[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[Bug 1064] New: samba configuration needs to be corrected for domain logons



http://bugs.skolelinux.no/show_bug.cgi?id=1064

           Summary: samba configuration needs to be corrected for domain
                    logons
           Product: Skolelinux
           Version: sarge-rc1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: debian-edu-config
        AssignedTo: debian-edu@lists.debian.org
        ReportedBy: juergen@leibner-net.de


When NT-machines log on the domain, they need another place for storing their 
profile data as win9x-machines when using roaming profiles or doing domain 
logons.
So you need to have a separated share for NT-machines, named [profiles].
Also it isn't a good idea, I think, to mix up old Win9x and newer NT profiles 
in the same place.
Another reason is, that the folder profiles should NOT be seen by win9x and 
linux machines (add a dot in front of it). 

All of the above is discussed in: 
<http://us4.samba.org/samba/docs/using_samba/ch04.html>
under "Samba as the Primary Domain Controller".
Please have a look at it to get a better impression of what I try to say here.

Suggestion of /etc/samba/smb.conf:

# Network logon

   logon home = \\tjener\%U\.profiles
   logon drive = h:
   logon script = login.bat

;   invalid users = root

#======================= Share Definitions =======================

[homes]
        comment = Homefolders of Win9x/NT/w2k/XP/Linux
        writable = yes
        browseable = no
        invalid users = root
        create mask = 0664
        directory mask = 0775

[netlogon]
        path = /etc/samba/netlogon
        writable = no
        browseable = no
        guest ok = yes
        comment = Network Logon Service
        share modes = no
        invalid users = root

[profiles]
        comment = Profilefolder of NT/w2k/XP
        path = /skole/tjener/profile
        writable = yes
        browseable = yes
        invalid users = root
        create mask = 0664
        directory mask = 0775



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



Reply to: