[Samba] Issue with printer sharing

Sun Sep 21 00:20:00 MDT 2014

Le 20/09/2014 21:02, Marc Muehlfeld a écrit :
> Did you had the driver already on your server for other printers and 
> just assigned it to a new one? Or did you uploaded it for a new 
> printer? In that case try removing it for all architectures and start 
> over. Maybe assign it through rpcclient (I described in the 
> documentation how). But I suggest you use a new printer name in your 
> smb.conf, as well. Because if you choose the same, it takes the old 
> and maybe broken stuff again from the databases (it's not removed if 
> you remove a printer from your smb.con). Or if this is a complete new 
> print server you had setup, start from scratch. Regards, Marc 

The print server is a completly new one. But the win2k8 box already had 
printers installed on it, using the same driver which work find (I can 
see the preference page).
I tested by uploading another version of the driver (not the universal 
one, a more specific to the printer) on the same renamed printer=> same 
thing. The driver files are present on the Samba print server.
I use an account with SePrintOperatorPrivilege (which seems logical 
since I can upload printer drivers).
Here is the log file when I right click on the printer from 
printmanagement.msc, before Win2k8 tells that the driver isn't installed

[2014/09/21 08:12:37.524943,  3] ../source3/lib/access.c:338(allow_access)
   Allowed connection from 172.16.1.7 (172.16.1.7)
[2014/09/21 08:12:37.525670,  3] ../source3/smbd/oplock.c:870(init_oplocks)
   init_oplocks: initializing messages.
[2014/09/21 08:12:37.526104,  3] ../source3/smbd/process.c:1802(process_smb)
   Transaction 0 of length 108 (0 toread)
[2014/09/21 08:12:37.526671,  3] 
../source3/smbd/smb2_negprot.c:243(smbd_smb2_request_process_negprot)
   Selected protocol SMB2_10
[2014/09/21 08:12:37.530614,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'gssapi_spnego' registered
[2014/09/21 08:12:37.531084,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'gssapi_krb5' registered
[2014/09/21 08:12:37.531664,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'gssapi_krb5_sasl' registered
[2014/09/21 08:12:37.532149,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'schannel' registered
[2014/09/21 08:12:37.532536,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'spnego' registered
[2014/09/21 08:12:37.532737,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'ntlmssp' registered
[2014/09/21 08:12:37.532937,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'krb5' registered
[2014/09/21 08:12:37.533584,  3] 
../auth/gensec/gensec_start.c:870(gensec_register)
   GENSEC backend 'fake_gssapi_krb5' registered
[2014/09/21 08:12:37.570652,  3] 
../source3/rpc_server/srv_pipe.c:693(api_pipe_bind_req)
   api_pipe_bind_req: dssetup -> dssetup rpc service
[2014/09/21 08:12:37.570720,  3] 
../source3/rpc_server/srv_pipe.c:342(check_bind_req)
   check_bind_req for \lsarpc
[2014/09/21 08:12:37.570759,  3] 
../source3/rpc_server/srv_pipe.c:349(check_bind_req)
   check_bind_req: dssetup -> dssetup rpc service
[2014/09/21 08:12:37.572257,  3] 
../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
   free_pipe_context: destroying talloc pool of size 28
[2014/09/21 08:12:37.573425,  3] 
../source3/rpc_server/srv_pipe.c:1371(api_rpcTNP)
   api_rpcTNP: rpc command: DSSETUP_DSROLEGETPRIMARYDOMAININFORMATION
[2014/09/21 08:12:37.573526,  3] 
../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context)
   free_pipe_context: destroying talloc pool of size 92
[2014/09/21 08:12:37.663894,  3] 
../auth/kerberos/kerberos_pac.c:386(kerberos_decode_pac)
   Found account name from PAC: MACHINE_NAME$ []
[2014/09/21 08:12:37.664362,  3] 
../source3/auth/user_krb5.c:51(get_user_from_kerberos_info)
   Kerberos ticket principal name is [MACHINE_NAME$@REALM]
[2014/09/21 08:12:37.666504,  1] 
../source3/auth/user_krb5.c:164(get_user_from_kerberos_info)
   Username DOMAIN\MACHINE_NAME$ is invalid on this system
[2014/09/21 08:12:37.666880,  1] 
../source3/auth/auth_generic.c:97(auth3_generate_session_info_pac)
   Failed to map kerberos principal to system user (NT_STATUS_LOGON_FAILURE)
[2014/09/21 08:12:37.671224,  3] 
../source3/smbd/server_exit.c:221(exit_server_common)
   Server exit (NT_STATUS_CONNECTION_RESET)
[2014/09/21 08:12:42.320104,  2] 
../source3/smbd/server.c:437(remove_child_pid)
   Could not find child 27693 -- ignoring

Maybe the invalid username could be a clue ?

Regards,
Sébastien