On Wed, 15 Jan 2003, Norman Zhang wrote:

> Hi Buchan and All,
>
> I have appended my smb.conf at the bottom of this email for you to review.
> Your comments are greatly appreciated. I have also appended some additional
> info of my LM9.0 system.
>


Did you join the domain? I assume it's a windows (NT or 2k?) domain?

See comments below

> Regards,
> Norman
>
> ::: BTW, process is like this, browse to the Printers share on the
> ::: machine, right-click the printer, choose properties, say no when
> ::: offered to install a driver, click advanced, choose "New Driver".
> ::
> :: I do have printer_admin = @"MYNTDOMAIN\Print Admins", root. I also
> :: set my Print Admins to be the primary group for the operators. I
> :: also tried the process you described, but I still got access denied.
> :: Does this have to do with CUPS? Do I need to use cupsaddsmb? But I
> :: can't find the PPD from CUPS. They were available in the CUPS web
> :: config.
> :
> : No, if you use the cupsaddsmb, you end up using generic ps drivers on
> : the windows clients, in most cases you want the windows driver to be
> : installed there.
>
> Thank you. I guess I won't proceed with cupsaddsmb further.
>
> ::: Well, you should also have some directories under there such as
> ::: W32X86 etc. Check the perms of those, and also ensure the share has
> ::: enabled write for whoever is trying to upload drivers.
> ::
> :: All subfolder are there. It is 755 for all subfolders. The
> :: subfolders were created by Mandrake by default. I even did a
> :: setfacl -m g:"ARKONDOMAIN\Print Admins":rwx /var/lib/samba/printers,
> :: and gave rx access for all parent folders. But still unsuccessful 8(
> :: Please help.
> :
> : You need write access to the folders *below* /var/lib/samba/printers, so
> : try:
> : # setfacl -d -m g:"ARKONDOMAIN\Print Admins":rwx /var/lib/samba/printers
> :
> :: Regards,
> :: Norman
> :
> : It might help to send me your whole smb.conf so I can see exactly how
> : you are setup.
>
> I tried changing the winbind separator to \

The default is "\", comment it out rather, as it's quite difficult to get
it right (you must have the quotes). Also, for ACLs etc, it might be
worthwhile disabling 'winbind use default domain', at least to test ...


> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2003/01/14 14:44:12
>
> # Global parameters
> [global]
>  workgroup = ARKONDOMAIN
>  netbios name = PRNSERVER
>  server string = Samba Server %v
>  security = DOMAIN
>  encrypt passwords = Yes
>  obey pam restrictions = Yes
>  password server = PDCSERVER
>  log file = /var/log/samba/log.%m
>  max log size = 50
>  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>  printcap name = cups
>  character set = ISO8859-15
>  os level = 18
>  preferred master = No
>  local master = No
>  domain master = No
>  dns proxy = No
>  winbind uid = 10000-20000
>  winbind gid = 10000-20000
>  template shell = /bin/bash

First try uncommenting just this:
>  winbind separator = +
Then this:
>  winbind use default domain = Yes
THis looks ok ...
>  printer admin = root, @"ARKONDOMAIN\Print Admins"
>  printing = cups
This looks a bit suspect ... the one below for your hp5p loks right
>  print command = lp -d %p -o raw %s; rm -f %s
>
> [hp5p]
>  comment = HP LaserJet 5P--Show Room
You should use /var/spool/samba here unless you reall know what you are
doing. Anyway, in most cases you don't need per-printer config, unless
your printing defaults (in [printers]) are wrong.
 >  path = /var/spool/samba/hp5p
>  guest ok = Yes
>  printable = Yes
>  print command = lpr-cups -P %p -o raw %s
>  printer name = hp5p
>

This looks fine, don't know what you need the dos filetimes for though ..
> [print$]
>  comment = Printer Drivers
>  path = /var/lib/samba/printers
>  write list = root, @"ARKONDOMAIN\Print Admins"
>  guest ok = Yes
>  dos filetimes = Yes
>
> [printers]
>  comment = All Printers
>  path = /var/spool/samba
>  guest ok = Yes
>  printable = Yes
>  browseable = No
>
> ----
>
> [root@prn root]# setfacl -d -m g:"Print Admins":rwx /var/lib/samba/printers/
> [root@prn root]# getfacl /var/lib/samba/printers
> getfacl: Removing leading '/' from absolute path names
> # file: var/lib/samba/printers
> # owner: root
> # group: root
> user::rwx
> group::r-x
> group:Print Admins:rwx
> mask::rwx
> other::r-x
> default:user::rwx
> default:group::r-x
> default:group:Print Admins:rwx
> default:mask::rwx
> default:other::r-x
>
> [root@prn root]# smbstatus
>
> Samba version 2.2.7
> Service      uid      gid      pid     machine
> ----------------------------------------------
> IPC$         ARKONDOMAIN+domainadmin ARKONDOMAIN+Print Admins  5178
> 2139-1-20 (192.168.22.34) Tue Jan 14 14:45:23 2003
> IPC$         ARKONDOMAIN+domainadmin ARKONDOMAIN+Print Admins  5178
> 2139-1-20 (192.168.22.34) Tue Jan 14 14:44:49 2003
>
> No locked files
>
> [root@prn printers]# ls -l
> total 20
> drwxrwxr-x    2 root     root            6 Nov 25 10:15 W32ALPHA/
> drwxrwxr-x    2 root     root            6 Nov 25 10:15 W32MIPS/
> drwxrwxr-x    2 root     root            6 Nov 25 10:15 W32PPC/
> drwxrwxr-x    2 root     root            6 Nov 25 10:15 W32X86/
> drwxrwxr-x    2 root     root            6 Nov 25 10:15 WIN40/
> [root@prn printers]# pwd
> /var/lib/samba/printers
>

It might be best to do:

# chown "Printer Admins" /var/lib/samba/printers/* -R
# chmod g+rwx /var/lib/samba/printers/* -R


Only need these if you want to print using windows-side postscript
drivers, usually better not to unless your printer is a postscript
printer.

> [root@prn drivers]# ls
> ADFONTS.MFM   ADOBEPS5.DLL  cupsdrvr.dll  DEFPRTR2.PPD  PSMON.DLL
> ADOBEPS4.DRV  ADOBEPSU.DLL  cups.hlp      hplj5p_1.ppd
> ADOBEPS4.HLP  ADOBEPSU.HLP  cupsui.dll    ICONLIB.DLL
> [root@prn drivers]# pwd
> /usr/share/cups/drivers
> [root@prn drivers]# getfacl /usr/share/cups/drivers
> getfacl: Removing leading '/' from absolute path names
> # file: usr/share/cups/drivers
> # owner: root
> # group: root
> user::rwx
> group::r-x
> other::r-x
>

Otherwise, you look good to go ...

Buchan

-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to