Hi, running here samba-ldap-pdc (debian sarge, samba 3.0.14a-3sarge, cups). Domain users can delete their own print jobs. But they should also be able to delete print jobs of other domain users. But this does not work, because of access problems.
net groupmap list Domain Users (S-1-5-21-2984023303-172644929-1026171850-1222) -> archi Domain Admins (S-1-5-21-2984023303-172644929-1026171850-512) -> admin Over winxp (network environment -> server -> printers -> access) I arranged that for the group 'domain users' print job management is allowed. But deleting occurs access denied. Here is the log file: [2006/12/11 13:26:43, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2984023303-172644929-10261718 50-3012 se_access_check: also S-1-5-21-2984023303-172644929-1026171850-1222 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2984023303-172644929-1026171850-513 [2006/12/11 13:26:43, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (f000c) denied. [2006/12/11 13:26:43, 4] printing/nt_printing.c:print_access_check(51 75) access check was FAILURE [2006/12/11 13:26:43, 5] lib/username.c:user_in_netgroup_list(315) Unable to get default yp domain [2006/12/11 13:26:43, 3] rpc_server/srv_spoolss_nt.c:_spoolss_open_pr inter_ex(1770) access DENIED for printer open What does the message "Unable to get default yp domain" mean? Any hints? Regards... Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
