[Samba] Cups and Samba Access Denied

[John H Terpstra]

On Wed, 31 Dec 2003 jared at kfh.org wrote:

> Thanks for the response pretty cool getting a reply from the author of the
> book you were just reading!
>
> >I recommend that you update to CUPS 1.1.18 or later and make sure that
> >your Samba-3.0.1 is linked specifically with its libraries. That will help
> >resolve some of your issues.
> I was afraid of that, I will see how far I get compiling the binary on my
> woody system, but that may be my problem.
>
> >Given that you are using CUPS the "print command" will not be issued since
> >Samba will print direct via he cups libraries.
> I removed the line and it did not break my work around so at least I am
> cleaning out the junk.
>
> >By specifying "use client driver" you prevent the upload of the driver
> >files.
> Good to know, I made the driver share when I could not connect the normal
> way thinking that it was the problem.
>
> >Also, did you make sure that you uncommented the lines in the /etc/mime.*
> >files that have?
> >
> >application/octet-stream ...
> >
> >That will permit CUPS to print fully pre-processed jobs that your client
> >driver file prepared to go directly to the printer.
> Yes I did and after I did that I added the print command thinking I had to
> force cups to print raw. I also added the directive to allow anybody to
> print incase that was causing my issue:
> <Location /printers>
>   AuthType None
>   Order Deny,Allow
>   Deny From None
>   Allow From All
> </Location>
> But still I was getting the access denied.

FWIW, here is the extract from my /etc/cupsd.conf file:

<Location /admin>
AuthType Basic
AuthClass System
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.*
</Location>

<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.*
</Location>

These are my only changes from the default file.

>
> I can get a printer to add by creating a "local" port but I cannot seem to
> get ahold of the share without access denied. This prevents me from adding a

You must have a Microsoft network user account. You can add it using:

	smbpasswd -a 'username'

Where 'username' is already in the /etc/passwd file.

You should install the printer as if it is attached to a parallel port or
via USB. Then when that has finished installing, do not print a test page!
Immediately close the printer configuration dialog, reopen it, click on
the Printer item on the menu bar, click Properties, click the Ports tab.

Now add a local port. When prompted, add the UNC name of the printer like
this:

	\\server\printer

You should do this as the local Windows client machine Administrator. That
way the printer will be ready for all users to use it.

Hope this helps.

Cheers,
John T.

> printer with a logon script. Thats not normal right? I mean you are supposed
> to be able to add the printer with the share correct, If it's working like
> normal will the printer show up when you choose network printer in the
> printer menu and then click browse? Either way I will try to make a new
> cupsys binary with woodies libaries. Thanks for the book it's really nice to
> have and I got Roaming profiles working on Samba something we could never
> get to work on NT so that has to say something!
>
> Cheers,
>
> Jared
>
>
>
>
> -----Original Message-----
> From: John H Terpstra [mailto:jht at samba.org]
> Sent: Wednesday, December 31, 2003 1:13 PM
> To: jared at kfh.org
> Cc: samba at lists.samba.org
> Subject: Re: [Samba] Cups and Samba Access Denied
>
>
> Jared,
>
> I feel with you. I am the author of the book. :)
>
> On Wed, 31 Dec 2003 jared at kfh.org wrote:
>
> > I purchased the Samba 3.0 book and it has gotten me pretty far but I
> finally
> > had to go to the mailing list for this problem.
> >
> > Here is the issue, I am running Debian (woody) with samba 3.0.1-2 and
> cupsys
> > 1.1.14-5 I have also installed cupsys-bsd cupsys-client and smbclient
>
> I recommend that you update to CUPS 1.1.18 or later and make sure that
> your Samba-3.0.1 is linked specifically with its libraries. That will help
> resolve some of your issues.
>
> > foomatic-bin and as2ps follwing this
> > http://excess.org/docs/linux_windows_printing.html advice. Samba is
> running
> > in Domain mode and I can log on to the network and connect to file shares
> > just fine.
> >
> > Here is the issue: My printer will show up if in my xp box if I browse the
> > entire network, but if I double click it or right click on it, I get
> > "Operation could not be completed. access denied". I have managed to
> connect
> > to this printer by adding a local printer in XP and choosing the create
> port
> > option. But if I choose network option it asks me for a user name and
> > password and I get access denied. I have raw printing running and when I
> > create the port it seems to be working fine but for some reason I cannot
> > instlal it like a network printer on a NT box. Here the parts of my
> smb.conf
> > file:
> >
> > ### 1.4 - Printing ###
> >
> >   printing = cups
> >   printcap name = cups
> >   load printers = yes
> >     # If you want to automatically load your printer list rather
> >     # than setting them up individually then you'll need this.
> >
> >   show add printer wizard = yes
> >
> >
> > [printers]
> >   comment = All Printers
> >   browseable = yes
> >   path = /home/spooler
> >   printable = yes
> >   public = yes
> >   writable = no
> >   guest ok = no
> >   printer admin = jared, @IT
> >   create mode = 0700
> >   use client driver = yes
> >   print command = lpr -r -oraw -P%p %s
>
> Given that you are using CUPS the "print command" will not be issued since
> Samba will print direct via he cups libraries.
>
> By specifying "use client driver" you prevent the upload of the driver
> files. Here is my printing section, as it is on my network:
>
> [printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printer admin = root, jht
>         create mask = 0600
>         guest ok = Yes
>         printable = Yes
>         use client driver = Yes
>         default devmode = Yes
>         browseable = No
>
> For this system I do not want to upload drivers. The permissions on the
> /var/spool/samba directory are: 1755.
>
> Also, did you make sure that you uncommented the lines in the /etc/mime.*
> files that have?
>
> application/octet-stream ...
>
> That will permit CUPS to print fully pre-processed jobs that your client
> driver file prepared to go directly to the printer.
>
> >
> > [print$]
> >     # Some Windows clients will look for this share to hold
> >     # printer drivers.
> >   comment = Printer Drivers
> >   path = /home/drivers
> >   browseable = yes
> >   read only = yes
> >   guest ok = yes
> >   read only = yes
> >   write list = jared, @administrators
> >
> > I log in as jared for testing purposes. I have the print$ share up with
> all
> > the proper directories but I do not have any drivers installed, this is
> > becuase when I try to do it through XP I get "Operation could not be
> > completed. access denied".
>
> The "use client driver" kind of defeats having this share. :)
>
> Cheers,
> John T.
> --
> John H Terpstra
> Email: jht at samba.org
>

-- 
John H Terpstra
Email: jht at samba.org