Stop samba making home directories for machine accounts

[philjones2000]

Hi

Nearly there I feel

I have samba and windbind etc running great and creating home directories automatically for new users. Problem is its making directories for machines as well. This will get messy very soon methinks!

How do I get it to stop making home directories for machine accounts? I added the line:

session required /lib/security/$ISA/pam_mkhomedir.so skel=/etc/skel umask=0077

to system-auth- is there anything I dd to filter out machine accounts?

Thanks

Phil

[Geoff]

Couple of Solutions.

1) don't use pam_mkhomedir. Create the directories manually.
2) alter your samba homedir path to include group information and nuke the contents of /home/Domain Computers in a cronjob. Or just ignore the folder.

[philjones2000]

I couldn't get samba's homedir to work with group info.

I tried %G but it didn't like it. Do I need to map the ad groups to new unix groups? How? :?

Thanks

[Geoff]

Does

getent group

return your Windows groups?
Have you set your users default group correctly in AD?

[philjones2000]

Does

getent group

return your Windows groups?

Yes

Have you set your users default group correctly in AD?

Is this "Primary Group" in the "member of" tab in groups and users?

If so, no.

[Geoff]

Have you set your users default group correctly in AD?

Is this "Primary Group" in the "member of" tab in groups and users?

If so, no.

Ok, you need to fix that. Then your %G substitution will work as expected.

[philjones2000]

Nice.

Sorted the Primary group and now samba puts them in groups (using the numerical id but hey, I can live with that).

That is much tidier. (not my forte!)

Big thanks Geoff

Phil

[Geoff]

Might need to be %g rather than %G to get sensible group names (rather than gid).