Olav Rogall
2006-Sep-09 08:12 UTC
[Samba] access denied to printer after changing the dns-domain
Guten Tag , I'm running here a self-compiled samba 2.2.12 on an old suse 8.0 server as a domain controller with w2ksp2- and sp4-clients. The server also services cups, squid, postfix, bind etc. Everything works fine fopr year's. Last week i've changed the dns-system in my private network from *.privatnet to *.bla.dyndns.org. After the dns-change some accesses to my printer (hp photosmart 1000 , raw-printing with cups on the same machine) didn't work. If I open the printer-dialog on w2k (Start/settings/printers), the status of the printer is reported as "ready to service print-jobs", but if I try to acccess the printer-properties, I receive the "famous" error-message "error at adress 0x6062c92f code 0xc0000005 - some property-pages could not be displayed" This error is on all w2k-machines on the network, and for domain users and domain admins. After raising the smb-loglevel, I see this in my logfile, but it doesn't tell me anything (the marked line is interesting): [2006/04/25 20:03:35, 3] smbd/ipc.c:reply_trans(520) trans <\PIPE\> data=182 params=0 setup=2 [2006/04/25 20:03:35, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/04/25 20:03:35, 3] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "spoolss" (pnum 7546)free_pipe_context: destroying talloc pool of size 0 [2006/04/25 20:03:35, 3] rpc_server/srv_pipe.c:api_pipe_request(1183) Doing \PIPE\spoolss [2006/04/25 20:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(1215) api_rpcTNP: pipe 30022 rpc command: SPOOLSS_OPENPRINTEREX checking name: \\potenzia\HP [2006/04/25 20:03:35, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(394) Setting printer type=\\potenzia\HP [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(269) se_access_check: user sid is S-1-5-21-1655514155-2700837326-2153537488-2000 [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-5-21-1655514155-2700837326-2153537488-2003 [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-5-21-1655514155-2700837326-2153537488-1201 [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-1-0 [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-5-2 [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) se_access_check: also S-1-5-11> [2006/04/25 20:03:35, 3] rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1181) > access DENIED for printer open[2006/04/25 20:03:35, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197) Closed policy [2006/04/25 20:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) free_pipe_context: destroying talloc pool of size 60 Deleting and re-installing the printer over the network-neighborhood was without success. Asking mother Google ;-) for errcode 0x6062.... I read the I should set "default devmode = no" in the printer-share-definition in my smb.conf. This also didn't solve my printer-problem. Has anybody here an idea, how I could re-get access to my printer? Here's my smb.conf: [global] encrypt passwords = yes guest account = Nobody interfaces = 192.168.10.100/255.255.255.0 local master = yes log file = /var/log/samba/%m log level = 3 map to guest = Bad User os level = 65 protocol = NT1 security = user socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 time server = yes username map = /etc/samba/smbusers veto files = /*.eml/*.nws/*.{*}/ wins support = no workgroup = wuerggrub # # Drucker-Ansteuerung # print command = /usr/bin/lp -d%p -oraw %s; rm %s printing = cups printcap name = /etc/printcap load printers = yes # # Zeichensaetze und Names-Konventionen # case sensitive = no character set = ISO8859-15 client code page = 850 default case = lower mangle case = yes mangled names = yes preserve case = yes short preserve case = yes # # PDC-Stuff # add user script = /usr/sbin/useradd -d /dev/null -g smbpc -c 'Maschinenkonto' -s /bin/false -M %m$ domain admin group = domadmin @domadmin domain logons = Yes domain master = Yes logon drive = H: logon home = \\%L\%U logon path = \\%L\Profiles\%m-%U logon script = %U.cmd logon script = %m.cmd preferred master = Yes time server = Yes # # Share Definitionen # [homes] browseable = Yes comment = Eigene Dateien (Netzwerk) create mask = 0600 directory mask = 0700 hide dot files = yes public = no writeable = yes [netlogon] admin users = domadmin @domadmin comment = Network Logon Service path = /server/netlogon read only = no writeable = yes [Profiles] admin users = domadmin @domadmin browseable = No comment = Network Profiles Service create mode = 0600 directory mode = 0700 nt acl support = yes path = /server/Profiles read only = no writeable = yes [user] admin users = domadmin @domadmin browseable = yes comment = Das User-Volumen create mask = 0666 directory mask = 0777 nt acl support = yes path = /server/freigaben/user public = no writeable = yes [HP] browseable = yes comment = HP PhotoSmart P1000 create mask = 0777 default devmode = no path = /tmp printable = yes printer name = lp public = no writeable = yes -- MfG... ...Olav FidoNet 2:240/5138
Felipe Augusto van de Wiel
2006-Sep-11 12:26 UTC
[Samba] access denied to printer after changing the dns-domain
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/09/2006 05:09 AM, Olav Rogall escreveu:> Guten Tag , > > > I'm running here a self-compiled samba 2.2.12 on an old suse 8.0 > server as a domain controller with w2ksp2- and sp4-clients. > The server also services cups, squid, postfix, bind etc. > > Everything works fine fopr year's. > > Last week i've changed the dns-system in my private network from > *.privatnet to *.bla.dyndns.org. > > After the dns-change some accesses to my printer (hp photosmart 1000 > , raw-printing with cups on the same machine) didn't work. If I open > the printer-dialog on w2k (Start/settings/printers), the status of the > printer is reported as "ready to service print-jobs", but if I try > to acccess the printer-properties, I receive the "famous" > error-message "error at adress 0x6062c92f code 0xc0000005 - some > property-pages could not be displayed" > > This error is on all w2k-machines on the network, and for domain > users and domain admins. > > After raising the smb-loglevel, I see this in my logfile, but it > doesn't tell me anything (the marked line is interesting): > > [2006/04/25 20:03:35, 3] smbd/ipc.c:reply_trans(520) > trans <\PIPE\> data=182 params=0 setup=2 > [2006/04/25 20:03:35, 3] smbd/ipc.c:named_pipe(334) > named pipe command on <> name > [2006/04/25 20:03:35, 3] smbd/ipc.c:api_fd_reply(296) > Got API command 0x26 on pipe "spoolss" (pnum 7546)free_pipe_context: destroying talloc pool of size 0 > [2006/04/25 20:03:35, 3] rpc_server/srv_pipe.c:api_pipe_request(1183) > Doing \PIPE\spoolss > [2006/04/25 20:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(1215) > api_rpcTNP: pipe 30022 rpc command: SPOOLSS_OPENPRINTEREX > checking name: \\potenzia\HP > [2006/04/25 20:03:35, 3] rpc_server/srv_spoolss_nt.c:set_printer_hnd_printertype(394) > Setting printer type=\\potenzia\HP > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(269) > se_access_check: user sid is S-1-5-21-1655514155-2700837326-2153537488-2000 > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) > se_access_check: also S-1-5-21-1655514155-2700837326-2153537488-2003 > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) > se_access_check: also S-1-5-21-1655514155-2700837326-2153537488-1201 > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) > se_access_check: also S-1-1-0 > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) > se_access_check: also S-1-5-2 > [2006/04/25 20:03:35, 3] lib/util_seaccess.c:se_access_check(273) > se_access_check: also S-1-5-11 > >>[2006/04/25 20:03:35, 3] rpc_server/srv_spoolss_nt.c:_spoolss_open_printer_ex(1181) >> access DENIED for printer open > > [2006/04/25 20:03:35, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(197) > Closed policy > [2006/04/25 20:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(444) > free_pipe_context: destroying talloc pool of size 60 > > > Deleting and re-installing the printer over the network-neighborhood > was without success. > > Asking mother Google ;-) for errcode 0x6062.... I read the I should > set "default devmode = no" in the printer-share-definition in my > smb.conf. This also didn't solve my printer-problem. > > > Has anybody here an idea, how I could re-get access to my printer?You could try to 'disable spoolss' and 'use client driver'.> Here's my smb.conf:[... smb.conf ...] Kind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFBVXgCj65ZxU4gPQRAut9AKCK6pM+idzm7suoTS/ubRfnb4UWGACgvLtr iA9J2n/7qXpsUBad/Q4Efec=TY0T -----END PGP SIGNATURE-----