[Samba] Cannot use Print Server functions in NT4 style domain

[Luke Barone]

Hi list,

I have an NT4-style domain controller running on Samba 4.2.14-debian
(Debian Jessie) that is acting as a file server. I am reading through the
documentation, and attempting to use it as a print server as well. I have
added the share declarations that I believed I needed, and CUPS is working
properly with a test printer. Below is my smb.conf file (some sections
redacted):

[global]
        workgroup = REDACTED
        netbios name = REDACTED
        server string = REDACTED
        interfaces = eth1
        bind interfaces only = Yes
        security = USER
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *new*password* %n\n *new*password* %n\n *updated*
        unix password sync = Yes
        log file = /var/log/samba/log.%m
        client max protocol = NT1
        name resolve order = wins hosts bcast
        printcap name = /dev/null
        disable spoolss = Yes
        logon script = login.bat
        logon drive = h:
        domain logons = Yes
        os level = 255
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        lock directory = /var/cache/samba
        idmap config * : range = 1000-1999999
        idmap config * : backend = tdb
        admin users =  @domainadmins
        write list = @domainadmins

[printers]
        path = /var/spool/samba
        printable = Yes
        print ok = Yes
        browseable = No
[print$]
        path = /usr/local/share/print
        read only = No
        map acl inherit = Yes
        store dos attributes = Yes
        vfs objects = acl_xattr
[KM-400]
        path = /var/spool/samba/
        printable = Yes
        print ok = Yes
        printer name = KM-400-Test

/var/spool/samba is owned by root:root, with 777 permissions, and the
sticky bit set. /usr/local/share/print is owned by root:domainadmins, with
the Windows ACLs on it.

I used Windows Explorer (from Windows 7) to navigate to \\Samba\print$, and
change the permissions from there. I have applied a local group policy to
allow me to connect to that server.

After reloading Samba's configuration, I open up Print Management, and add
the server to the list of servers. If I then try to interact with the
server in any way (i.e. add a print driver or a printer), it comes up with
an error message, "Failed to add driver. Double check the printer name and
make sure the printer is connected to the network."

What should I try next?