[Samba] Need help with printer drivers

[Aaron Lewis]

Are your windows machines part of the 'WORKGROUP' workgroup ?
- Yes, and the windows client is not a domain member.
  I've checked the system properties, it show WORKGROUP

Does 'work' exist as a Unix user ?
- Yes, otherwise `smbpasswd -a work` complains

Does 'work' exist as a windows user ?
- No, the windows client can be any user.
  The current logon username is Aaron.

Is the password for 'work' the same everywhere ?
- No, the work user does not have a unix password. I only set one with
smbpasswd.

Does 'work' have access to /var/lib/samba/printers ?
- Initially it does not. So I did a chmod 777 -R
/var/lib/samba/printers, but it's still access denied

Hmm, I'm not sure if the windows client is connecting with anonymous,
and there's no much log in /var/log/
Should I dig deeper in samba user authentication?


On Thu, Nov 10, 2016 at 6:56 PM, Rowland Penny via samba
<samba at lists.samba.org> wrote:
> On Thu, 10 Nov 2016 17:44:36 +0800
> Aaron Lewis <the.warl0ck.1989 at gmail.com> wrote:
>
>> This is generated with testparam,
>>
>> # Global parameters
>> [global]
>> server string = %h server (Samba, Ubuntu)
>> server role = standalone server
>> map to guest = Bad User
>> obey pam restrictions = Yes
>> pam password change = Yes
>> passwd program = /usr/bin/passwd %u
>> passwd chat = *Enter\snew\s*\spassword:* %n\n
>> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>> unix password sync = Yes
>> syslog = 0
>> log file = /var/log/samba/log.%m
>> max log size = 1000
>> dns proxy = No
>> usershare allow guests = Yes
>> panic action = /usr/share/samba/panic-action %d
>> idmap config * : backend = tdb
>>
>>
>> [myprinter]
>> comment = Printer Drivers
>> path = /var/lib/samba/printers
>> valid users = work
>> write list = work
>> read only = No
>> printable = Yes
>> printer name = My Printer
>>
>> On Thu, Nov 10, 2016 at 5:20 PM, Rowland Penny via samba
>> <samba at lists.samba.org> wrote:
>> > On Thu, 10 Nov 2016 13:23:32 +0800
>> > Aaron Lewis <the.warl0ck.1989 at gmail.com> wrote:
>> >
>> >> Thanks Rowland. I've followed the guide on that page, the following
>> >> page looks good:
>> >> https://wiki.samba.org/index.php/Configuring_Point%27n%27Print_automatic_printer_driver_deployment
>> >>
>> >> However, when I try to add a driver with "Print Management" to the
>> >> Samba server, I got an access denied error.
>> >>
>> >> Here's how I did it.
>> >> ------------------------
>> >>
>> >> 1. create a user with smbpasswd, work:work
>> >> 2. change myprinter configuration and add a write list
>> >>
>> >> [myprinter]
>> >> comment = Printer Drivers
>> >> path = /var/lib/samba/printers
>> >> valid users = work
>> >> write list = work
>> >> read only = No
>> >> printable = Yes
>> >> printer name = My Printer
>> >>
>> >> 3. on windows7 client, use work:work to authenticate,
>> >>     first run net use \\172.16.177.200\myprinter
>> >>     now \\172.16.177.200\myprinter is accessible
>> >>
>> >>     Open Print Management, add 172.16.177.200 as a printer, then in
>> >> Drivers, right click and select Add Driver, a dialog popsup
>> >> "Failed to add driver, Access denied"
>> >>
>> >
>> > Can you post your full smb.conf
>> >
>> > Rowland
>> >
>> > --
>> > To unsubscribe from this list go to the following URL and read the
>> > instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>>
>
> Are your windows machines part of the 'WORKGROUP' workgroup ?
>
> Does 'work' exist as a Unix user ?
> Does 'work' exist as a windows user ?
>
> Is the password for 'work' the same everywhere ?
>
> From 'man smb.conf':
>
>        map to guest (G)
>
>        Bad User - Means user logins with an invalid password are
>        rejected, unless the username does not exist, in which case it
>        is treated as a guest login and mapped into the guest
>        account.
>
> Does 'work' have access to /var/lib/samba/printers ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba



-- 
Best Regards,
Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/
Finger Print:   9F67 391B B770 8FF6 99DC  D92D 87F6 2602 1371 4D33