[Samba] CUPS and Samba without authorization

[Andrew Bartlett]

amoote at ivhs.com wrote:
> 
> Perhaps one of you could lend us a hand with this...
> 
> We are trying to setup an open access print server using RedHat 7.3 and
> Cups 1.15.
> We are seeing the following error message on some of the log files related
> to some Win2K users:
> 
> [2002/07/18 08:57:35, 0]
> rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(133)
>   connect_to_client: machine JLEE rejected the tconX on the IPC$ share.
> Error was : NT_STATUS_ACCESS_DENIED.
> [2002/07/18 09:40:11, 0]
> rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(133)
>   connect_to_client: machine JLEE rejected the tconX on the IPC$ share.
> Error was : NT_STATUS_ACCESS_DENIED.
> [2002/07/18 10:02:54, 0]
> rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(133)
>   connect_to_client: machine JLEE rejected the tconX on the IPC$ share.
> Error was : NT_STATUS_ACCESS_DENIED.
> [2002/07/18 10:03:49, 0]
> rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(133)
>   connect_to_client: machine JLEE rejected the tconX on the IPC$ share.
> Error was : NT_STATUS_ACCESS_DENIED.
> 
> It doesn't seem to effect all users of that platform, but they should all
> have the same settings.  These errors are new to me, and we don't know what
> to change to get rid of it.  Printing is working (as far as we can tell)
> but perhaps these errors will result more problems later, or it may be
> slowing down the printing process.

It seems to be the back-connect used for print queue notifications. 
Yes, MS is just plain braindead - their server makes a seperate
connection to the client to update the print queue data.

Not sure why the ACCESS_DENIED.  Do these machines have particular
security settings etc?

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net