[Samba] [printer]

[Gaiseric Vandal]

I am not sure about printers but I ran into a similar issue with a guest 
share.  I had security=user, and set up a guest share.  But users in 
different domain could not connect, and the samba logs showed that the 
user was unknown.  (in this case domain trusts were not being user.)


Finally last week found the solution which was to set

        map to guest=      bad user

i.e. if the user is valid but the password is bad, the user can't 
connect.  But if the user is just unknown then treat them as a guest.  
You may also need to explicitly create  unix "guest" user account that 
is specified in smb.conf (at least with samba 3.4. and higher.)

e.g.
         guest account = smb_nobody


Why are users using non-domain accounts?



On 06/09/2011 10:31 AM, upen wrote:
> Alright, let's not assume.
>
> Load smb config files from /etc/samba/smb.conf
> rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
> Processing section "[homes]"
> Processing section "[netlogon]"
> Global parameter logon script found in service section!
> Processing section "[Profiles]"
> Processing section "[printers]"
> Global parameter guest account found in service section!
> Global parameter null passwords found in service section!
> Processing section "[print$]"
> Loaded services file OK.
> Server role: ROLE_DOMAIN_PDC
> Press enter to see a dump of your service definitions
>
> 	security = USER
> 	paranoid server security = Yes
> 	security mask = 0777
> 	force security mode = 00
> 	directory security mask = 0777
> 	force directory security mode = 00
>
> I did those printer settings already but due to security=user it won't
> let the localuser on XP machine to print. Is there anyway to let
> everyone print with security=user enabled.
>
> On Thu, Jun 9, 2011 at 9:22 AM, Gaiseric Vandal
> <gaiseric.vandal at gmail.com>  wrote:
>> You know what they say about ASS-U-ME ....
>>
>>
>> "testparm -v" will show you the current settings (whether explicitly set or
>> default)
>>
>>
>> man smb.conf (3.5.)  shows a possible samba printer share as :
>>
>>
>>                 [aprinter]
>>                 path = /usr/spool/public
>>                 read only = yes
>>                 printable = yes
>>                 guest ok = yes
>>
>>
>>
>>
>>
>> On 06/09/2011 10:05 AM, upen wrote:
>>> Hello,
>>>
>>> I have configured samba as a PDC for Windows XP machines. It is
>>> running as domain. I haven't configured security = paramter but I
>>> assume it defaults to value 'user' . In this case if I have to share
>>> ALL printers on this system for anonymous printing, can I use security
>>> = share inside [printer] section and guest = ok then will it allow
>>> printing from local accounts on windows XP machines which are in
>>> domain? I don't want to set security=share in Global section.
>>>
>>> I believe there must be a way to get this to work. Any advise is
>>> appreciated.
>>>
>>> Thanks,
>>> ~A
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>