[Samba] 3.0.13 winxp pro printers offline and don't come online, but you can print to them (shorter version - no log level 10)

Urs Rau urs.rau at uk.om.org
Mon Mar 28 13:43:55 GMT 2005


Friends,

I have upgraded to 3.0.13 as I thought the random way in which only some
printers are showing as offline on some win xp workstations, and refuse
to come online, even if I use "Use Printer Online" in the properties and
on the other hand on other winxp pro workstations all printers show the
same behaviour, they are all offline. But even though they all show
offline you can print to them.

This is the case regardless whether I am a restricted user or even a
domain admin. The one thing that might be a factor is that all of the 
affected printers are defined as "local printer" on the workstation. 
(and the port is defined as the relevant linux server share e.g 
\\linux\copier_pcl)

I have done a level 3 log first, in case it is really obvious, and will
also enclose the relevant sections of the smb.conf further down. Hoping 
I won't need a lvel 10 log, or if I do it might well get tto big.

[2005/03/27 22:17:31, 3] smbd/service.c:make_connection_snum(642)
   fin-70 (10.37.1.163) connect to service IPC$ initially as user
kerstinr (uid=600, gid=151) (pid 17421)
[2005/03/27 22:17:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/03/27 22:17:31, 3] smbd/reply.c:reply_tcon_and_X(455)
   tconX service=IPC$
[2005/03/27 22:17:31, 3] smbd/process.c:process_smb(1091)
   Transaction 4 of length 106
[2005/03/27 22:17:31, 3] smbd/process.c:switch_message(886)
   switch message SMBntcreateX (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (600, 151) - sec_ctx_stack_ndx = 0
[2005/03/27 22:17:31, 3] smbd/nttrans.c:nt_open_pipe(514)
   nt_open_pipe: Known pipe spoolss opening.
[2005/03/27 22:17:31, 3] smbd/process.c:process_smb(1091)
   Transaction 5 of length 140
[2005/03/27 22:17:31, 3] smbd/process.c:switch_message(886)
   switch message SMBwriteX (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
   api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe.c:check_bind_req(762)
   check_bind_req for \PIPE\spoolss
[2005/03/27 22:17:31, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
   writeX-IPC pnum=76e6 nwritten=72
[2005/03/27 22:17:31, 3] smbd/process.c:process_smb(1091)
   Transaction 6 of length 63
[2005/03/27 22:17:31, 3] smbd/process.c:switch_message(886)
   switch message SMBreadX (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:31, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
   readX-IPC pnum=76e6 min=1024 max=1024 nread=68
[2005/03/27 22:17:31, 3] smbd/process.c:process_smb(1091)
   Transaction 7 of length 286
[2005/03/27 22:17:31, 3] smbd/process.c:switch_message(886)
   switch message SMBtrans (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:31, 3] smbd/ipc.c:reply_trans(539)
   trans <\PIPE\> data=198 params=0 setup=2
[2005/03/27 22:17:31, 3] smbd/ipc.c:named_pipe(334)
   named pipe command on <> name
[2005/03/27 22:17:31, 3] smbd/ipc.c:api_fd_reply(294)
   Got API command 0x26 on pipe "spoolss" (pnum 76e6)
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 0
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
   api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
   checking name: \\linux\copier_pcl
[2005/03/27 22:17:31, 3]
rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(469)
   Setting printer type=\\linux\copier_pcl
[2005/03/27 22:17:31, 3] lib/util_seaccess.c:se_access_check(251)
[2005/03/27 22:17:31, 3] lib/util_seaccess.c:se_access_check(252)
   se_access_check: user sid is
S-1-5-21-4228724095-3962383925-909725441-2200
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1303
   se_access_check: also S-1-1-0
   se_access_check: also S-1-5-2
   se_access_check: also S-1-5-11
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1177
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1181
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-513
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1235
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1299
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2071
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2409
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2413
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 74
[2005/03/27 22:17:31, 3] smbd/process.c:process_smb(1091)
   Transaction 8 of length 132
[2005/03/27 22:17:31, 3] smbd/process.c:switch_message(886)
   switch message SMBtrans (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:31, 3] smbd/ipc.c:reply_trans(539)
   trans <\PIPE\> data=44 params=0 setup=2
[2005/03/27 22:17:31, 3] smbd/ipc.c:named_pipe(334)
   named pipe command on <> name
[2005/03/27 22:17:31, 3] smbd/ipc.c:api_fd_reply(294)
   Got API command 0x26 on pipe "spoolss" (pnum 76e6)
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 0
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
   api_rpcTNP: rpc command: SPOOLSS_CLOSEPRINTER
[2005/03/27 22:17:31, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
   Closed policy
[2005/03/27 22:17:31, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 0
[2005/03/27 22:17:36, 3] smbd/process.c:process_smb(1091)
   Transaction 9 of length 286
[2005/03/27 22:17:36, 3] smbd/process.c:switch_message(886)
   switch message SMBtrans (pid 17421) conn 0x9f2aec8
[2005/03/27 22:17:36, 3] smbd/ipc.c:reply_trans(539)
   trans <\PIPE\> data=198 params=0 setup=2
[2005/03/27 22:17:36, 3] smbd/ipc.c:named_pipe(334)
   named pipe command on <> name
[2005/03/27 22:17:36, 3] smbd/ipc.c:api_fd_reply(294)
   Got API command 0x26 on pipe "spoolss" (pnum 76e6)
[2005/03/27 22:17:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 0
[2005/03/27 22:17:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
   api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
   checking name: \\linux\copier_pcl
[2005/03/27 22:17:36, 3]
rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(469)
   Setting printer type=\\linux\copier_pcl
[2005/03/27 22:17:36, 3] lib/util_seaccess.c:se_access_check(251)
[2005/03/27 22:17:36, 3] lib/util_seaccess.c:se_access_check(252)
   se_access_check: user sid is
S-1-5-21-4228724095-3962383925-909725441-2200
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1303
   se_access_check: also S-1-1-0
   se_access_check: also S-1-5-2
   se_access_check: also S-1-5-11
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1177
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1181
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-513
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1235
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-1299
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2071
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2409
   se_access_check: also S-1-5-21-4228724095-3962383925-909725441-2413
[2005/03/27 22:17:36, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1770)
   access DENIED for printer open
[2005/03/27 22:17:36, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
   Closed policy
[2005/03/27 22:17:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
   free_pipe_context: destroying talloc pool of size 74

+++++++++++++++++++++++++++++++++++++++++++++
now the smb.conf
+++++++++++++++++++++++++++++++++++++++++++++

# Global parameters
[global]
	dos charset = CP437
	netbios name = LINUX
	server string = ""
	passdb backend = tdbsam
	passwd program = /usr/local/sbin/sysadm-samba.pl --changepw=%u
	passwd chat = *new*password* %n\n *changed*
	unix password sync = Yes
	log level = 3
	log file = /var/log/samba/%m.log
	smb ports = 139 445
	read raw = No
	name resolve order = wins bcast
	time server = Yes
	socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192
SO_SNDBUF=8192
	printcap name = cups
	show add printer wizard = No
	add machine script = /usr/sbin/adduser -n -g machines -c Machine -d
/dev/null -s /bin/false %u
	logon script = logon.bat
	logon path = \\%L\profiles\%U
	logon drive = h:
	logon home = \\%L\%U\.profile
	domain logons = Yes
	os level = 255
	preferred master = Yes
	domain master = Yes
	wins support = Yes
	message command = bash -c 'cat %s | logger -t %f' &
	printer admin = @dom_admin
	read only = No
	force create mode = 0660
	directory mask = 02770
	force directory mode = 02000
	map acl inherit = Yes
	min print space = 2048
	cups options = "raw"
	veto files = lost+found/proc/dev
	veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF
	dos filetimes = Yes
	dos filetime resolution = Yes

[dat]
	comment = Users and workgroups
	path = /usr/local/samba/dat

[homes]
	comment = Your home directory
	force create mode = 00

[netlogon]
	comment = Domain logon service
	path = /usr/local/samba/netlogon
	write list = root, @dom_admin
	read only = Yes
	browseable = No

[pdf]
	comment = PostScript to PDF Converter
	path = /var/tmp
	create mask = 0600
	printable = Yes
	printing = bsd
	print command = . /etc/sysconfig/rc.sysadm;  ulimit -c 0;  ulimit -S -d
$PDF_MEM_LIMIT;  ps2pdf %s "%H/%J.pdf";  chmod 640 "%H/%J.pdf";  rm -f %s
	lpq command = lpq -P'%p'
	lprm command = lprm -P'%p' %j

[printers]
	comment = All Printers
	path = /var/spool/samba
	read only = Yes
	guest ok = Yes
	printable = Yes
	browseable = No

[profiles]
	comment = User Profiles
	path = /usr/local/samba/profiles
	profile acls = Yes
	root preexec = PROFILE=/usr/local/samba/profiles/%u; if [ ! -e PROFILE
]; then mkdir -pm700 $PROFILE; chown %u.%g $PROFILE;fi

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

and now my level 10 log

the xp workstation is Fin-70

the user is kerstinr

the domain is called WORKGROUP

the first printer that is offline is "copier (pcl)" queue name copier_pcl

the second printer that us also offline is "laser (ps)" queue name laser_ps

I guess some of the relevant sections are around [2005/03/27 23:07:54,
3] rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1770)
   access DENIED for printer open

and maybe [2005/03/27 23:07:42, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1770)
   access DENIED for printer open


I hope this is an obvious one for you.

Regards,

Urs Rau



More information about the samba mailing list