[Samba] samba+cups+ad

[jonr at destar.net]

Hello List,

I am using samba and cups as a print server and have added it into my  
2003 AD. What I am would like is to not install any drivers locally on  
the client but have samba automagically send the correct PPD to the  
client. I can add my samba server by using the 'net ads join -U  
Administrator' command and it works as do the commands 'wbinfo' and  
'getent passwd'. I can see the samba server in the 'Active Directory  
Users and Computers' and the printer and when I right click and say  
connect it does. When I pull up the properties page for the printer  
and hit the 'Print Test Page' I get a dialog box saying "Test page  
failed to print. Access Denied". I am logged into the DC with the same  
user as I have on the samba box but I still get the access denied, I  
even created a smbuser with same name but different password and still  
denied.

I used the cupsaddsmb for my printer to place the files in the correct  
directory. This would constantly fail when I left the "security = ADS"  
line in my smb.conf file. So I had to change it to user and it ran  
fine, I then changed the "security = user" back to "security = ADS".

Thanks for any help,

Jon

Here is my smb.conf:

# Global parameters
[global]
workgroup = SYSTEMS
realm = SYSTEMS.ALASKA.COM
load printers = yes
preferred master = no
server string = Samba print server
security = ADS
encrypt passwords = yes
log level = 3
log file = /var/log/samba/%m
max log size = 50
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind nested groups = Yes
winbind separator = +
printing = cups
printcap = cups
idmap uid = 10000-20000
idmap gid = 10000-20000

[printers]
comment = All Printers
path = /var/spool/cups
browseable = no
public = yes
printable = yes
guest ok = yes

[print$]
comment = Printer Drivers
path = /etc/samba/drivers
browseable = yes
guest ok = no
read only = no
write list = root