Samba22a2 and NT4 printer driver installation

[Armin Burkhardt]

Hi everybody!
 
We are using samba for quite some time at our institute both as 
file- and print-server and as PDC. As the domain admin and
automatic NT printer driver download features are prerequisites
to get rid of our last NT-Server, we are currently testing
Samba22a2 as well as Samba22 cvs (as of March 7th).
 
We followed the instructions in PRINTER_DRIVER2.txt, and are
able to join the domain. The users in the NIS-group ntadm like me
are able to transfer the printer driver via the add printer wizard
to the server (the files there are owned by root, the
/var/log/samba/locks/*.tdm files are modified by root correctly).

The Win9x drivers are copied to the WIN40 directory as well
(for the sake of completeness: we used the latest Lexmark Optra
C710 PS3 driver, it installs locally without a flaw).

However, finally the add printer driver wizard fails with a message
" Installation failed, access has been denied" (Message translated
from german " Der Vorgang konnte nicht abgeschlossen werden.
Der Zugriff wurde verweigert).
 
We were investigating the problem during the last three days.
Here our findings.
 
The unix account "burkhard"  belongs to the unix group ntadm,
both passwd and group files are distributed via NIS, the NIS
master server is the PDC as well.

For this account, the command line
 
net user burkhard /domain
 
returns the correct information except for the global group
memberships where *dummy user is stated twice.
 
When we switch to the CVS version of March 7th, this changes to
*unix_group.2147483404, again twice.
 
We conclude that the server grants the domain admin rights
completely, while on the NT4 Workstation (SP5 by the way) we seem
to have some degree of administrator rights but not complete access.

The group information seems not to be available on the workstation
properly.
 
I've seen several similar reports on the list, but no solution so far.
 
I would appreciate any hint on this topic, thanks in advance.

Armin

------------------------------------------------------------------------
Our configuration file:
 
[global]
        workgroup = DVNTDOM
        server string = Samba Server %v
        interfaces = 134.105.XXX.YYY / 255.255.248.0
        encrypt passwords = Yes
        map to guest = Bad User
        smb passwd file = /etc/smbpasswd
        log file = /var/log/samba/log.%m
        max log size = 50
        name resolve order = wins lmhosts host bcast
        deadtime = 30
        load printers = No
        show add printer wizard = Yes
        domain admin group = @ntadm
        logon script = logon.bat
        logon path = \\%N\profile\nt\%U
        logon drive = z:
        domain logons = Yes
        os level = 65
        preferred master = True
        domain master = True
        wins server = 134.105.XXX.ZZZ
        admin users = @ntadm
        printer admin = @ntadm
        hosts allow = 134.105.XXX. / 255.255.248.0  

[netlogon]
        comment = Netlogon Service
        path = /lhome/netlogon
        locking = No
 
[profile]
        comment = User Profiles
        path = /lhome/profile
        read only = No
        create mask = 0600
        directory mask = 0770
 
[print$]
        comment = NT printer drivers
        path = /lhome/printers
        write list = @ntadm
        read only = No
        guest ok = Yes                
-- 
 ------------------------------------------------------------------------------
|Dr. Armin Burkhardt     DVFKF | Heisenbergstrasse 1 | Phone: (49) 711-6891605 |
|MPI fuer Festkoerperforschung | D-70569 STUTTGART   | FAX  : (49) 711-6891632 |
|armin.burkhardt at fkf.mpg.de             http://www.mpi-stuttgart.mpg.de/EDV    |
 ------------------------------------------------------------------------------