I have a simple samba+openldap setup with roaming profiles (logon path = //%L/%U/profile). This works fine however I would like to be a able to disable roaming profile for some users.
It seems impossible to disable roaming profile for specific users with the sambaProfilePath LDAP attribute as LDAP attributes can't be null. A LDAP attribute must have a value but if not the attribute is not set in the LDAP object, right ?
However the documentation says the opposite : http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#attribobjclPartA
Setting just a space in the attribute results to an error on the windows client side (profile path not found). Maybe there is some value that can be set in the attribute which does not result to an error on the client.
looks like a valid request. We might just ignore it if we find just a space in sambaProfilePath (yeah, we're talking about old NT4 domains here!)