[Samba] Can not cancel print job

[Andrew Watkins]

Hello,

There has been a lot of e-mails about this topic and I am very surprised 
it is such a problem, since Samba is supposed to be a print / File 
server first and a lot more second.

Yes, I am having problems try to get NON-admin users to cancel there 
print jobs.

I have been using samba for years, but non "printer admin" user can not 
cancel print jobs all they get is "Accessed denied". I have also tried 
setting permissions on the printer device so that "Manage Documents" is 
set, but it does not make a difference. The error has nothing to do with 
the Solaris printing system, since /usr/bin/cancel is never called.

Error:
smbd[21198]: Permission denied-- user not allowed to delete, pause, or 
resume print job. User name: wstudent. Printer name: lp131.

log.smbd:
[2006/02/28 09:46:04, 10] lib/username.c:user_in_list(570)
   user_in_list: checking user wstudent in list
[2006/02/28 09:46:04, 10] lib/username.c:user_in_list(575)
   user_in_list: checking user |wstudent| against |andrew|
[2006/02/28 09:46:04, 10] lib/username.c:user_in_list(575)
   user_in_list: checking user |wstudent| against |root|

[global]
         debuglevel = 10
         comment = %h Samba %v
         server string = %h Samba %v
         workgroup = DCSNT
         hosts allow = 193.61.29. 193.61.28.
         hosts deny = 0.0.0.0/0
         locking = yes
         password level = 10
         domain master = no
         local master = no
         os level = 80
         wins support = no
         wins server = 193.61.29.179
         password server = loki hades
         security = domain
         encrypt passwords = yes
         preserve case = yes
         short preserve case = yes
         nt acl support = Yes
         printer admin = andrew,root
         load printers = no
         lprm command = /usr/bin/cancel %p-%j
         printcap name= lpstat

[print$]
         comment = Printer Driver Download Area
         path = /usr/local/samba/var/drivers
         browseable = no
         guest ok = no
         read only = yes
         write list = andrew,root

[lp131]
         comment = Tally T2070 Line Printer Room 131
         path = /var/spool/samba
         writable = no
         printable = yes
         public = yes
         guest ok = no

Setup:
	Solaris 9 and 10
	Samba 3.0.20(a) / 3.0.21c
	Windows XP sp2

Question:
- Has anyone got this working, so that non "printer admin" users can 
cancel print jobs? I guess it is a knock on effect of moving to the new 
print system where samba/Windows XP can load printer drivers 
automatically "\\host\printer".


As always, Thanks....


******************************************************************************
Andrew Watkins                            tel: 020-7631 6720
Unix Administrator                        fax: 020-7631 6727
System Group
Computer Science Department               e-mail: andrew at dcs.bbk.ac.uk
Birkbeck College (University of London) 
http://www.dcs.bbk.ac.uk/~andrew
Malet Street
London
WC1E 7HX
******************************************************************************