Re: Une remarque bête

Ton problème est effectivement très bizarre ! Dans la boîte où je bossais avant, on avait comme toi un Samba PDC, et il me suffisait de déclarer les utilisateurs sur le PDC.

Ensuite, au niveau client, après avoir (comme tu l'as fait) joint le PC au domaine, n'importe quel utilisateur pouvait se connecter sur le PC, si tant est qu'il déclarait vouloir s'authentifier sur le domaine dans la boite de login windows. Les utilisateurs retrouvaient leur bureau et autre joyeusetés sur n'importe quel PC où ils se loggaient : J'avais activé les roaming profiles sur le serveur samba.

Seul inconvénient du truc : windows fait une copie locale du profil distant sur chaque machine ou un utilisateur donné s'est connecté :( Bon, ça fait des sauvegardes pas chères...

Si ça peut faire avancer le schmilblick, voici le smb.conf utilisé pour faire ce genre de choses :


#======================= Global Settings ========
[global]

# 1. Server Naming Options:
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = Mon_domaine
server string = Samba Server %v
unix charset = iso8859-15
display charset = iso8859-15

# 2. Printing Options:
# CHANGES TO ENABLE PRINTING ON ALL CUPS PRINTERS IN THE NETWORK
# (as cups is now used in linux-mandrake 7.2 by default)
# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
printcap name = cups
load printers = yes
printcap cache time = 60
printing = cups

# 3. Logging Options:
# this tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/%m.log
max log size = 1024
log level = 2

# 4. Security and Domain Membership Options:
# Allow users to map to guest:
map to guest = bad user
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
username map = /etc/samba/smbusers

# 5. Browser Control and Networking Options:
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
domain master = yes
preferred master = yes

# 6. Domain Control Options:
domain logons = yes

# Where to store roaming profiles for WinNT and Win2k
# %L substitutes for this servers netbios name, %u is username
# You must uncomment the [Profiles] share below
logon path = \\%L\Profiles\%u\.winprofile

# The add machine script is use by a samba server configured as a domain
# controller to add local machine accounts when adding machines to the domain.
# The script must work from the command line when replacing the macros,
# or the operation will fail. Check that groups exist if forcing a group.
# Script for domain controller for adding machines:
add machine script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M '%u'

enable privileges = yes

# 7. Name Resolution Options:
name resolve order = bcast
dns proxy = no

[Profiles]
path = /home
browseable = no
guest ok = no
writable = yes
# This script can be enabled to create profile directories on the fly
# You may want to turn off guest acces if you enable this, as it
# hasn't been thoroughly tested.
root preexec = PROFILE='/home/%u/.winprofile'; if [ ! -e $PROFILE ]; \
then mkdir -pm700 $PROFILE; chown '%u':'%g' $PROFILE;fi

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# to allow user 'guest account' to print.
guest ok = yes
writable = no
printable = yes
create mode = 0700
print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers.
use client driver = yes

[print$]
path = /var/lib/samba/printers
browseable = yes
write list = @adm root
guest ok = yes
inherit permissions = yes

[Affaires]
browseable = yes
writeable = yes
path = /var/files/Affaires
write list = @catii
force group = catii
comment = Affaires en cours
create mode = 0775
directory mode = 0775

[Mes partages]
...

[homes]
path =
comment = Home Directories
browseable = yes
writable = yes