[Samba] Printing problems with w2k clients

[thomas_tiedtke at de.schindler.com]

---------------------- Weitergeleitet von Thomas Tiedtke/BLN/SDH/SCHINDLER on 06.03.2002 17:39 ---------------------------
An:     samba at lists.samba.org
Kopie: 
Thema:  Printing problems with w2k clients

... resend it! ... in hopes for any hints, maybe!

Regards, Thomas
---------------------- Weitergeleitet von Thomas Tiedtke/BLN/SDH/SCHINDLER on 26.02.2002 12:53 ---------------------------
An:     samba at lists.samba.org
Kopie: 
Thema:  Printing problems with w2k clients

We have a strange problem with our w2k clients:

We use two Samba server (one is PDC and the other is Print-Server -
operate in security=server mode with password server=PDC). All printers
are configured on the Print-Server with the Windows NT Printer Wizzard:
uploading driver for W9x, NT 4.0 and W2k; setting misc. options, like
Paper feeder and so on .. .
So far so good!
Printing from W9x and NT 4.0 Clients is working without any problems! But
the W2k Clients get a "Access denied" after the first print job! When I 
look into a level 6 log, I see:

[2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(244)
  se_access_check: user sid is
S-1-5-21-1833108988-1007584141-3113639171-7268
[2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247)
  se_access_check: also S-1-5-21-1833108988-1007584141-3113639171-1621
[2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247)
  se_access_check: also S-1-1-0
[2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247)
  se_access_check: also S-1-5-2
[2002/02/20 14:58:03, 3] lib/util_seaccess.c:se_access_check(247)
  se_access_check: also S-1-5-11
[2002/02/20 14:58:03, 5] lib/util_seaccess.c:se_access_check(306)
  se_access_check: access (f000c) denied.
[2002/02/20 14:58:03, 4] printing/nt_printing.c:print_access_check(3941)
  access check was FAILURE
[2002/02/20 14:58:03, 3]
rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(747)
  access DENIED for printer open

I don´t understand why ... all user account are fine! No access violation
appears on the share, so I assume that the user accounts are clear!

The printer are configured:

[printers]
                 path = /var/spool/samba
                 guest ok = Yes
                 printable = Yes
                 browseable = No

Ok ... then I changed:use client driver = Yes

That helps! The w2k clients can print twice jobs and more ... But The
printer administration is a horror! If a root user is connected to a
printer on the Print-Server, the client pulls the printer driver from the
server in a infinity loop and eats too much cpu on the client and server
... so it is inpossible to make any changes to the printer settings.
If I change "use client driver = NO" ... The administration ist fine, but 
the clients can´t print a second job!

This behaviour appears with the samba version 2.2.2, 2.2.3, 2.2.3a and
2.2.4-pre (cvs copy at 20 Feb. 02 and 4 Mar. 02). Well, ... "use client 
driver" comes
with 2.2.3

To move the Printers to the Samba PDC doesn´t help. The behaviour is the
same!

Same infos about our environment:
- Server Plattform is HP D-Class with HP-UX 10.20 (Patch Level: Support
Plus Sep. 2001)
- Compiler ist gcc 3.01 with the latest binutils
- Configure without any changes except installation paths
- Compiling without any errors or warnings


Has anyone a idea? All comments are welcome! If I can't solve this
behavior, I have to freeze our "W2K Client Migration Projekt" immediately
and someone (perhaps my boss)  wishes to order some Microsoft Server ...
:-((

Regards, Thomas