samba - Apr 2004 - Restricting printer views

Greetings Admins,

We have a samba3.0.2a + cups 1.1.20 print server to serve printing for
our Windows XP clients.  Samba is configured with security = ADS.

So when a client maps the print server (ie: \\printserver) then all the
printers are displayed, available for point & print.

How do you hide printers from specific users?

We have academic printers and administrative printers.  Academic users
should not be able to see administrative printers and vice versa.

much appreciated,
Ryan

Here is my smb.conf:

[global]
        workgroup = SOMEWORKGROUP
        netbios name = somename
        log file = /usr/local/samba/logs/%m.log
        max log size = 50000
        debug level = 5
        name resolve order = wins bcast

        wins server = some.host.domain
        wins proxy = no
        wins support = no
        dns proxy = yes
        local master = no
        preferred master = no
        domain master = no
        os level = 0

        security = ADS
        encrypt passwords = yes
        password server = *
        realm = some.host.domain

        interfaces = 123.45.67.8/24
        allow hosts = 123.45. localhost

        printing = cups
        printcap name = cups
        load printers = yes

        socket options = TCP_NODELAY

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        guest ok = yes
        public = yes
        writeable = no
        printable = yes
        printer admin = root
        create mode = 0700

[print$]
        comment = Printer Drivers
        path = /usr/local/samba/drivers
        browseable = yes
        guest ok = no
        read only = yes
        write list = root

Hello Ryan,

ryan.suarez@sheridanc.on.ca schrieb:
> So when a client maps the print server (ie: \\printserver) then all the
> printers are displayed, available for point & print.
> 
> How do you hide printers from specific users?
> 
> We have academic printers and administrative printers.  Academic users
> should not be able to see administrative printers and vice versa.
You can apply every printer as an own share.

[HP-Drucker]
printer name = hp1
valid users = max moritz
...

Futher, you can hide a printer with "browseable = no".

matze

Or set "load printers = no" and define the printers as suggested.

Marcus O.


On Mon, 2004-04-12 at 16:23, Matthias Spork wrote:
> Hello Ryan,
> 
> ryan.suarez@sheridanc.on.ca schrieb:
> > So when a client maps the print server (ie: \\printserver) then all
the
> > printers are displayed, available for point & print.
> > 
> > How do you hide printers from specific users?
> > 
> > We have academic printers and administrative printers.  Academic users
> > should not be able to see administrative printers and vice versa.
> 
> You can apply every printer as an own share.
> 
> [HP-Drucker]
> printer name = hp1
> valid users = max moritz
> ...
> 
> Futher, you can hide a printer with "browseable = no".
> 
> matze

Hello Admins,

How do you make a share browseable to only users defined in the "valid
users" directive?

Setting browseable = no hides the share from everyone but I only want to
hide it from invalid users.

Is this possible?

thanks,
Ryan

Here is my share entry:

[oa-e108-e2]
        comment = Admin - Lexmark Optra T614
        path = /var/spool/samba
        browseable = yes
        guest ok = no
        writeable = no
        printable = yes
        printer admin = root
        create mode = 0700
        valid users = @users

Hello Admins,

How do you make a share browseable to only users defined in the "valid
users" directive?

Setting browseable = no hides the share from everyone but I only want to
hide it from invalid users.

Is this possible?

thanks,
Ryan

Here is my share entry:

[oa-e108-e2]
        comment = Admin - Lexmark Optra T614
        path = /var/spool/samba
        browseable = yes
        guest ok = no
        writeable = no
        printable = yes
        printer admin = root
        create mode = 0700
        valid users = @users