Did you share the printer in the cups-setting? Did you edit the file /etc/cups/cupsd.conf to set the right permission and change the variable "listen" to the IP-address of your printserver? Am 13.01.22 um 03:01 schrieb Michael Evans via samba:> Are samba + cups troubleshooting steps documented anywhere? > > > > I still haven't been able to get Debian 11's Samba (4.13.13-Debian) to share > printers to Windows 10, not on an old (weak crypto) domain and not on a new > clean Samba 4.13 domain; but both of these do at least initially list on > \\memberserver\ the printernames (even though connecting to them fails). > > > > This week's experiment: Arch Linux VM (rolling release) with Samba 4.15.3. > By every indication I can think to test this has joined the old insecure > domain successfully. > > > > CUPS, however. > > > > # lpstat -p -d > > printer printerName is idle. enabled since Wed 12 Jan 2022 12:17:35 PM PST > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server > > > > It mostly assumes cups just works; there's no mention of troubleshooting > steps or anything else to do; so I can't even test if Win10 PCs can talk to > printers on the newer Samba version. > > > > [2022/01/12 17:34:35.714413, 0] ../../source3/smbd/server.c:1739(main) > > smbd version 4.15.3 started. > > Copyright Andrew Tridgell and the Samba Team 1992-2021 > > [2022/01/12 17:34:35.716750, 1] > ../../source3/profile/profile.c:54(set_profile_level) > > INFO: Profiling turned OFF from pid 587 > > [2022/01/12 17:34:35.722194, 1] > ../../source3/auth/token_util.c:1171(create_token_from_username) > > lookup_name_smbconf for V-PRN\nobody failed > > [2022/01/12 17:34:35.787798, 1] > ../../source3/printing/printer_list.c:255(printer_list_get_last_refresh) > > Failed to fetch record! > > [2022/01/12 17:34:57.864795, 1] > ../../source3/printing/printer_list.c:255(printer_list_get_last_refresh) > > Failed to fetch record! > > [2022/01/12 17:34:57.864824, 1] > ../../source3/smbd/server_reload.c:67(delete_and_reload_printers) > > pcap cache not loaded > > [2022/01/12 17:34:58.018109, 1] > ../../source3/printing/printer_list.c:255(printer_list_get_last_refresh) > > Failed to fetch record! > > > > > > +++ > > > > # Global parameters > > [global] > > #log level = 1 > > log level = 1 printdrivers:10 > > #log level = 10 > > > > realm = WINDOM.LOCAL > > security = ADS > > server role = member server > > workgroup = WINDOM > > disable netbios = Yes > > username map = /etc/samba/user.map > > > > client ldap sasl wrapping = sign > > client min protocol = NT1 > > > > dedicated keytab file = /etc/krb5.keytab > > kerberos method = secrets and keytab > > winbind enum groups = Yes > > winbind enum users = Yes > > winbind expand groups = 2 > > winbind refresh tickets = Yes > > winbind use default domain = Yes > > > > idmap config windom : unix_nss_info = yes > > idmap config windom : range = 4000-9999 > > idmap config windom : schema_mode = rfc2307 > > idmap config windom : backend = ad > > idmap config * : range = 10000-15999 > > idmap config * : backend = tdb > > map acl inherit = Yes > > store dos attributes = Yes > > vfs objects = acl_xattr > > > > > > load printers = Yes > > printing = cups > > printcap name = cups > > > > rpc_server:spoolssd = fork > > rpc_server:spoolss = external > > spoolssd:prefork_child_min_life = 60 > > spoolssd:prefork_max_allowed_clients = 100 > > spoolssd:prefork_spawn_rate = 5 > > spoolssd:prefork_max_children = 25 > > spoolssd:prefork_min_children = 5 > > > > # turn off usershares > > usershare max shares = 0 > > > > [testshare] > > comment = testshare > > path = /samba/network/testshare > > valid users = "@WINDOM\domain users" "@domain users" "@domain > users at WINDOM.LOCAL" @lpadmin > > read only = No > > follow symlinks = yes > > wide links = no > > > > > > [printers] > > browseable = Yes > > comment = All Printers > > path = /samba/network/spool > > printable = Yes > > guest ok = No > > writable = no > > #create mode = 0700 > > write list = root @lpadmin michael.evans "@domain admins" "@domain > admins at WINDOM.LOCAL" > > > > [print$] > > comment = Printer Drivers > > path = /samba/network/printerdrivers > > read only = No > > write list = root @lpadmin michael.evans "@domain admins" "@domain > admins at WINDOM.LOCAL" > > > > Contents of /etc/samba/user.map > > > > !root = WINDOM\Administrator > > > > Server Role is set to : member server > > >-- Stefan Kania Landweg 13 25693 St. Michaelisdonn Signieren jeder E-Mail hilft Spam zu reduzieren und sch?tzt Ihre Privatsph?re. Ein kostenfreies Zertifikat erhalten Sie unter https://www.dgn.de/dgncert/index.html
Oddly, changing nothing but letting it sit overnight (longer than the entire
time I was setting it up and troubleshooting yesterday) lets Samba see the list
of CUPS printers now.
It still refuses to connect however.
When trying to right click connect two dialogs pop up:
Windows Printer Installation -> Connecting to printName on memberServer
(cancel)
Add Printer -> Connect to Printer ; Windows cannot connect to the printer.
No more connections can be made to this remote computer at this time because
there are already as many connections as the computer can accept.
.
Which is just completely strange as this member server was literally setup only
for this task and I'm the only one even trying to connect to it.
Nothing obvious is in Samba's logs on that system, and I can access the
testshare on that system immediately after.
Additional log levels and/or logs to check would be nice troubleshooting steps.
Cups modifications of note:
/etc/cups/cupsd.conf
...
ServerAlias *
Port 631
Listen /run/cups/cups.sock
Browsing Yes
BrowseLocalProtocols dnssd
...
Anyplace that mentioned:
@SYSTEM was searched and replaced by @SYSTEM lpadmin "@domain admins"
"@WINDOM\Domain Admins"
@OWNER was searched and replaced by @OWNER "@domain users"
"@WINDOM\Domain Users"
# echo This is what changed the Listen *:631 to just Port
# cupsctl --remote-admin --remote-any --share-printers
Ignoring all of the /admin sections...
<Location />
Order allow,deny
Allow all
</Location>
<Location /admin>
Order allow,deny
Allow all
</Location>
...
<Policy default>
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
<Limit Create-Job Print-Job Print-URI Validate-Job>
Order deny,allow
</Limit>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs
Set-Job-Attributes Create-Job-Subscription Renew-Subscription
Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Sus
pend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job
CUPS-Get-Document>
Require user @OWNER @SYSTEM lpadmin "@domain users"
"@WINDOM\Domain Users" "@domain admins" "@WINDOM\Domain
Admins"
Order deny,allow
</Limit>
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class
CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
AuthType Default
Require user @SYSTEM lpadmin "@domain admins"
"@WINDOM\Domain Admins"
Order deny,allow
</Limit>
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer
Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs
Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startu
p-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs
CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM lpadmin "@domain admins"
"@WINDOM\Domain Admins"
Order deny,allow
</Limit>
<Limit CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM lpadmin "@domain users"
"@WINDOM\Domain Users" "@domain admins" "@WINDOM\Domain
Admins"
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
... authenticated and Kerberos sections are similar
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Stefan
> Kania via samba
> Sent: Thursday, January 13, 2022 5:10 AM
> To: samba at lists.samba.org
> Subject: Re: [Samba] samba + cups troubleshooting?
>
> Did you share the printer in the cups-setting? Did you edit the file
> /etc/cups/cupsd.conf to set the right permission and change the variable
> "listen" to the IP-address of your printserver?
>
>
> Am 13.01.22 um 03:01 schrieb Michael Evans via samba:
> > Are samba + cups troubleshooting steps documented anywhere?
> >
> >
> >
> > I still haven't been able to get Debian 11's Samba
(4.13.13-Debian) to
> > share printers to Windows 10, not on an old (weak crypto) domain and
> > not on a new clean Samba 4.13 domain; but both of these do at least
> > initially list on \\memberserver\ the printernames (even though
connecting
> to them fails).
> >
> >
> >
> > This week's experiment: Arch Linux VM (rolling release) with Samba
4.15.3.
> > By every indication I can think to test this has joined the old
> > insecure domain successfully.
> >