samba - Apr 2004 - Printers permissions

Hi samba experts !

I have a question concerning printers permissions.

I have a samba server joined to an AD domain ( the net ads join worked
perfectly, and winbind seems to work too ).
I have no acl installed on the samba server.

I added some printers ; these printers are well seen by every people in the
domain.

The problem is :
when I remove the Everybody permission from the printers access list, some
people are no more able to connect to the printer. But they should, because
they are member of a group which has full access to the printer.

So, after check, I found out that the user SIDs seen on the samba server ARE
NOT THE SAME as the ones on the AD domain controler !
Is this a samba bug ? The wbinfo command works fine, and returns me all
users an groups from the AD domain ...

Another question : do I have to install the acl if I want to set specific
permissions on the printers ? Or is acl only necessary for disk sharing ?

Thanks for help,

Christian Haessig
IRCAD/EITS
Tel : +33. (0)3.88.11.90.76
Fax : +33. (0)3.88.11.90.99
mailto:christian.haessig@ircad.u-strasbg.fr

Christian HAESSIG wrote:
> So, after check, I found out that the user SIDs seen on 
 > the samba server ARE NOT THE SAME as the ones on the AD domain
 > controler ! Is this a samba bug ? The wbinfo command works fine,
 > and returns me all users an groups from the AD domain ...

Are you running winbindd ?
> Another question : do I have to install the acl if I want 
 > to set specific permissions on the printers ? Or is
 > acl only necessary for disk sharing ?

smbd handles security descriptors for printers internally.




cheers, jerry

----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting