[Bug 1064] samba configuration needs to be corrected for domain logons

[bugzilla-skolelinux@maintainer.skolelinux.no]

http://bugs.skolelinux.no/show_bug.cgi?id=1064





------- Additional Comments From ronny@skolelinux.org  2007-10-30 21:09 -------
I'm not too fond of too many changes in the samba config. Reasons are manyt,
i'll try to explain some.

In order not to encourage the use of a operating system without security updates
for a long time (like win98) we should realy keep support to the new (NT and
later) way of dealing with profiles only. Most of this bug is about win9x.

 - profile dir includes desktop and myfiles which are synced at logon
This is the windows default, and many sites may very well wish this to be the
behaviour, especialy for desktop. I do not have statistics showing how many of
the sites would want this feature or not. My point beeing: If we change the
default behaviour, a different group of admins must implement changes to get
their desiered behavior. And this group would have a harder time implementing
common changes from online documentation and howto's since the starting point of
samba's configuration would divert a lot more from the samba default.


 - profile directory should be put to its own share (especially if
   you are interested in one centralised mandatory profile).
This is also very site spesific, unix users get their own homedir, with their
own configuration for various software, why should samba users be different ?
Personaly i want the profile dir within the homedir, to keep user files in one
location and ease quota management. I find it better to stick with samba's
default then to invent our own default, that admins anyway must tweak into their
desired configuration. 

Most importantly. Keep the number of changes as low as possible between default
and our own. 

the only change i dont mind is changing  profile into  .profile, But I do not
see the big advantage, (security by obscurity = no security)

I suggest closing as WONTFIX 

Ronny Aasen



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.