Samba Roaming profile issue

[mail4vij]

I am running samba PDC on CentOS 5.4 64 bits machine , i have created Samba as PDC server per this linuxhomenetworking site only and my windows client machine easily joins this domain but when i logged in it shows me error roaming profile can not updatting and when i check in the log here is the errror.

[2010/01/04 16:53:32, 1] smbd/service.c:make_connection_snum(1033)
abhishek (192.168.16.117) connect to service test4 initially as user test4 (uid=690, gid=690) (pid 8647)
[2010/01/04 16:53:32, 0] smbd/posix_acls.c:create_canon_ace_lists(1438)
create_canon_ace_lists: unable to map SID S-1-5-21-144265192-2488348622-4110138419-2380 to uid or gid.

testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[printers]"
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[profiles]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
[global]
workgroup = EXAMPLE.COM
netbios name = SAMBADC
server string = Samba Server Version %v
interfaces = lo, eth1
add machine script = /usr/sbin/useradd -d /dev/null -g samba-clients -s /bin/false -M %u
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
hosts allow = 127., 192.168.16., 192.168.17.
cups options = raw

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[homes]
read only = No
create mask = 0644
browseable = No

[netlogon]
path = /home/samba/netlogon
guest ok = Yes

[profiles]
path = /home/samba/profiles
read only = No
create mask = 0600
directory mask = 0700

ls -l /home/samba
total 8
drwxr-xr-x 2 root root 4096 Jan 4 12:22 netlogon
drwxr-xr-x 2 root root 4096 Jan 4 12:27 profiles

[peter]

Have you tried making /home/samba/netlogon and /home/samba/profiles world writeable so the profiles can be automatically written to by the users when they log in? That could be it.

[mail4vij]

yes i already changed that permission for chmod 1777 /home/samba/profiles but that did not help and still getting roaming problem not updating error

[jro]

Never tried implementing roaming profiles in a Samba PDC domain. I have done Samba file servers integrated with AD using posix ACL's, which solved a lot of issues arising from using basic UGO permissions in the multiuser env. My first guess from the error message is that you need to enable ACL's on that machine.

[mail4vij]

My problem has been resolved automatically i formatted the system and install CentOS 5.4 again just slitely changed / remove profiles tag in smb.conf file and all set.

testparm 
Load smb config files from /etc/samba/smb.conf
Processing section "[printers]"
Processing section "[homes]"
Processing section "[netlogon]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
[global]
workgroup = EXAMPLE.COM
netbios name = SAMBADC
server string = Samba Server Version %v
interfaces = lo, eth1
add machine script = /usr/sbin/useradd -d /dev/null -g samba-clients -s /bin/false -M %u
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
hosts allow = 127., 192.168.16., 192.168.17.
cups options = raw

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[homes]
read only = No
create mask = 0644
browseable = No

[netlogon]
path = /home/samba/netlogon
guest ok = Yes

[profiles]
path = /home/samba/profiles
read only = No
create mask = 0600
directory mask = 0700

ls -l /home/samba
total 8
drwxr-xr-x 2 root root 4096 Jan 4 12:22 netlogon

[peter]

What changes did you make to the [profiles] tab? It looks the same to me.

[mail4vij]

I removed [profiles] tag completely from the smb.conf as it was written in the file itself that it goes bydefault to /home dir if we do not enable this feature and finally that writing error resolved which was coming previously to me when i set to /home/samba/profiles.

testparm 
Load smb config files from /etc/samba/smb.conf
Processing section "[printers]"
Processing section "[homes]"
Processing section "[netlogon]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
[global]
workgroup = EXAMPLE.COM
netbios name = SAMBADC
server string = Samba Server Version %v
interfaces = lo, eth1
add machine script = /usr/sbin/useradd -d /dev/null -g samba-clients -s /bin/false -M %u
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
hosts allow = 127., 192.168.16., 192.168.17.
cups options = raw

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[homes]
read only = No
create mask = 0644
browseable = No

[netlogon]
path = /home/samba/netlogon
guest ok = Yes

ls -l /home/samba
total 8
drwxr-xr-x 2 root root 4096 Jan 4 12:22 netlogon

[jro]

Hmm, interesting, glad to hear you got it worked out