| W. Chris Shank on 18 Dec 2007 18:48:35 -0800 |
|
set the profile with pdbedit pdbedit -Lv username to see the users domain settings ----- Original Message ----- From: Richard Friendlich <rfriend@yahoo.com> To: plug@lists.phillylinux.org Sent: Tuesday, December 18, 2007 4:26:09 PM GMT-0500 Subject: [PLUG] SAMBA- Server-side profiles? Hello, I am brand new new to the group but I did check the archives prior to posting this question. (So I apologize if this conversation has already been covered.) I have been trying to use a Linux server (Ubuntu 7.10) with Samba 3 to implement server-side profiles on my lab network. . Though I have had success with the NAT and DHCP, I have been confounded by windows domain services. Does anyone in the community know of any references that specifically instruct how to setup a local win network (via a Linux box of course) with some or all of the following requirements: - Linux server - individual user profiles -- roaming profiles -- login scripts - shared network drive (read-only if user is not authenticated) - network printer (no user authentication required) My current (and sloppy) smb.conf (.master) file is attached below. I can supply my other scripts upon request This is more of a hobby project (no money) but our lab could really use it working. I have referenced Samba3-ByExample and Samba3-HowTo but the tutorials either think really small or really big and don't quite hit my target. I'd say I'm above nube status (but only barely due to lack of practice). Thanks for any help you may have to offer! Rich -- Temple Neural Instrumentation Lab 1947 North 12th Street Philadelphia, PA 19122 [global] workgroup = NIL netbios name = SOUTH interfaces = eth1, lo bind interfaces > passdb backend = tdbsam pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = ∗New∗Password∗ %n\n ∗Re−enter ∗new∗ password∗%n\n ∗Password∗changed∗ username map = /etc/samba/smbusers unix password sync = Yes log level = 1 syslog = 0 log file = /var/log/samba/%m max logsize = 50 smb ports = 139 name resolve order = wins bcast hosts time server = Yes printcap name = CUPS show add printer wizard = No add user script = /usr/sbin/useradd −m ’%u’ delete user script = /usr/sbin/userdel −r ’%u’ add group script = /usr/sbin/groupadd ’%g' delete group script = /usr/sbin/groupdel ’%g’ add user to group script = /usr/sbin/usermod −G ’%g’ ’%u’ #add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u #add machine script = /usr/sbin/useradd -s /bin/false %u -c Machine -d /dev/null -g machines add machine script = /usr/sbin/useradd −s /bin/false −d /tmp ’%u’ shutdown script = /var/lib/samba/scripts/shutdown.sh abort shutdown script = /sbin/shutdown −c logon script = scripts\logon.batdhcp3/dhcpd.conf logon path = \\%L\profiles\%U logon drive = H: logon home = \\%L\home\%U domain logons = Yes preferred master = Yes wins support = Yes utmp = Yes map acl inherit = Yes printing = cups cups options = Raw veto files = /∗.eml/∗.nws/∗.{∗}/ veto oplock files = /∗.doc/∗.xls/∗.mdb/ # winbind use default domain = Yes enable privileges = yes [homes] comment = Home Directories valid users = %S read > browseable = No [shared] comment = Obeid Lab shared resources writeable = yes #valid users = @users,@admin UNCOMMENT path = /media/disk/shared force group = users #force user = nobody guest #guest ok = Yes # COMMENT #admin users = south #read > #valid users = %G [printers] comment = Lab Printer Spool path = /var/spool/samba #printer admin = root,south #create mask = 0600 guest ok = Yes printable = Yes use client driver = Yes browseable = No default devmode = Yes [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = Yes locking = No [profiles] comment = Profile Share path = /var/lib/samba/profiles read > profile acls = Yes ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug -- W. Chris Shank ACE Technology Group, LLC www.myremoteITdept.com (610) 640-4223 -------------------------------- Security Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled. ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|