Access denied, unable to connect

[Noel Kelly]

Hi All,

The good news - I can print absolutely fine.
The bad news - I cannot see the queue from Windoze, let alone pause, delete
etc.  The printer status box gives 'Access denied, unable to connect' in the
title.

I have set the permissions on the relevant spool directory (/tmp now) to 777
but to no avail.  In the logs, it seems to be failing at this command:

[2001/11/27 11:34:03, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(829)
  access DENIED for printer open

Anyone have any insights as to what might be causing this ?

I am running RH 6.2 with Samba 2.2.2 and ACLs using Winbind.

Many thanks,
Noel

==============================================================
[global]
        log file = /usr/local/samba/var/log.%m
        log level = 3

        workgroup = UK
        netbios name = BELLY
        server string = 2.2.2 Samba Server
        invalid users = root bin uucp sys
        encrypt passwords = Yes
        update encrypted = Yes

        os level = 0
        preferred master = False
        local master = No
        domain master = False

        security = domain
        password server = BRAIN
        smb passwd file = /usr/local/samba/private/smbpasswd

        wins server = 192.168.5.4
        name resolve order = wins host bcast

        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        winbind separator = +
        nt acl support = yes

        oplocks = yes
        level2 oplocks = yes

        load printers = yes
        printcap name = /etc/printcap
        printing = BSD
        print command = /usr/bin/lpr -P%p -r %s
        lpq command = /usr/bin/lpq -P%p %s
        lprm command = /usr/bin/lprm -P%p %j
        queuepause command = /usr/sbin/lpc -P%p stop
        queuepause command = /usr/sbin/lpc -P%p start


[printers]
        guest ok = yes
        public = yes
        printable = yes

==============================================================

[2001/11/27 11:34:03, 3] rpc_server/srv_pipe.c:api_rpcTNP(1184)
  api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX
  checking name: \\BELLY\canon405
[2001/11/27 11:34:03, 3]
rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(377)
  Setting printer type=\\BELLY\canon405
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(242)
  se_access_check: user sid is S-1-5-21-2025429265-764733703-725345543-1189
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(246)
  se_access_check: also S-1-5-21-2025429265-764733703-725345543-513
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(246)
  se_access_check: also S-1-5-21-2025429265-764733703-725345543-1114
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(246)
  se_access_check: also S-1-1-0
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(246)
  se_access_check: also S-1-5-2
[2001/11/27 11:34:03, 3] lib/util_seaccess.c:se_access_check(246)
  se_access_check: also S-1-5-11
****************************************************************************
********************
[2001/11/27 11:34:03, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(829)
  access DENIED for printer open
****************************************************************************
********************
[2001/11/27 11:34:03, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(186)
  Closed policy
[2001/11/27 11:34:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(417)
  free_pipe_context: destroying talloc pool of size 4841
[2001/11/27 11:34:05, 3] smbd/process.c:process_smb(860)
  Transaction 533 of length 96
[2001/11/27 11:34:05, 3] smbd/process.c:switch_message(667)
  switch message SMBntcreateX (pid 1289)
[2001/11/27 11:34:05, 3] smbd/nttrans.c:nt_open_pipe(561)
  nt_open_pipe: Known pipe spoolss opening.
[2001/11/27 11:34:05, 3] smbd/process.c:process_smb(860)
  Transaction 534 of length 124
[2001/11/27 11:34:05, 3] smbd/process.c:switch_message(667)
  switch message SMBwrite (pid 1289)
[2001/11/27 11:34:05, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(752)
  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2001/11/27 11:34:05, 3] smbd/pipes.c:reply_pipe_write(143)

Noel Kelly
Tarsus PLC
Commonwealth House
Chalk Hill Road
London
W6 8DW
United Kingdom

Direct Line	: (44) 020 8846 2701
Switchboard 	: (44) 020 8846 2700
Fax		: (44) 020 8846 2801