User Home Directory Issue

Hi,

I have just fresh installed NS7 on my physical system. I have created AD and joined domain in windows 10 . I have created another user abc.
Issue is when i go to via ssh and look into directory /var/lib/nethserver/home there is nothing. No user nothing no profile nothing.
Is there any kind of bug ? or please help me to solve this issue.

Thanks.
Hitesh

@support_team

Has the new user logged in with his credentials and accessed the/a server share?
Related: Mounted home directory on RAID has lost all users and Profiles

i haven’t mounted any directory on RAID.
Raid created but not mounted. New user logged successfully but no profile has created.
don’t know whats issue.

Can you try accessing the server in the network neighborhood even if no share has been created, and after that check again if the home directory has been created?
Example: access \\yourserver.domain.tld

share folder i have created with name testengineer and this name is created under /var/lib/nethserver/ibay

But created user profile is not visible into /var/lib/nethserver/home as well as /home.

Also share folder is not accessible from neighborhood laptops.
BUT \\AD.XYZ.COM is accessible and showing sysvol folder.

In NethServer 7 AD user ≠ Unix/Linux User ≠ Local user!
Except for root.

NethServer 7 via LDAP (local, remote) or other tools asks to the userbase (LDAP server or AD container aka NSDC) if there’s the user or not and if passwords match.

i have tried to access \AD.XYZ.COM during this only user folder is created under /var/lib/nethserver/home

but under this no profile has created
like desktop documents etc.

@Hitesh_Dubey

Hi

This is normal. Out of the Box, NethServer does NOT support Roving Profiles (so - no Profile folders or stuff).

This can be enabled with a Custom Template.

Note also that NethServer does not allow files to be executed from a share, this can also easily be corrected with a custom template.

Fix:

By default, Nethserver 7.x does not allow Windows clients to execute programs saved in shares.

To modify the behavior create this template-custom

mkdir -p /etc/e-smith/templates-custom/etc/samba/smb.conf
cd /etc/e-smith/templates-custom/etc/samba/smb.conf
nano 10EnableExecution

Insert the following lines into the 10EnableExecution file

#
# Custom
#
# 10EnableExecution
#

acl allow execute always = True

Activate the change with the command

signal-event nethserver-samba-update

The change is “global” and affects all shares and user directories.

My 2 cents
Andy

1 Like

i have applied same on the server as custom template now. But no profile only few user folder has been created. But if create any file or folder on user’s desktop then where it will store on the server ?
because as i read its under /var/lib/nethserver/home

Please guide me on this.

Hi

You would need to “Map” a Network Drive.
In Windows 10, for examlpe, open Windows Explorer and put in \IP_OF_YOUR_NETHSERVER.
Example:

\192.168.2.20

You will see folders there, if you created any “shares” (shared folders). Use a Right Mouse click, Map those folders as drives to any (free) letter you want.
The home folder is usually H:…

The User-Profile stuff is a bit more. I’ll search and post it in a few minutes.

My 2 cents
Andy

————————————————————
Windows Roving Profiles
————————————————————

mkdir /var/lib/nethserver/profiles
chown “administrator@” /var/lib/nethserver/profiles
chgrp “domain admins@” /var/lib/nethserver/profiles
chmod 777 /var/lib/nethserver/profiles

chgrp -R “domain users@” /var/lib/nethserver/profiles

mkdir -p /etc/e-smith/templates-custom/etc/samba/smb.conf
nano /etc/e-smith/templates-custom/etc/samba/smb.conf/71profiles

Content:

[profiles]
comment = Profiles directory
browsable = no
path = /var/lib/nethserver/profiles
read only = no
store dos attributes = Yes
create mask = 0600
directory mask = 0700
profile acls = yes
csc policy = disable

CTRL X quit, y save

signal-event nethserver-samba-update

chmod 1757 /var/lib/nethserver/profiles/

For each user:

chown “SHORTNAME@DOMAIN” /var/lib/nethserver/profiles/SHORTNAME.V6

Example:

chown “doej@domain.com” /var/lib/nethserver/profiles/doej.V6

Here one is correct, i?m not sure which oneany more. Try both, one will work!

chgrp -R “domain users@domain.com” /var/lib/nethserver/profiles
or
chgrp -R “domain admins@domain.com” /var/lib/nethserver/profiles

Replace domain.com with your Domain Name…

My 2 cents
Andy

1 Like

Shell Access for users should be activated. Also you could try to login with the user with ssh, at this moment the profile should be created.

I have done same settings but existing admin and administrator user both are invisible after this config. Started Getting SSSD generic Error.

Please help if anyone has better experience on RoamingProfile with NS7 ?

@Hitesh_Dubey

Hi

  1. Did you actually log in from a Windows PC as domain admin or domain administrator? If you haven’t logged in from Windows yet, the user folder remains empty.

  2. If you get “SSSD generic Error.”, you might try with a Configuration Restore - this restores a configuration and, if needed, downloads programs/libraries/updates. This should get your AD back working - without any SSSD generic Error.

I’ve had the SSSD generic Error a few times (With my 25-30 clients) in the past 5 years, but always was able to use a Configuration Restore to fix it! But you do need a Configuration Backup to do this!
A configuration Backup is automatically done with any NethServer normal backup!

My 2 cents
Andy