[Samba] Only admin user can print?

[Dale Schroeder]

Albrecht,

MYDOM is whatever you have as "WORKGROUP =".
If "_" is your separator then "@MYDOM_mygroup" would be what you need.
Our printers are open to all users for printing, so I can use either "guest ok = yes" or "public = yes".
Our "valid user" restrictions are on data files, and they work as expected in 23c, so you should be able to restrict printer access as needed.
e.g. valid users = @"DOMAIN_Domain Users"
Fortunately, I had the luxury of using a test machine and did not upgrade production servers from 3.0.22 until 3.0.23c was released.

Dale


Albrecht Dress wrote:
> Hi Dale:
>
> I grabbed version 23c, built and installed it, but had no success so far...
>
> Dale Schroeder <dale at BriannasSaladDressing.com> wrote: 
>   
>> The "valid users" directive was broken in 23a and 23b.  You will need to 
>> upgrade to 23c or find another method of controlling access to your shares.
>> Also, the 23-series requires FQDN - "@DOM_grp" becomes "@DOMAIN\DOM_grp".
>>     
>
> Maybe you can clarify this a little bit - When I log in into Winbloze, I use the
> domain MYDOM.  In reality, this domain is called MYDOM.MYORG.COM.  The domain
> has a group called mygroup.  From this, winbindd (using "_" as separator)
> created the group "MYDOM_mygroup" which I used in the config file.  With the new
> scheme, do I have to use "@MYDOM.MYORG.COM\mygroup", or is "@MYDOM\mygroup"
> sufficient?
>
> Apart from that, what is the /default/ access mode to the printers?  Maybe it
> would be interesting to see where the printer access fails.  Any help is welcome
> - this is really a show-stopper, and I don't want to make everybody an admin!
>
> Cheers,
> Albrecht
>
>