[Samba] samba + cups troubleshooting?

[Michael Evans]

Are samba + cups troubleshooting steps documented anywhere?

 

I still haven't been able to get Debian 11's Samba (4.13.13-Debian) to share
printers to Windows 10, not on an old (weak crypto) domain and not on a new
clean Samba 4.13 domain; but both of these do at least initially list on
\\memberserver\ the printernames (even though connecting to them fails).

 

This week's experiment: Arch Linux VM (rolling release) with Samba 4.15.3.
By every indication I can think to test this has joined the old insecure
domain successfully.

 

CUPS, however.

 

# lpstat -p -d

printer printerName  is idle.  enabled since Wed 12 Jan 2022 12:17:35 PM PST

 

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

 

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server

 

It mostly assumes cups just works; there's no mention of troubleshooting
steps or anything else to do; so I can't even test if Win10 PCs can talk to
printers on the newer Samba version.

 

[2022/01/12 17:34:35.714413,  0] ../../source3/smbd/server.c:1739(main)

  smbd version 4.15.3 started.

  Copyright Andrew Tridgell and the Samba Team 1992-2021

[2022/01/12 17:34:35.716750,  1]
../../source3/profile/profile.c:54(set_profile_level)

  INFO: Profiling turned OFF from pid 587

[2022/01/12 17:34:35.722194,  1]
../../source3/auth/token_util.c:1171(create_token_from_username)

  lookup_name_smbconf for V-PRN\nobody failed

[2022/01/12 17:34:35.787798,  1]
../../source3/printing/printer_list.c:255(printer_list_get_last_refresh)

  Failed to fetch record!

[2022/01/12 17:34:57.864795,  1]
../../source3/printing/printer_list.c:255(printer_list_get_last_refresh)

  Failed to fetch record!

[2022/01/12 17:34:57.864824,  1]
../../source3/smbd/server_reload.c:67(delete_and_reload_printers)

  pcap cache not loaded

[2022/01/12 17:34:58.018109,  1]
../../source3/printing/printer_list.c:255(printer_list_get_last_refresh)

  Failed to fetch record!

 

 

+++

 

# Global parameters

[global]

  #log level = 1

  log level = 1 printdrivers:10

  #log level = 10

 

  realm = WINDOM.LOCAL

  security = ADS

  server role = member server

  workgroup = WINDOM

  disable netbios = Yes

  username map = /etc/samba/user.map

 

  client ldap sasl wrapping = sign

  client min protocol = NT1

 

  dedicated keytab file = /etc/krb5.keytab

  kerberos method = secrets and keytab

  winbind enum groups = Yes

  winbind enum users = Yes

  winbind expand groups = 2

  winbind refresh tickets = Yes

  winbind use default domain = Yes

 

  idmap config windom : unix_nss_info = yes

  idmap config windom : range = 4000-9999

  idmap config windom : schema_mode = rfc2307

  idmap config windom : backend = ad

  idmap config * : range = 10000-15999

  idmap config * : backend = tdb

  map acl inherit = Yes

  store dos attributes = Yes

  vfs objects = acl_xattr

 

 

  load printers = Yes

  printing = cups

  printcap name = cups

 

  rpc_server:spoolssd = fork

  rpc_server:spoolss = external

  spoolssd:prefork_child_min_life = 60

  spoolssd:prefork_max_allowed_clients = 100

  spoolssd:prefork_spawn_rate = 5

  spoolssd:prefork_max_children = 25

  spoolssd:prefork_min_children = 5

 

  # turn off usershares

  usershare max shares = 0

 

[testshare]

  comment = testshare

  path = /samba/network/testshare

  valid users = "@WINDOM\domain users" "@domain users" "@domain
users at WINDOM.LOCAL" @lpadmin

  read only = No

  follow symlinks = yes

  wide links = no

 

 

[printers]

  browseable = Yes

  comment = All Printers

  path = /samba/network/spool

  printable = Yes

  guest ok = No

  writable = no

  #create mode = 0700

  write list = root @lpadmin michael.evans "@domain admins" "@domain
admins at WINDOM.LOCAL"

 

[print$]

  comment = Printer Drivers

  path = /samba/network/printerdrivers

  read only = No

  write list = root @lpadmin michael.evans "@domain admins" "@domain
admins at WINDOM.LOCAL"

  

Contents of /etc/samba/user.map

 

!root = WINDOM\Administrator

 

Server Role is set to :  member server