After the upgrade from Samba 3.0.22 to 3.0.23d rpcclient setdriver (as the only part from our modified cupsaddsmb, which allows to submit the password) did not work anymore. Also all admin options in the printer properties dialog from a Windows client are greyed out. The user/group which needs access to admin the printers have the SePrintOperatorPrivilege permissions granted. The only error message was from the rpcclient command: # rpcclient printer -N -U'cupssmb%abcdefgh' -c 'setdriver hpr_e86 hpr_e86' result was WERR_ACCESS_DENIED # After adding "printer admin" options to the [printers] section it was working again (even from the Windows Client): # rpcclient printer -N -U'cupssmb%abcdefgh' -c 'setdriver hpr_e86 hpr_e86' Succesfully set hpr_e86 to driver hpr_e86. # With this workaround the message "WARNING: The "printer admin" option is deprecated" is logged. Some details about our setup: - running the PDC on a other server also with Samba 3.0.23d [global] enable privileges = yes smb passwd file = /var/lib/samba/winpdc/smbpasswd security = user - relevant configuration on the print server [global] load printers = yes show add printer wizard = yes printcap name = cups printing = cups security = domain password server = WINPDC [printers] comment = All Printers path = /var/spool/samba browseable = no public = yes guest ok = yes writable = no printable = yes printer admin = +ntdomprt - on both (PDC and printer) servers the same unix users and groups are available through NIS
(In reply to comment #0) > After the upgrade from Samba 3.0.22 to 3.0.23d rpcclient setdriver (as the only > part from our modified cupsaddsmb, which allows to submit the password) did not > work anymore. Also all admin options in the printer properties dialog from a > Windows client are greyed out. The user/group which needs access to admin the > printers have the SePrintOperatorPrivilege permissions granted. As a wild guess - coold it be the result of the problems with primary group in recent Sambas? Try new 3.0.25a version, which aims to address this problem. With regards, Timur
Sorry for the long delay. Yes, it could be about the primary group problems. But as I do not have this kind of setup available at the moment, I can not test it myself. I had forwarded this report to my former co-workers, but as far as I know they did not yet update to any of the 3.0.25x versions of Samba.
I currently am experiencing this bug using Lenny from a Debian Live CD. I've created debug level 10 reports both with the failure and the subsequent success (after setting the printer admin parameter in smb.conf). In the attached debugs, I the samba system is polyspool (192.168.2.145) and the client system using rpcclient is scooby (192.168.2.2).
Created attachment 3988 [details] Debug Level 10 Output demonstrating the bug occuring
Created attachment 3989 [details] Debug Level 10 Output showing success after changing the printer admin parameter
This is probably fixed with a newer Samba version. If you still see the error. Please open a new bug with 'debug level = 10' logfiles of the new Samba version 3.5 or 3.6. Thanks!