samba - Feb 2005 - Samba as a Print Server : passthrough login problem

Hello people, and thanks for this list :)

I have a problem with samba, but first let me tell you the overall thing.

I want to migrate my win2k print server to a Samba3 one ;)
My willing is to make this print server available for our domain users.
Thus, I decided to use these global settings

security = server
server = myPDCServer

My problem is that I can't make it work, all I get is an 
NT_STATUS_LOGON_FAILURE.
Please, given my smb.conf, can any guru help me with this ?

[global]
    workgroup = ATEMPO
    netbios name = myprintserver
    server string = samba (%U)
    smb passwd file = /etc/samba/private/smbpasswd
    passdb backend = tdbsam
    log file = /var/log/samba3/log.%m
    printer admin = @adm, root
    load printers = yes
    printing = cups
    printcap = cups
    security = server
    password server = mypdcserver
    os level = 15
    local master = no
    domain master = no
    encrypt passwords = yes

[print$]
    comment = Printer drivers
    path = /etc/samba/printer
    write list = @adm, root
    guest ok = no
    browseable = yes
    read only = yes

[mis1700]
    comment = Dell 1700n - MIS
    path = /var/spool/samba
    guest ok = Yes
    printable = Yes
    public = yes
    valid users = joris

[printers]
    comment = Toutes les imprimantes
    path = /var/spool/samba
    guest ok = yes
    printable = yes
    browseable = No
    printer admin = root, @adm
    public = yes
    writable = no




-- 
Joris De Pooter

> I want to migrate my win2k print server to a Samba3 one ;)
> My willing is to make this print server available for our domain users.
> Thus, I decided to use these global settings
>
> security = server
> server = myPDCServer
What kind of domain is this? AD?   If that's the case, you will probably 
want to be using security = ADS and then running winbind.  Assuming that 
is the case, try to follow the documentation for joining to an AD domain 
and see if that gets you a bit further.

If that's not the case, please expand a bit on your domain setup.

> My problem is that I can't make it work, all I get is an 
> NT_STATUS_LOGON_FAILURE.
> Please, given my smb.conf, can any guru help me with this ?
>
> [global]
>    workgroup = ATEMPO
>    netbios name = myprintserver
>    server string = samba (%U)
>    smb passwd file = /etc/samba/private/smbpasswd
>    passdb backend = tdbsam
>    log file = /var/log/samba3/log.%m
>    printer admin = @adm, root
>    load printers = yes
>    printing = cups
>    printcap = cups
>    security = server
>    password server = mypdcserver
>    os level = 15
>    local master = no
>    domain master = no
>    encrypt passwords = yes
>
> [print$]
>    comment = Printer drivers
>    path = /etc/samba/printer
>    write list = @adm, root
>    guest ok = no
>    browseable = yes
>    read only = yes
>
> [mis1700]
>    comment = Dell 1700n - MIS
>    path = /var/spool/samba
>    guest ok = Yes
>    printable = Yes
>    public = yes
>    valid users = joris
>
> [printers]
>    comment = Toutes les imprimantes
>    path = /var/spool/samba
>    guest ok = yes
>    printable = yes
>    browseable = No
>    printer admin = root, @adm
>    public = yes
>    writable = no
>
>
>
>
-- 
--
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger@ae-solutions.com

here is my smb.cnf for the same thing - however working..the  couple
things I notice are:

        map to guest = bad password
        encrypt passwords = yes
        security = user

did you want this as anonymous login?




[global]
        workgroup = prupref.com
        server string = PRUPREF PRINT SERVER
        printing = cups
        printcap name = cups
        printcap cache time = 750
        cups options = raw
        printer admin = @ntadmin, root, administrator
        # printer mode point-n-click
        default devmode = yes
        username map = /etc/samba/smbusers
        # if there are admin issues - check this parameter and the
smbpasswd syncing
        map to guest = bad password
        #guest account = guestprint
        wins server = wins.prupref.com
        encrypt passwords = yes
        security = user
        include = /etc/samba/dhcp.conf
        logon path         logon home         logon drive         #loglevel = 10
        log file = /var/log/samba/%m.log



On Thu, 10 Feb 2005 15:32:20 +0100, Joris De Pooter
<joris.de.pooter@atempo.com> wrote:
> Hello people, and thanks for this list :)
> 
> I have a problem with samba, but first let me tell you the overall thing.
> 
> I want to migrate my win2k print server to a Samba3 one ;)
> My willing is to make this print server available for our domain users.
> Thus, I decided to use these global settings
> 
> security = server
> server = myPDCServer
> 
> My problem is that I can't make it work, all I get is an
> NT_STATUS_LOGON_FAILURE.
> Please, given my smb.conf, can any guru help me with this ?
> 
> [global]
>     workgroup = ATEMPO
>     netbios name = myprintserver
>     server string = samba (%U)
>     smb passwd file = /etc/samba/private/smbpasswd
>     passdb backend = tdbsam
>     log file = /var/log/samba3/log.%m
>     printer admin = @adm, root
>     load printers = yes
>     printing = cups
>     printcap = cups
>     security = server
>     password server = mypdcserver
>     os level = 15
>     local master = no
>     domain master = no
>     encrypt passwords = yes
> 
> [print$]
>     comment = Printer drivers
>     path = /etc/samba/printer
>     write list = @adm, root
>     guest ok = no
>     browseable = yes
>     read only = yes
> 
> [mis1700]
>     comment = Dell 1700n - MIS
>     path = /var/spool/samba
>     guest ok = Yes
>     printable = Yes
>     public = yes
>     valid users = joris
> 
> [printers]
>     comment = Toutes les imprimantes
>     path = /var/spool/samba
>     guest ok = yes
>     printable = yes
>     browseable = No
>     printer admin = root, @adm
>     public = yes
>     writable = no
> 
> --
> Joris De Pooter
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 

-- 
----------------------------------
please respond to the list .. if you need to contact me direct
cgmckeever is the account
prupref.com is the domain

<A href="http://www.prupref.com">Simply Chicago Real
Estate</A>

> My problem is that I can't make it work, all I get is an 
> NT_STATUS_LOGON_FAILURE.
> Please, given my smb.conf, can any guru help me with this ?
>
> [global]
>    workgroup = ATEMPO
>    netbios name = myprintserver
>    server string = samba (%U)
>    smb passwd file = /etc/samba/private/smbpasswd
>    passdb backend = tdbsam
>    log file = /var/log/samba3/log.%m
>    printer admin = @adm, root
>    load printers = yes
>    printing = cups
>    printcap = cups
>    security = server
>    password server = mypdcserver
>    os level = 15
>    local master = no
>    domain master = no
>    encrypt passwords = yes
I didn't notice at first, hence me posting to the parent again... you've
got a few conflicting entries here:
security = server
passdb = tdbsam
smb passwd file = /etc/samba/private/smbpasswd

You don't 'need' a passwd file when running in server security,
although
it apparently will fall back.  I'm presuming that your smb passwd file 
parameter is the default anyway, but it's not used in tdbsam, which is 
another red herring to the setup.  I'd drop all but your security mode.

Also, you may want to get rid of it all and run with
security = domain
since you've got a (presumably) good PDC server running.  This will mean 
that you'll have to join your samba box to the domain however, but that 
will help you to validate your setup.
> [print$]
>    comment = Printer drivers
>    path = /etc/samba/printer
>    write list = @adm, root
>    guest ok = no
>    browseable = yes
>    read only = yes
>
> [mis1700]
>    comment = Dell 1700n - MIS
>    path = /var/spool/samba
>    guest ok = Yes
>    printable = Yes
>    public = yes
>    valid users = joris
>
> [printers]
>    comment = Toutes les imprimantes
>    path = /var/spool/samba
>    guest ok = yes
>    printable = yes
>    browseable = No
>    printer admin = root, @adm
>    public = yes
>    writable = no
>
>
>
>
-- 
--
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger@ae-solutions.com