[Samba] Only admin user can print?

Albrecht Dreß albrecht.dress at lios-tech.com
Tue Nov 14 16:18:00 GMT 2006


Thanks for all your tips - it's working now!

Cheers, Albrecht.

Dale Schroeder schrieb:
> Albrecht,
> 
> MYDOM is whatever you have as "WORKGROUP =".
> If "_" is your separator then "@MYDOM_mygroup" would be what you need.
> Our printers are open to all users for printing, so I can use either "guest ok = yes" or "public = yes".
> Our "valid user" restrictions are on data files, and they work as expected in 23c, so you should be able to restrict printer access as needed.
> e.g. valid users = @"DOMAIN_Domain Users"
> Fortunately, I had the luxury of using a test machine and did not upgrade production servers from 3.0.22 until 3.0.23c was released.
> 
> Dale
> 
> 
> Albrecht Dress wrote:
>> Hi Dale:
>>
>> I grabbed version 23c, built and installed it, but had no success so far...
>>
>> Dale Schroeder <dale at BriannasSaladDressing.com> wrote: 
>>   
>>> The "valid users" directive was broken in 23a and 23b.  You will need to 
>>> upgrade to 23c or find another method of controlling access to your shares.
>>> Also, the 23-series requires FQDN - "@DOM_grp" becomes "@DOMAIN\DOM_grp".
>>>     
>>
>> Maybe you can clarify this a little bit - When I log in into Winbloze, I use the
>> domain MYDOM.  In reality, this domain is called MYDOM.MYORG.COM.  The domain
>> has a group called mygroup.  From this, winbindd (using "_" as separator)
>> created the group "MYDOM_mygroup" which I used in the config file.  With the new
>> scheme, do I have to use "@MYDOM.MYORG.COM\mygroup", or is "@MYDOM\mygroup"
>> sufficient?
>>
>> Apart from that, what is the /default/ access mode to the printers?  Maybe it
>> would be interesting to see where the printer access fails.  Any help is welcome
>> - this is really a show-stopper, and I don't want to make everybody an admin!
>>
>> Cheers,
>> Albrecht
>>
>>   


Albrecht Dreß

-- 
LIOS Technology GmbH
Dr. Albrecht Dreß
Project Engineering / Software Design
Schanzenstrasse 6 - 20
D-51063 Köln
Germany

Phone +49 221 676 2742
Fax   +49 221 676 2069



More information about the samba mailing list