Paul Raines
2004-Mar-23 17:10 UTC
[Samba] slow printing from firewalled/masqueraded clients
Printing to a samba print share from a client that is firewalled/ masqueraded is painfully slow. Seems the protocol requires the samba server to make an initiating connection back to the SMB server on the client which will of course fail on a firewalled/masqueraded client. The problem is that the a print job hangs till this operation times out causing printing to take several minutes for users. Is there anyway to decrease this timeout in samba? I have seen suggestions to use 'disable spoolss' but this would cause more problems since that also disables downloading of print drivers. -- --------------------------------------------------------------- Paul Raines email: raines@nmr.mgh.harvard.edu MGH/MIT/HMS Athinoula A. Martinos Center for Biomedical Imaging 149 (2301) 13th Street Charlestown, MA 02129 USA
Andrew Bartlett
2004-Mar-23 23:19 UTC
[Samba] slow printing from firewalled/masqueraded clients
On Wed, 2004-03-24 at 04:09, Paul Raines wrote:> Printing to a samba print share from a client that is firewalled/ > masqueraded is painfully slow. Seems the protocol requires the samba > server to make an initiating connection back to the SMB server on the > client which will of course fail on a firewalled/masqueraded client. > > The problem is that the a print job hangs till this operation times out > causing printing to take several minutes for users. Is there anyway to > decrease this timeout in samba? I have seen suggestions to use 'disable > spoolss' but this would cause more problems since that also disables > downloading of print drivers.Welcome to the wonderful world of SPOOLSS printing. The issue is that a print server providing SPOOLSS is expected to make a *reverse* connection, from the print server, to the print client. This is not some part of the same TCP/IP socket, but a brand new, separate connection. No firewall knows that this particular connection is 'special', hence your results. More interestingly, MS is going to drop a default firewall on XP SP2. I wonder what it will do when it encounters this problem. Maybe MS has a more sane protocol now... Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20040324/778f8368/attachment.bin