samba - Feb 2005 - SWAT and restricting access to printers

I have samba 3.0.11 with CUPS printing on a Solaris system with WindowsXP
clients
and have a proble setting up printing.  Rather, a problem restricting printing.

Printing works fine in that anyone with a username on the samba server can
print.

However, I want a specific printer to be restricted to only users in a specific 
group.

Using SWAT I can see no way of doing this because there is only "hosts
allow" and
"hosts deny", even using "Advanced".

Looking at the man page for smb.conf I see parameters like "write
list" and "valid
users" as share level parameters.  When I try "valid users =
user" in a printer
share it does just what I want.

However, as soon as I make a change to the share using SWAT it removes the
"valid
users" parameter and opens the printer to everyone!

Is there a particular reason for this unfortunate behaviour.

Phil.
---------------------------------------
Phil Chambers (postmaster@exeter.ac.uk)
University of Exeter

Silly me!  SWAT does not remove the "valid users" parameter, it just
changes the
order of where it appears.  I still wonder why SWAT does not show it.

Phil.
---------------------------------------
Phil Chambers (postmaster@exeter.ac.uk)
University of Exeter

Phil,

If you can document a method that can reproduce this please post a bug report 
on https://bugzilla.samba.org - this sounds like a bug that needs to be 
addressed.

- John T.

On Thursday 10 February 2005 09:04, Phil Chambers wrote:
> I have samba 3.0.11 with CUPS printing on a Solaris system with WindowsXP
> clients and have a proble setting up printing.  Rather, a problem
> restricting printing.
>
> Printing works fine in that anyone with a username on the samba server can
> print.
>
> However, I want a specific printer to be restricted to only users in a
> specific group.
>
> Using SWAT I can see no way of doing this because there is only "hosts
> allow" and "hosts deny", even using "Advanced".
>
> Looking at the man page for smb.conf I see parameters like "write
list" and
> "valid users" as share level parameters.  When I try "valid
users = user"
> in a printer share it does just what I want.
>
> However, as soon as I make a change to the share using SWAT it removes the
> "valid users" parameter and opens the printer to everyone!
>
> Is there a particular reason for this unfortunate behaviour.
>
> Phil.
> ---------------------------------------
> Phil Chambers (postmaster@exeter.ac.uk)
> University of Exeter
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.