HowTo: Ubuntu 10.04 Samba Primary Domain Controller with LDAP

[bulletxt]

Sorry, I have decided to rewrite this manual as it was incomplete in some areas, including roaming profiles and so on. It also had some errors.

I will update it soon.

[ricpelo]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

[bulletxt]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

Hi, I'm sorry but I'm not sure how to enable roaming profiles, and I really don't have the time now to test it. Taking a wild guess, I'm quite sure you'll have to modify smb.conf at "logon home" and "logon path". Something similar must be done in /etc/smbldap/smbldap.conf

If you find how to do it, please share it and I'll put it in main thread!

[ricpelo]

Hi, I'm sorry but I'm not sure how to enable roaming profiles, and I really don't have the time now to test it. Taking a wild guess, I'm quite sure you'll have to modify smb.conf at "logon home" and "logon path". Something similar must be done in /etc/smbldap/smbldap.conf

If you find how to do it, please share it and I'll put it in main thread!

Hi. Thank you very much for the answer. I'm trying to enable the roaming profiles, but without luck. The WinXP client refuses to load the profile during the logon and displays an error message like "Windows cannot locate the server copy of your roaming profile...". I've tried with:

logon drive = H:
logon home = \\%N\%U
logon path = \\%N\%U\profile
logon script = logon.cmd

as well as:

[Profiles]
comment = Roaming Profile Share
# would probably change this to elsewhere in a production system ..
path = /var/lib/samba/profiles
read only = No
profile acls = Yes
browsable = No

I can't see where's the point. Any clues?

Cheers,

Ricardo.

[bulletxt]

Try this, put it inside [netlogon] :

logon path = \\$netbios\profiles\%U

Replace $netbios with your netbios= set in smb.conf

[SonicSteve]

Is there a way that you know of to integrate a samba domain controller into a network running Active Directory? I've been wanting to do this for some time. I understand that Samba 4 might help with this but in the mean time I've been looking.

I have a network with 4 AD servers running Win2k3 server, and 140 workstations. Instead of adding yet another AD server I've been wanting to add a linux box with a share that the windows boxes will be able to access.

[ricpelo]

Try this, put it inside [netlogon] :

logon path = \\$netbios\profiles\%U

Replace $netbios with your netbios= set in smb.conf

Thanks, but it doesn't work, sorry . I've got the same error message in my WinXP client.

This is an excerpt of what I have inside my smb.conf:

[netlogon]
    comment = Network Logon Service
    path= /var/lib/samba/netlogon
    admin users = root
    guest ok = Yes
    browseable = No
    logon drive = H:
    logon script = logon.cmd
    logon home = \\%N\%U
    logon path = \\%N\profiles\%U

[profiles]
    comment = Roaming Profile Share
    path = /var/lib/samba/profiles
    read only = No
    profile acls = Yes
    browsable = No

Both /var/lib/samba/netlogon and /var/lib/samba/profiles exist and have a chmod 777. May I miss something?

[AlexPE]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

Hi Riccpelo,
I'm having heck trying to get this to work.. I get user not found or bad password errors joining xp pcs to the domain.. any suggestions?

[onurbiccud]

Hi, bulletxt! Excellent post. All works flawless, like a charm .

Only one question: Is there a way to have roaming profiles enabled with this config? I have a classroom of 30 client PCs and I would like to have that option available, so the students can sit on any PC and get all their docs and configuration available.

Thanks very much in advance.

4 thinks thah work for me

1) domain mame not longer than 15 char
2) S09slapd on /etc/rc2.d
3)chmod 1777 /var/lib/samba/profiles
4)
logon drive = H:
logon home = \\%L\%U\.profiles
logon path = \\%L\Profiles\%U

[gade.chaitanya@gmail.com]

Hi spliner and to other members who are contributing here..

I am following this step by step how to and up to step no 6 it worked perfectly, but after executing the command in step no 7 I got some errors..
I am quoting them
"SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn =auth
SASL SSF: 0
adding new entry "cn=module,cn=config"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: <olcModuleLoad> handler exited with 1"

I dig a lot in the google but I am unable to find a solution, can anyone help me with proper solution for it?