[Samba] SAMBA - Access control to printer sharings

[Fabiano Caixeta Duarte]

Hi you all!

I am mantaining a few printer severs using Samba 2.2.8 on a WinNT domain.

I've got some disk sharings controlled by 'read list' and 'write list',
limiting some groups. It worked just fine.

But now I need to get only one group printing on a printer sharing and
everybody else must be rejected.

As I said, people are logging in a WinNT Server. So that's the main part
of the global section:

[global]
   workgroup = DOMINIO
   security = server
   password server = winnt
   encrypt passwords = yes

And my printers section is like this:

[printers]
   guest ok = yes
   browseable = no
   writable = no
   printable = yes
   printer admin = root
   print command = /usr/bin/lpr -r -P %p -J"%J" %s
   lpq command = /usr/bin/lpq -P %p
   lprm command = /usr/bin/lprm -P %p %j
   valid users = @docentes

You can see that I'm using 'guest ok = yes'. That's just because WinXP
and Win2K users can't connect to the printer servers if I don't set this
option.

The problem is: If I don't set guest ok = yes, nobody using WinXP/2K
prints. If I set guest ok = yes, everybody prints. Even if valid users is
set to a special group (@docentes for instance).

So, what's the right option to get only one group getting access to my
printer sharing?

Thanks in advance!

--
Fabiano Caixeta Duarte
Seção Técnica de Informática
FEA-RP/USP