[Samba] Re: Samba 2.2.2 printing: uploading drivers ok, ERROR when trying to hit ok. NOT APW

[Gerald Carter]

On Wed, 23 Jan 2002, Bryan Fetzer wrote:

> This Samba server is setup as a "member" server in an
> Existing domain running the Winbind Daemon. I followed
> the doc's on how to configure Winbind to the letter.
> When I run the following commands I get the expected
> output to have winbind running correctly. 
> getent passwd-shows all nt domain users
> getent group -shows all nt domain groups
> wbinfo -u    -shows all nt domain users
> wbinfo -g    -shows all nt domain groups
> wbinfo -t    -says "secret is good"
> Another Samba list user suggested that I give my
> account uid 0:0 access, I'm not sure how to do that
> when my account is being pulled from an existing
> domain.... ie. here's how my account shows up.
> 
> getent passwd MAP_DOMAIN+BF
> 
> MAP_DOMAIN+BF:x:10076:10008:Bryan
> Fetzer:/home/MAP_DOMAIN/bf:/bin/bash
> 
> My domain account is implied in the "printer admin" of
> the Global config in my smb.conf I will now list the
> applicable sections of smb.conf that may help you help
> me. I really really appreciate this. Basically how do
> I access the Samba server as "root or root equivalent"
> if I am coming in with NTDOMAINFIRST+USERNAME????
> [global]
>         interfaces = 192.168.7.245
>         wins server = 192.168.7.239
>         domain master = False
>         announce version = 4.0
>         pam password change = Yes
>         printing = cups
>         winbind uid = 10000-20000
>         dns proxy = No
>         update encrypted = Yes
>         encrypt passwords = Yes
>         template shell = /bin/bash
>         socket options = TCP_NODELAY SO_RCVBUF=8192
> SO_SNDBUF=8192
>         min passwd length = 0
>         printcap name = lpstat
>         winbind cache time = 10
>         max log size = 50
>         preferred master = no
>         password server = *
>         security = domain
>         printer admin = MAP_DOMAIN+Administrator,
> MAP_DOMAIN+BF, root, @"MAP_DOMAIN+Domain Admins",
>         #@ntadmin, @MAP_DOMAIN+Domain Admins,

Assuming this shoudl have been one line, but the #@ntadmin may be causing 
your problems.  Have you check the debug logs for "access check".  A 
printer admin should never have to go through "print_acc_check()"




cheers, jerry
 ---------------------------------------------------------------------
 Hewlett-Packard                                     http://www.hp.com
 SAMBA Team                                       http://www.samba.org
 --                                            http://www.plainjoe.org
 "Sam's Teach Yourself Samba in 24 Hours" 2ed.      ISBN 0-672-32269-2
 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--