[Samba] SAMBA - Access control to printer sharings

Fabiano Caixeta Duarte fabiano at fearp.usp.br
Wed Nov 3 12:13:31 GMT 2004

Hi you all!

I am mantaining a few printer severs using Samba 2.2.8 on a WinNT domain.

I've got some disk sharings controlled by 'read list' and 'write list',
limiting some groups. It worked just fine.

But now I need to get only one group printing on a printer sharing and
everybody else must be rejected.

As I said, people are logging in a WinNT Server. So that's the main part
of the global section:

   workgroup = DOMINIO
   security = server
   password server = winnt
   encrypt passwords = yes

And my printers section is like this:

   guest ok = yes
   browseable = no
   writable = no
   printable = yes
   printer admin = root
   print command = /usr/bin/lpr -r -P %p -J"%J" %s
   lpq command = /usr/bin/lpq -P %p
   lprm command = /usr/bin/lprm -P %p %j
   valid users = @docentes

You can see that I'm using 'guest ok = yes'. That's just because WinXP
and Win2K users can't connect to the printer servers if I don't set this

The problem is: If I don't set guest ok = yes, nobody using WinXP/2K
prints. If I set guest ok = yes, everybody prints. Even if valid users is
set to a special group (@docentes for instance).

So, what's the right option to get only one group getting access to my
printer sharing?

Thanks in advance!

Fabiano Caixeta Duarte
Seção Técnica de Informática

More information about the samba mailing list