[Samba] 3.5.6 rpcclient settdriver error

[Daniel Deptuła]

W dniu 2010-11-04 13:37, Veiko Kukk pisze:
> Hi,
>
> I have Centos 5.5 64b with Sernet samba 3.5.6-43.el5 packages. It is 
> configured as domain member server, providing file and printer services.
> I can connect with: "rpcclient -Uveiko localhost", enumdrivers and 
> enumprinters work, both printer and driver are listed, but when I'm 
> trying to set driver to printer:
> "setdriver pdf-ipunkt "HP Color LaserJet 5/5M PS"
> result was WERR_ACCESS_DENIED
>
> Another server with only difference being samba version 3.3.14-40.el5 
> works perfectly. Tried this with two different users belonging to 
> "domain admins" group.
>
> Using rpcclient with -d10, ends with:
> rpc_api_pipe: host localhost
> num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, 
> data_total=200, this_data=200, max_data=4280, param_offset=82, 
> param_disp=0, data_disp=0
> 000000 smb_io_rpc_hdr rpc_hdr
>     0000 major     : 05
>     0001 minor     : 00
>     0002 pkt_type  : 02
>     0003 flags     : 03
>     0004 pack_type0: 10
>     0005 pack_type1: 00
>     0006 pack_type2: 00
>     0007 pack_type3: 00
>     0008 frag_len  : 0030
>     000a auth_len  : 0000
>     000c call_id   : 00000009
> 000010 smb_io_rpc_hdr_resp rpc_hdr_resp
>     0010 alloc_hint: 00000018
>     0014 context_id: 0000
>     0016 cancel_ct : 00
>     0017 reserved  : 00
> cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
> rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
> rpc_api_pipe: host localhost returned 48 bytes.
>      spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx
>         out: struct spoolss_OpenPrinterEx
>             handle                   : *
>                 handle: struct policy_handle
>                     handle_type              : 0x00000000 (0)
>                     uuid                     : 
> 00000000-0000-0000-0000-000000000000
>             result                   : WERR_ACCESS_DENIED
> result was WERR_ACCESS_DENIED
>

Does the user has SePrintOperatorPrivilege?
If not try to it set with:
net rpc rights grant veiko SePrintOperatorPrivilege

Daniel