Fw: [Samba] printer admin option replacement on stand alone (not domain) print server running version 3.0.25

[Richard Chapman]

Hi Vickie

I have been following your thread in the samba list - and I think I am 
wrestling with a similar problem. I want to upload windows printer 
drivers to a workgroup samba server. My samba is also 3.0.25. on a 
Centos 5.1 server.

I have put the "enable privilege = yes" into smb.conf - and restarted samba.
However - unlike you - when I try the command:

#net rpc rights grant 'rhc' SePrintOperatorPrivilege
And give the root password, I get the error:
Failed to grant privileges for rhc (NT_STATUS_ACCESS_DENIED)

"rhc" is a user on both the linux server and a windows client machine - though I must admit I am confused about how the two user5 groups relate to each other in a workgroup samba setup.

Curiously - if I attempt to grant the right to a non-existent user - I do not get an error.

Since you seem to be trying to achieve the same thing - you may have encountered similar problems. Can you throw any light on this problem?

Thanks

Richard.





Vickie L. Kidder wrote:
> Thanks to those who responded to my original question.
>
> I ran this command and it accepted it after I provided the root password.
> # net rpc rights grant 'vlkidder' SePrintOperatorPrivilege
>
> Checked to see if 'vlkidder' had printer admin privilege and it seems ok.
> # net rpc rights list accounts
> Password:
> BUILTIN\Print Operators
> No privileges assigned
>
> SMBTEST\vlkidder
> SePrintOperatorPrivilege
>
> BUILTIN\Account Operators
> No privileges assigned
>
> BUILTIN\Backup Operators
> No privileges assigned
>
> BUILTIN\Server Operators
> No privileges assigned
>
> BUILTIN\Administrators
> SeMachineAccountPrivilege
> SeTakeOwnershipPrivilege
> SeBackupPrivilege
> SeRestorePrivilege
> SeRemoteShutdownPrivilege
> SePrintOperatorPrivilege
> SeAddUsersPrivilege
> SeDiskOperatorPrivilege
>
> Everyone
> No privileges assigned
>
> After using the Printer Wizard from Windows to upload the driver, it goes 
> through the process of copying the driver files to the [print$] directory, 
> but there is still an error in my log file.
>
>   _spoolss_addprinterdriver: Failed to send message about upgrading driver 
> []!
> [2007/12/27 15:59:26, 1] smbd/service.c:close_cnum(1230)
>   vlkidder-06212 (10.1.3.8) closed connection to service print$
>
>
>
>   
>> I'm trying to upload print drivers to a stand-alone samba server running 
>>     
>
>   
>> version 3.0.25.
>> The server is part of a workgroup (not domain).
>>
>> My log files show messages that it cannot update the driver.
>> Before I had the printer admin option set in my smb.conf file to allow a 
>>     
>
>   
>> non-root user to do the printer admin and everything worked fine.
>>
>> I have read the Samba How To Notes section on important changes since 
>>     
> 3.x, 
>   
>> it says the following.
>> "Group mappings are essential only if the Samba server is running as a 
>> PDC/BDC.  Stand-alone servers do not require these group mappings.".
>>
>> Can anyone help me to understand what I need to do to allow a non-root 
>> user to perform printer admin functions on a stand-alone server?
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba
>>