netlogon problem

cahalsall · 12-25-2008, 08:53 PM

I have a samba server (Fedora 9) that has been working fine for the past six months as a standalone server. Recently I decided to upgraded it to a Primary Domain Controller (PDC)

Everything is working fine. I was able to add all the machines to the domain. I was also able to log all users into the domain. Everyone has been assigned their logon drive. The only problem is with the netlogon share, the login scripts are not running automatically. You can, however, navigate to the netlogon share and execute the scripts manually.

Currently my short term solution consist of a shortcut to the netlogon script in the Start Menu, startup folder. The only problem with this is that whenever user log on for the first time to the domain on a given machine, I have to manually create the shortcut, which sometimes can be an inconvenience.

I have been yahooin, googleing, linuxquestioning, fedora foruming, etc. to no avail. Any help on this will be greatly appreciated.

My smb.conf file is as follows:

Code:

[global]
        workgroup = CITYHALL
        server string = Fedora 9
        passdb backend = tdbsam
        lanman auth = Yes
        client lanman auth = Yes
        log file = /var/log/samba/log.%m
	max log size = 50
	add user script = /usr/sbin/useradd "%u" -n -g users
	delete user script = /usr/sbin/userdel "%u"
	add group script = /usr/sbin/groupadd "%g"
	delete group script = /usr/sbin/groupdel "%g"
	delete user from group script = /usr/sbin/userdel "%u" "%g"
	add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
	logon script = %u.bat
	logon path = 
	logon drive = H:
	domain logons = Yes
	os level = 64
	preferred master = Yes
	domain master = Yes
	cups options = raw

[public]
	comment = Common Folder
	path = /oglala/Public
	valid users = @office
	read only = No
	force create mode = 0777
	force directory mode = 0777

[netlogon]
	comment = Network Logon Service
	path = /var/lib/samba/netlogon
	guest ok = Yes
	share modes = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	browseable = No

fotoguy · 12-26-2008, 08:02 AM

Have you checked the permissions on the /var/lib/samba directory, that may have changed after the upgrade. You say you can execute the scripts manually, is this as the normal user trying to logon, or are you executing the scripts manually as root?

cahalsall · 12-26-2008, 02:36 PM

Thanks very much for your prompt response.

All users have access to the netlogon share and can execute the scripts manually or via a shortcut. Users have not been affected, my short term solution is working for now, but its not the way I like to do things.

I had a similar issue regarding cups and printer port redirection but it sorted itself out after a late October 2008 update (I still have windows 98 and MSDOS 6.22 clients). It was strange, it appeared as if I was the only one having that problem. This netlogon problem appears to be a similar situation. Every one is saying, set your logon script to %u.bat or %m.bat or some other batch file, even %g.bat (which I'm not really sure about). Some where having similar problems but with each one I was able to spot an error or two in the [global] section of their smb.conf.

Is it possible that this could be a SELinux problem or something that may require a registry hack? I'm doing some research on this right now and still welcoming suggestions.

Thanks again,

Charles

cahalsall · 12-27-2008, 06:21 PM

I made one simple change to the smb.conf and that did the trick. I still can't believe this solved the problem. Is this documented elsewhere?

The change made is as follows:

changed

Code:

logon script = %u.bat

to

Code:

logon script = %U.bat

I hope this can help someone else.

fotoguy · 12-28-2008, 06:23 PM

Quote:

Originally Posted by cahalsall

I made one simple change to the smb.conf and that did the trick. I still can't believe this solved the problem. Is this documented elsewhere?

The change made is as follows:

changed

Code:

logon script = %u.bat

to

Code:

logon script = %U.bat

I hope this can help someone else.

Glad to hear problem solved, yeah I missed that as well, although its been quite a few years since I messed around with a samba server.