[Samba] unable to upload printer driver

L.P.H. van Belle belle at bazuin.nl
Wed Jun 7 14:51:19 UTC 2017 

 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Achim Gottinger via samba
> Verzonden: woensdag 7 juni 2017 16:25
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] {Filename?} RE: unable to upload printer driver
> 
> Thank you for the drivers Louis!
Your welkom.

> 
> This one works fine and is newer than the one we currently 
> use (vers 2.6). Version 2.6 also works with an new 5026cdn 
> printer we bought an month ago, so i did not yet had an urge 
> to update.
> 
> Tested the recommendation from the docs  you posted. 
> https://serverfault.com/questions/573411/why-cant-i-upload-dri
> vers-to-my-samba-print-server
> 
> Changing
> 
> |[Manufacturer]
> Kyocera=Kyocera,NTx86.5.1,NTx86.6.0,NTamd64.5.1,NTamd64.6.0`|
> 
> |to|
> ||
> |[Manufacturer] |
> |Kyocera=Kyocera,NTx86,NTamd64`|
> 
> and removing the *.5.1 sections and removing .6.0 from *.6.0 section 
> names also works with 3.1 drivers.
> Result is the same as if i remove the  PrinterPackageInstallation 
> sections. Drivers install but are not signed.
Yes, that correct that will allways happen if you modify the drivers. 

> 
> I use an script to add and remove printers during logon. 
As which user? Administrator? Computer$ or the user currently loggin in. 

> Users are allowed to install (signed) printer drivers via an GPO. If i 
> update an driver (signed) on an server i have to delete and read the 
> printer to trigger an driver update, do you get the same behaviour?
This is i think due to the "initial " driver installation and user who did that install.
And yes, i've seen that also, but phoe.. About a year ago when i installed the new ones.
If i reall good, my users messaged me that they could not print, right cliking on the printer showed "update driver"
If they cliked that, the driver was installed, it was somethink like that.

I have to review the printer setup, lots has changed after that due to samba updates and CVE updates on windows etc. 
But first the new packages...  

Greetz, 

Louis


> 
> achim~
> 
> 
> Am 07.06.2017 um 15:11 schrieb L.P.H. van Belle:
> > Waarschuwing: Er zijn 1 of meer bijlagen uit dit bericht verwijderd
> > Waarschuwing: (KyUHCa.chm, KyUHlp.chm, KyUHPt.chm, 
> KyUHDe.chm, KyUHFr.chm, KyUSNM.exe, KyUHSe.chm, 
> KyoClassicUniversalPCL5_v3.0_Samba_WHQL.zip, KyUHSp.chm).
> > Waarschuwing: Lees de 
> "Bazuin-en-Partners-Attachment-Warning.txt" bijlage voor meer 
> informatie.
> >
> > Hai Franz and Achmin.
> >
> > Attached in this mail is a driver made by kyocera for me 
> and tested on samba with with cups in a point and print setup.
> > (for others the attachment wont go to the list)
> > This one is specialy created by kyocera for me, at the time 
> i was testing with the kyocera printers.
> > Its a pcl5 so you lose some options, but see if thats a 
> problem or not. Cant recall exact which options you lose.
> >
> > If you want to try a newer version. Get this driver.
> > 
> https://www.kyoceradocumentsolutions.nl/index/service/download
> _center.false.driver.FSC5150DN._.EN.html
> > KX driver (certified and signed by Microsoft) :  6.3.0909
> > But the KX needs INF modifications.
> >
> > Im using the KX 6.3.0909 myself, have not tested the 7.x versions.
> >
> > Extract the zip file.
> > Read this,, and follow it exactly.  ( for the 64bit and the 32bit )
> > 
> https://serverfault.com/questions/573411/why-cant-i-upload-dri
> vers-to-my-samba-print-server
> >
> > You can disable the digital signature checking by GPO if 
> needed, but not recommended.
> > 
> (https://support.hidemyass.com/hc/en-us/articles/202723596-How
> -to-disable-Driver-Signing-check-on-Windows)
> >
> > .. But i did not do that.
> > At the domain join i connect to the printer (point and 
> print) and i install the driver.
> > As long as your not changing the driver versions, your 
> users can use the installed driver in point and print setup.
> >
> > And ms-par support is comming so this is a resonable 
> workaround untill then.
> >
> > See how far you get.
> >
> >
> >
> > Greetz,
> >
> > Louis
> >
> >
> >
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> >> Franz Gansberger via samba
> >> Verzonden: woensdag 7 juni 2017 14:20
> >> Aan: achim at ag-web.biz; samba at lists.samba.org
> >> Onderwerp: Re: [Samba] unable to upload printer driver
> >>
> >> Hi Achim,
> >>
> >> thank you for your effort!
> >> I did a couple of tests, from W8.1 with x64 driver which
> >> where rather old and therefore disignated for W7x64. But this
> >> went stale as well.
> >> Therefore I'll give it a try by using a W7-WS for uploading
> >> the drivers.
> >>
> >> Franz
> >>
> >>
> >>
> >>>>> Achim Gottinger <achim at ag-web.biz> 06.06.2017 15:27 >>>
> >> Hmm after another try an windows 7 client 32 and 64 bit can
> >> install such an driver now. Sorry for the noise. :-)
> >>
> >>
> >> Am 06.06.2017 um 15:10 schrieb Achim Gottinger via samba:
> >>> Please ignore the recommendation, such an driver can not be
> >> assigned
> >>> to an printer.
> >>>
> >>> Am 06.06.2017 um 14:54 schrieb Achim Gottinger via samba:
> >>>> I can install Kyocera Universal KPDL drivers once i delete
> >> the sections:
> >>>> [PrinterPackageInstallation.x86]
> >>>> PackageAware=TRUE
> >>>> CoreDriverDependencies={D20EA372-DD35-4950-9ED8-A6335AFE79F1}
> >>>>
> >>>> [PrinterPackageInstallation.amd64]
> >>>> PackageAware=TRUE
> >>>> CoreDriverDependencies={D20EA372-DD35-4950-9ED8-A6335AFE79F1}
> >>>>
> >>>> in the OEMSETUP.inf file.
> >>>>
> >>>> But editing the file invalidates signing.
> >>>>
> >>>> Am 06.06.2017 um 12:59 schrieb Franz Gansberger via samba:
> >>>>> Hi Louis,
> >>>>>
> >>>>> thank you for your answer.
> >>>>>
> >>>>> - the link was already there
> >>>>> - I followed this hints:
> >>>>> https://lists.samba.org/archive/samba/2016-November/204773.html
> >>>>> did the chmod 2775
> >>>>> administrator is part of the PrintOperatorGroup
> >>>>> net rpc rights list privileges SePrintOperatorPrivilege -U
> >>>>> "H955\administrator"
> >>>>>
> >>>>> getfacl printerdrivers
> >>>>> # file: printerdrivers
> >>>>> # owner: root
> >>>>> # group: H955\134domain\040admins
> >>>>> # flags: -s-
> >>>>> user::rwx
> >>>>> user:root:rwx
> >>>>> user:3000003:r-x
> >>>>> user:H955\134domain\040admins:rwx
> >>>>> group::rwx
> >>>>> group:3000003:r-x
> >>>>> group:H955\134domain\040admins:rwx
> >>>>> mask::rwx
> >>>>> other::---
> >>>>> default:user::rwx
> >>>>> default:user:root:rwx
> >>>>> default:user:3000003:r-x
> >>>>> default:user:H955\134domain\040admins:rwx
> >>>>> default:group::---
> >>>>> default:group:3000003:r-x
> >>>>> default:group:H955\134domain\040admins:rwx
> >>>>> default:mask::rwx
> >>>>> default:other::---
> >>>>>
> >>>>> Now I found this post:
> >>>>>
> >> https://groups.google.com/forum/#!msg/linux.samba/9BptH0lYLSk/
> > D7pBaYnoDgAJ
> >>>>>
> >>>>> Herr I tried the printui /s /t2  - had an ver4.
> >>>>> Now I found an relative old driver for the Kyocera
> >> FS-C5150 (windows
> >>>>> 7 x64, ver3), and installed it successfully local.
> >>>>> But nontheless putting that on the share on samba failes again?!
> >>>>>
> >>>>> Also - some of the ancient driver (HP4050, HP4250) which are the
> >>>>> easyest one (did that manually on Samba 3.x years ago)
> >> also fail on
> >>>>> putting the driver remote for download.
> >>>>>
> >>>>> I'm trying this from a W8.1 WS
> >>>>>
> >>>>> Thanks!
> >>>>> Franz
> >>>>>
> >>>>>
> >>>>>>>> L.P.H. van Belle <belle at bazuin.nl> 04.06.2017 00:38 >>>
> >>>>>> Op 1 jun. 2017 om 15:20 heeft Franz Gansberger via samba
> >>>>>> <samba at lists.samba.org> het volgende geschreven:
> >>>>>>
> >>>>>> Hi all,
> >>>>>>
> >>>>>> according to this thread, I ran into the same situation:
> >>>>>>
> >>>>>> [2017/06/01 10:35:46.909754,  0]
> >>>>>>
> >> ../source3/rpc_server/spoolss/srv_spoolss_nt.c:8476(_spoolss_A
> >> ddPrinterDriverEx)
> >>>>>>    _spoolss_AddPrinterDriverEx: level 8 not yet implemented
> >>>>>> [2017/06/01 10:35:46.925055,  0]
> >>>>>>
> >> ../source3/printing/nt_printing.c:1097(move_driver_file_to_dow
> >> nload_area)
> >>>>>>    move_driver_file_to_download_area: Unable to rename
> >>>>>> [x64/kmfc5150_xps] to [x64/3/KMFC5150_XPS]:
> >>>>>> NT_STATUS_OBJECT_NAME_NOT_FOUND
> >>>>>>
> >>>>>>
> >>>>>> [print$]
> >>>>>> 	    path = /data/data/printerdrivers/
> >>>>>> 	    read only = no
> >>>>>> 	   acl_xattr:ignore system acl = yes
> >>>>>> 	   browseable = yes
> >>>>>> 	   guest ok = no
> >>>>>> 	   write list = root, administrator, @"Domain Admins",
> >> @lpadmin,
> >>>>>> @"Print Operators"
> >>>>>>
> >>>>>>
> >>>>>> Samba version 4.5.8-Debian
> >>>>>>
> >>>>>> I followed all the hints from Rowland, but...
> >>>>>>
> >>>>>> Has there been any solution so far?
> >>>>>> Appreciate any thoughts..
> >>>>>> :-)
> >>>>>>
> >>>>>> Franz
> >>>>>> -- 
> >>>>>> To unsubscribe from this list go to the following URL
> >> and read the
> >>>>>> instructions:  https://lists.samba.org/mailman/options/samba
> >>>>> if it a kyocera driver, you need to cleanup all 32bit
> >> parts from the
> >>>>> inf.
> >>>>>
> >>>>> and you can try
> >>>>> ln -s x64 X64 in the driver folder
> >>>>>
> >>>>> last xps driver? cant test this atm but try the pcl or 
> ps version.
> >>>>>
> >>>>> there is a post of me which tells verything you need to
> >> know for a
> >>>>> printer (cups) set on debian. (google for it, use l.p.h
> >> in your search)
> >>>>> last, you only need the first three line if you use
> >> acl_xattr:ignore
> >>>>> system acl = yes
> >>>>> and configure the share from a windows client.
> >>>>>
> >>>>> dont mix posix acl settings and acl_xattr:ignore system 
> acl = yes
> >>>>>
> >>>>> still no go after above, i can test next wednesday and
> >> give better
> >>>>> help.
> >>>>>
> >>>>> ps? that driver is it a 'level 3 Windows driver' since
> >> level 4 and
> >>>>> up are not supported yet.   ( the error msg shows level
> >> 8, but that
> >>>>> not the windows level)
> >>>>>
> >>>>> greetz
> >>>>>
> >>>>> Louis
> >>>>>
> >>>>>
> >>>>
> >>>
> >>
> >>
> >>
> >> -- 
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >>
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

More information about the samba mailing list