[Samba] clustered samba registers all non CTDB addresses at WINS server

2011-04-12 Thread erik bergsma
Hi all,

in the first step to separate my wins/netbios/nmbd and my clustered samba
servers i've installed the WINS feature on a windows 2k8r2 server, and set
the "wins server = ip.adress.of.windows.server"

the weird thing is: my samba 3.5.8 do not only register the public CTDB ip
addresses specified by "cluster addresses =", but also the static
maintenance ip's + the internal ip address of each node (direct link between
the nodes, not reachable from outside)

is this behaviour normal? and is this behaviour safe? or am i missing
something in my smb.conf?
i can imagine that if a netbios request comes in for my domain name, and the
returned address is 10.0.0.1 something goes wrong

Regards,
Erik
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Clustered Samba: Every 24 hours "There are Currently No Logon Servers Available"

2011-04-12 Thread erik bergsma
Hi Daniel,

again thanks for your input! and a great looking tutorial!
although i have a couple of questions:

- you said to set these options in smb.conf:  bind interfaces only = yes
&& interfaces = 192.168.9.1

in this PDF document (Clustering Samba With CTDB A Tutorial At sambaXP 2009)
http://www.samba.org/~obnox/presentations/sambaXP-2009/sambaxp-2009-tutorial-samba-ctdb-slides-paper.pdf
it says: " if CTDB MANAGES SAMBA, do not set interfaces or bind interfaces
only" (page 10)

is it safe to ignore these recommendations? and wouldn't that mess up the
whole setup in a CTDB ip takeover?

same thing goes for the "socket address =" option "Setting this option
should never be necessary on usual Samba servers running only one nmbd. By
default Samba will accept connections on any address"
http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html#SOCKETADDRESS

- your tutorial is for 1 server in a cluster; i think i should implement the
same steps on the other servers, and then setup the push and pull
replication between the nodes, right?
and should every server use its local samba4wins daemon for wins? or should
all the other servers point to samba4wins on the first server?

Erik

2011/4/11 Daniel Müller 

> For your wins server you can use samba4wins. It is great. For your
> linux-box you have to compile it.
>
> samba4wins can replicate to another samba4wins. I use it in my samba
> pdc/bdc setup so both server have their own wins pus and pull partner.
> Samba4wins can be installed on the same server as your ctdb/samba3
>
> For nmbd to run without problems:
>
> Look here: http://ftp.sernet.com/pub/samba4WINS/samba4wins-1.0.8-HOWTO.txt
>
>
>
> Usually the following sockets are used to listen on:
>
> smbd:
> 0.0.0.0:139 tcp
> 0.0.0.0:445 tcp
>
> nmbd:
> 192.168.9.1:137 udp
> 0.0.0.0:137 udp
> 192.168.9.1:138 udp
> 0.0.0.0:138 udp
>
> In this case all incoming packets would go through the 0.0.0.0:* sockets.
> If you would start smbd4wins, it wouldn't be possible to listen on port 137
> as nmdd already listens there with the wildcard ip.
>
> So what you need is to make nmbd not using the wildcard address,
> and we need a seperate unicast address for smbd4wins.
>
> This will add the 192.168.9.2 as 2nd address to the eth0 interface:
> ifconfig eth0:2 192.168.9.2 netmask 255.255.255 broadcast 192.168.9.255
>
> To make nmbd not using the wildcard address, you need this:
> so what you need is the following in your smb.conf (for samba3!)
> <-- /etc/samba/smb.conf --->
> [globals]
> ...
> netbios name = SERVER1
> ...
> # only use the given interfaces
> bind interfaces only = yes
> # this is the unicast address
> interfaces = 192.168.9.1
> # this is the broadcast address
> socket address = 192.168.9.255
>
> # as we want to use samba4wins as wins server
> # set the address here
> wins server = 192.168.9.2
> ...
> <-->
>
> smbd4wins should only act as wins server and should in this case only
> handle unicast
> requests, as it's imposible to have 2 unix process listening on the same
> broadcast address
> and the same port (192.168.9.255 port 127 in this case).
> Also it should use a different netbios name!
>
> <-- /etc/samba4wins/samba4wins.conf --->
> [globals]
> ...
> # it's important that this netbios name is different from
> # the one that's used for samba3!
> netbios name = SERVER1-WINS
> ...
> # only use the given interfaces
> bind interfaces only = yes
> # this is the unicast address
> interfaces = 192.168.9.2
> # samba4wins is only a wins server,
> # and broadcasts are handled by samba3
> # so disable listening on the broadcast address
> nbtd:disable_broadcast = yes
>
> # as we want to ourself as wins server
> # and don't listen on 127.0.0.1
> # we need to explicit set the wins server here
> wins server = 192.168.9.2
> ...
> <-->
>
> After these changes, the use of listening sockets should be like this:
>
> smbd:
> 192.168.9.1:139 tcp
> 192.168.9.1:445 tcp
>
> nmbd:
> 192.168.9.1:137 udp
> 192.168.9.255:137 udp
> 192.168.9.1:138 udp
> 192.168.9.255:138 udp
>
> smbd4wins:
> 192.168.9.2:42 tcp
> 192.168.9.2:137 udp
>
>
>
>
>
>
>
>
>
> On Mon, 11 Apr 2011 16:52:37 +0200, erik bergsma 
> wrote:
>
> Daniel,
> thanks for your input! so i have to set this option "wins server =
> some.external.wins.ip" on both nodes then, correct? (and the next step is
> then to make the win server redundant aswell)
>
> and do i also have make sure the nmbd processes will no

Re: [Samba] Clustered Samba: Every 24 hours "There are Currently No Logon Servers Available"

2011-04-11 Thread erik bergsma
Daniel,

thanks for your input! so i have to set this option "wins server =
some.external.wins.ip" on both nodes then, correct? (and the next step is
then to make the win server redundant aswell)

and do i also have make sure the nmbd processes will not start anymore (that
is configurable in /etc/conf.d/samba on gentoo) or do these processes take
care of the name registration etc. ?

Erik

2011/4/8 Daniel Müller 

> Hi,
> in your ctdb-cluster you use the same netbios-name for both nodes!?
> As far as I know  wins, nmbd should not be active on both nodes. You should
> use an external wins.
>
>
>
> ---
> EDV Daniel Müller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 Tübingen
>
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: muel...@tropenklinik.de
> Internet: www.tropenklinik.de
> ---
>
> -Ursprüngliche Nachricht-
> Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
> Im
> Auftrag von erik bergsma
> Gesendet: Freitag, 8. April 2011 12:21
> An: samba@lists.samba.org
> Betreff: [Samba] Clustered Samba: Every 24 hours "There are Currently No
> Logon Servers Available"
>
> All,
>
> i have this very weird and annoying problem in my clustered setup: every
> ~24
> hours the vista clients cant login, or even unlock there screens anymore.
> The error they receive is "currently no logon services available"
> this is very odd, because i have 2 samba 3.5.8 servers available, running
> and configured to handle login requests.
>
> in the mean time the people that are logged in already can use shares etc,
> same for mac users. So my guess its a wins/nmbd/netbios issue; not being to
> resolve my domain name into an ip address
>
> it is a clustered (CTDB) setup with 2 nodes, based on gentoo, samba 3.5.8,
> ldap and glusterfs
> the setup is like this:
> 192.168.100.81 static maintenance ip of node0
> 192.168.100.82 static ip of node1
> 192.168.100.83 floating/ctdb ip of node1
> 192.168.100.84 floating/ctdb ip of node0
>
> node0 has domain master = no, preferred master = no, wins server =
> 192.168.100.82
> node1 had domain master = auto, preferred master = yes, wins support = yes
>
> in the 192.168.100 subnet there are
> - some other non samba gentoo machines
> - a windows 2k3 server for printing, no wins support installed, smbclient
> reports this is the master of another domain (used to have a gentoo & samba
> 3.0 master, but that is switched off now)
> - a windows 2k8 server used for pxe (is domain master of an AD domain, used
> only for the PXE setup, not using any recources of the other 2 domain, no
> wins support installed, no clients)
>
> in the 192.168.9.* to 192.168.14.* subnets there are ~60 windows vista/
> windows 7 clients all statically configured to use 192.168.100.83 and
> 192.168.100.84 as WINS server
>
> what i do to resolve this issue is:
> - turn of ctdb & samba on node0
> - reboot node0 (because samba deadlocks, other discussion)
> - start ctdb & samba on node0
>  - turn of ctdb & samba on node1
> - reboot node1 (because samba deadlocks, other discussion)
> - start ctdb & samba on node1
>
> only then the issue is resolved, and the clients can login again;
> just powering down node0 does not work, even in you restart nmbd on node1
> and the log file says its a master browser and domain master of all the
> ip's
> associated
>
> i hate doing the reboot thing again and again, because it screws up the
> Glusterfs replication, and is just dirty.
>
> in the past week i had this setting: node0: domain master = auto, preferred
> master = auto, i then saw sometimes that node1 and node0 arguing over who
> is
> the master of one of the 4 ip, otherwise the loglevel 1 files stay pretty
> clean. Ive now blocked all ingoing and outgoing traffic to and from ports
> 137,138,139 to the 2 windows machines, just to be safe (and also i have
> become a little desperate :( )
>
> the other thing that is weird that node0 starts 1 nmbd process, and node1
> starts 2 of them... but this may be by design.
>
> i have a hunch that i have some rogue wins server somewhere that likes to
> tell that he is the domain master of my domain, does this make sense? can i
> debug this?
> or does somebody have another suggestion how to resolve this issue?
>
> thanks in advance!
> Erik
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Clustered Samba: Every 24 hours "There are Currently No Logon Servers Available"

2011-04-08 Thread erik bergsma
All,

i have this very weird and annoying problem in my clustered setup: every ~24
hours the vista clients cant login, or even unlock there screens anymore.
The error they receive is "currently no logon services available"
this is very odd, because i have 2 samba 3.5.8 servers available, running
and configured to handle login requests.

in the mean time the people that are logged in already can use shares etc,
same for mac users. So my guess its a wins/nmbd/netbios issue; not being to
resolve my domain name into an ip address

it is a clustered (CTDB) setup with 2 nodes, based on gentoo, samba 3.5.8,
ldap and glusterfs
the setup is like this:
192.168.100.81 static maintenance ip of node0
192.168.100.82 static ip of node1
192.168.100.83 floating/ctdb ip of node1
192.168.100.84 floating/ctdb ip of node0

node0 has domain master = no, preferred master = no, wins server =
192.168.100.82
node1 had domain master = auto, preferred master = yes, wins support = yes

in the 192.168.100 subnet there are
- some other non samba gentoo machines
- a windows 2k3 server for printing, no wins support installed, smbclient
reports this is the master of another domain (used to have a gentoo & samba
3.0 master, but that is switched off now)
- a windows 2k8 server used for pxe (is domain master of an AD domain, used
only for the PXE setup, not using any recources of the other 2 domain, no
wins support installed, no clients)

in the 192.168.9.* to 192.168.14.* subnets there are ~60 windows vista/
windows 7 clients all statically configured to use 192.168.100.83 and
192.168.100.84 as WINS server

what i do to resolve this issue is:
- turn of ctdb & samba on node0
- reboot node0 (because samba deadlocks, other discussion)
- start ctdb & samba on node0
 - turn of ctdb & samba on node1
- reboot node1 (because samba deadlocks, other discussion)
- start ctdb & samba on node1

only then the issue is resolved, and the clients can login again;
just powering down node0 does not work, even in you restart nmbd on node1
and the log file says its a master browser and domain master of all the ip's
associated

i hate doing the reboot thing again and again, because it screws up the
Glusterfs replication, and is just dirty.

in the past week i had this setting: node0: domain master = auto, preferred
master = auto, i then saw sometimes that node1 and node0 arguing over who is
the master of one of the 4 ip, otherwise the loglevel 1 files stay pretty
clean. Ive now blocked all ingoing and outgoing traffic to and from ports
137,138,139 to the 2 windows machines, just to be safe (and also i have
become a little desperate :( )

the other thing that is weird that node0 starts 1 nmbd process, and node1
starts 2 of them... but this may be by design.

i have a hunch that i have some rogue wins server somewhere that likes to
tell that he is the domain master of my domain, does this make sense? can i
debug this?
or does somebody have another suggestion how to resolve this issue?

thanks in advance!
Erik
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem loggin in

2011-03-23 Thread erik bergsma
This might gave something to do with to long usernames i think there is
a maximum of 20 characters.

2011/3/22 JUAN EDUARDO DELGADILLO CHAVEZ 

> Hi, I just installed a samba server versión 3.5.6, in a Linux debían
>  2.6.26-2-amd64, the clients have Windows 7.
>
> I have probed with some users and they could log in, but I have many users
> that can´t log in.
>
> When they type their password the computer tell the next message: Intervalo
> fuera de rango (out of range interval)
>
> Do you have any idea?
>
> Thanks in advance
>
>
>
> It is the smb.conf file:
>
>
>
>
>
> [global]
>
>workgroup = ALUMNO
>
>server string = %h server (Samba %v)
>
>passwd program = /usr/bin/passwd %u
>
>passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully*
>
> .
>
>log file = /var/log/samba/log.%m
>
>printcap name = cups
>
>logon script = startup.bat
>
>logon path =
>
>logon home =
>
>domain logons = Yes
>
>os level = 65
>
>preferred master = Yes
>
>domain master = Yes
>
>panic action = /usr/share/samba/panic-action %d
>
>#invalid users = root
>
>admin users = root,juan, kino, jestrada
>
>printing = cups
>
>print command =
>
>lpq command = %p
>
>lprm command =
>
>client ntlmv2 auth = yes
>
>
>
>
>
> [homes]
>
>
>
> writable = yes
>
> browsable = no
>
> create mode = 0700
>
>
>
> [netlogon]
>
>
>
> path = /var/lib/samba/netlogon
>
> read only = yes
>
>
>
> [printers]
>
> comment = All Printers
>
> printable = yes
>
> path = /var/spool/samba
>
> browseable = yes
>
> guest ok = yes
>
> public = yes
>
> read only = no
>
> writable = yes
>
> create mode = 0700
>
>
>
> [comunprepa]
>
> path = /home/comunprepa
>
> writeable = yes
>
>
>
> [comunsec]
>
> path = /home/comunsec
>
> writeable = yes
>
> create mode = 750
>
>
>
>
>
> [typingmaster]
>
> path = /home/typingmaster
>
> writeable = yes
>
>
>
> [wallpaper]
>
> path = /home/wallpaper
>
> writeable = no
>
>
>
> [wallpaperprim]
>
> path = /home/wallpaperprim
>
> writeable = no
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Clustered Samba: smbd process deadlocks when doing an /etc/init.d/samba stop on gentoo

2011-03-23 Thread erik bergsma
Hi All,

i have a problem with the SMBD processes on my clustered Samba setup.
The setup contains:
- 2  gentoo linux nodes (kernel 2.6.33.2)
- ctdb 1.0.114_p1
- samba 3.5.8
- glusterfs 2.0.8

sometimes i want to do some maitenance on one of the nodes, then i do
the following:
- /etc/init.d/samba stop (to stop samba, and move all the users to the
other nodes)
- /etc/iniit.d/ctdb stop (to move the floating ip to the other host)

After the first command, i see a big decline in the amount of smbd
processes; from ~45 to ~15.
but after 45 seconds the number stays the same, and after ~60 seconds
the stopping process fails;
leaving the remaining 15 processes either in S or in D state is `ps aux`

i cannot kill -9 those processes, they either switch to deadlock or
just stay deadlocked.
The only resolution i have is to do a very ugly `reboot -nfi`

so far i can provide the output of testparm, and also the relevant
logs of loglevel 1, but i have the feeling that might not be enough?

any help is very much appreciated!
Erik
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows Vista keeps on deleting cached roaming profile

2010-08-27 Thread erik bergsma
Well i turned out to be my LDAP server after all,

after another week (that is almost 2 weeks in total) i've found that if a
user is in a secondary LDAP group with a GID of 514, Windows vista will
delete the cached roaming profile :-S No ADS on the same subnet, no policys,
no registry hacks, none of that.

Don't ask me what signals are sent from samba 3.5.2. to trigger this action,
or what parts of the source of Samba are responsible for this, but i am just
glad that i found the error, and am able to fix it now.

oh i've set up the same group settings/GID into another non-ldap Samba 3.5.2
domain, and from there out Windows doesn't remove the profiles, so it seems
to be a LDAP related problem.

thnx for your help all!

2010/8/24 Cain, Marc 

> Hmm.
>
> The Windows server that would most likely be the culprit is the AD server
> and the conditions for that would most likely have to be that the local
> computer is finding a computer account on the AD server at boot time (that's
> when Computer GPO settings are applied), before logon, and the AD server
> would have to have a GPO on it that explicitly enables the "delete cached
> copies of roaming profiles" settings.
>
> Since the AD server is there and since it is probably the only place such a
> GPO would exist it's where I'd look.  But not knowing how your systems are
> setup I'm at a loss to explain this or how it the local machine might be
> doing such a thing.  All I know is that the local GPO can only be overridden
> in the by another GPO.
>
>
> On Aug 24, 2010, at 5:13 AM, erik bergsma wrote:
>
> Hi Marc,
>
> .pol files are in the  week to figure out btw, completely other story), and i dont even have those
> anywhere on my server.
>
> i am having a hard time imagining how my samba 3.5 setup is able to
> push/override/send the gpo though samba 3.5 itself doesnt have GPO
> support (that is in samba 4), my login.bat have only some mapping inside
> them (net use x //server/%username% etc) and also i am not using AD/kerberos
> in any way in my setup... got any pointers on how my server is able to
> deliver those GPO's?
>
> i got a windows server 2003 and a windows ADS server 2008 in the same
> subnet, but that cant make a difference right?
>
>
>
>
> Erik
>
> 2010/8/23 Cain, Marc 
>
>> Hi Erik,
>>
>> This is most likely not a an LDAP backend problem since Windows Group
>> Policy determines the behavior of how roaming user profiles are treated.
>>
>> Cached copies of roaming profiles are left in the user folder on the local
>> drive by default unless a Group Policy setting is made:
>>
>> Computer\Administrative Templates\System\User Profiles\Delete cached
>> copies of roaming profiles.
>>
>> This Group Policy can be overridden in one of two ways:  either by copying
>> another group policy over the local group policy via logon script at logon
>> or through setting a Group Policy on the server: typically active directory
>> servers -- though there were methods of doing this on samba by creating a
>> default .pol file I've no experience with this and can't speak to it.  The
>> server policy will take precedence over the local Group Policy settings.
>>
>> Since you're seeing two different behaviors on two different servers it
>> seems to me that one of the servers is somehow delivering a second set of
>> GPOs to the workstation.  At least this is, from what I know, the only way
>> it can happen.
>>
>> Marc Cain
>>
>>
>> On Aug 23, 2010, at 5:07 AM, erik bergsma wrote:
>>
>> > @ Dave: thnx for your pointers but i already tried those (See my first
>> post)
>> > with no luck...
>> >
>> > @ All: the problem becomes weirder and weirder:
>> > i have set up a new PDC with the same samba version, (only difference is
>> > that its not clustered, and doesn't have the LDAP back end), and when i
>> > create a profile on that domain, the user profile will stay cached on
>> > c:\users\
>> >
>> > however when i join the same machine to the domain that is having the
>> > problems, and create a new profile as well for a new user, the cached
>> user
>> > profile gets deleted again from c:\users\
>> >
>> > so to conclude that; the problem is either my CTDB or my LDAP back end,
>> > which make no sense what so ever :(
>> >
>> > 2010/8/19 David Mathog 
>> >
>> >> On second thought, the previous method was for older WIndows.  Use
>> >> the group policy editor and look at:
>> >>
>> >> Computer Configuration -> Administrative Templates -> System ->
>> >> User Proiles -> Delete user profiles ...
>> >>
>> >> If that is enabled, then the user profiles would disappear in the
>> specified
>> >> number of days.
>> >>
>> >> Regards,
>> >>
>> >> David Mathog
>> >>
>> >>
>> >>
>> > --
>> > To unsubscribe from this list go to the following URL and read the
>> > instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how to set folder redirection on Windows 7 with a Samba PDC

2010-08-23 Thread erik bergsma
there are some limitations kixtart cant write certain values to parts
the registry that are protected
but just for folder redirection its great :)

although with win7 you will probably run into some problems with the adobe
installer that is refusing to work, because of the folder redirection

samba 4 isnt an work enviroment option, since it is still in alpha

2010/8/22 Abe Lau >

> On Sun, Aug 22, 2010 at 2:48 PM, German Molano  wrote:
>
> >  On 21/08/2010 10:54 p.m., Abe Lau wrote:
> >
> >> Hi,
> >> I have read that Windows 7 is using a new admx format and that it is not
> >> compatible with the old-school poledit.  If I would like to stick with a
> >> Samba PDC, is there any elegant way to get Windows 7 client to obey the
> >> folder redirection(and possibly other rules) set using poledit&
> >> NTConfig.pol?
> >>
> >>  Yes there is a way to do folder redirection with kixtart tools  you can
> > write directly to the Windows Registry modyfing the Workstation Settings.
> >
> > In your netlogon start up script call kix32 runtime with your own script
> > with some values like these:
> >
> > $UserShellFolders =
> >
> "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User
> > Shell Folders"
> > WriteValue($UserShellFolders, "Personal", "H:\Documents", "REG_SZ")
> > WriteValue($UserShellFolders, "AppData", "H:\.winsettings\appdata",
> > "REG_SZ")
> > WriteValue($UserShellFolders, "Desktop", "H:\WinDesktop", "REG_SZ")
> > WriteValue($UserShellFolders, "My Music", "H:\Music", "REG_SZ")
> > WriteValue($UserShellFolders, "My Pictures", "H:\Pictures", "REG_SZ")
> > WriteValue($UserShellFolders, "My Video", "H:\Videos", "REG_SZ")
> > WriteValue($UserShellFolders, "{374DE290-123F-4565-9164-39C4925E467B}",
> > "H:\Downloads", "REG_SZ")
> >
> >
> >
> >  I have been searching the mailing list, but there doesn't seems to be
> much
> >> detailed information on how to get Windows 7 to integrate nicely with a
> >> Samba PDC.  Any insights?
> >>
> >> Thanks,
> >> Abe
> >>
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
>
> Thanks German Molano.
>
> That may seems to be a viable solution.  By the way, the webpage doesn't
> mention Windows 7 being supported?  Is the webpage just outdated?
>
> Not knowing much about kixtart, does it mean that I could replace
> everything
> in NTConfig.pol with a kixtart script?  That would be an elegant solution
> before Samba4 is ready I suppose :-)
>
> Abe
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to filter files using roaming profiles

2010-08-23 Thread erik bergsma
prf*.tmp files are created by a lot of programs outlook, virtualbox
etc...

by description (http://support.microsoft.com/kb/328607) they see pretty
important, but with my personal experience they are not so

i think the easiest way is to set up a crontab that deletes the prf*.tmp
files over night

2010/8/22 marcos gonzalez 

> Hi David
>
> Really this problem only pass with files created by thunderbird. This
> program creates a .tmp files during syncronization with imap accounts and
> generates most biggest files. I can't filter this folder and Im not
> interested to make this user by user, y prefer to make this for all samba
> users.
>
> Do you know any good link explaining how to create policie filters in XP?
>
> And finally the tmp folder is not sync.
>
> Thanks :-)
>
> 2010/8/22 David Gonzalez 
>
> > Hola Marcos,
> >
> > I don't know how gurus here will do it, but I'd suggest you go ahead and
> > create some policy or use the built it windows feature to avoid/permit
> sync
> > of certain files
> >
> > You copuld also tweak registry keys, or do as I did with my users, I
> > created a "Default User" using redegit and loading the NTDUSER.DAT hive
> and
> > deciding which directories should the system keep in sync.
> >
> > One other problem I see there is that if your clients are XP/2K/7 that
> > nasty %USERPROFILE%\AppData\local\TEMP directory is sneaking up on your
> sync
> > proccess, and it tends to grow quite large, so one other suggestion is to
> go
> > ahead and change TEMP and TMP enviroment variables, be it from My
> Computer >
> > Properties > Advanced > Enviroment Variables
> > and take that directory to some other place like D:\ or C:\, depends on
> > yopur setup.
> >
> > That's my ywo cents on this, so hope this helps.
> >
> > ---
> > David Gonzalez H.
> > DGHVoIP - OPEN SOURCE TELEPHONY SOLUTIONS
> > Phone Bogotá: +(57-1)289-1168
> > Phone Medellin: +(57-4)247-0985
> > Mobile: +(57)315-838-8326
> > MSN: da...@planetaradio.net
> > Skype: davidgonzalezh
> > WEB: http://www.dghvoip.com/
> > Proud Linux User #294661
> >
> >
> > On Sun, Aug 22, 2010 at 12:37 PM, marcos gonzalez <
> > marcos.gonzalez.c...@gmail.com> wrote:
> >
> >> Hello list
> >>
> >> I'm a system administrator implementing a samba server for mi work. One
> of
> >> the most important things is how to use roaming profiles, and I'm
> viewing
> >> that in the synchronisation there are more bad type archives that
> produces
> >> and excessive use of disc memory. It's possible to filter that .tmp
> files
> >> not synchronise?
> >>
> >> these are my rules inside smb.conf:
> >>
> >>   logon path = \\%N\profiles\%U
> >>   logon drive =
> >>   logon home =
> >>   logon script =
> >>
> >> Thanks && Best Regards
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows Vista keeps on deleting cached roaming profile

2010-08-23 Thread erik bergsma
@ Dave: thnx for your pointers but i already tried those (See my first post)
with no luck...

@ All: the problem becomes weirder and weirder:
i have set up a new PDC with the same samba version, (only difference is
that its not clustered, and doesn't have the LDAP back end), and when i
create a profile on that domain, the user profile will stay cached on
c:\users\

however when i join the same machine to the domain that is having the
problems, and create a new profile as well for a new user, the cached user
profile gets deleted again from c:\users\

so to conclude that; the problem is either my CTDB or my LDAP back end,
which make no sense what so ever :(

2010/8/19 David Mathog 

> On second thought, the previous method was for older WIndows.  Use
> the group policy editor and look at:
>
>  Computer Configuration -> Administrative Templates -> System ->
> User Proiles -> Delete user profiles ...
>
> If that is enabled, then the user profiles would disappear in the specified
> number of days.
>
> Regards,
>
> David Mathog
>
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows Vista keeps on deleting cached roaming profile

2010-08-19 Thread erik bergsma
The problem is not that the server profile is empty (i did that on purpose)
the files get, and stay, there when i logout from the vista client

the problem is that windows deletes the clientside cached profile from
c:\users\username, and also the relevant registry settings :(

the mailinglist archive gave me some great pointers to speed up the login
process though!

2010/8/18 David Mathog 

> > I have a couple of Windows Vista Computers that i freshly (re)installed,
> > updated to SP2 + all updates, and joined to my domain...
> > i also got an empty profile on the server (the storage folder is
> there, but
> > there are no files inside)
>
> Read through this thread:
>
>  http://lists.samba.org/archive/samba/2010-May/156130.html
>
> and see if anything in there helps.  Note, use "sort by subject" and
> read all entries in the thread, the thread links do not always find all
> thread entries.
>
> Relevant parts of my smb.conf:
>
>logon script = scripts\everybody.bat
>logon path = \\%L\profiles\%U\%a
>domain logons = Yes
>os level = 64
>preferred master = Yes
>domain master = Yes
>dns proxy = No
>ldap ssl = no
>csc policy = disable
>hide files = /desktop.ini/Desktop.ini/
>
> [netlogon]
>comment = Contains login script which just mounts PDB area
>path = /u1/usr/netlogon
>
> [homes]
>comment = Home Directories
>read only = No
>create mask = 0700
>directory mask = 0700
>browseable = No
>browsable = No
>
> [profiles]
>comment = user's profile directories, by windows version
>path = /u1/usr/profiles
>read only = No
>create mask = 0700
>directory mask = 0700
>browseable = No
>browsable = No
>profile acls = Yes
>
>
>
> Home directories are in /u1/usr/people, profiles are in
> /u1/usr/profiles.  For reasons I do not recall the file protections are
> a little odd in profiles:
>
> ls -al profiles  #edited to just show one user entry
> total 16
> drwxr-xrwx 4 root   root 4096 2010-05-27 09:48 ./
> drwxrwxr-x 5 root   root 4096 2010-05-12 15:32 ../
> drwx-- 4 mathog biostaff 4096 2010-05-27 15:12 mathog/
>
>
> My everybody.bat file is irrelevant to your problem, all it does is
> mount a data directory from the samba server.  However, if you have a
> script in there it could conceivably be causing problems if it causes
> errors.
>
> Regards,
>
> David Mathog
> mat...@caltech.edu
> Manager, Sequence Analysis Facility, Biology Division, Caltech
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows Vista keeps on deleting cached roaming profile

2010-08-18 Thread erik bergsma
I have a couple of Windows Vista Computers that i freshly (re)installed,
updated to SP2 + all updates, and joined to my domain...
i also got an empty profile on the server (the storage folder is there, but
there are no files inside)

When i log into the domain Windows creates all files and folders just fine
and stores a cache of that profile in c:\users\username (like it should),
And when i log out, Windows will write all the files it just created
(pictures, desktop, ntuser.dat) to the server perfectly

however if i login to the computer locally (not using the domain), and when
i go to the c:\users\ folder the folder of the username is gone :( while
i like it to stay there!

so far i tried:
- reinstalling windows multiple times
- setting the following GPO's (although i never touched those)
  - computer\Administrative Templates\System\User Profiles\Delete
userprofiles older than a specific number of days ==> disabled
  - computer\Administrative Templates\System\User Profiles\Delete cached
copies of roaming profiles ==> disabled
  - computer\Administrative Templates\System\User Profiles\Leave Windows
Installer and group Policy software ==> enabled
  - computer\Administrative Templates\System\User Profiles\Only allow local
user Profiles ==> disabled
  - computer\Administrative Templates\System\User Profiles\Prevent Roaming
profile changes propagating to the server ==> disabled
  - computer\Administrative Templates\System\User Profiles\Wait for remote
user profile ==> enabled
  - computer\Administrative Templates\System\User Profiles\Slow network
connection timeout for user profiles ==> disabled
  - User\Administrative Templates\System\User Profiles\Limit Profile Size
==> disabled
- adding the following registry setting:
  - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\
DeleteRoamingCache=0

This is with:
- Gentoo Linux
- Samba 3.5.2 (clustered with CTDB 1.0.114)
- LDAP backend
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba