[Samba] "Unable to display security information" on windows printers security tab

[Grégory Benoist]

Hello,

I just installed RHEL3 on a brand new server, with samba and cups. The
packages used are RHEL3 official RPMs samba-3.0.9-1.3E.5 and
cups-1.1.17-13.3.32.

I configured samba with security = ADS, and i can authenticate my
users on our windows domain AD; everything works fine with files and
shares, etc.

When i configure a cups printer, and then export it to samba, i can
add drivers  thru the windows interface into the [print$] share as a
printer administrator, connect to it, download and install drivers,
print a test page. it just works like a charm.

But... if i look in the printer properties window, i can't access the
security information of the printer. when i click on the security tab,
i get this message: "Unable to display security information".

If i try to connect and auto install the printer drivers from a normal
user account, i get this message: "Unable to connect. Access denied"

I also tried with SERNET samba3 rpm version 3.0.20b, same problem.

When browsing the archive of this list, i found a post describing the
same problem, and Gerald (Jerry) Carter asked for the ouput of this
command:

[root at medellin cups]# rpcclient medellin -U CCI_74+administrateur  -c
'getprinter X535-C3 3'
Password:
        flags:[0x4]
DACL
        ACL     Num ACEs:       3       revision:       2
        ---
        ACE
                type: ACCESS ALLOWED (0) flags: 2
                Specific bits: 0x0
                Permissions: 0xe0000000: Generic execute access
Generic write access Generic read access
                SID: S-0-0

        ACE
                type: ACCESS ALLOWED (0) flags: 9
                Specific bits: 0x0
                Permissions: 0x10000000: Generic all access
                SID: S-1-5-21-57989841-113007714-682003330-500

        ACE
                type: ACCESS ALLOWED (0) flags: 2
                Specific bits: 0x0
                Permissions: 0x10000000: Generic all access
                SID: S-1-5-21-57989841-113007714-682003330-500

        Owner SID:      S-1-5-21-57989841-113007714-682003330-500


Does anyone know what cause this problem? Where should i look to
understand and hopefully fix this problem?

--
Grégory Benoist