[Samba] Samba 2.2.5 and printers
Van Sickler, Jim
vansickj-eodc at Kaman.com
Thu Jun 27 12:29:02 GMT 2002
I saw a msg that reminded me of something:
it may be the initial IPC$ connection that is
being denied. That's for the Guest user, I think.
Guest is the Win2k equivalent of Everybody.
I created a user called smb_nobody, no login allowed
(can't use the account to hack in via a shell)
you can skip this and use the user ftp, as others do.
in smbusers, mapped nobody=smb_nobody
or nobody=ftp, if you use the user ftp
in smb.conf:
map to guest=Bad User
guest account=smb_nobody
(Bad User is an u
nknown connection, like IPC$, I guess)
in [EPSON660], put
guest ok=yes
-------------------------------------------------------------------
Look at printer_driver2.html for more explicit info.
Here's a pertinent excerpt about map to guest=Bad User:
Note that this parameter is needed to set up "Guest" share services
when using security modes other than share. This is because in these
modes the name of the resource being requested is not sent to the
server until after the server has successful
ly authenticated the
client so the server cannot make authentication decisions at the
correct time (connection to the share) for "Guest" shares
Hope this helps,
Jim
> -----Original Message-----
> From: r_ducomun at netcourrier.com [mailto:r_ducomun at netcourrier.com]
> Sent: Thursday, June 27, 2002 12:01 PM
> To: vansickj-eodc at Kaman.com
> Cc: samba at lists.samba.org
> Subject: RE: [Samba] Samba 2.2.5 and printers
>
>
> Thanks for your tips, anyway it didn't solve my problem. I
> always get a
n acces denied from windows when I want to
> connect to my shared printer. I also tried adding a guest
> account, but it didn't change anything. Here is an output the
> log level 3:
>
> [2002/06/26 21:08:24, 3] rpc_server/srv_pipe.c:api_rpcTNP(1180)
> api_rpcTNP: pipe 29165 rpc command: SPOOLSS_OPENPRINTEREX
> checking name: \\Bob\epson660
> [2002/06/26 21:08:24, 3]
> rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype
> (379)
> Setting prin
> ter type=\\Bob\epson660
> [2002/06/2
6 21:08:24, 3]
> rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(11
> 07)
> access DENIED for printer open
> [2002/06/26 21:08:24, 3]
> rpc_server/srv_lsa_hnd.c:close_policy_hnd(205)
> Closed policy
>
>
>
> ----Message réexpédié----
> >Date: Wed, 26 Jun 2002 12:36:47 -0400
> >De: "Van Sickler, Jim" <vansickj-eodc at Kaman.com>
> >Sujet: RE: [Samba] Samba 2.2.5 and printers
> >A: "'r_ducomun at netcourrier.com'" <r_ducomun at netcourrier.com>,
> >
> >It looks like you have a conflict
>
>be
> tween lprng rights and samba rights.
> >
> >LPRng is 0700 for the dir, and 0600 for
> >the files within. Samba is 0777 for
> >the dir and files.
> >
> >1. create /var/spool/lpd/epson660
> >
> >2. edit /etc/printcap or /usr/local/etc/printcap
> >:sd= entry for the epson660 to reflect the change
> >
> >3. delete the /var/spool/lpd/samba dir & files
> >
> >4. run lpc reread
> >
> >5. run checkpc -f -V to fix the dir/perm's
> >
> >6. create /var/spool/samba/epson660
> >
> >7.
edit the smb.conf [epson660
> >] path= to refl
> ect
> >the change
> >
> >8. chown -R root.wheel (OpenBSD) or root.root (Linux?)
> >/var/spool/samba
> >
> >9. chmod -R 1777 /var/spool/samba
> >
> >10. run testparm to see if samba is ok.
> >
> >11. run lpc reread and restart samba
> >
> >12. try a test page to see if it works again
> >
> >Let us know...
> >
> >Jim
> >
> >P.S. from the looks of it, you can move
> >the (lprng) command stuff to [Global] and
> >delete the [Printers] s
ection entirely.
> >
> >
> >> -----Original Message-----
> >> From: r_ducomun at netcourrier.com [
> mailto:r_
> >ducomun at netcourrier.com]
> >> Sent: Wednesday, June 26, 2002 8:10 AM
> >> To: samba at lists.samba.org
> >> Subject: [Samba] Samba 2.2.5 and printers
> >>
> >>
> >> I'm currently having a problem with the new released Samba
> >> 2.2.5: I cannot print anymore on my shared printer. What is
> >> strange is that It worked fine with samba 2.2.4, but now I
> >> got an access denied whene
ver I try to access the printer...
> >>
> >> /var/spool/lpd/samba is chmod 777 and the username is in
> the group lp
> >>
> >>
> Here is part of my smb.co
> >nf:
> >> [global]
> >> workgroup = HOME
> >> netbios name = BOB
> >> server string = %h server (Samba %v)
> >> interfaces = 192.168.10.0/255.255.255.0
> >>
> >> os level = 65
> >> preferred master = True
> >> local master = yes
> >> domain master = auto
> >>
wins support = yes
> >> dns proxy = No
> >> invalid users = root
> >> printing = lprng
> >> [printers]
> >> comment = All Printers
> >>
> path = /var/spool/lpd/samba
> >>
> > printer admin = @lp
> >> read only = Yes
> >> create mask = 0755
> >> guest ok = Yes
> >> printable = Yes
> >> print ok = yes
> >> print command = /usr/bin/lpr -P%p -r %s
> >> lpq
> >> command = /usr/bin/lpq -P%p
> >> lprm command = /usr/bin/lprm -P%p %j
> >> lppause command = /usr/sbin/lpc hold %p %j
> >> lpresume command = /usr/sbin/lpc release %p %j
> >> queuepause command = /u
> sr/sbin/lpc -P%p stop
> >> queueresume command = /usr/
> >sbin/lpc -P%p start
> >> browseable = No
> >> [epson660]
> >> comment = Epson Stylus color 660
> >> path = /var/spool/lpd/samba
> >> printer admin = @lp
> >> read only = No
> >>
create mask = 0755
> >> guest ok = Yes
> >> printable = Yes
> >> print ok = yes
> >> use client driver = yes
> >> printer name = epson660
> >>
> >>
>
> ------------------------------------------
> -------------------
> NetCourrier, votre bureau virtuel sur Internet : Mail,
> Agenda, Clubs, Toolbar...
> Web/Wap : www.netcourrier.com
> Téléphone/Fax : 08 92 69 00 21 (0,34 € TTC/min)
> Minitel: 3615 NETCOURRIER (0,15 € TTC/min)
>
> ôAETiT
>
7AE
More information about the samba
mailing list