[Samba] result was WERR_ACCESS_DENIED

[James Watkins]

I think I'm having a similar problem to you and I've had no reply as yet 
(except an out-of-office one) to my post.
I think it's just an authentication problem.  I've got security = domain 
and I'm guessing that since the user 'root' is not present in my domain 
(and even if it was it wouldn't necessarily have any clout on the samba 
print server anyway), logging into the samba server as root doesn't give 
you the permissions to do 'setdriver'.  I've tried adding a domain user 
(DOMAIN\USER style) into the 'printer admin' option for the Printers 
share.  I've tried adding my domain user to a local group (ntadmins) and 
adding @ntadmins to the 'printer admin' option.  I've tried using 'net 
rpc rights grant...' to give print management rights to my domain user. 
  Still no joy.  I've decided to change to 'security = server' in the 
hope that I can then get the printers configured as I want them before 
changing back to 'security = domain' but I haven't had the time to do 
this yet.  I'd like to know if there is a more elegant solution (if 
indeed my proposal is a solution) so I'd like to know if you've found 
out anything useful.

Cheers,
James.


E. Dandrades wrote:
> Anyone know what this means and how to fix it?
> 
> Thanks.
> 
> Running command: rpcclient 10.0.0.1 -N -U'root%password' -c 'setdriver HPPRINTER HPPRINTER'
> Connecting to host=10.0.0.1
> Connecting to 10.0.0.1 at port 445
> Doing spnego session setup (blob length=58)
> got OID=1 3 6 1 4 1 311 2 2 10
> got principal=NONE
> Got challenge flags:
> Got NTLMSSP neg_flags=0x608a0215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60080215
> lsa_io_sec_qos: length c does not match size 8
> SetPrinter call failed!
> result was WERR_ACCESS_DENIED
> 
> Password for root required to access 10.0.0.1 via SAMBA: