Hi everyone,

This is not a security vulnerability or bug per se, but it make false positive alerts during security. Print spool server shouldn't be enabled on domain controller, it can be a real security issue on MS-AD.

On Samba-AD, when adding "disable spoolss = yes", print spooling is disabled, but it still register as up and running when doing a rpcclient enumports.

Step to reproduce: 
* add "disable spoolss = yes" to [global] in smb.conf

* restart samba server

* run rpcclient 

[root@srvads1.mydomain.lan ~]# 'rpcclient -U administrator localhost 
Password for [MYDOMAIN\administrator]: 
rpcclient $> enumports
        Port Name:        [Samba Printer Port]


Possible workaround is just to delete the file
* rm -f /usr/libexec/samba/rpcd_spoolss

I choose "DCE-RPC and pipes" as a category rather than "printing", as it is not really a printing bug, and nobody like printing anyway... :-)