[Samba] Cannot use Print Server functions in NT4 style domain

[Rowland Penny]

On Tue, 30 May 2017 11:57:54 -0700
Luke Barone via samba <samba at lists.samba.org> wrote:

> Hi list,
> 
> I have an NT4-style domain controller running on Samba 4.2.14-debian
> (Debian Jessie) that is acting as a file server. I am reading through
> the documentation, and attempting to use it as a print server as
> well. I have added the share declarations that I believed I needed,
> and CUPS is working properly with a test printer. Below is my
> smb.conf file (some sections redacted):
> 
> [global]
>         workgroup = REDACTED
>         netbios name = REDACTED
>         server string = REDACTED
>         interfaces = eth1
>         bind interfaces only = Yes
>         security = USER
>         pam password change = Yes
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *new*password* %n\n *new*password* %n\n
> *updated* unix password sync = Yes
>         log file = /var/log/samba/log.%m
>         client max protocol = NT1
>         name resolve order = wins hosts bcast
>         printcap name = /dev/null
>         disable spoolss = Yes
>         logon script = login.bat
>         logon drive = h:
>         domain logons = Yes
>         os level = 255
>         preferred master = Yes
>         domain master = Yes
>         wins support = Yes
>         lock directory = /var/cache/samba
>         idmap config * : range = 1000-1999999
>         idmap config * : backend = tdb
>         admin users =  @domainadmins
>         write list = @domainadmins
> 
> [printers]
>         path = /var/spool/samba
>         printable = Yes
>         print ok = Yes
>         browseable = No
> [print$]
>         path = /usr/local/share/print
>         read only = No
>         map acl inherit = Yes
>         store dos attributes = Yes
>         vfs objects = acl_xattr
> [KM-400]
>         path = /var/spool/samba/
>         printable = Yes
>         print ok = Yes
>         printer name = KM-400-Test
> 
> /var/spool/samba is owned by root:root, with 777 permissions, and the
> sticky bit set. /usr/local/share/print is owned by root:domainadmins,
> with the Windows ACLs on it.
> 
> I used Windows Explorer (from Windows 7) to navigate to
> \\Samba\print$, and change the permissions from there. I have applied
> a local group policy to allow me to connect to that server.
> 
> After reloading Samba's configuration, I open up Print Management,
> and add the server to the list of servers. If I then try to interact
> with the server in any way (i.e. add a print driver or a printer), it
> comes up with an error message, "Failed to add driver. Double check
> the printer name and make sure the printer is connected to the
> network."
> 
> What should I try next?

Try removing the 'disable spoolss' line, you can also remove the 'idmap
config' lines, you only need them if winbindd is running and you don't
need winbindd running.

Rowland