[Samba] How the program spoolss works ?

[L.P.H. van Belle]

So after Rowland's adviced changes.

I use this part for printing.
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server

I added this to the smb.conf for my print server (note, i use a member server). 
I use cups - raw so my clients generate the print job. 

##### PRINT SERVER PART #######
    #enable asu support = yes

    ## Enabling spoolssd
    rpc_server:spoolss = external
    rpc_daemon:spoolssd = fork
    # Most are default, i just find it handy to see it on my print server.
    spoolss:architecture = Windows x64
    spoolssd:prefork_min_children = 5           # Minimum number of child processes
    spoolssd:prefork_max_children = 25          # Maximum number of child processes
    spoolssd:prefork_spawn_rate = 5             # Start (fork) x new childs if one connection comes in (up to prefork_max_children)
    spoolssd:prefork_max_allowed_clients = 100  # Number of clients, a child process should be responsible for
    spoolssd:prefork_child_min_life = 60        # Minimum lifetime of a child process (60 seconds
                                                # is the minimum, even a lower value has been configured)
    load printers = yes

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   acl_xattr:ignore system acl = yes
   browseable = yes
   writable = yes
   guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# You may need to replace 'lpadmin' with the name of the group your
# admin users are members of.
# Please note that you also need to set appropriate Unix permissions
# to the drivers directory for these users to have write rights in it
   write list = root, administrator, @"Domain Admins", @lpadmin, @"Print Operators"

[printers]
   comment = All Printers
   path = /var/spool/samba
   acl_xattr:ignore system acl = yes
   browseable = yes
   printable = yes
   printing = CUPS


Do note.. 
My setup only asumes windows clients so i set : acl_xattr:ignore system acl = yes 
And then i configure the shares exact the same as on a windows server. 
Once configure, DONT change/use chmod/setfacl of anything else. 
Then you most probely have to re-configure the shares again. 


 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland penny via samba
> Verzonden: vrijdag 7 februari 2020 11:08
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] How the program spoolss works ?
> 
> On 07/02/2020 09:54, nathalie ramat via samba wrote:
> > Hello,
> >
> > In my directory /var/lib/samba/printers I have
> >
> > COLOR color  IA64  W32ALPHA  W32MIPS  W32PPC  W32X86  WIN40  x64
> >
> > I delete the directory  COLOR  and restart samba
> You deleted the wrong one, you should have deleted 'color'
> >
> > but I have always the same error .
> > I have perahps a problem of rights. the owner of the directory 
> > /var/lib/samba/printers is root.
> >
> >
> > Thanks for your help .
> >
> > That is my smb.conf
> >
> >
> > # Global parameters
> > [global]
> >     netbios name = BUSTERSERVERSAM
> >     realm = KILIMANDJARO.CALAIS.FR
> >     server role = active directory domain controller
> >     server services = s3fs, rpc, nbt, wrepl, ldap, cldap, 
> kdc, drepl, 
> > winbindd, ntp_signd, kcc, dnsupdate
> >     workgroup = KILIMANDJARO
> >     idmap_ldb:use rfc2307 = yes
> >     log level = 3
> >     log file=/var/log/samba/log.%M
> >     max log size = 1000
> >
> >     host msdfs = no
> >     vfs objects = acl_xattr
> >     map acl inherit = yes
> >     store dos attributes =yes
> >
> >     load printers = yes
> >     printing = cups
> >     printcap name = cups
> >
> >
> >     security = user
> >
> >     winbind use default domain = yes
> >     winbind separator = /
> >     winbind enum groups =yes
> >     winbind enum users = yes
> >
> OK, this is from a Samba AD DC, so remove these lines, they have no 
> place in a DC smb.conf:
> 
>      host msdfs = no
>      vfs objects = acl_xattr
>      map acl inherit = yes
>      store dos attributes =yes
>      security = user
>      winbind use default domain = yes
> 
> I would also remove these:
> 
>      winbind enum groups =yes
>      winbind enum users = yes
> 
> They only make 'getent passwd' and 'getent group' work 
> without supplying 
> a username or groupname, they can also slow things down.
> 
> Rowland
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>