[Samba] Point'n'Print: adddriver / WERR_ACCESS_DENIED

Philip Maurer philip.maurer at novasoft.fi
Mon Oct 11 13:48:05 GMT 2004


Well, thanks for your help, your assumptions are correct in that I'm
running the rpcclient command as root (I tried deleting & readding that
account with smbpasswd as well, no dice).  Looks like I'll be stuck
printserving on a Windows box ;(

-Philip

Martin Zielinski wrote:

>On Monday 11 October 2004 13:44, Philip Maurer wrote:
>  
>
>>I guess this directory listing should answer your questions:
>>
>>/etc/samba/drivers/W32X86/:
>>total 577
>>drwxr-xr-x  2 root root     48 Oct  5 16:34 2
>>drwxr-xr-x  2 root root     48 Oct  5 16:34 3
>>-rwxr--r--  1 root root  65645 Oct  5 16:17 HP_LaserJet_4100_Series.ppd
>>-rwxr--r--  1 root root  14234 Oct  5 16:17 cups5.hlp
>>-rwxr--r--  1 root root 280268 Oct  5 16:17 cupsdrv5.dll
>>-rwxr--r--  1 root root 219540 Oct  5 16:17 cupsui5.dll
>>
>>/etc/samba/drivers/W32X86/2:
>>total 0
>>
>>/etc/samba/drivers/W32X86/3:
>>total 0
>>
>>Is there anything obviously wrong?
>>    
>>
>Not as long as there is a Samba root account (That's important!) and you're 
>using the rpcclient command, as you mentioned (here from localhost):
>
>rpcclient localhost -N -U'root%pass' -c 'adddriver "Windows NT x86" 
>"printer:cupsdrv5.dll:HP_Laserjet_4100_Series.ppd:cupsui5.dll:cups5.hlp:NULL:RAW:NULL"'
>
>I created the files with the same permission as mentioned above. No problems.
>Just be aware, that your printer admin "maph" might not have write permissions 
>in your driver dir.
>
>Sorry, no other idea :-(
>
>Martin
>  
>
>>Thanks,
>>          Philip
>>
>>Martin Zielinski wrote:
>>    
>>
>>>Now, that you have a valid printer admin account - it should work.
>>>Unfortunatly Samba returns ACCESS_DENIED for several reasons which have
>>>nothing to do with access rights.
>>>Wrong accounts or passwords result in a "result was DOS code 0x00000013"
>>>message.
>>>
>>>The only case, I could provoke this error message was, when not all files
>>>were in the W32X86 directory.
>>>      
>>>
>>Are the names really ok? My driver files are names "cupsui5.dll,
>>cups5.hlp and
>>
>>    
>>
>>>cupsdrv5.dll".
>>>Perhaps you have newer or older ones?
>>>The ppd file has to be in the W32X86 dir, too.
>>>
>>>And please check the linux permissions of the driver files.
>>>
>>>Bye,
>>>Martin
>>>
>>>On Tuesday 05 October 2004 10:40, Philip Maurer wrote:
>>>      
>>>
>>>>Tried doing that, no dice - same error message!  However, I noticed that
>>>>the "New Driver" button is not grayed out anymore - I get "Access
>>>>Denied" when trying to update the driver via that method as well.  I
>>>>tried chmodding drivers dir 777, still access denied...
>>>>
>>>>Regards,
>>>>            Philip
>>>>
>>>>Martin Zielinski wrote:
>>>>        
>>>>
>>>>>Hello Philip,
>>>>>
>>>>>try putting the "printer admin" parameter into the global section.
>>>>>It's a global parameter that cannot be used "per share".
>>>>>
>>>>>Greetings,
>>>>>Martin
>>>>>
>>>>>On Monday 04 October 2004 16:00, Philip Maurer wrote:
>>>>>          
>>>>>
>>>>>>Dear list,
>>>>>>
>>>>>>This problem has been bugging me for days now, I've got Cups version
>>>>>>1.1.21 and Samba 3.0.7 installed and working.  There is a single
>>>>>>Laserjet 4100 attached to the network, printing via Cups or Cups/Samba
>>>>>>works fine.
>>>>>>
>>>>>>The problems are with getting Point'n'Print to work.  I've been
>>>>>>scouring the net, archived posts of this list, read the official Samba
>>>>>>manual, to no avail.  The problem is always the same; I can
>>>>>>successfully copy the drivers into the W32X86 directory using e.g.
>>>>>>smbclient, but issuing the adddriver command via rpcclient
>>>>>>
>>>>>>rpcclient newserver -N -U'root%******' -c 'adddriver "Windows NT x86"
>>>>>>"printer:cupsdrvr.dll:printer.ppd:cupsui.dll:cups.hlp:NULL:RAW:NULL"'
>>>>>>
>>>>>>Always returns: result was WERR_ACCESS_DENIED
>>>>>>
>>>>>>I've tried using the GUI method but when I get to the Advanced tab the
>>>>>>'New Driver' button is grayed out.
>>>>>>
>>>>>>Best regards,
>>>>>>                 Philip
>>>>>>
>>>>>>Here's my smb.conf:
>>>>>>---------------------------[snip]-----------------
>>>>>>[global]
>>>>>># Replace MYWORKGROUPNAME with your workgroup/domain
>>>>>>workgroup = NOVASOFT
>>>>>># Of course this has no REAL purpose other than letting
>>>>>># everyone know its not Windows!
>>>>>># %v prints the version of Samba we are using.
>>>>>>server string = Samba Server %v
>>>>>># We are going to use cups, so we are going to put it in here ;-)
>>>>>>load printers = yes
>>>>>>printing = cups
>>>>>>printcap name = cups
>>>>>>use client driver = no
>>>>>># We want a log file and we do not want it to get bigger than 50kb.
>>>>>>log file = /var/log/samba/log.%m
>>>>>>max log size = 50
>>>>>># We are going to set some options for our interfaces...
>>>>>>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>>>>>># This is a good idea, what we are doing is binding the
>>>>>># samba server to our local network.
>>>>>># For example, if eth0 is our local network device
>>>>>>interfaces = lo eth0
>>>>>>bind interfaces only = yes
>>>>>># Now we are going to specify who we allow, we are afterall
>>>>>># very security conscience, since this configuration does
>>>>>># not use passwords!
>>>>>>hosts allow = 127.0.0.1 195.163.190.192/27
>>>>>>hosts deny = 0.0.0.0/0
>>>>>># Other options for this are USER, DOMAIN, ADS, and SERVER
>>>>>># The default is user
>>>>>>security = user
>>>>>># No passwords, so we're going to use a guest account!
>>>>>>guest account = samba
>>>>>>guest ok = yes
>>>>>>
>>>>>># We now will implement the on access virus scanner.
>>>>>># NOTE: By putting this in our [Global] section, we enable
>>>>>># scanning of ALL shares, you could optionally move
>>>>>># these to a specific share and only scan it.
>>>>>>
>>>>>># For Samba 3.x
>>>>>>vfs object = vscan-clamav
>>>>>>vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
>>>>>>
>>>>>># Now we setup our print drivers information!
>>>>>>[print$]
>>>>>>comment = Printer Drivers
>>>>>># this path holds the driver structure
>>>>>>path = /etc/samba/drivers
>>>>>>guest ok = yes
>>>>>>browseable = yes
>>>>>>read only = yes
>>>>>># Modify this to "username,root" if you don't want root to
>>>>>># be the only printer admin)
>>>>>>write list = maph,root
>>>>>>
>>>>>>[HP_Laserjet_4100]
>>>>>>comment = HP LaserJet Network Printer
>>>>>>printable = yes
>>>>>>path = /var/spool/samba
>>>>>>public = yes
>>>>>>guest ok = yes
>>>>>>guest account = samba
>>>>>>printer admin = maph,root
>>>>>>
>>>>>># Now we setup our printers share.  This should be
>>>>>># browseable, printable, public.
>>>>>>[printers]
>>>>>>comment = All Printers
>>>>>>path = /var/spool/samba
>>>>>>browseable = no
>>>>>>public = yes
>>>>>>guest ok = yes
>>>>>>writeable = no
>>>>>>printable = yes
>>>>>>printer admin = maph,root
>>>>>>            
>>>>>>
>
>  
>




More information about the samba mailing list