RAMBO ) and decided it would be better to have the user
> profile in /home/username/profile/ then I suggest that if you want it to work
> you'd better create the folder appropriately. Otherwise dumb, stupid windows
> won't create it. And then gets cheeky and swears at you.
>
> I have found that between samba PDC and windows PDC I have a problem deciding
> which one of the two will send me to a mental home first. They both have pro
> and CONs. But the linux one once correctly administrated just runs and runs
> and runs an.. OK! :}
>
>
> If you want my advise, use samba with LDAP and use webmin to cluster your
> servers for easy administration.
>
> But be warned, first setup up all your services manually and make backups,
> webmin on occasion misses the point of the setup you created and messes
> things up.
>
> Chow for NOW and good luck...
> --
> Chadley Wilson


Yep, you nailed the problem exactly.

I'll post my smb.conf when I get a chance, hopefully later today. 
However, the weird thing is that it's working, and has been working,
A-Ok for the other XP SP2 machines.  This *feels* machine-specific,
which doesn't make sense.

As far as the registry patch, I assume you mean the Sign or Seal one? 
I believe so, but I'll double check.  However that wouldn't explain
why it was working fine, then all of a sudden the problem popped up
again for no good reason.

As far as the way the profile directories, etc are laid out, it's not
the most sensible scheme, because I was still a n00b a few years ago
(Remember, RH9) when I was setting it up.  But the profiles directory
itself is set to 777, and the individual users' profile directories,
e.g. profiles/user1/; are 740 and are owed user1:sambausers.

I do plan to move to a samba/ldap combination soon, but it's a work in
progress on the workbench right now :-).
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile problem--file in use

[Zach]

Hi,

I'm having a problem with roaming profiles.  I just built a new
machine and put it on the network.  When I log on with a domain user,
I get an error when it tries to load the roaming profile.  The error
is that certain file, which is part of the profile, can't be
overwritten because it is in use.  Then it goes on to attempt to load
a local profile, which, of course, it can't find.  The even generated
in the event list is ID 1509.

When this initially occurred, I had just started configuring the
system.  After messing around with it for about an hour, I decided
that this was just an anomaly, since I had never had this problem on
any other machine.  Rather than troubleshoot it further, I took the
easy way out and reinstalled windows (which I would never do had it
been Linux).  The problem did not come back after
reinstallation--until last night.  Now I know it's a recurring
problem, so I've got to fix it.

What I have done so far, without success:
--attempt to log on with a user account that previously had not
exhibited the problem
--attempt to log on with a user account that had not previously logged
on to that machine
--manually delete the cached profile from c:\Documents and Settings\
and try again
--Do System Restore back to a point when the problem was not occurring.
--Reboot (sigh) the samba server, ruining a really nice uptime record

I am using an early version of Samba 3 on Red Hat 9 on the server/PDC
Windows XP SP2 on the offending client.
Other Windows XP SP2 clients don't exhibit this problem.

Has anyone seen this problem?  Does anyone know what might cause it or
how to fix it?  Please help.  I am at wit's end.

Thanks
Zach
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile : taking forever to login /log off

[FM]

Except when you have multiple vendors and different hardware

Natxo Asenjo wrote:



On 9/15/05, *Lorenzo Cerini* <[EMAIL PROTECTED] 
> wrote:


Unlucky you need to use gpedit.msc on every client.


well, that's why god invented disc-images. Just make an xp isntallation 
you are happy with, and deploy its image on the rest of workstations :)


regards,
J.I.Asenjo


--
Frederic Medery
System Administrator

LexUM, University of Montreal
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: FW: [Samba] Roaming profile : taking forever to login /log off

[Lorenzo Cerini]

Many thanks, that should really help.
Louis van Belle wrote:



i did it by applying policies at logon.

You can use poledit.exe en the needed templates.
search for samba.adm

or get it from my server at 
http://www.ratio-benelux.nl/sambaldap.rar.gz


all you need is in there.


 


-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] 
Namens Natxo Asenjo

Verzonden: donderdag 15 september 2005 10:23
Aan: Lorenzo Cerini
CC: samba@lists.samba.org
Onderwerp: Re: [Samba] Roaming profile : taking forever to 
login /log off


On 9/15/05, Lorenzo Cerini <[EMAIL PROTECTED]> wrote:
   


Unlucky you need to use gpedit.msc on every client.
 

well, that's why god invented disc-images. Just make an xp 
isntallation you 
are happy with, and deploy its image on the rest of workstations :)


regards,
J.I.Asenjo
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

   



 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile : taking forever to login /log off

[Natxo Asenjo]

On 9/15/05, Lorenzo Cerini <[EMAIL PROTECTED]> wrote:
> 
> Unlucky you need to use gpedit.msc on every client.


well, that's why god invented disc-images. Just make an xp isntallation you 
are happy with, and deploy its image on the rest of workstations :)

regards,
J.I.Asenjo
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile : taking forever to login /log off

[Lorenzo Cerini]

Well, it's possible to store all the profile on the server like happens, e.g.,  
in nfs.

On your clients you have the gpedit.msc utility. So 
run->gpedit.msc->user_config->administrative_templates

->user_profiles

here you can exclude some folder of your roaming to be copied up and down (something like 'exclude directory 


from roaming profile', my winxp is in italian). You can write 'Documents; 
Personal; Desktopetc'

In this way these folders will be threated as local, and could be different on 
every client. But you can map

all these ones to a network volume on your samba server.

Just prepare a small logon.bat with time server sync (it's important), and net 
use ... ... to import a network volume

(say U:) on your clients.

Now run->regedit->HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders 

Here you can change the displacemant of your profile, and change 
&USERPROFILE&\Desktop -> U:\user_name\Desktop, or better 
you can map U: with a logon.bat.%U script and give a different U: to every user.


Unlucky you need to use gpedit.msc on every client.
For regedit you can take advatage by using a netlogon\Default User share.

One caveat: do not use your logon drive, or your profile drive form U:, take 
another one and put correct
permission.
Another one: On windows you can open explorer->Tools->Folder Options->'off-line 
files' and you can disable
off-line files, in this way, if the client is well-connected to the lan will use the natwork files, if not 
won't. If you enable off-line files, win will sync everything at login/off loosing a lot of time. 
I have clients with 1gb or more for documents folder, and this config helps a lot.


L.Cerini




FM wrote:


Hello,
Thank you for your help :-)
Yes some users have > 200 MB profile

Lorenzo Cerini wrote:


Hi,
i had a lot of similar problems inthe past now solved,
just i didn't understand if the roaming profile of your client are 
actually about 200mb or not.
In one case is possible to manage not to copy all the profile at 
every logon/off, instead if the trouble is not
concerning the bigness of roaming profiles i need to know something 
more about your lan ( how many clients,

how many people, etc..)
L.Cerini






--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile : taking forever to login /log off

[kurt weiss]

do not use the home directory as profile dir...
you need "profile acls = yes" there.
similar like this:

logon path = \\%N\profiles\%u
[profiles]
   csc policy = disable
   browsable = no
   profile acls = yes
   path = /var/smbdata/profiles
   writable = yes
   create mask = 0600
   directory mask = 0700

if u use the homedir as profiledir, u must not use "profile acls=yes"...
therefore u have problems with logon. this - maybe - will slow down your 
logon process. details u can find, if u turn log level to a higher value.


--
greetings,
kurt, austria. (http://www.kwnet.at)

this is a posting from a samba *user* - not a samba developer.
the posting is created on the base of experiences an may be faulty.
so, please, if there's any mistake in it, please feel free to correct it


FM schrieb:


Hello everybody,

We are using SMB as PDC and roaming profile.
but login /log off are taking 15 min (200 MB) on our GB network.
when I use tcpdump to monitor SMB on the client and the server , I can
see that  the copy  hang during several minutes.
our stations :
win xp sp2 (webclient disabled)

our smb serveur : samba-3.0.9

here is my smb.conf :
# Global parameters
[global]
   workgroup = DOMAIN
   server string = DOMAIN PDC Server
   interfaces = IP
   passdb backend = ldapsam:ldap://ldap-master.lan.lexum.pri/
   passwd program = /usr/local/sbin/krb5_update_pwd.pl -u %u
   passwd chat = *Password:* %n\n *Again:* %n\n *Changed*
   username map = /etc/samba/smbusers
   unix password sync = Yes
   log level = 10
   log file = /var/log/samba/%m.log
   max log size = 50
   name resolve order = wins lmhosts bcast host dns
   time server = Yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   printcap name = /etc/printcap
   add user script = /usr/local/sbin/smbldap-useradd -m "%u"
   delete user script = /usr/local/sbin/smbldap-userdel "%u"
   add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
   add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
   delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u"
   set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
   add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w "%u"
   logon path = \\%L\%U\windows
   logon drive = Z:
   logon home = \\%L\%U
   domain logons = Yes
   os level = 33
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = Yes
   ldap admin dn = cn=samba,ou=LdapSystem,dc=lan,dc=lexum,dc=pri
   ldap group suffix = ou=Group
   ldap idmap suffix = ou=Idmap
   ldap machine suffix = ou=Computers
   ldap suffix = dc=lan,dc=lexum,dc=pri
   ldap ssl = no
   ldap user suffix = ou=Users
   hosts allow = 192.168.4., 127.0.0.1
   cups options = raw
   mangled names = No
[homes]
   comment = Home Directories
   read only = No
   browseable = No
   csc policy = disable

[netlogon]
   comment = Network Logon Service
   path = /etc/samba/netlogon
   guest ok = Yes
   share modes = No



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming profile : taking forever to login /log off

[FM]

Hello,
Thank you for your help :-)
Yes some users have > 200 MB profile

Lorenzo Cerini wrote:


Hi,
i had a lot of similar problems inthe past now solved,
just i didn't understand if the roaming profile of your client are 
actually about 200mb or not.
In one case is possible to manage not to copy all the profile at every 
logon/off, instead if the trouble is not
concerning the bigness of roaming profiles i need to know something 
more about your lan ( how many clients,

how many people, etc..)
L.Cerini



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile : taking forever to login /log off

[Lorenzo Cerini]

Hi,
i had a lot of similar problems inthe past now solved,
just 
i didn't understand if the roaming profile of your client are actually about 200mb or not.

In one case is possible to manage not to copy all the profile at every 
logon/off, instead if the trouble is not
concerning the bigness of roaming profiles i need to know something more about 
your lan ( how many clients,
how many people, etc..)
L.Cerini

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile : taking forever to login /log off

[FM]

Hello everybody,

We are using SMB as PDC and roaming profile.
but login /log off are taking 15 min (200 MB) on our GB network.
when I use tcpdump to monitor SMB on the client and the server , I can
see that  the copy  hang during several minutes.
our stations :
win xp sp2 (webclient disabled)

our smb serveur : samba-3.0.9

here is my smb.conf :
# Global parameters
[global]
   workgroup = DOMAIN
   server string = DOMAIN PDC Server
   interfaces = IP
   passdb backend = ldapsam:ldap://ldap-master.lan.lexum.pri/
   passwd program = /usr/local/sbin/krb5_update_pwd.pl -u %u
   passwd chat = *Password:* %n\n *Again:* %n\n *Changed*
   username map = /etc/samba/smbusers
   unix password sync = Yes
   log level = 10
   log file = /var/log/samba/%m.log
   max log size = 50
   name resolve order = wins lmhosts bcast host dns
   time server = Yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   printcap name = /etc/printcap
   add user script = /usr/local/sbin/smbldap-useradd -m "%u"
   delete user script = /usr/local/sbin/smbldap-userdel "%u"
   add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
   add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
   delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u"
   set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
   add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w "%u"
   logon path = \\%L\%U\windows
   logon drive = Z:
   logon home = \\%L\%U
   domain logons = Yes
   os level = 33
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = Yes
   ldap admin dn = cn=samba,ou=LdapSystem,dc=lan,dc=lexum,dc=pri
   ldap group suffix = ou=Group
   ldap idmap suffix = ou=Idmap
   ldap machine suffix = ou=Computers
   ldap suffix = dc=lan,dc=lexum,dc=pri
   ldap ssl = no
   ldap user suffix = ou=Users
   hosts allow = 192.168.4., 127.0.0.1
   cups options = raw
   mangled names = No
[homes]
   comment = Home Directories
   read only = No
   browseable = No
   csc policy = disable

[netlogon]
   comment = Network Logon Service
   path = /etc/samba/netlogon
   guest ok = Yes
   share modes = No

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile trouble

[Lorenzo Cerini]

Maybe this is not the right place but i'm still having trouble with 
synchronisation.

Samba 3.0.14 as pdc.
I used gpedit.msc to tell the computer not to sync Documents ( i used 
the italian name Documenti, since

my windowsxp is in italian ) on login/logout.
I mapped documents using regedit on drive z: (i.e. the roaming profile 
on the samba server), but when i logout i
have been still seeing the 'saving settings' message, and all the 
folders in the Documents get loose their files.

Any idea?
L.Cerini
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile

[Lorenzo Cerini]

Yes, it was maybe a sync trouble.
But after some trying i realized it was not a good way for two reasons:
At the end windows xp tried to sync the folders loosing as much time as with 
the usual roaming profile;
Disabling the sync i used to loose something anyway.
So now i'm looking up a new solution:
activated the 'use only local profile' in the gpedit.msc config tool, so the 
client doesn't even think
to have to deal whith something roaming.
disabled offline file setting so if there's no connection i just don't see anything ( a bit rude but looks 
clean and straight) 
mapped the documents and the other profile folders to the X: (logon drive) network volume.


Now waiting for mor disasters.
Any experience in 1gb profile user, and network profiles would be appreciated.
thanks
L.Cerini

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] roaming profile

[Erol YILDIZ]

Hi,

This can be because of the date/time difference between the client and the 
server. You can try using the time server option of samba.


Hope this helps.

Erol YILDIZ

I'm working about smba 3 as pdc for a client with about 30 workstation. I 
managed in the windows configuration to exclude the documents and the 
desktop from being loaded up and down

at every login/logoff.
Now i have documents and desktop mapped on a disk X: on the server and it 
seems to work, but i still have

some problem with syncronisation, sometimes i lost some documents.
Any idea?

I configured strightly samba3 as pdc with tdbsam backend.
Clients are winxp, i configured the regedit to choose different user's 
profile folders and gpedit.msc to

exclude some folders from being loaded up and down
at every login/logoff.

tia
Lorenzo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profile

[Lorenzo Cerini]

I'm working about smba 3 as pdc for a client with about 30 workstation. 
I managed in the windows configuration to exclude the documents and the desktop from being loaded up and down

at every login/logoff.
Now i have documents and desktop mapped on a disk X: on the server and it seems 
to work, but i still have
some problem with syncronisation, sometimes i lost some documents.
Any idea?

I configured strightly samba3 as pdc with tdbsam backend.
Clients are winxp, i configured the regedit to choose different user's profile 
folders and gpedit.msc to
exclude some folders from being 
loaded up and down

at every login/logoff.

tia
Lorenzo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile

[Cleiton Luiz Siqueira]

Hi Matthew,

It was exactly it that I needed. Follow the solution.

1 - On the XP workstation, log in with an Administrative account.
2 - Click on Start -> Run.
3 - Type mmc.
4 - Click on OK.
5 - A Microsoft Management Console should appear.
6 - Click on File -> Add/Remove Snap-in -> Add.
7 - Double-click on Group Policy.
8 - Click on Finish -> Close.
9 - Click on OK.
10 - In the "Console Root" window expand Local Computer Policy -> Computer 
Configuration -> Administrative Templates -> System -> User Profiles.
11 - Double-click on "Only Allow Local User Profiles"
12 - Select Disable.
13 - Click on OK.
14 - Double-click on "Prevent Roaming Profile Change from Propagating to the 
Server"
15 - Select Disable.
16 - Click on OK.
17 - Close the whole console. You do not need to save the settings (this refers 
to the console settings rather than the policies you have changed).
18 - Reboot.

Thanks so much!

Cleiton


- Original Message - 
From: "Matthew Easton" <[EMAIL PROTECTED]>
To: "Cleiton Luiz Siqueira" <[EMAIL PROTECTED]>; 
Sent: Saturday, July 09, 2005 10:32 PM
Subject: Re: [Samba] Roaming Profile


> On Saturday 09 July 2005 15:56, Cleiton Luiz Siqueira wrote:
>> Hi,
>>
>> I have my Samba Server setting as a PDC, but I wouldn't like that Windows
>> XP store and retrieve profile from the server.
>>
>> Does anyone know how I can do it?
>>
>> Thanks,
>> Cleiton
> 
> http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id2609003
> Scroll down to  "Disabling Roaming Profiles Support"
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile

[Matthew Easton]

On Saturday 09 July 2005 15:56, Cleiton Luiz Siqueira wrote:
> Hi,
>
> I have my Samba Server setting as a PDC, but I wouldn't like that Windows
> XP store and retrieve profile from the server.
>
> Does anyone know how I can do it?
>
> Thanks,
> Cleiton

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id2609003
Scroll down to  "Disabling Roaming Profiles Support"
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile

[Cleiton Luiz Siqueira]

Hi,

I have my Samba Server setting as a PDC, but I wouldn't like that Windows XP 
store and retrieve profile from the server.


Does anyone know how I can do it?

Thanks,
Cleiton 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Roaming Profile Question

[Mark Sarria]

Did not try that yet, will give it a shot on my sandbox.

Thanks for the tip

--mark

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tony Earnshaw
Sent: Tuesday, June 14, 2005 9:21 AM
To: samba@lists.samba.org
Subject: RE: [Samba] Roaming Profile Question

tir, 14.06.2005 kl. 17.02 skrev Mark Sarria:

> I agree this is a desktop.ini, just search for all the desktop.ini in your
> profile and delete it; this should stop this notepad message from popping
> up. Unfortunately it will happen to all new users who login; I have not
> found a way to get rid of that, my solution was to create a mandatory
> profile.

And 'hide files = /desktop.ini/' didn't help?

--Tonni

-- 
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Question

[Jan Kellerhoff]

Mark Sarria wrote:


I agree this is a desktop.ini, just search for all the desktop.ini in your
profile and delete it; this should stop this notepad message from popping
up. Unfortunately it will happen to all new users who login; I have not
found a way to get rid of that, my solution was to create a mandatory
profile.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Collen
Sent: Tuesday, June 14, 2005 12:34 AM
To: Matt Schwartz; samba@lists.samba.org
Subject: Re: [Samba] Roaming Profile Question

Error's in a notepad ???...

isn't this just a desktop.ini in the startup folder problem ?
or is it a real error from the shell32.dll ??
(coz that might not be samba related ..)

Laters.
Collen

Matt Schwartz wrote:
 

I am getting a shell32.dll error with my roaming profiles.  I have never 
seen this before and google queries haven't gotten any solutions.  I am 
using WinXP with the current service pack.  This shell32.dll error pops 
up in a notepad window.  This is kind of annoying and I know its windows 
related.  Anyone know how to shut it off, its driving me mad.


   

I think, you have to to disable the option "Remember each folder's view 
setting in Explorer -> Tools -> Folder Options -> View

and apply the change to all folders.
Additional you have to search as Admin for all desktop.ini and delete them.
With roaming profiles they might return...

Jan Kellerhoff
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Roaming Profile Question

[Tony Earnshaw]

tir, 14.06.2005 kl. 17.02 skrev Mark Sarria:

> I agree this is a desktop.ini, just search for all the desktop.ini in your
> profile and delete it; this should stop this notepad message from popping
> up. Unfortunately it will happen to all new users who login; I have not
> found a way to get rid of that, my solution was to create a mandatory
> profile.

And 'hide files = /desktop.ini/' didn't help?

--Tonni

-- 
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Roaming Profile Question

[Mark Sarria]

I agree this is a desktop.ini, just search for all the desktop.ini in your
profile and delete it; this should stop this notepad message from popping
up. Unfortunately it will happen to all new users who login; I have not
found a way to get rid of that, my solution was to create a mandatory
profile.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Collen
Sent: Tuesday, June 14, 2005 12:34 AM
To: Matt Schwartz; samba@lists.samba.org
Subject: Re: [Samba] Roaming Profile Question

Error's in a notepad ???...

isn't this just a desktop.ini in the startup folder problem ?
or is it a real error from the shell32.dll ??
(coz that might not be samba related ..)

Laters.
Collen

Matt Schwartz wrote:
> I am getting a shell32.dll error with my roaming profiles.  I have never 
> seen this before and google queries haven't gotten any solutions.  I am 
> using WinXP with the current service pack.  This shell32.dll error pops 
> up in a notepad window.  This is kind of annoying and I know its windows 
> related.  Anyone know how to shut it off, its driving me mad.
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Question

[Dominic Iadicicco]

Delete any local profiles from the machine other then Administrator ,
All users, and Default.  make sure the profile folder is 777 because
winXP srv 2 has some issues with that.

On 6/13/05, Matt Schwartz <[EMAIL PROTECTED]> wrote:
> I am getting a shell32.dll error with my roaming profiles.  I have never
> seen this before and google queries haven't gotten any solutions.  I am
> using WinXP with the current service pack.  This shell32.dll error pops
> up in a notepad window.  This is kind of annoying and I know its windows
> related.  Anyone know how to shut it off, its driving me mad.
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Question

[Collen]

Error's in a notepad ???...

isn't this just a desktop.ini in the startup folder problem ?
or is it a real error from the shell32.dll ??
(coz that might not be samba related ..)

Laters.
Collen

Matt Schwartz wrote:
I am getting a shell32.dll error with my roaming profiles.  I have never 
seen this before and google queries haven't gotten any solutions.  I am 
using WinXP with the current service pack.  This shell32.dll error pops 
up in a notepad window.  This is kind of annoying and I know its windows 
related.  Anyone know how to shut it off, its driving me mad.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile Question

[Matt Schwartz]

I am getting a shell32.dll error with my roaming profiles.  I have never 
seen this before and google queries haven't gotten any solutions.  I am 
using WinXP with the current service pack.  This shell32.dll error pops 
up in a notepad window.  This is kind of annoying and I know its windows 
related.  Anyone know how to shut it off, its driving me mad.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Mix-Up Between Users

[Marian Steinbach]

okok. Before anybody spends any more time on my problems, pardon me. I 
just found out that all sambaSIDs in our LDAP directory are the same. 
Yes, the same.


Sorry, and thanks again!

Marian


--

http://www.sendung.de/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Mix-Up Between Users

[Marian Steinbach]

Hi! First, thanks everybody for posting.

It is a little bit odd that there seems to be quite different opinions 
on what is possible and what not.


Storing Win2000 and WinXP roaming profile within the same directory: 
Possible or not? What trouble can be extepected?


There seems to be no definitive answer for that question.

In addition, my original problem still persists. Users still get the 
profile of the preceeding user who logged in.


Robert, thanks for the example config you posted for the [profiles] 
share. I have to add that we have no dedicated profile path, but we 
store the profiles in /home/%u/.WindowsProfil . Can this be the cause of 
the trouble?


The complete share config as we have it now:

[profiles]
comment = Windows-Profil
path = /home/%u/.WindowsProfil
valid users = %U, "@Domain Admins"
force user = %U
read only = No
create mask = 0700
directory mask = 0700
guest ok = Yes
profile acls = Yes
hide files = /desktop.ini/ntuser.ini/NTUSER.*/
browseable = No
csc policy = disable
locking = No
oplocks = No
level2 oplocks = No


Here is the directory listing with rights mask for my profile:

hal:/home/marian# ls -la /home/marian/.WindowsProfil/
total 840
drwx--  14 marian users   4096 Jun  6 13:14 .
drwx-x  34 marian users   4096 May 16 10:50 ..
drwx--  14 marian users   4096 May  7 15:28 Anwendungsdaten
drwx--   2 marian users   4096 May  6 15:02 Cookies
drwx--   5 marian users   4096 Jun  1 11:52 Desktop
drwx--   2 marian users   4096 May  6 15:02 Druckumgebung
drwx--   6 marian users   4096 May  6 15:02 Eigene Dateien
drwx--   5 marian users   4096 May  6 15:02 Favoriten
drwx--   3 marian users   4096 May  6 15:02 His6
-rwx--   1 marian users 786432 Jun  6 13:15 NTUSER.DAT
-rwx--   1 marian users   1024 Jun  6 13:14 NTUSER.DAT.LOG
drwx--   8 marian users   4096 May  6 15:02 Netzwerkumgebung
drwx--   2 marian users   8192 May  6 15:02 Recent
drwx--   2 marian users   4096 May  6 15:02 SendTo
drwx--   3 marian users   4096 May  6 15:02 Startmen??
drwx--   2 marian users   4096 May  6 15:02 Vorlagen
-rw---   1 marian users282 Jun  6 13:14 ntuser.ini


Another odd thing, excpept for the fact that my profile is presented to 
whoever loggs in next, is the fact that it remains on the workstation 
(tested on Windows XP). I thought this could be changed by


  csc policy = disable

but it obviously doesn't help.


And for something else: When I log in as local Administrator after I 
logged in as domain user "marian", then open the user profiles dialog of 
the system settings, I don't see the profile KISD\marian (as it should 
be named) but KISD\ab. Isn't this mysterious?


I start wondering if something in the name resolution is totally mixed 
up, if SIDs are mingled up or whatever.


Marian


--

http://www.sendung.de/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Mix-Up Between Users

[Matthew Easton]

On Friday 03 June 2005 04:39, Robert Schetterer wrote:
> Marian Steinbach schrieb:

> > We have both WinXP and Win2000 workstations. Users where able to use
> > their roaming profile on both systems back when we used the NT PDC and
> > we would like them to so with the Samba PDC.
> >
> > We hold user data in an LDAP backend.
> >
> >
> > Thanks!
> >
> > Marian
>
> Hi,
> roaming Profiles in a mixed setup of win xp and 2000 server will get you
> in failures ,dont do this ( or mess with profile bugs ).
> Try to upgrade all clients to xp with a nearly equal software install,
> and patch level.
> ( this is a windows issue not related to samba anyway )

Hmm...  What's wrong with my setup?  I've never had that problem so far with 
an installation that started in 2000 with samba 2.x and all windows 2000, now 
has an additional 4 or 5 WinXP users and samba 3.x.  Perhaps it's because we 
aren't using LDAP?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming profile blues.

[Ruth Ivimey-Cook]

Folks,

I have a samba 3 (Fedora 3) PDC which has been working fine for some time now 
with a roaming profile. I've just reinstalled Windows XP SP2 on my main work 
machine. I remembered to set the three "*seal*" registry flags to 0, and 
joined the computer (which has the same textual name as before) to the domain. 
All well so far. Trying to log in as local user works. That user can access 
samba shares also. I also managed to join the domain ok.


The problem is that something prevents me from logging in to roaming profile 
user defined on the PDC. The only diagnostic samba messages I get are:


[2005/06/03 14:56:39, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
  _net_sam_logon: user HOME\rivimey has user sid 
S-1-5-21-117080783-426460007-1280929931-2002

   but group sid S-1-5-32-547.
  The conflicting domain portions are not supported for NETLOGON calls

I eventually found a note on the net about using gpedit.msc not checking for 
ownership of files, and set the policy: "Local Configuration/Administrative 
Templates/System/User Profiles/Do not check for user ownership of Roaming 
Profile Folders" => Enabled.


Having done that I took the computer out of the domain, rebooted twice, logged 
in as admin and tried to take the machine back into the domain. Now it doesn't 
want to play: it says "a domain controller for the domain HOME could not be 
contacted". Well, I restart samba and it agrees to join the domain.


Now, however, it complains that I can't log in to the roaming user because a 
device has failed. There is no problem logging into the local accounts and I 
can't see any warning or errors in the event log, nor can I see Devices listed 
in device manager that aren't working, nor Services set to "automatic" that 
aren't running (except "Security Center", which stopped successfully when I 
started it by hand).


What is going wrong?

Thanks

--
Ruth Ivimey-Cook
Software engineer and technical writer.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile Mix-Up Between Users

[Robert Schetterer]

Marian Steinbach schrieb:


Hi!

We are having some trouble after migrating from an NT4 domain 
controller to Samba 3:


When there is no local copy of any profile on a workstation, a user 
can log in and his profile is copied from the server.


When a second user logs in to the same workstation after the first one 
logged out, he sees the profile of the first one. That is, he actually 
used it. His profile isn't even read from the server.


What could be the reason for this?

We have both WinXP and Win2000 workstations. Users where able to use 
their roaming profile on both systems back when we used the NT PDC and 
we would like them to so with the Samba PDC.


We hold user data in an LDAP backend.


Thanks!

Marian


Hi,
roaming Profiles in a mixed setup of win xp and 2000 server will get you 
in failures ,dont do this ( or mess with profile bugs ).
Try to upgrade all clients to xp with a nearly equal software install, 
and patch level.

( this is a windows issue not related to samba anyway )
Behavior of profiles is very different in win versions, you can control 
that by group policies or/and adm files

and poledit ( not really related to samba )
Your described bug seems to me that you havent include the right 
parameters in your profile shares.
I recommend to read the samba faqs about profiles and read technet for 
using roaming profiles with adms etc.
There is no Problem having the right things in the right place using 
roaming profiles with win clients
but its sometimes heavy to setup , but as i said before this is not 
really samba related

here is an example profile share

[profiles]
  path = /var/lib/samba/profiles
  vfs objects =  vscan-clamav, extd_audit
  read only = no
  create mask = 0755
  directory mask = 0755
  browseable = No
  guest ok = Yes
  profile acls = yes
  csc policy = disable
  force user = %U
  hide files = /desktop.ini/ntuser.ini/NTUSER.*/
  locking = No
  oplocks = False
  level2 oplocks = False
  valid users = %U, @"Domain Admins"

Best Regards
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile Mix-Up Between Users

[Marian Steinbach]

Hi!

We are having some trouble after migrating from an NT4 domain controller 
to Samba 3:


When there is no local copy of any profile on a workstation, a user can 
log in and his profile is copied from the server.


When a second user logs in to the same workstation after the first one 
logged out, he sees the profile of the first one. That is, he actually 
used it. His profile isn't even read from the server.


What could be the reason for this?

We have both WinXP and Win2000 workstations. Users where able to use 
their roaming profile on both systems back when we used the NT PDC and 
we would like them to so with the Samba PDC.


We hold user data in an LDAP backend.


Thanks!

Marian
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Fwd: [solved] [Samba] Roaming Profile problems]

[SABINE ZARABIAN]

Sorry, I forgot to send a copy of this mail to the list.
in global section
logon path =
no empty string, nothing but an end of line
Craig
 

Hello Craig,
thank you for your mail. I tried your idea and I think it works !!!
So if  logon path = is emty as you said, and if I delete 
sambaProfilePath in ldap then a new user get default and local profile 
on the machine. If  the user was logged in before on the machine, 
windows still using serverbased profiles, but this is a  great help for 
me. Thank you very much.

Sabine
--
Sabine Zarabian
Universität Bielefeld
Fakultät für Biologie
0521 - 106 5567

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile problems

[Craig White]

On Tue, 2005-02-01 at 09:00 +0100, SABINE ZARABIAN wrote:
> Paul Gienger wrote:
> 
> >
> >> I tried to change logon path in smb.conf in an emty string, but no 
> >> changes, if I delete this entry in smb.conf, samba use a default 
> >> value and this is
> >
> >
> > Make sure you also don't have a profile share if you're using 
> > something like \server\profiles\%U, which is the default.  Setting a 
> > blank string should also work here.  Remember that your clients will 
> > probably remember what the profile path was for an account, so be sure 
> > to try with a fresh user.  Check the output of
> > pdbedit -v 
> > to be sure the server won't be giving out a (valid) default path.
> >
> >> on the server.
> >> So I tried to change sambaProfilePath in ldap, I tried an emty 
> >> string, I tried to delete this entry but no changes. I still have 
> >> roaming profiles.
> >
> >
> > This one won't work.  An empty string in ldap, as far as I've found, 
> > is a deleted attribute, so it will default to the server setting.
> >
> Hello Paul,
> thanks for your answer.
> I don't have a profile share in my smb.conf. If  I delete the logon path 
> entry in smb.conf and sambaProfilePath in ldap, pdbedit -v still show me 
> a ProfilePath like \\server\login\profile. Is is no problem, changing 
> the roaming profile to local profile manually on every workstation, but 
> as I wrote, we have nearly 300 workstations and this is too much to 
> change it locally.
> 
> Any other idea ?

in global section

logon path =

no empty string, nothing but an end of line

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile problems

[SABINE ZARABIAN]

Paul Gienger wrote:

I tried to change logon path in smb.conf in an emty string, but no 
changes, if I delete this entry in smb.conf, samba use a default 
value and this is

Make sure you also don't have a profile share if you're using 
something like \server\profiles\%U, which is the default.  Setting a 
blank string should also work here.  Remember that your clients will 
probably remember what the profile path was for an account, so be sure 
to try with a fresh user.  Check the output of
pdbedit -v 
to be sure the server won't be giving out a (valid) default path.

on the server.
So I tried to change sambaProfilePath in ldap, I tried an emty 
string, I tried to delete this entry but no changes. I still have 
roaming profiles.

This one won't work.  An empty string in ldap, as far as I've found, 
is a deleted attribute, so it will default to the server setting.

Hello Paul,
thanks for your answer.
I don't have a profile share in my smb.conf. If  I delete the logon path 
entry in smb.conf and sambaProfilePath in ldap, pdbedit -v still show me 
a ProfilePath like \\server\login\profile. Is is no problem, changing 
the roaming profile to local profile manually on every workstation, but 
as I wrote, we have nearly 300 workstations and this is too much to 
change it locally.

Any other idea ?
Sabine
--
Sabine Zarabian

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile problems

[SABINE ZARABIAN]

Richmond Dyes wrote:
SABINE ZARABIAN wrote:
Hi,
we are using samba 3.0.10-17 with openlddap 2.2.6-37.22 as backend.
We use roaming profiles, but because of problems with  different  
operating systems and the profile size, we want to use locale profiles.
I tried to change logon path in smb.conf in an emty string, but no 
changes, if I delete this entry in smb.conf, samba use a default 
value and this is on the server.
So I tried to change sambaProfilePath in ldap, I tried an emty 
string, I tried to delete this entry but no changes. I still have 
roaming profiles.
Is there anyone having a good idea to solve me problem ?

Sabine
Sabine I would first make a local user on the machine instead of the 
server. I would then go to my computer and properties and copy my 
roaming profile that is on the server to the profile of the local 
person you just made. See if that works.

Hi Richmond,
thanks for your answer. It is no problem creating local users, or 
configure local profiles on every computer. But the probleme we have is, 
that we have nearly 300 computer and about 400 users, this is to much to 
make changes on every machine. So I need a server based solution.

Sabine
--
Sabine Zarabian

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile problems

[Paul Gienger]

I tried to change logon path in smb.conf in an emty string, but no 
changes, if I delete this entry in smb.conf, samba use a default value 
and this is
Make sure you also don't have a profile share if you're using something 
like \server\profiles\%U, which is the default.  Setting a blank string 
should also work here.  Remember that your clients will probably 
remember what the profile path was for an account, so be sure to try 
with a fresh user.  Check the output of
pdbedit -v 
to be sure the server won't be giving out a (valid) default path.

on the server.
So I tried to change sambaProfilePath in ldap, I tried an emty string, 
I tried to delete this entry but no changes. I still have roaming 
profiles.
This one won't work.  An empty string in ldap, as far as I've found, is 
a deleted attribute, so it will default to the server setting.

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile problems

[Richmond Dyes]

SABINE ZARABIAN wrote:
Hi,
we are using samba 3.0.10-17 with openlddap 2.2.6-37.22 as backend.
We use roaming profiles, but because of problems with  different  
operating systems and the profile size, we want to use locale profiles.
I tried to change logon path in smb.conf in an emty string, but no 
changes, if I delete this entry in smb.conf, samba use a default value 
and this is on the server.
So I tried to change sambaProfilePath in ldap, I tried an emty string, 
I tried to delete this entry but no changes. I still have roaming 
profiles.
Is there anyone having a good idea to solve me problem ?

Sabine
Sabine I would first make a local user on the machine instead of the 
server. I would then go to my computer and properties and copy my 
roaming profile that is on the server to the profile of the local person 
you just made. See if that works.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile problems

[SABINE ZARABIAN]

Hi,
we are using samba 3.0.10-17 with openlddap 2.2.6-37.22 as backend.
We use roaming profiles, but because of problems with  different  
operating systems and the profile size, we want to use locale profiles.
I tried to change logon path in smb.conf in an emty string, but no 
changes, if I delete this entry in smb.conf, samba use a default value 
and this is on the server.
So I tried to change sambaProfilePath in ldap, I tried an emty string, I 
tried to delete this entry but no changes. I still have roaming profiles.
Is there anyone having a good idea to solve me problem ?

Sabine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Roaming Profile and Openswan

[Jason C. Waters]

I've got a test network that I'm debugging Samba-3.04/OpenLDAP and 
Openswan 2.05.  The test network has 6 machines total:

(lp1)Windows 2000 Machine(192.168.0.10)
|
|
(pdc)Samba 3.04 PDC, slackware 10(192.168.0.5)
|
|
Openswan 2.05 VPN, slackware 10(192.168.0.1)
|
|
Internet
|
|
Openswan 2.05 VPN, slackware 10(192.168.1.1)
|
|
(bdc)Samba 3.04 BDC, slackware 10(192.168.1.5)
|
|
(test-1)Windows 2000 Machine(192.168.1.10)
I've got ldap/slurp working great.  My problem is this.  If I have a 
user jdoe, that normally logs on at the 192.168.0.0 side of the network 
I want his profile to be stored on \\pdc\profile.  Which it does!  But 
when I logon as jdoe from the 192.168.1.0 side of the network, I logon 
with no errors, but it doesn't pull down my profile.  I got it to work 
once when I messed with the mtu of the ipsec0 devices on the vpn's.  Is 
this a openswan or samba issue?  I can't seem to track it down.  Has 
anyone every done this before?  Thanks for your help

Jason
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile & Folder Redirection Problems

[Rich Edelman]

Sorry about the top post...

John and list... 

I have figured out what my problem was with Chaper 6 of Samba 3 By Example. 
Table 6.3 (page 167 of the print copy) has some incorrect values. That table 
says to set the Cache directory key, for example, to: 
\\%LOGONSERVER%\profdata\%USERNAME%\InternetFiles

That is incorrect! The leading "\\" characters cause the profile path to be 
unreachable, as I believe the path would then expand to:
SMB-PDC\profdata\testuser\InternetFiles. Removing the two leading \ 
characters fixed all my problems on both Windows 2000 and XP. 

Both the print versions and the web versions of Samba 3 By Example have this 
typo in multiple places in section 6.6.1. (Step 3 under "Redirect Folders In 
Default User Profile" has it as an example of a network redirection that 
contains a macro, as well as the aforementioned Table 6.3 errors.)

The web version of TOSHARG, Chapter 23, does not contain this error and is 
what led me to figuring out what I was going incorrectly.

Rich Edelman

On Sunday 10 October 2004 09:43 pm, John H Terpstra wrote:
> Rich,
>
> I have seen a number of reports of problems with the procedure I outlined
> in the book. Rest assured that this was well tested prior to publication.
> Additionally, there are some large sites in Europe that use roaming
> profiles in precisely this fashion.
>
> That leaves us with the problem of the need to identify what you have done
> that is different, or to identify what is different in your client Windows
> configuration.
>
> I regret that at this time I do not have time to assist you further,
> however I am keen to hear of any progress you make in solving the issue and
> would much appreciate any comments that can be added to the chapter to help
> others to avoid your pain.
>
> Cheers,
> John T.
>
> On Sunday 10 October 2004 13:19, Rich Edelman wrote:
> > I'm running Samba 3.0.7 on SuSE 9.1 with OpenLDAP for auth.
> >
> > I've been mostly following along Terpstra's Book "Samba 3 By Example", as
> > lots of other people here have been.
> >
> > The three big problems I'm having are:
> > 1) After a Windows XP user logs out for the first time, upon next login
> > they get an error message saying "Windows cannot log you in because your
> > profile cannot be loaded." Deleting the NTUSER.DAT file for that user
> > allows that user to log in again.
> >
> > 2) It doesn't appear like the default user profile (located
> > in /var/lib/samba/netlogon/Default User/) is getting used for anything,
> > as when I log in for the first time and view the registry any changes
> > that I made for the default user are not there!
> >
> > 3) This one will probably be solved by #2 above, but whenever a user logs
> > out, there is that stupid 'synchronizing' window, even though all profile
> > folders have been redirected to a network drive. Why?
> >
> > Any help or suggestions on these would be greatly appreciated!
> >
> > Thanks,
> >
> > Rich Edelman
>
> --
> John H Terpstra
> Samba-Team Member
> Phone: +1 (650) 580-8668
>
> Author:
> The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
> Samba-3 by Example, ISBN: 0131472216
> Hardening Linux, ISBN: 0072254971
> OpenLDAP by Example, ISBN: 0131488732
> Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profile & Folder Redirection Problems

[Rich Edelman]

Replies inline :)

On Monday 11 October 2004 11:56 am, Richard Michael wrote:
> Hi Rich,
>
> I have also built my XP clients w/ RP+FolderRedir.
>
> I haven't seen all the problems you've described, but am having my own
> share of difficulties.  I'd be interested if you encounter them, see my
> earlier post (a few days back) if you're curious.
>
> > 1) After a Windows XP user logs out for the first time, upon next
> > login they get an error message saying "Windows cannot log you in
> > because your profile cannot be loaded." Deleting the NTUSER.DAT file
> > for that user allows that user to log in again.
>
> I haven't seen this, but have read notes about the accumulation of .tmp
> in the profile (Windows creates them) files possibly causing this
> problem.  Are you seeing .tmp files if you look at the profile, during
> or after logoff (but prior to the next logon)?

There is no accumulation of .tmp files in the profile at all. I do think the 
profile is getting corrupted, though. After configuring the logging you 
mentioned below, I noticed that upon second login, Windows tries to merge the 
mandatory profile it copied over from the default profile with a user 
profile, which for some reason fails, and does not allow me to log on. Are 
there supposed to be both ntuser.dat and ntuser.man files in a profile? I'm 
really not much of a windows guy, heh.

> > 2) It doesn't appear like the default user profile (located in
> > /var/lib/samba/netlogon/Default User/) is getting used for anything,
> > as when I log in for the first time and view the registry any changes
> > that I made for the default user are not there!
>
> What profile is used for the new user?  For example, is XP copying the
> C:\Documents and Settings\Default User profile?  Perhaps it's not
> finding your [netlogon] share?  You've verified all permissions on the
> Unix side and in the smb.conf file?  Can you see the profile being
> copied if you sniff smb or read the logs?

Okay, it is copying the profile from the [netlogon] share. I was confused 
because apparently Windows changes the registry keys after you are logged in 
back to '%USERPROFILE%/blah' instead of keeping 
'%LOGONSERVER%/profiles/%USERNAME%/blah' like I have in the default profile.

> Also, you can turn on quite a bit of logging in XP by setting this reg
> key:
> HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
>   = [REG_DWORD] UserEnvDebugLevel = 0x30002
>
> The log file is in C:\Windows\Debug\UserMode .. (if memory serves..)

Wow, lots of logs!

> I can compare perms and settings with you if it helps, my [netlogon]
> profile is used properly.
>
> Also, are you doing anything with Group Policy items on the XP side that
> would altered your expected Default User environment?  (The logging
> above will show you this..)

The only group policy I have set is I have disabled offline files entirely, I 
have altered the exclusion lists to include redirected folders, and I have 
turned off the ownership check for the profile. All (with the exception of 
the offline files) are as outlined in Chapter 6 of Samba-3 By Example.
FWIW, I have also experimented with keeping offline files enabled and turning 
off the 'synchronize files before logon' and 'synchronize files after logout' 
options. That last option did away with the synchronization window I was 
getting.  I wonder if this has anything to do with the fact that I am not 
redirecting all the folders in the profile.

> Evidently, XP wants client side caching on the profile location
> disabled (I saw complaints in the Event Log).  Perhaps this is causing
> problems?  To do so, add to the [profiles] section of smb.conf:
>
>   csc policy = disabled
>
> I don't think Terpstra's book mentions this but it's in the smb.conf man
> page.

I added the 'csc policy = disabled' line to the [profiles] section of my 
smb.conf file, but the event viewer still has complaints from WinXP about the 
profiles share being configured for automatic caching.

> > 3) This one will probably be solved by #2 above, but whenever a user
> > logs out, there is that stupid 'synchronizing' window, even though all
> > profile folders have been redirected to a network drive. Why?
>
> Isn't this Offline Files on the XP side?  I have disabled this at the
> system level, because I didn't want user's dealing with any sync
> problems.  Have you disabled Offline File Caching for at least the
> folders you have redirected?  Try disabling it altogether; set this GP:
>
>   Computer configuration
> Admin templates
>   Network
> Offline files
>   Allow or disallow use of offline files = Disabled
As I said above, I have experimented with that setting, as well as some 
others. I did forget to mention that I also enabled this GP:
   User configuration
  Admin Templates
 Network
Offline Files
   Do not automatically make redirected folders available offline.

That's the only way I could figure out to dis

Re: [Samba] Roaming Profile & Folder Redirection Problems

[Richard Michael]

Hi Rich,

I have also built my XP clients w/ RP+FolderRedir.

I haven't seen all the problems you've described, but am having my own
share of difficulties.  I'd be interested if you encounter them, see my
earlier post (a few days back) if you're curious.

> 1) After a Windows XP user logs out for the first time, upon next
> login they get an error message saying "Windows cannot log you in
> because your profile cannot be loaded." Deleting the NTUSER.DAT file
> for that user allows that user to log in again.

I haven't seen this, but have read notes about the accumulation of .tmp
in the profile (Windows creates them) files possibly causing this
problem.  Are you seeing .tmp files if you look at the profile, during
or after logoff (but prior to the next logon)?

> 2) It doesn't appear like the default user profile (located in
> /var/lib/samba/netlogon/Default User/) is getting used for anything,
> as when I log in for the first time and view the registry any changes
> that I made for the default user are not there!

What profile is used for the new user?  For example, is XP copying the
C:\Documents and Settings\Default User profile?  Perhaps it's not
finding your [netlogon] share?  You've verified all permissions on the
Unix side and in the smb.conf file?  Can you see the profile being
copied if you sniff smb or read the logs?

Also, you can turn on quite a bit of logging in XP by setting this reg
key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
  = [REG_DWORD] UserEnvDebugLevel = 0x30002

The log file is in C:\Windows\Debug\UserMode .. (if memory serves..)

I can compare perms and settings with you if it helps, my [netlogon]
profile is used properly.

Also, are you doing anything with Group Policy items on the XP side that
would altered your expected Default User environment?  (The logging
above will show you this..)

Evidently, XP wants client side caching on the profile location
disabled (I saw complaints in the Event Log).  Perhaps this is causing
problems?  To do so, add to the [profiles] section of smb.conf:

  csc policy = disabled

I don't think Terpstra's book mentions this but it's in the smb.conf man
page.

> 3) This one will probably be solved by #2 above, but whenever a user
> logs out, there is that stupid 'synchronizing' window, even though all
> profile folders have been redirected to a network drive. Why?

Isn't this Offline Files on the XP side?  I have disabled this at the
system level, because I didn't want user's dealing with any sync
problems.  Have you disabled Offline File Caching for at least the
folders you have redirected?  Try disabling it altogether; set this GP:

  Computer configuration
Admin templates
  Network
Offline files
  Allow or disallow use of offline files = Disabled


Let me know if any of this helps.  We compare configs more closely if it
will help.

Cheers,
Richard
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba