Ah ok you can use UNC on PDC. I failed because I tried to not put at all any
profiles or homes directive in pdc and I put them in the other samba.
I will use ldap because I am already using it for unix accounts and so I
need for samba. I was interested because reading your post it seems that you
can put some info in ldap to change behaviour of samba differently for each
Many thanks again!
2009/1/9 John Drescher <drescherjm@xxxxxxxxx>
> On Fri, Jan 9, 2009 at 9:26 AM, Mario Giammarco <mgiammarco@xxxxxxxxx>
> > 2009/1/9 John Drescher <drescherjm@xxxxxxxxx>
> >> We do that (and have that in place for 5 or so years). No data exists
> >> on the pdc. The nice thing about that is with this setup we can make a
> >> new PDC/BDC in less than 5 minutes and install it on one of our openvz
> >> or xen hosts. We do have the profiles folder mounted under nfs to the
> >> PDC and our ldap configuration each users profile is specified with
> >> the server name of the machine with the user shares.
> > So you are "cheating": in the PDC samba conf you say that "homes" and
> > "profiles" are in a directory of the PDC, but the directory is not
> > phisically there, it is a nfs mount on another server right? Very good
> > anyway!
> > I do not understand the part about the ldap configuration, can you please
> > explain it better: what can you do with ldap??
> If you are not using LDAP for your password security I would not
> bother then. You can still make your profiles folder on a second
> server in your smb.conf.
> path = /home/%U/%U.pds
> browseable = no
> guest ok = yes
> profile acls = yes
> # Un-comment the following and create the netlogon directory for Domain
> comment = Network Logon Service
> path = /home/netlogon
> readonly = yes
> browseable = yes
> Here I have the regular /home which is an nfs mount but you could
> instead specify a UNC path. I know I tested this in the past. I would
> activate and test this now but I have a meeting in 30 minutes and so
> its not good to make any changes with no one running the store... Also
> all other shares (user public and private + several dfs mounts) are
> mapped with my login script to the appropriate servers.
To unsubscribe from this list go to the following URL and read the