User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6) Gecko/20040113
email@hidden wrote:
...
a) how did you disable roaming profiles? (Apple doesn't make this easy)
...
a) removed '*logon path = \\%N\profiles\%u*' from /etc/smb.conf in the PDC
>
In our experience, this was *not* enough to disable roaming profiles because
Samba has a compiled in path. You need to hand code:
logon path =
in smb.conf (I've complained about this to Apple since the GUI provides
no way to enter an empty path).
>
b) yes, the PDC is also a WINS server (Workgroup Master Browser and
Domain Master Browser)
c) yes, one login script for each home directory server, each script
mapping users to their home server
Do you do other things in the login scripts? I ask because we use
the "Windows Home Directory" settings instead of login.bat files
(XP queries for home dir...I think it was Win9x that needed the login.bat)
...
Yes, all home directory servers, and the PDC, are in the 10.1.10/24 net.
Students and faculty; however, may be logging-in from other class C sub
nets (10.1.x/24). Ciscos are all configured with spanning-tree portfast
enabled. None of the servers, including the PDC, presently are configured for or
make use of multiple NICs.
If clients are on other subnets, it is vital that they use WINS
as the Windows default is local subnet broadcast. We now use DHCP
to set WINS at the same time we hand IP, DNS etc.
Apple never asked us to crank-up Samba log levels. Logging was set at
'high' at one point on all home directory servers, and 'low' on the PDC.
Logging is now 'low' on all servers, because another tech here believes
logging consumes too many resources and may contribute to the problem.
For Apple, 'high' equals 2, but Samba can go up to 10 with 3-5 often
providing much more data. Logging does consume resource and should
be set high only when needed. Samba also allows you to set higher
log levels for individual machines and to have separate log files
for each machine which can be useful in situations like this.
The other Xserves, for the most part, all appear in each others' SMB
browse lists. One server may be missing from another's list, but there
is no consistency. One thing to note, our PDC is the /only/ server with
'Workgroup Master Browser' and 'Domain Master Browser' services enabled
in SA. All home directory servers are configured to 'Register with WINS
server: 10.1.10.21' (our ODM/PDC), and the ODM/PDC has 'Enable WINS
server' selected.
Hmmmm...I've never seen the Master Browser settings as an option in SA.
You should have *only one* browser for each subnet. (This requires more
explanation, but browsing is really an separate service *unrelated* to auth)
Your WINS sounds right. My question about the domain members showing
up on the PDC was not about browsing. It was about their "machine accounts".
You should look those up in Workgroup Manager's Computer Lists
>
If it will help, I will be happy to post smb.conf files from both our
PDC and home directory servers.
That's probably a good idea
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
