Hi,
I have Centos 5.5 64b with Sernet samba 3.5.6-43.el5 packages. It is
configured as domain member server, providing file and printer services.
I can connect with: "rpcclient -Uveiko localhost", enumdrivers and
enumprinters work, both printer and driver are listed, but when I'm
trying to set driver to printer:
"setdriver pdf-ipunkt "HP Color LaserJet 5/5M PS"
result was WERR_ACCESS_DENIED
Another server with only difference being samba version 3.3.14-40.el5
works perfectly. Tried this with two different users belonging to
"domain admins" group.
Using rpcclient with -d10, ends with:
rpc_api_pipe: host localhost
num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0,
data_total=200, this_data=200, max_data=4280, param_offset=82,
param_disp=0, data_disp=0
000000 smb_io_rpc_hdr rpc_hdr
0000 major : 05
0001 minor : 00
0002 pkt_type : 02
0003 flags : 03
0004 pack_type0: 10
0005 pack_type1: 00
0006 pack_type2: 00
0007 pack_type3: 00
0008 frag_len : 0030
000a auth_len : 0000
000c call_id : 00000009
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000018
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0
rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK
rpc_api_pipe: host localhost returned 48 bytes.
spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx
out: struct spoolss_OpenPrinterEx
handle : *
handle: struct policy_handle
handle_type : 0x00000000 (0)
uuid :
00000000-0000-0000-0000-000000000000
result : WERR_ACCESS_DENIED
result was WERR_ACCESS_DENIED
--
with best regards
Veiko
W dniu 2010-11-04 13:37, Veiko Kukk pisze:> Hi, > > I have Centos 5.5 64b with Sernet samba 3.5.6-43.el5 packages. It is > configured as domain member server, providing file and printer services. > I can connect with: "rpcclient -Uveiko localhost", enumdrivers and > enumprinters work, both printer and driver are listed, but when I'm > trying to set driver to printer: > "setdriver pdf-ipunkt "HP Color LaserJet 5/5M PS" > result was WERR_ACCESS_DENIED > > Another server with only difference being samba version 3.3.14-40.el5 > works perfectly. Tried this with two different users belonging to > "domain admins" group. > > Using rpcclient with -d10, ends with: > rpc_api_pipe: host localhost > num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, > data_total=200, this_data=200, max_data=4280, param_offset=82, > param_disp=0, data_disp=0 > 000000 smb_io_rpc_hdr rpc_hdr > 0000 major : 05 > 0001 minor : 00 > 0002 pkt_type : 02 > 0003 flags : 03 > 0004 pack_type0: 10 > 0005 pack_type1: 00 > 0006 pack_type2: 00 > 0007 pack_type3: 00 > 0008 frag_len : 0030 > 000a auth_len : 0000 > 000c call_id : 00000009 > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp > 0010 alloc_hint: 00000018 > 0014 context_id: 0000 > 0016 cancel_ct : 00 > 0017 reserved : 00 > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 > rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK > rpc_api_pipe: host localhost returned 48 bytes. > spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx > out: struct spoolss_OpenPrinterEx > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : > 00000000-0000-0000-0000-000000000000 > result : WERR_ACCESS_DENIED > result was WERR_ACCESS_DENIED >Does the user has SePrintOperatorPrivilege? If not try to it set with: net rpc rights grant veiko SePrintOperatorPrivilege Daniel