[Samba] Problem with job removal

[Ryan Novosielski]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are you refreshing? Sometimes refreshing is slow, but deletes are quick.
Try F5.
 ---- _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - User Support Spec. III
 |$&| |__| |  | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630


Arthur Guez wrote:
> Thanks for your input.
> Actually we tried using samba version 3.0.22 and changing the winbind
> separator to a +, and  now it works fine.
> Altough the deleting is something slow, but that might be normal.
> 
> Arthur
> 
> On 5/31/06, Ryan Novosielski <novosirj at umdnj.edu> wrote:
>>
> I use:
> 
> printing = lprng
> print command = /opt/LPRng/bin/lpr -P%p -U%U -J'%J' -r %s
> lpq command = /opt/LPRng/bin/lpq -P%p
> lprm command = /opt/LPRng/bin/lprm -P%p -U%U %j
> lppause command = /opt/LPRng/sbin/lpc -U%U hold %p %j
> lpresume command = /opt/LPRng/sbin/lpc -U%U release %p %j
> queuepause command = /opt/LPRng/sbin/lpc -U%U -P%p stop
> queueresume command = /opt/LPRng/sbin/lpc -U%U -P%p start
> 
> 
> Arthur Guez wrote:
>> Hi,
> 
>> We've been stuck with this problem for a while now and we believe I
>>  tried enough potential solutions to justify my posting here. We're
>> using samba 3.0.14a in Sarge in order to allow printing from
>> Windows workstations (The authentication works with
>> AD+Kerberos+Winbind) to a set of shared printers. Printing works
>> perfectly but we would like to allow users to have control over the
>> jobs (most importantly remove jobs) they submit and them only.
>> Unfortunately this does not seem to work with any of the
>> configurations we've tried. When a job is cancelled, it is replaced
>>  in the windows queue by a job called "remote downlevel document"
>> Here are the relevant sections of our smb.conf file: (without any
>> of the hacks we attempted)
> 
>> [printers] comment = All Printers path = /var/spool/lpd printable =
>> yes printing = lprng load printers = yes printcap name =
>> /etc/printcap guest ok = no print command =       /usr/bin/lpr -P%p
>> -r %s lpq command   =      /usr/bin/lpq -P%p lprm command  =
>> /usr/bin/lprm -P%p %j lppause command =     /usr/sbin/lpc hold %p
>> %j lpresume command =    /usr/sbin/lpc release %p %j queuepause
>> command =  /usr/sbin/lpc stop %p queueresume command =
>> /usr/sbin/lpc start %p
> 
>> One of the things we've tried to do was to replace the lrprng
>> commands called by samba with setuid programs which call the same
>> commands but specify the user using the -U option. This works for
>> lpr as desired but for some unknown reason it seems that the
>> program that should be called instead of lprm is only called at
>> times when a user tries to remove a "remote downlevel document".
>> (When called on a "normal" job, it gets turned into a remote
>> downlevel, but the program is NOT called) Here is the same file as
>> above, configured for the above method: (we're using the default
>> lpd.perms)
> 
>> [printers] comment = All Printers path = /var/spool/lpd printable =
>> yes printing = lprng load printers = yes printcap name =
>> /etc/printcap guest ok = no print command =      /usr/bin/setlpr
>> "%U@%M" "%p" "%s" lpq command   =      /usr/bin/lpq -P%p lprm
>> command  =      /usr/bin/setlprm "%U@%M" "%p" "%j" ...
> 
>> and the programs look like this:  (they are setuid) setuid(0)
>> system("lprm -U%s -P%s %s", arg1, arg2, arg3);
> 
>> Also, we tried to modify the source, but we were surprised by the
>> fact that samba is doing so much permission checking,  isn't that
>> the role of lprng ?
> 
>> Any kind of help would be greatly appreciated, thanks in advance.
> 
>> Arthur
> 
>> NOTE: Our users are of the form "CAMPUS\username". I don't know if
>> the backslash can cause a problem, but without using the -U option,
>> the owner appears as "CAMPUS\username" in lpq but just "username"
>> in the windows queue, and then "CAMPUS\username" in the windows
>> queue when it is a remote downlevel document. When using our
>> programs with the -U option it's just "username" everywhere.
> 
> --
> ---- _  _ _  _ ___  _  _  _
> |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - User Support Spec. III
> |$&| |__| |  | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922)
> \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
>>
>>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)

iD8DBQFEgG3Rmb+gadEcsb4RAuDeAJwKTQS7w9T0p4k/HU/E773N6LuhxwCgv5R0
OkyjdweH8E+/fGRxCULBhQk=
=0hyf
-----END PGP SIGNATURE-----