samba - Dec 2002 - Windows 2000 Printers: "Access Denied, Unable to Connect"

Unless I make a user a member of the printer admin group in the smb.conf
file on the Linux Samba Server, on the W2K client the printer will show up
as "Access Denied, Unable to Connect".  The user can still connect and
print
to that printer, however.  I just want to get rid of that incorrect status
message, because it will cause confusion.  

Here are the relevant parts of the smb.conf file.  Thanks in advance:  

[global]
   workgroup = WIN
   hosts allow = 172.16. 
   printcap name = /etc/printcap
   load printers = yes
   printing = lprng
   security = domain
   password server = *
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   os level = 0


[printers]
   comment = All Printers
   path = /var/spool/samba/public
   browseable = no
   printable = yes
   public = yes
   writable = no
   create mode = 0700
 
[lp11]
   comment=David's Printer
   path=/home/dneilson
   create mask = 0700
   writable = yes
   public = yes
   guest ok = yes
   hosts allow = 172.16.
   printable = yes
   printing = lprng
   print command = /usr/bin/lpr -r -Plp11 %s
   lpq command = /usr/bin/lpq -Plp11 %j
   lprm command = /usr/sbin/lprm -Plp11 %j
   printer name = lp11
   share modes = no
   printer admin = tiberius,root,dneilson
   queuepause command = /usr/sbin/lpc stop %p
   queueresume command = /usr/sbin/lpc start %p


David Neilson
Western Family Foods, Inc.
System Administrator
503 639 6300 x370

1) Are the w2k client's running as local admins?
2) Do the clients install the drivers locally (instead of installing the
printers with drivers in the print$ share on samba)?

If both of these are yes, check out "use client driver" in the
smb.conf
man page.  Long story short, you probably want to set "use client driver
= yes" for a fast solution.  OR, you can set up samba to serve the
required drivers via the print$ share (this is the better solution
IMHO).  See the Samba-HOWTO-Collection for more information.

~ Daniel



> -----Original Message-----
> From: David Neilson
> Sent: Tuesday, December 17, 2002 2:49 PM
> To: 'samba@lists.samba.org'
> Subject: [Samba] Windows 2000 Printers: "Access Denied, 
> Unable to Connect"
> 
> 
> Unless I make a user a member of the printer admin group in 
> the smb.conf
> file on the Linux Samba Server, on the W2K client the printer 
> will show up
> as "Access Denied, Unable to Connect".  The user can still 
> connect and print
> to that printer, however.  I just want to get rid of that 
> incorrect status
> message, because it will cause confusion.  
> 
> Here are the relevant parts of the smb.conf file.  Thanks in 
> advance:  
> 
> [global]
>    workgroup = WIN
>    hosts allow = 172.16. 
>    printcap name = /etc/printcap
>    load printers = yes
>    printing = lprng
>    security = domain
>    password server = *
>    encrypt passwords = yes
>    smb passwd file = /etc/samba/smbpasswd
>    os level = 0
> 
> 
> [printers]
>    comment = All Printers
>    path = /var/spool/samba/public
>    browseable = no
>    printable = yes
>    public = yes
>    writable = no
>    create mode = 0700
>  
> [lp11]
>    comment=David's Printer
>    path=/home/dneilson
>    create mask = 0700
>    writable = yes
>    public = yes
>    guest ok = yes
>    hosts allow = 172.16.
>    printable = yes
>    printing = lprng
>    print command = /usr/bin/lpr -r -Plp11 %s
>    lpq command = /usr/bin/lpq -Plp11 %j
>    lprm command = /usr/sbin/lprm -Plp11 %j
>    printer name = lp11
>    share modes = no
>    printer admin = tiberius,root,dneilson
>    queuepause command = /usr/sbin/lpc stop %p
>    queueresume command = /usr/sbin/lpc start %p
> 
> 
> David Neilson
> Western Family Foods, Inc.
> System Administrator
> 503 639 6300 x370
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 









-----------------------------------------------------------------------

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.