Bug 3635 - Security on printers
Summary: Security on printers
Status: RESOLVED INVALID
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Printing (show other bugs)
Version: 3.0.14a
Hardware: x86 Windows XP
: P3 major
Target Milestone: none
Assignee: Gerald (Jerry) Carter (dead mail address)
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-03-28 08:41 UTC by Guillaume
Modified: 2006-04-20 07:55 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Guillaume 2006-03-28 08:41:18 UTC
If the cups name and the printer name aren't the same all the security settings are ignored

It's ok with
<Printer TEST10>
Info nom cups smb identique(cups)
DeviceURI socket://ayme.strg.arte:9100
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
</Printer>

[TEST10]
        comment = nom cups smb identique

        path = /tmp
        printer admin = p-dinhvan, g-renard, f-roth, j-ponton, root, install
        printable = Yes
        printer name = " TEST10"

It's not OK with
<Printer TEST11>
Info nom cups smb diférents(cups)
DeviceURI socket://ayme.strg.arte:9100
State Idle
Accepting Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
</Printer>
et
[TEST 11 XI]
        comment = nom cups smb différents

        path = /tmp
        printer admin = p-dinhvan, g-renard, f-roth, j-ponton, root, install
        printable = Yes
        printer name = "TEST11"


My server samba is a FC3 and my client are using Win XP Pro (I set the security with the windows interface) but It's OK :
[root@newscribe ~]# rpcclient scribe -U g-renard%***** -c 'getprinter "TEST 11 XI" 3'
        flags:[0x4]
DACL
        ACL     Num ACEs:       4       revision:       2
        ---
        ACE
                type: ACCESS DENIED (1) flags: 0
                Specific bits: 0x8
                Permissions: 0x20008: READ_CONTROL_ACCESS 
                SID: S-1-5-21-2533171995-41200505-3792937173-4376

        ACE
                type: ACCESS ALLOWED (0) flags: 0
                Specific bits: 0xc
                Permissions: 0xf000c: WRITE_OWNER_ACCESS WRITE_DAC_ACCESS READ_CONTROL_ACCESS DELETE_ACCESS 
                SID: S-1-5-21-2533171995-41200505-3792937173-500
Comment 1 Gerald (Jerry) Carter (dead mail address) 2006-04-08 11:32:56 UTC
Please clarify what you mean by "all security settings are ignored".
Comment 2 Gerald (Jerry) Carter (dead mail address) 2006-04-20 07:55:40 UTC
no response.  closing.