[Samba] Unable to upload printer drivers

[L.P.H. van Belle]

Hai Manu, 

Can you post the output of: 

getfacl /var/lib/samba/printers
And
getfacl  /var/lib/samba/printers/x64 

And run 
net rpc rights list accounts -Uadministrator 


These are often forgotten or wrong set. 

NT Authority\SYSTEM
NT Authority\Authenticated Users

Set on the share AND folder rights. 

Share: SYSTEM: Full control.
Share: Verified users: Full controll

Folder security: SYSTEM: Full control
Folder security: Verified users: Read

My share for the driver setup:
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   acl_xattr:ignore system acl = yes
   browseable = yes
   writable = yes
   guest ok = no
   write list = root, @lpadmin, administrator, @"Domain Admins", @"Print Operators"
   # lpadmin also contains one of my users to have Kerberized SSO login on the cups webinterface. 
   # without that kerberized SSO did not work. 

The management pc is win7 64bit and only "Administrator" is used on that (domain joined) pc. 

Win10 wel be tomorrow, then i have one free to use. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Manu 
> Baylac via samba
> Verzonden: maandag 6 november 2017 12:32
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Unable to upload printer drivers
> 
> 	Hello Louis,
> 
> 
> Le 06/11/2017 à 11:22, L.P.H. van Belle via samba a écrit :
> 
> > I normaly onlu use windows 7, since that works fine for me, 
> but i'll setup a win10 and give it a try.
> 
> Ok, cool.
> 
> > My cups server publishes x64 by default and you need a 
> win32 and a win64 pc to upload both drivers.
> 
> Yes I know this, see below.
> 
> > Now, this is something you can try and i'll explain what is 
> difference in my setup.
> > Most users dont use spoolss and dont use the architecture setttings.
> >      rpc_server:spoolss = external
> >      rpc_daemon:spoolssd = fork
> >      spoolss:architecture = Windows x64
> 
> I gave my smb.conf in my first mail and I've got this lines, 
> I strictly 
> followed the wiki.
> And also tried without, and same error uploading 32 bit driver.
> 
> 
> > There as a "historyical" bug, about lower and uppercased 
> characters in (Debian) /var/lib/samba/printers/
> > I symlinked very folder lower to uppercase, now this bug 
> was i believe on the X64/x64, but i did them all.
> 
> Yes, i saw an old thread where you proposed that. Also tried 
> this... and 
> same error. But we can see that it tries to copy to x64 folder.
> 
> And randomly sometimes there is a second error 
> WERR_ACCESS_DENIED (with 
> administrator account or domain admins account) who have full rights.
> 
> Nov  6 12:09:01 winix-test-ps2 smbd[465]: [2017/11/06 
> 12:09:01.240015, 
> 0, pid=465, effective(0, 0), real(0, 0)] 
> ../source3/printing/nt_printing.c:1144(move_driver_file_to_dow
> nload_area)
> Nov  6 12:09:01 winix-test-ps2 smbd[465]: 
> move_driver_file_to_download_area: Unable to rename 
> [x64/{D1FB7FC7-C3D6-44BE-99F4-069DC8C66642}/eSf6usf_builtin.dll] to 
> [x64/3/eSf6usf_builtin.dll]: NT_STATUS_SHARING_VIOLATION
> Nov  6 12:09:01 winix-test-ps2 smbd[465]: [2017/11/06 
> 12:09:01.240123, 
> 0, pid=465, effective(0, 0), real(0, 0), class=rpc_srv] 
> ../source3/rpc_server/spoolss/srv_spoolss_nt.c:8614(_spoolss_A
> ddPrinterDriverEx)
> Nov  6 12:09:01 winix-test-ps2 smbd[465]:   
> _spoolss_AddPrinterDriverEx: 
> move_driver_to_download_area failed - WERR_ACCESS_DENIED
> 
> 
> And another thing illogical :
> 
> As i said, i can upload drivers without problem with w7, but 
> i can't see 
> the printers, despite with firefox of my windows i can see 
> them... Did you do something particular to see printers under seven ?

No, if you use cups, then just wait about 15 min, do a refresh (on the pc print admin), and you should see the printer in the windows print admin.
These are my steps i follow. 
1, create printer in cups. 
2, wait about 15 min to get if in the win printer admin.
3, update the driver.
4, attacht the drivers.
5, setup GPO to deploy them to the pc's. 
Clients are win7 and win10 64bit. 




> 
> So i'm juggling w7 and w10... w7 to upload drivers and w10 to assign 
> driver to the printer.
> 
> So finally, i can finalize my setup, but i like understanding 
> what I'm 
> doing and the origin of problems :-)
> 
> 
> Thanks again Louis.
> 
> Regards,
> 
> --
> Manu
> 
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>