samba - Dec 2007 - Fw: printer admin option replacement on stand alone (not domain) print server running version 3.0.25

Thanks to those who responded to my original question.

I ran this command and it accepted it after I provided the root password.
# net rpc rights grant 'vlkidder' SePrintOperatorPrivilege

Checked to see if 'vlkidder' had printer admin privilege and it seems
ok.
# net rpc rights list accounts
Password:
BUILTIN\Print Operators
No privileges assigned

SMBTEST\vlkidder
SePrintOperatorPrivilege

BUILTIN\Account Operators
No privileges assigned

BUILTIN\Backup Operators
No privileges assigned

BUILTIN\Server Operators
No privileges assigned

BUILTIN\Administrators
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege

Everyone
No privileges assigned

After using the Printer Wizard from Windows to upload the driver, it goes 
through the process of copying the driver files to the [print$] directory, 
but there is still an error in my log file.

  _spoolss_addprinterdriver: Failed to send message about upgrading driver 
[]!
[2007/12/27 15:59:26, 1] smbd/service.c:close_cnum(1230)
  vlkidder-06212 (10.1.3.8) closed connection to service print$


> I'm trying to upload print drivers to a stand-alone samba server
running
> version 3.0.25.
> The server is part of a workgroup (not domain).
> 
> My log files show messages that it cannot update the driver.
> Before I had the printer admin option set in my smb.conf file to allow a 
> non-root user to do the printer admin and everything worked fine.
> 
> I have read the Samba How To Notes section on important changes since 
3.x, 
> it says the following.
> "Group mappings are essential only if the Samba server is running as a
> PDC/BDC.  Stand-alone servers do not require these group mappings.".
> 
> Can anyone help me to understand what I need to do to allow a non-root 
> user to perform printer admin functions on a stand-alone server?
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

Hi Vickie

I have been following your thread in the samba list - and I think I am 
wrestling with a similar problem. I want to upload windows printer 
drivers to a workgroup samba server. My samba is also 3.0.25. on a 
Centos 5.1 server.

I have put the "enable privilege = yes" into smb.conf - and restarted
samba.
However - unlike you - when I try the command:

#net rpc rights grant 'rhc' SePrintOperatorPrivilege
And give the root password, I get the error:
Failed to grant privileges for rhc (NT_STATUS_ACCESS_DENIED)

"rhc" is a user on both the linux server and a windows client machine
- though I must admit I am confused about how the two user5 groups relate to
each other in a workgroup samba setup.

Curiously - if I attempt to grant the right to a non-existent user - I do not
get an error.

Since you seem to be trying to achieve the same thing - you may have encountered
similar problems. Can you throw any light on this problem?

Thanks

Richard.





Vickie L. Kidder wrote:
> Thanks to those who responded to my original question.
>
> I ran this command and it accepted it after I provided the root password.
> # net rpc rights grant 'vlkidder' SePrintOperatorPrivilege
>
> Checked to see if 'vlkidder' had printer admin privilege and it
seems ok.
> # net rpc rights list accounts
> Password:
> BUILTIN\Print Operators
> No privileges assigned
>
> SMBTEST\vlkidder
> SePrintOperatorPrivilege
>
> BUILTIN\Account Operators
> No privileges assigned
>
> BUILTIN\Backup Operators
> No privileges assigned
>
> BUILTIN\Server Operators
> No privileges assigned
>
> BUILTIN\Administrators
> SeMachineAccountPrivilege
> SeTakeOwnershipPrivilege
> SeBackupPrivilege
> SeRestorePrivilege
> SeRemoteShutdownPrivilege
> SePrintOperatorPrivilege
> SeAddUsersPrivilege
> SeDiskOperatorPrivilege
>
> Everyone
> No privileges assigned
>
> After using the Printer Wizard from Windows to upload the driver, it goes 
> through the process of copying the driver files to the [print$] directory, 
> but there is still an error in my log file.
>
>   _spoolss_addprinterdriver: Failed to send message about upgrading driver 
> []!
> [2007/12/27 15:59:26, 1] smbd/service.c:close_cnum(1230)
>   vlkidder-06212 (10.1.3.8) closed connection to service print$
>
>
>
>   
>> I'm trying to upload print drivers to a stand-alone samba server
running
>>     
>
>   
>> version 3.0.25.
>> The server is part of a workgroup (not domain).
>>
>> My log files show messages that it cannot update the driver.
>> Before I had the printer admin option set in my smb.conf file to allow
a
>>     
>
>   
>> non-root user to do the printer admin and everything worked fine.
>>
>> I have read the Samba How To Notes section on important changes since 
>>     
> 3.x, 
>   
>> it says the following.
>> "Group mappings are essential only if the Samba server is running
as a
>> PDC/BDC.  Stand-alone servers do not require these group
mappings.".
>>
>> Can anyone help me to understand what I need to do to allow a non-root 
>> user to perform printer admin functions on a stand-alone server?
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba
>>