Just to be sure it wasn't an ADS issue, I removed all the ADS stuff, migrated to security=user, made sure root was valid and admin on the print$ share, and got the identical error messages. so... I'm not doing something quite right with the filesystem, I see that, but could use a pointer here.
thanks, Jack Jack Downes wrote: > Hello, been googling this for a while. Read GD's presentation on why > printing is such a pain... > > Anyway, I'm using 3.4.8 on Freebsd 8.1 I've tried a few combinations > - best luck is with 3.2.5, but I'd like to move forward a bit. > > So, I've got the ADS part working pretty good. happy with how that's > going. > > my problem is when I attempt to load printer drivers. Everything > looks good up to the very end, and then all of a sudden it says it > can't load the driver as access is denied. > > Now, just for your information, my intent is not really to use this > system as a printserver, but rather as a printer driver distribution > system. I'll be converting the printers to IPP shortly after they are > installed - via a login script as I like IPP better for a variety of > reasons. However, the point-n-print thing is really hard to beat. > > So I've been poring through the logs generated by samba34, and I get > to a point where it's telling me that the files it's either reading or > writing are a symlink outside the share path. And so, I think this is > why it fails. Here's the log file +- 100 lines around the error. > Hopefully that's enough output from the log. > > freecups# grep -A100 -B100 NT_STATUS_ACCESS_DENIED log.smbd > Checking operation #92 (type 92, layer 0) > Making operation type 92 opaque [module /[Default VFS]/] > Accepting operation type 92 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #93 (type 93, layer 0) > Making operation type 93 opaque [module /[Default VFS]/] > Accepting operation type 93 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #94 (type 94, layer 0) > Making operation type 94 opaque [module /[Default VFS]/] > Accepting operation type 94 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #95 (type 95, layer 0) > Making operation type 95 opaque [module /[Default VFS]/] > Accepting operation type 95 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #96 (type 96, layer 0) > Making operation type 96 opaque [module /[Default VFS]/] > Accepting operation type 96 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #97 (type 97, layer 0) > Making operation type 97 opaque [module /[Default VFS]/] > Accepting operation type 97 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #98 (type 98, layer 0) > Making operation type 98 opaque [module /[Default VFS]/] > Accepting operation type 98 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #99 (type 99, layer 0) > Making operation type 99 opaque [module /[Default VFS]/] > Accepting operation type 99 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #100 (type 100, layer 0) > Making operation type 100 opaque [module /[Default VFS]/] > Accepting operation type 100 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #101 (type 101, layer 0) > Making operation type 101 opaque [module /[Default VFS]/] > Accepting operation type 101 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #102 (type 102, layer 0) > Making operation type 102 opaque [module /[Default VFS]/] > Accepting operation type 102 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #103 (type 103, layer 0) > Making operation type 103 opaque [module /[Default VFS]/] > Accepting operation type 103 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #104 (type 104, layer 0) > Making operation type 104 opaque [module /[Default VFS]/] > Accepting operation type 104 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #105 (type 105, layer 0) > Making operation type 105 opaque [module /[Default VFS]/] > Accepting operation type 105 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #106 (type 106, layer 0) > Making operation type 106 opaque [module /[Default VFS]/] > Accepting operation type 106 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #107 (type 107, layer 0) > Making operation type 107 opaque [module /[Default VFS]/] > Accepting operation type 107 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #108 (type 108, layer 0) > Making operation type 108 opaque [module /[Default VFS]/] > Accepting operation type 108 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #109 (type 109, layer 0) > Making operation type 109 opaque [module /[Default VFS]/] > Accepting operation type 109 from module /[Default VFS]/ > [2010/09/29 17:31:53, 5] smbd/vfs.c:192(vfs_init_custom) > Checking operation #110 (type 110, layer 0) > Making operation type 110 opaque [module /[Default VFS]/] > Accepting operation type 110 from module /[Default VFS]/ > [2010/09/29 17:31:53, 10] > modules/vfs_default.c:147(vfswrap_fs_capabilities) > vfswrap_fs_capabilities: timestamp resolution of msec available on > share homes, directory /home/PrinterDrivers > [2010/09/29 17:31:53, 4] smbd/vfs.c:753(vfs_ChDir) > vfs_ChDir to /home/PrinterDrivers > [2010/09/29 17:31:53, 3] lib/util.c:788(unix_clean_name) > unix_clean_name [W32X86/PSCRIPT5.DLL] > [2010/09/29 17:31:53, 5] smbd/filename.c:148(unix_convert) > unix_convert called on file "W32X86/PSCRIPT5.DLL" > [2010/09/29 17:31:53, 10] smbd/statcache.c:235(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [W32X86/PSCRIPT5.DLL] > [2010/09/29 17:31:53, 10] smbd/statcache.c:274(stat_cache_lookup) > stat_cache_lookup: lookup succeeded for name [W32X86] -> [W32X86] > [2010/09/29 17:31:53, 5] smbd/statcache.c:138(stat_cache_add) > stat_cache_add: Added entry (8038717d0:size 13) W32X86/PSCRIPT5.DLL > -> W32X86/PSCRIPT5.DLL > [2010/09/29 17:31:53, 5] smbd/filename.c:297(unix_convert) > conversion finished W32X86/PSCRIPT5.DLL -> W32X86/PSCRIPT5.DLL > [2010/09/29 17:31:53, 10] smbd/open.c:3365(create_file_default) > create_file: access_mask = 0x120089 file_attributes = 0x80, > share_access = 0x3, create_disposition = 0x1 create_options = 0x0 > oplock_request = 0x8 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, > create_file_flags = 0x0, fname = W32X86/PSCRIPT5.DLL > [2010/09/29 17:31:53, 3] smbd/vfs.c:865(check_reduced_name) > reduce_name [W32X86/PSCRIPT5.DLL] [/home/PrinterDrivers] > [2010/09/29 17:31:53, 10] smbd/vfs.c:937(check_reduced_name) > reduce_name realpath [W32X86/PSCRIPT5.DLL] -> > [/usr/home/PrinterDrivers/W32X86/PSCRIPT5.DLL] > [2010/09/29 17:31:53, 2] smbd/vfs.c:949(check_reduced_name) > reduce_name: Bad access attempt: W32X86/PSCRIPT5.DLL is a symlink > outside the share path > [2010/09/29 17:31:53, 5] smbd/filename.c:768(check_name) > check_name: name W32X86/PSCRIPT5.DLL failed with > NT_STATUS_ACCESS_DENIED > [2010/09/29 17:31:53, 10] smbd/open.c:3497(create_file_default) > create_file: NT_STATUS_ACCESS_DENIED > [2010/09/29 17:31:53, 3] > printing/nt_printing.c:1529(get_correct_cversion) > get_correct_cversion: Can't open file [W32X86/PSCRIPT5.DLL], errno = 0 > [2010/09/29 17:31:53, 4] smbd/vfs.c:753(vfs_ChDir) > vfs_ChDir to /tmp > [2010/09/29 17:31:53, 1] > ../librpc/ndr/ndr.c:251(ndr_print_function_debug) > spoolss_AddPrinterDriverEx: struct spoolss_AddPrinterDriverEx > out: struct spoolss_AddPrinterDriverEx > result : WERR_ACCESS_DENIED > [2010/09/29 17:31:53, 5] rpc_server/srv_pipe.c:2362(api_rpcTNP) > api_rpcTNP: called \spoolss successfully > [2010/09/29 17:31:53, 3] > rpc_server/srv_pipe_hnd.c:343(free_pipe_context) > free_pipe_context: destroying talloc pool of size 0 > [2010/09/29 17:31:53, 10] > rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe) > write_to_pipe: data_used = 604 > [2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug) > s3_event: Schedule immediate event "tevent_req_trigger": 0x80387c890 > [2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug) > s3_event: Run immediate event "tevent_req_trigger": 0x80387c890 > [2010/09/29 17:31:53, 6] > rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe) > name: \spoolss len: 1204 > [2010/09/29 17:31:53, 10] > rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe) > read_from_pipe: \spoolss: fault_state = 0 : data_sent_length = 0, > prs_offset(&p->out_data.rdata) = 4. > [2010/09/29 17:31:53, 5] rpc_parse/parse_prs.c:88(prs_debug) > 000000 smb_io_rpc_hdr hdr > 0000 major : 05 > 0001 minor : 00 > 0002 pkt_type : 02 > 0003 flags : 03 > 0004 pack_type0: 10 > 0005 pack_type1: 00 > 0006 pack_type2: 00 > 0007 pack_type3: 00 > 0008 frag_len : 001c > 000a auth_len : 0000 > 000c call_id : 00000136 > [2010/09/29 17:31:53, 5] rpc_parse/parse_prs.c:88(prs_debug) > 000010 smb_io_rpc_hdr_resp resp > 0010 alloc_hint: 00000004 > 0014 context_id: 0000 > 0016 cancel_ct : 00 > 0017 reserved : 00 > [2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug) > s3_event: Schedule immediate event "tevent_req_trigger": 0x803873ad0 > [2010/09/29 17:31:53, 10] lib/events.c:287(s3_event_debug) > s3_event: Run immediate event "tevent_req_trigger": 0x803873ad0 > [2010/09/29 17:31:53, 5] smbd/ipc.c:59(copy_trans_params_and_data) > copy_trans_params_and_data: params[0..0] data[0..28] (align 0) > [2010/09/29 17:31:53, 5] lib/util.c:632(show_msg) > [2010/09/29 17:31:53, 5] lib/util.c:642(show_msg) > size=84 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=1 > smb_pid=1312 > smb_uid=101 > smb_mid=14593 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 28 (0x1C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 28 (0x1C) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 > [2010/09/29 17:31:53, 10] ../lib/util/util.c:304(_dump_data) > [0000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 36 01 00 ........ > .....6.. > [0010] 00 04 00 00 00 00 00 00 00 05 00 00 00 ........ > ..... > [2010/09/29 17:31:53, 10] > lib/util_sock.c:789(read_smb_length_return_keepalive) > got smb length of 41 > [2010/09/29 17:31:53, 6] smbd/process.c:1456(process_smb) > got message type 0x0 of len 0x29 > [2010/09/29 17:31:53, 3] smbd/process.c:1459(process_smb) > Transaction 1270 of length 45 (0 toread) > [2010/09/29 17:31:53, 5] lib/util.c:632(show_msg) > [2010/09/29 17:31:53, 5] lib/util.c:642(show_msg) > size=41 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=24 > smb_flg2=51207 > smb_tid=4 > smb_pid=65279 > smb_uid=101 > smb_mid=14657 > smt_wct=3 > smb_vwv[ 0]=10127 (0x278F) > smb_vwv[ 1]=65535 (0xFFFF) > smb_vwv[ 2]=65535 (0xFFFF) > smb_bcc=0 > [2010/09/29 17:31:53, 3] smbd/process.c:1273(switch_message) > > > my smb.conf > [global] > > log level = 10 > enable privileges = yes > workgroup=KRH > server string = %h server (Samba %v, Domain %D, Server %L - %R) > load printers = yes > printcap name = cups > printing = cups > addprinter command = /usr/local/sbin/smbaddprinter.pl > deleteprinter command = /usr/local/sbin/smbdelprinter.pl > encrypt passwords = yes > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > dns proxy = no > smb ports = 139 > security = ADS > realm = KRH.INT > follow symlinks = yes > password server = kal-dc3.krh.int > password server = kal-dc4.krh.int > password server = kal-dc2.krh.int > winbind separator = + > idmap uid = 10000-20000 > idmap gid = 10000-20000 > winbind enum users = No > winbind enum groups = No > winbind nested groups = No > template homedir = /home/%D/%U > template shell = /bin/tcsh > client ntlmv2 auth = yes > winbind use default domain = yes > restrict anonymous = 2 > domain master = no > preferred master = no > local master = no > wins server = 10.6.1.21 > os level = 25 > disable netbios = no > #character set = ISO8859-1 > #client code page = 850 > > > [homes] > comment = PDF Directories > valid users = %S > #valid users = %U > create mask = 0700 > directory mask = 0700 > read only = No > browseable = no > > [printers] > comment = All Printers > path = /var/spool/samba34 > create mask = 0700 > browseable = no > printable = yes > guest ok = yes > # > [print$] > comment = Printer Drivers > path = /home/PrinterDrivers > #valid users = KRH+jdown > #admin users = KRH+jdown > create mask = 0755 > directory mask = 0755 > read only = No > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
