connecting to printer only as printeradmin

[Franz Pförtsch]

Hi,

is there something wrong with samba 3.0.9?
I am sharing cups-printers to windows using samba 3.0.9 from sernet.
Connecting to the printers is only possible for printeradmins.

Normal users get a "Cannot connect ot printer!" 

----8<------------------
  se_access_check: also S-1-5-21-160562036-3150058255-2134394716-58661
  se_access_check: also S-1-5-21-160562036-3150058255-2134394716-23353
[2004/12/03 15:11:26, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1755)
  access DENIED for printer open
[2004/12/03 15:11:26, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
----8<-----------------

Is there a bug in samba or at the smb.conf?


smb.conf
# Global parameters
[global]
        unix charset = LOCALE
        workgroup = DOMAIN
        realm = DOMAIN.NET
        server string = cobu0035 Samba %v
        interfaces = 127.0.0.1, eth0
        bind interfaces only = Yes
        security = ADS
        password server = host.domain.net
        username map = /etc/samba/smbusers
        log level = 3
        log file = /var/log/samba/log.%m
        hostname lookups = Yes
        preferred master = No
        local master = No
        domain master = No
        wins server = 172.31.58.11
        ldap ssl = no
        idmap uid = 10000-90000
        idmap gid = 10000-90000
        winbind separator = +
        printer admin = printer

[printers]
        comment = All Printers
        path = /var/tmp
        create mask = 0600
        guest ok = Yes
        printable = Yes
        browseable = No
        public = Yes

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = root, printer
        force group = sys
        read only = No
        create mask = 0664
        directory mask = 0775
        guest ok = Yes
        browseable = Yes