[Samba] general cups & access permissions woes

[Robin Marlow]

Hello all,
    I have been trying set up a linux box as a print server for our mixed
windows network.  It has samba working - everybody can see it & a shared
directory. I installed cups & that too seems to be fine - printing test
pages from the web interface works perfectly.  But i can't get them to talk.
I think this is mostly as i can't find a decent howto & so am poking around
a bit with no real understanding!
The printers show up in the network neighbourhood, but say "Access Denied,
unable to connect" next to them

When i try to print a test page from a windows box, I keep getting:
    print_job_start: insufficient permissions to open spool file
/var/spool/cups/smbprn.000018.orbvm1.

 so i chmod a+rw the cups directory & it still says the same.  so i tried
setting up the spool to /var/tmp which is already xrwxrwxrw & although
windows this time thought that it had sent the job off, nothing appeared in
the directory.

I have a sneaking suspicion that this is all due to logins & passwords....
can anybody help me?  or at least tell me where to RTFM? the man pages
rather skimp on samba / cups intergration.

Cheers,

    Robin Marlow

p.s. here are the relevant bits of my smb.conf

[global]
   workgroup = Da Flat
   server string = The Brio
   hosts allow = 192.168.1. 192.168.2. 127.
   locking = no
   log level = 0
   syslog = 0
   debuglevel = 0
   debug timestamp = no
   syslogonly = no
   security = share

 load printers = yes
 printing = cups
 printcap name = /etc/printcap

[printers]
   comment = All Printers
   path = /var/spool/cups
   create mask = 0700
   guest ok = Yes
   print ok = Yes
   read only = No
   writeable = yes
   browseable = Yes

[LaserJ2]
   Comment = Brio HPLJ III
   path = /var/tmp
   read only = No
   writeable = yes
   create mask = 0700
   guest ok = Yes
   print ok = Yes
   public = Yes