Re: [cobalt-users] How do I set up a login script on the Qube2?

[Colin Smith <colin@xxxxxxxxxxxxxxxxxxxx>]

On Wed, 31 May 2000, Dee Piper wrote:

> Oh, okay, here we go. The users are logging in to the Qube from pc's
> running Windows 2000 Professional. I would like them to have 1 drive,
> say G:, mapped to their own user directory, and another, P:\, mapped
> to the group directory where all of their common data and apps are
> stored. For example, map G: to \\cobalt\users\jdoe map P: to
> \\cobalt\users\common

The Qube GUI sets up some default shares.

1: The homes share. This is each users own home directory so you can map
\\cobalt\homes to the G: drive.

2: The group share. It creates a share for each group that you create with
the gui so you can map \\cobalt\groupname to P:


To create a login script you'll have to create a 'netlogon' share to which
all users have read access. May be simplest to use the gui to create a
group called 'netlogon'.

Telnet to the qube and login as root. Edit the /etc/smb.conf file with
pico and add a line to the [global] section.

logon script = scriptname.bat

You can add variables to the script name like %U for the users login ID or
%m for workstation name so that specific users or workstations will
execute a specific script. There are loads of variables, the
http://www.samba.org/ site will have more.

You now should change the permissions on the netlogon share so that
everyone may *read* the logon scripts but *not* modify them. This is very
important for security.

Edit the [netlogon] section of the smb.conf file. Change the 'force create
mode' setting from 0664 to 0644 and the 'force directory mode' setting
from 0775 to 0755. This means that only the *owner* of the files may
modify them but anyone may read them. The other setting you may want to
change once you have created the login script on the netlogon share is to
set 'writable' to 'no', then no-one will be able to write files to the
netlogon share or modify files there.

Quit and save the smb.conf file and logout.

Add the user creating the scriptname.bat login script to the netlogon
group, mount the share and create the logon script using a DOS or windows
editor. Whatever you fancy:

net time \\timeservername /set /yes
net use G: \\cobalt\homes
net use P: \\cobalt\groupname

Logout of windows and back in to test the scripts.

Maybe telnet to the qube and set 'writable' to 'no' in the smb.conf file
if all is well.

Add all the rest of the users to the netlogon group in the GUI.


Disclaimer: The above advice may trash your entire setup leaving you with
an unusable network, it probably also removes the Cobalt warranty, no
warranties given etc etc.

> 
> Thanks,
> 

Umm, you might want to change your mail client to send plain text rather
than HTML emails. It makes it very difficult to read.

> Dee
> 

--