HowTo: Ubuntu 10.04 Samba Primary Domain Controller with LDAP

[bulletxt]

Sorry, I have decided to rewrite this manual as it was incomplete in some areas, including roaming profiles and so on. It also had some errors.

I will update it soon.

[ricpelo]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

[bulletxt]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

Hi, I'm sorry but I'm not sure how to enable roaming profiles, and I really don't have the time now to test it. Taking a wild guess, I'm quite sure you'll have to modify smb.conf at "logon home" and "logon path". Something similar must be done in /etc/smbldap/smbldap.conf

If you find how to do it, please share it and I'll put it in main thread!

[ricpelo]

Hi, I'm sorry but I'm not sure how to enable roaming profiles, and I really don't have the time now to test it. Taking a wild guess, I'm quite sure you'll have to modify smb.conf at "logon home" and "logon path". Something similar must be done in /etc/smbldap/smbldap.conf

If you find how to do it, please share it and I'll put it in main thread!

Hi. Thank you very much for the answer. I'm trying to enable the roaming profiles, but without luck. The WinXP client refuses to load the profile during the logon and displays an error message like "Windows cannot locate the server copy of your roaming profile...". I've tried with:

logon drive = H:
logon home = \\%N\%U
logon path = \\%N\%U\profile
logon script = logon.cmd

as well as:

[Profiles]
comment = Roaming Profile Share
# would probably change this to elsewhere in a production system ..
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
browsable = No

I can't see where's the point. Any clues?

Cheers,

Ricardo.

[bulletxt]

Try this, put it inside [netlogon] :

logon path = \\$netbios\profiles\%U

Replace $netbios with your netbios= set in smb.conf

[SonicSteve]

Is there a way that you know of to integrate a samba domain controller into a network running Active Directory? I've been wanting to do this for some time. I understand that Samba 4 might help with this but in the mean time I've been looking.

I have a network with 4 AD servers running Win2k3 server, and 140 workstations. Instead of adding yet another AD server I've been wanting to add a linux box with a share that the windows boxes will be able to access.

[bulletxt]

Give a look at this: https://help.ubuntu.com/10.04/server...tegration.html

[SonicSteve]

I'll give that a try. I don't see where the ubuntu box is getting it's AD information from but hopefully I can try soon.

Thanks.

[ricpelo]

Try this, put it inside [netlogon] :

logon path = \\$netbios\profiles\%U

Replace $netbios with your netbios= set in smb.conf

Thanks, but it doesn't work, sorry . I've got the same error message in my WinXP client.

This is an excerpt of what I have inside my smb.conf:

[netlogon]
    comment = Network Logon Service
    path= /var/lib/samba/netlogon
    admin users = root
    guest ok = Yes
    browseable = No
    logon drive = H:
    logon script = logon.cmd
    logon home = \\%N\%U
    logon path = \\%N\profiles\%U

[profiles]
    comment = Roaming Profile Share
    path = /var/lib/samba/profiles
    read only = No
    profile acls = Yes
    browsable = No

Both /var/lib/samba/netlogon and /var/lib/samba/profiles exist and have a chmod 777. May I miss something?

[pcmb8866]

Try this
In Global section
logon script = logon.cmd
logon path = \\%L\profiles\%U\%m
logon drive = H:
logon home = \\%L\%U\.win_profile\%m (for old windows version, 98)

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = @"Domain Admins"
guest ok = Yes

[profiles]
comment = Profile Share
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
browseable = No

This works for me!