[Samba] Hard time installing printers 3.4.8

Jack Downes jax at nwmt.us
Wed Sep 29 17:46:43 MDT 2010


Hello, been googling this for a while.  Read GD's presentation on why 
printing is such a pain...

Anyway, I'm using 3.4.8 on Freebsd 8.1  I've tried a few combinations - 
best luck is with 3.2.5, but I'd like to move forward a bit.

So, I've got the ADS part working pretty good.  happy with how that's going.

my problem is when I attempt to load printer drivers.  Everything looks 
good up to the very end, and then all of a sudden it says it can't load 
the driver as access is denied.

Now, just for your information, my intent is not really to use this 
system as a printserver, but rather as a printer driver distribution 
system.  I'll be converting the printers to IPP shortly after they are 
installed - via a login script as I like IPP better for a variety of 
reasons.  However, the point-n-print thing is really hard to beat.

So I've been poring through the logs generated by samba34, and I get to 
a point where it's telling me that the files it's either reading or 
writing are a symlink outside the share path.  And so, I think this is 
why it fails.  Here's the log file +- 100 lines around the error.  
Hopefully that's enough output from the log.

freecups# grep -A100 -B100 NT_STATUS_ACCESS_DENIED log.smbd
   Checking operation #92 (type 92, layer 0)
   Making operation type 92 opaque [module /[Default VFS]/]
   Accepting operation type 92 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #93 (type 93, layer 0)
   Making operation type 93 opaque [module /[Default VFS]/]
   Accepting operation type 93 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #94 (type 94, layer 0)
   Making operation type 94 opaque [module /[Default VFS]/]
   Accepting operation type 94 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #95 (type 95, layer 0)
   Making operation type 95 opaque [module /[Default VFS]/]
   Accepting operation type 95 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #96 (type 96, layer 0)
   Making operation type 96 opaque [module /[Default VFS]/]
   Accepting operation type 96 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #97 (type 97, layer 0)
   Making operation type 97 opaque [module /[Default VFS]/]
   Accepting operation type 97 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #98 (type 98, layer 0)
   Making operation type 98 opaque [module /[Default VFS]/]
   Accepting operation type 98 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #99 (type 99, layer 0)
   Making operation type 99 opaque [module /[Default VFS]/]
   Accepting operation type 99 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #100 (type 100, layer 0)
   Making operation type 100 opaque [module /[Default VFS]/]
   Accepting operation type 100 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #101 (type 101, layer 0)
   Making operation type 101 opaque [module /[Default VFS]/]
   Accepting operation type 101 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #102 (type 102, layer 0)
   Making operation type 102 opaque [module /[Default VFS]/]
   Accepting operation type 102 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #103 (type 103, layer 0)
   Making operation type 103 opaque [module /[Default VFS]/]
   Accepting operation type 103 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #104 (type 104, layer 0)
   Making operation type 104 opaque [module /[Default VFS]/]
   Accepting operation type 104 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #105 (type 105, layer 0)
   Making operation type 105 opaque [module /[Default VFS]/]
   Accepting operation type 105 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #106 (type 106, layer 0)
   Making operation type 106 opaque [module /[Default VFS]/]
   Accepting operation type 106 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #107 (type 107, layer 0)
   Making operation type 107 opaque [module /[Default VFS]/]
   Accepting operation type 107 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #108 (type 108, layer 0)
   Making operation type 108 opaque [module /[Default VFS]/]
   Accepting operation type 108 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #109 (type 109, layer 0)
   Making operation type 109 opaque [module /[Default VFS]/]
   Accepting operation type 109 from module /[Default VFS]/
[2010/09/29 17:31:53,  5] smbd/vfs.c:192(vfs_init_custom)
   Checking operation #110 (type 110, layer 0)
   Making operation type 110 opaque [module /[Default VFS]/]
   Accepting operation type 110 from module /[Default VFS]/
[2010/09/29 17:31:53, 10] modules/vfs_default.c:147(vfswrap_fs_capabilities)
   vfswrap_fs_capabilities: timestamp resolution of msec available on 
share homes, directory /home/PrinterDrivers
[2010/09/29 17:31:53,  4] smbd/vfs.c:753(vfs_ChDir)
   vfs_ChDir to /home/PrinterDrivers
[2010/09/29 17:31:53,  3] lib/util.c:788(unix_clean_name)
   unix_clean_name [W32X86/PSCRIPT5.DLL]
[2010/09/29 17:31:53,  5] smbd/filename.c:148(unix_convert)
   unix_convert called on file "W32X86/PSCRIPT5.DLL"
[2010/09/29 17:31:53, 10] smbd/statcache.c:235(stat_cache_lookup)
   stat_cache_lookup: lookup failed for name [W32X86/PSCRIPT5.DLL]
[2010/09/29 17:31:53, 10] smbd/statcache.c:274(stat_cache_lookup)
   stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86]
[2010/09/29 17:31:53,  5] smbd/statcache.c:138(stat_cache_add)
   stat_cache_add: Added entry (8038717d0:size 13) W32X86/PSCRIPT5.DLL 
-> W32X86/PSCRIPT5.DLL
[2010/09/29 17:31:53,  5] smbd/filename.c:297(unix_convert)
   conversion finished W32X86/PSCRIPT5.DLL -> W32X86/PSCRIPT5.DLL
[2010/09/29 17:31:53, 10] smbd/open.c:3365(create_file_default)
   create_file: access_mask = 0x120089 file_attributes = 0x80, 
share_access = 0x3, create_disposition = 0x1 create_options = 0x0 
oplock_request = 0x8 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, 
create_file_flags = 0x0, fname = W32X86/PSCRIPT5.DLL
[2010/09/29 17:31:53,  3] smbd/vfs.c:865(check_reduced_name)
   reduce_name [W32X86/PSCRIPT5.DLL] [/home/PrinterDrivers]
[2010/09/29 17:31:53, 10] smbd/vfs.c:937(check_reduced_name)
   reduce_name realpath [W32X86/PSCRIPT5.DLL] -> 
[/usr/home/PrinterDrivers/W32X86/PSCRIPT5.DLL]
[2010/09/29 17:31:53,  2] smbd/vfs.c:949(check_reduced_name)
   reduce_name: Bad access attempt: W32X86/PSCRIPT5.DLL is a symlink 
outside the share path
[2010/09/29 17:31:53,  5] smbd/filename.c:768(check_name)
   check_name: name W32X86/PSCRIPT5.DLL failed with NT_STATUS_ACCESS_DENIED
[2010/09/29 17:31:53, 10] smbd/open.c:3497(create_file_default)
   create_file: NT_STATUS_ACCESS_DENIED
[2010/09/29 17:31:53,  3] printing/nt_printing.c:1529(get_correct_cversion)
   get_correct_cversion: Can't open file [W32X86/PSCRIPT5.DLL], errno = 0
[2010/09/29 17:31:53,  4] smbd/vfs.c:753(vfs_ChDir)
   vfs_ChDir to /tmp
[2010/09/29 17:31:53,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
        spoolss_AddPrinterDriverEx: struct spoolss_AddPrinterDriverEx
           out: struct spoolss_AddPrinterDriverEx
               result                   : WERR_ACCESS_DENIED
[2010/09/29 17:31:53,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
   api_rpcTNP: called \spoolss successfully
[2010/09/29 17:31:53,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
   free_pipe_context: destroying talloc pool of size 0
[2010/09/29 17:31:53, 10] 
rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
   write_to_pipe: data_used = 604
[2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug)
   s3_event: Schedule immediate event "tevent_req_trigger": 0x80387c890
[2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug)
   s3_event: Run immediate event "tevent_req_trigger": 0x80387c890
[2010/09/29 17:31:53,  6] 
rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
    name: \spoolss len: 1204
[2010/09/29 17:31:53, 10] 
rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
   read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, 
prs_offset(&p->out_data.rdata) = 4.
[2010/09/29 17:31:53,  5] rpc_parse/parse_prs.c:88(prs_debug)
   000000 smb_io_rpc_hdr hdr
       0000 major     : 05
       0001 minor     : 00
       0002 pkt_type  : 02
       0003 flags     : 03
       0004 pack_type0: 10
       0005 pack_type1: 00
       0006 pack_type2: 00
       0007 pack_type3: 00
       0008 frag_len  : 001c
       000a auth_len  : 0000
       000c call_id   : 00000136
[2010/09/29 17:31:53,  5] rpc_parse/parse_prs.c:88(prs_debug)
   000010 smb_io_rpc_hdr_resp resp
       0010 alloc_hint: 00000004
       0014 context_id: 0000
       0016 cancel_ct : 00
       0017 reserved  : 00
[2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug)
   s3_event: Schedule immediate event "tevent_req_trigger": 0x803873ad0
[2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug)
   s3_event: Run immediate event "tevent_req_trigger": 0x803873ad0
[2010/09/29 17:31:53,  5] smbd/ipc.c:59(copy_trans_params_and_data)
   copy_trans_params_and_data: params[0..0] data[0..28] (align 0)
[2010/09/29 17:31:53,  5] lib/util.c:632(show_msg)
[2010/09/29 17:31:53,  5] lib/util.c:642(show_msg)
   size=84
   smb_com=0x25
   smb_rcls=0
   smb_reh=0
   smb_err=0
   smb_flg=136
   smb_flg2=51201
   smb_tid=1
   smb_pid=1312
   smb_uid=101
   smb_mid=14593
   smt_wct=10
   smb_vwv[ 0]=    0 (0x0)
   smb_vwv[ 1]=   28 (0x1C)
   smb_vwv[ 2]=    0 (0x0)
   smb_vwv[ 3]=    0 (0x0)
   smb_vwv[ 4]=   56 (0x38)
   smb_vwv[ 5]=    0 (0x0)
   smb_vwv[ 6]=   28 (0x1C)
   smb_vwv[ 7]=   56 (0x38)
   smb_vwv[ 8]=    0 (0x0)
   smb_vwv[ 9]=    0 (0x0)
   smb_bcc=29
[2010/09/29 17:31:53, 10] ../lib/util/util.c:304(_dump_data)
   [0000] 00 05 00 02 03 10 00 00   00 1C 00 00 00 36 01 00   ........ 
.....6..
   [0010] 00 04 00 00 00 00 00 00   00 05 00 00 00           ........ .....
[2010/09/29 17:31:53, 10] 
lib/util_sock.c:789(read_smb_length_return_keepalive)
   got smb length of 41
[2010/09/29 17:31:53,  6] smbd/process.c:1456(process_smb)
   got message type 0x0 of len 0x29
[2010/09/29 17:31:53,  3] smbd/process.c:1459(process_smb)
   Transaction 1270 of length 45 (0 toread)
[2010/09/29 17:31:53,  5] lib/util.c:632(show_msg)
[2010/09/29 17:31:53,  5] lib/util.c:642(show_msg)
   size=41
   smb_com=0x4
   smb_rcls=0
   smb_reh=0
   smb_err=0
   smb_flg=24
   smb_flg2=51207
   smb_tid=4
   smb_pid=65279
   smb_uid=101
   smb_mid=14657
   smt_wct=3
   smb_vwv[ 0]=10127 (0x278F)
   smb_vwv[ 1]=65535 (0xFFFF)
   smb_vwv[ 2]=65535 (0xFFFF)
   smb_bcc=0
[2010/09/29 17:31:53,  3] smbd/process.c:1273(switch_message)


my smb.conf
[global]

log level = 10
enable privileges = yes
workgroup=KRH
server string = %h server (Samba %v, Domain %D, Server %L - %R)
load printers = yes
printcap name = cups
printing = cups
addprinter command = /usr/local/sbin/smbaddprinter.pl
deleteprinter command = /usr/local/sbin/smbdelprinter.pl
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
smb ports = 139
security = ADS
realm = KRH.INT
follow symlinks = yes
password server = kal-dc3.krh.int
password server = kal-dc4.krh.int
password server = kal-dc2.krh.int
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = No
winbind enum groups = No
winbind nested groups = No
template homedir = /home/%D/%U
template shell = /bin/tcsh
client ntlmv2 auth = yes
winbind use default domain = yes
restrict anonymous = 2
domain master = no
preferred master = no
local master = no
wins server = 10.6.1.21
os level = 25
disable netbios = no
#character set = ISO8859-1
#client code page = 850


[homes]
comment = PDF Directories
valid users = %S
#valid users = %U
create mask = 0700
directory mask = 0700
read only = No
browseable = no

[printers]
comment = All Printers
path = /var/spool/samba34
create mask = 0700
browseable = no
printable = yes
guest ok = yes
#
[print$]
comment = Printer Drivers
path = /home/PrinterDrivers
#valid users = KRH+jdown
#admin users = KRH+jdown
create mask = 0755
directory mask = 0755
read only = No



More information about the samba mailing list