Your message dated Sat, 13 Dec 2008 19:02:10 +0000
with message-id <[email protected]>
and subject line Bug#459243: fixed in samba 2:3.2.5-2
has caused the Debian Bug report #459243,
regarding Should document that printer admins should have write rights to the
printer drivers directory [print$]
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
459243: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459243
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: samba
Version: 3.0.24-6etch9
Severity: normal
Hello,
since /var/lib/samba/printers is owned by root:root and it's 755, thus
cupsaddsmb fails to work as a non-root user. In the example below
- user luca belongs to the lpadmin group
- /etc/samba/smb.conf is a plain etch one with
########## Printing ##########
printer admin = @lpadmin
[print$]
write list = @lpadmin
=====
r...@tinello:/home/luca# cupsaddsmb -v -U luca -H localhost -a
Password for luca required to access localhost via SAMBA:
Running command: smbclient //localhost/print$ -N \
-A /var/spool/cups/tmp/4778dc059c251 -c 'mkdir W32X86;put [...]'
WARNING: The "printer admin" option is deprecated
Domain=[TINELLO] OS=[Unix] Server=[Samba 3.0.24]
NT_STATUS_ACCESS_DENIED making remote directory \W32X86
Failed to open \W32X86/HP_Color_LaserJet_CM1017_MFP.ppd:
NT_STATUS_OBJECT_PATH_NOT_FOUND
Failed to open \W32X86/ps5ui.dll: NT_STATUS_OBJECT_PATH_NOT_FOUND
Failed to open \W32X86/pscript.hlp: NT_STATUS_OBJECT_PATH_NOT_FOUND
Failed to open \W32X86/pscript.ntf: NT_STATUS_OBJECT_PATH_NOT_FOUND
Failed to open \W32X86/pscript5.dll: NT_STATUS_OBJECT_PATH_NOT_FOUND
Unable to copy Windows 2000 printer driver files (1)!
r...@tinello:/home/luca# ls -l /var/lib/samba
total 84
-rw------- 1 root root 8192 Jan 1 2007 account_policy.tdb
-rw------- 1 root root 8192 Jan 1 2007 group_mapping.tdb
-rw------- 1 root root 8192 Jan 1 2007 ntdrivers.tdb
-rw------- 1 root root 696 Jan 1 2007 ntforms.tdb
-rw------- 1 root root 8192 Jan 1 2007 ntprinters.tdb
-rw------- 1 root root 16384 Dec 26 22:20 passdb.tdb
drwxr-xr-x 2 root root 4096 Jan 1 2007 perfmon
drwxr-xr-x 2 root root 4096 Dec 30 12:06 printers
-rw------- 1 root root 16384 Jan 1 2007 registry.tdb
-rw------- 1 root root 8192 Jan 1 2007 secrets.tdb
r...@tinello:/home/luca# chown -R root:lpadmin /var/lib/samba/printers/
r...@tinello:/home/luca# chmod -R 775 /var/lib/samba/printers/
r...@tinello:/home/luca# cupsaddsmb -v -U luca -H localhost -a
Password for luca required to access localhost via SAMBA:
Running command: smbclient //localhost/print$ -N \
-A /var/spool/cups/tmp/4778dc3e09070 -c 'mkdir W32X86;put [...]'
WARNING: The "printer admin" option is deprecated
Domain=[TINELLO] OS=[Unix] Server=[Samba 3.0.24]
putting file /var/spool/cups/tmp/4778dc3c8d069 as
\W32X86/HP_Color_LaserJet_CM1017_MFP.ppd (644.2 kb/s) (average 644.2 kb/s)
putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll (2014.9
kb/s) (average 1350.7 kb/s)
putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp (2311.6
kb/s) (average 1425.6 kb/s)
putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf
(13277.6 kb/s) (average 5646.9 kb/s)
putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll
(23449.9 kb/s) (average 7136.7 kb/s)
Running command: smbclient //localhost/print$ -N \
-A /var/spool/cups/tmp/4778dc3e09070 \
-c 'put /usr/share/cups/drivers/cups6.ini W32X86/cups6.ini;put [...]'
WARNING: The "printer admin" option is deprecated
Domain=[TINELLO] OS=[Unix] Server=[Samba 3.0.24]
putting file /usr/share/cups/drivers/cups6.ini as \W32X86/cups6.ini (70.3 kb/s)
(average 70.3 kb/s)
putting file /usr/share/cups/drivers/cupsps6.dll as \W32X86/cupsps6.dll
(12272.2 kb/s) (average 6171.9 kb/s)
putting file /usr/share/cups/drivers/cupsui6.dll as \W32X86/cupsui6.dll
(13350.3 kb/s) (average 8565.1 kb/s)
Running command: rpcclient localhost -N \
-A /var/spool/cups/tmp/4778dc3e09070 -c 'adddriver "Windows NT x86" [...]'
WARNING: The "printer admin" option is deprecated
Printer Driver HP_Color_LaserJet_CM1017_MFP successfully installed.
Running command: rpcclient localhost -N \
-A /var/spool/cups/tmp/4778dc3e09070 \
-c 'setdriver HP_Color_LaserJet_CM1017_MFP HP_Color_LaserJet_CM1017_MFP'
WARNING: The "printer admin" option is deprecated
Succesfully set HP_Color_LaserJet_CM1017_MFP to driver
HP_Color_LaserJet_CM1017_MFP.
r...@tinello:/home/luca#
=====
I thought this was a wishlist, but then I came to the conclusion that
this is a real bug, since a default smb.conf has "invalid users = root"
and clearly states that even other non-root users can manage printers
(drivers and properties).
I used the lpadmin group because it's created on postinst by cupsys (and
cupsys-client) and thus it sounds the best group to me.
Thx, bye,
Gismo / Luca
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages samba depends on:
ii deb 1.5.11etch1 Debian configuration management sy
ii lib 2.2.41-1 Access control list shared library
ii lib 2.4.32-1 Extended attribute shared library
ii lib 2.3.6.ds1-13etch4 GNU C Library: Shared libraries
ii lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library
ii lib 1.2.7-4etch2 Common UNIX Printing System(tm) -
ii lib 1.4.4-3 the GNU TLS library - runtime libr
ii lib 1.4.4-7etch4 MIT Kerberos runtime libraries
ii lib 2.1.30-13.3 OpenLDAP libraries
ii lib 0.79-5 Pluggable Authentication Modules f
ii lib 0.79-5 Runtime support for the PAM librar
ii lib 0.79-5 Pluggable Authentication Modules l
ii lib 1.10-3 lib for parsing cmdline parameters
ii log 3.7.1-3 Log rotation utility
ii lsb 3.1-23.2etch1 Linux Standard Base 3.1 init scrip
ii net 4.29 Basic TCP/IP networking system
ii pro 1:3.2.7-3 /proc file system utilities
ii sam 3.0.24-6etch9 Samba common files used by both th
ii zli 1:1.2.3-13 compression library - runtime
Versions of packages samba recommends:
pn smbldap-tools <none> (no description available)
-- debconf information:
samba/run_mode: daemons
samba/tdbsam: false
samba/generate_smbpasswd: true
--- End Message ---
--- Begin Message ---
Source: samba
Source-Version: 2:3.2.5-2
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive:
libpam-smbpass_3.2.5-2_i386.deb
to pool/main/s/samba/libpam-smbpass_3.2.5-2_i386.deb
libsmbclient-dev_3.2.5-2_i386.deb
to pool/main/s/samba/libsmbclient-dev_3.2.5-2_i386.deb
libsmbclient_3.2.5-2_i386.deb
to pool/main/s/samba/libsmbclient_3.2.5-2_i386.deb
libwbclient0_3.2.5-2_i386.deb
to pool/main/s/samba/libwbclient0_3.2.5-2_i386.deb
samba-common_3.2.5-2_i386.deb
to pool/main/s/samba/samba-common_3.2.5-2_i386.deb
samba-dbg_3.2.5-2_i386.deb
to pool/main/s/samba/samba-dbg_3.2.5-2_i386.deb
samba-doc-pdf_3.2.5-2_all.deb
to pool/main/s/samba/samba-doc-pdf_3.2.5-2_all.deb
samba-doc_3.2.5-2_all.deb
to pool/main/s/samba/samba-doc_3.2.5-2_all.deb
samba-tools_3.2.5-2_i386.deb
to pool/main/s/samba/samba-tools_3.2.5-2_i386.deb
samba_3.2.5-2.diff.gz
to pool/main/s/samba/samba_3.2.5-2.diff.gz
samba_3.2.5-2.dsc
to pool/main/s/samba/samba_3.2.5-2.dsc
samba_3.2.5-2_i386.deb
to pool/main/s/samba/samba_3.2.5-2_i386.deb
smbclient_3.2.5-2_i386.deb
to pool/main/s/samba/smbclient_3.2.5-2_i386.deb
smbfs_3.2.5-2_i386.deb
to pool/main/s/samba/smbfs_3.2.5-2_i386.deb
swat_3.2.5-2_i386.deb
to pool/main/s/samba/swat_3.2.5-2_i386.deb
winbind_3.2.5-2_i386.deb
to pool/main/s/samba/winbind_3.2.5-2_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christian Perrier <[email protected]> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 13 Dec 2008 13:56:07 +0100
Source: samba
Binary: samba samba-common samba-tools smbclient swat samba-doc samba-doc-pdf
smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg
libwbclient0
Architecture: source all i386
Version: 2:3.2.5-2
Distribution: unstable
Urgency: low
Maintainer: Debian Samba Maintainers <[email protected]>
Changed-By: Christian Perrier <[email protected]>
Description:
libpam-smbpass - pluggable authentication module for SMB/CIFS password database
libsmbclient - shared library that allows applications to talk to SMB/CIFS
serve
libsmbclient-dev - libsmbclient static libraries and headers
libwbclient0 - client library for interfacing with winbind service
samba - a LanManager-like file and printer server for Unix
samba-common - Samba common files used by both the server and the client
samba-dbg - Samba debugging symbols
samba-doc - Samba documentation
samba-doc-pdf - Samba documentation (PDF format)
samba-tools - tools provided by the Samba suite
smbclient - a LanManager-like simple client for Unix
smbfs - mount and umount commands for the smbfs (for kernels >= than 2.2.
swat - Samba Web Administration Tool
winbind - service to resolve user and group information from Windows NT ser
Closes: 459243 506109 507620
Changes:
samba (2:3.2.5-2) unstable; urgency=low
.
* Fix typo in bug number in a comment for the default smb.conf file
Closes: #507620
* Document the need to set appropriate permissions on the printer
drivers directory, in the default smb.conf file. Also change
the example group from ntadmin to lpadmin
Closes: #459243
* Add missing rfc2307.so and sfu*.so links that prevent using the
'winbind nss info' feature properly
Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
the patch. Closes: #506109
Checksums-Sha1:
02acf7ecd3e5f4f53c93aa118c3aea160a2f4770 1813 samba_3.2.5-2.dsc
1a362cd30d8405275c5ac9c7b676b5e101017342 319816 samba_3.2.5-2.diff.gz
edef94701c2f1ae067ffd1271df00450b5408277 7943526 samba-doc_3.2.5-2_all.deb
7060f4cfbdbbab68937fb948f7914d17f8f06ec0 6251406 samba-doc-pdf_3.2.5-2_all.deb
f73adfbbb57716e566f93113ce039c69739d33b1 4292730 samba_3.2.5-2_i386.deb
d8eb186e0d93ae09a4852a768da88914d008510a 3403936 samba-common_3.2.5-2_i386.deb
5518b1e6712c699864423b8e95d119b47c3efb6a 5065466 samba-tools_3.2.5-2_i386.deb
47508275a6f7595666c416a2766377bad37cd1f4 6299756 smbclient_3.2.5-2_i386.deb
15cfa6b73cb79025fa2436f2bbe90944971a245e 984038 swat_3.2.5-2_i386.deb
cab16fe2ece8bbe4d4c6aa9a1d1d9f6c7a59b02f 1348576 smbfs_3.2.5-2_i386.deb
c73468145efb4b0cfe640da0b93676517e7f1db1 560092 libpam-smbpass_3.2.5-2_i386.deb
83b058884a8ec84434142e740c36b5bc380359a8 1198694 libsmbclient_3.2.5-2_i386.deb
d70a5e28942132696c87b09390cee2dcb0bd1153 1819296
libsmbclient-dev_3.2.5-2_i386.deb
61bc8889ff393b92f5365f8edc60140b5e526922 2928328 winbind_3.2.5-2_i386.deb
12206f9a74815ad31a2f05479d1305de96ad9db1 2084054 samba-dbg_3.2.5-2_i386.deb
a5debea525c019811a41d6e063c4548b4151d0cf 78120 libwbclient0_3.2.5-2_i386.deb
Checksums-Sha256:
913e1e8566d9d80f652fe6132a88c3aac1d00c1fdb6fae9e53b04ec4078ca4a1 1813
samba_3.2.5-2.dsc
a2813babf7b899dcf32fc277b57d5e4493acb6c0875a6af61c694f7fd29464a8 319816
samba_3.2.5-2.diff.gz
0980ee98238f50d17ad2c1ef23921c5bfff9ef64c025d2aa72d184568c33742c 7943526
samba-doc_3.2.5-2_all.deb
863e118b99b934118a4876cfea41c20676e831168116da3a75a281fb525c247a 6251406
samba-doc-pdf_3.2.5-2_all.deb
ed02eae0a72bbf993f92a0f310de8c036622dc5cff910188a1012e8dffb45ff5 4292730
samba_3.2.5-2_i386.deb
be8d8360692883216e6f3db03153b8e3a00ffbca7acf1bd99912ef33a89adf5d 3403936
samba-common_3.2.5-2_i386.deb
a09f71e752444362fe3d05f670d44fda9f9606b88bd3f1b78346a725b9e1712f 5065466
samba-tools_3.2.5-2_i386.deb
5cfee296292fda97634e0dbad7ac09d588f9308e65e9ecc06213da253e7e80d4 6299756
smbclient_3.2.5-2_i386.deb
ee684c71a9d0ec939a868e7141f40006bdfd0e8020a33d1528583c28968cf6b4 984038
swat_3.2.5-2_i386.deb
e4b9fbb4b1606e8631fcd6180f80c3d6637eecfc23e491b77893832a1f4ac97f 1348576
smbfs_3.2.5-2_i386.deb
f9c328eebc911901e86c4672e870c78e783e58398fcdb8e98c7bdd70d0b8792e 560092
libpam-smbpass_3.2.5-2_i386.deb
db41fc68d1f09b8a8ce09f02223cd80d3ed813b0a5a17162a46ffc313aa7c020 1198694
libsmbclient_3.2.5-2_i386.deb
992cb825f3b709b4b73d03d7c2ec4d08b31d68a3018d27d8ec6611858cd51680 1819296
libsmbclient-dev_3.2.5-2_i386.deb
443387b81601fc9c8481adb10ba83ec584db184ffb362439b36a5c95deaca98d 2928328
winbind_3.2.5-2_i386.deb
504bf27e0acb7263aab396e2a3db84927b770862e7893cb7fff7d115b34a2b95 2084054
samba-dbg_3.2.5-2_i386.deb
cb3468e39bc38161f10989a9be411a762fe86a0971cb8e39d09eed33c4b20abc 78120
libwbclient0_3.2.5-2_i386.deb
Files:
019b538765ef30a42b1b8fa100deb79e 1813 net optional samba_3.2.5-2.dsc
547e63d39b6b9f6f871e11c0306eaeba 319816 net optional samba_3.2.5-2.diff.gz
52e0e7eb2708913d55074d615c3154cf 7943526 doc optional samba-doc_3.2.5-2_all.deb
939eca15141abdfb588aa7e86495f3cc 6251406 doc optional
samba-doc-pdf_3.2.5-2_all.deb
be0237ac8f2cd769e3e8eacb7231f0c5 4292730 net optional samba_3.2.5-2_i386.deb
075ded1b1a6ac3a52a949c7a6746e87d 3403936 net optional
samba-common_3.2.5-2_i386.deb
e4cde51aec7e64ec8f7f2aefb35b32ad 5065466 net optional
samba-tools_3.2.5-2_i386.deb
3e699ac9c31d0a79d66d276d620b8f1b 6299756 net optional
smbclient_3.2.5-2_i386.deb
af23224233be0c4d4422f792dd5b8b60 984038 net optional swat_3.2.5-2_i386.deb
4e0647b987b9c8ce434f3b4eb9cc8224 1348576 otherosfs optional
smbfs_3.2.5-2_i386.deb
e889587092572220ce88c02403961a2e 560092 admin extra
libpam-smbpass_3.2.5-2_i386.deb
22c0f03265e5aebc1623b2ba8c653736 1198694 libs optional
libsmbclient_3.2.5-2_i386.deb
256b726b08482d4ac07cba2bc3b9e1fe 1819296 libdevel extra
libsmbclient-dev_3.2.5-2_i386.deb
3f9a032f5bd7919ab5178c22d748314f 2928328 net optional winbind_3.2.5-2_i386.deb
8dd034c0a7f6c95ed89896e3c12ca72d 2084054 devel extra samba-dbg_3.2.5-2_i386.deb
6a7c87f0ca4626b591ab2b860a678132 78120 libs optional
libwbclient0_3.2.5-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAklEAVoACgkQ1OXtrMAUPS0y6gCbBeSniMlgA0ENzJBAOqvpppo2
ab4An0H71mIVjglhIMfxgjYt6yDvh6Nw
=1koZ
-----END PGP SIGNATURE-----
--- End Message ---
