Hi, I'm trying to follow through the printing howto and I'm having a bit
of a nightmare trying to use the rpcclient -c 'setdriver ...' utility.
I keep getting WERR_ACCESS_DENIED errors. I tried setting up a root user
with smbpasswd but I get NT_STATUS_LOGON_FAILURE if I try to run
rpcclient with -U root. I think there must be something fundamental to
authentication that I don't understand. Also, I noticed that testparm
reports the 'printer admin' option as being deprecated, does anyone know
what the preferred method for implementing printer admin privileges is?
Any help would be gratefully appreciated,
Thanks,
James.
OS - linux (opensuse 10.0)
kernel - 2.6.13
samba - 3.0.20-4
smb.conf:
[global]
## Domain Info
workgroup = M2
security = domain
encrypt passwords = yes
domain master = no
domain logons = no
passdb backend = smbpasswd
enable privileges = yes
## User mapping / acl behaviour
idmap uid = 10000-20000
idmap gid = 10000-20000
# map to guest = Bad User
force unknown acl user = yes
acl group control = yes
map acl inherit = yes
inherit owner = yes
## Logon
logon home = \\%L\%U\.9xprofile
logon drive = P:
logon path = \\%L\profiles\.msprofile
## Scripts
add share command = /usr/lib/samba/scripts/addshare
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s
/bin/false %m$
## Printing
load printers = yes
printing = cups
printcap name = cups
cups options = raw
printcap cache time = 750
## Includes
include = /etc/samba/dhcp.conf
## Section - [test]
[test]
readonly = no
comment inherit acls = yes
path = /srv/smb/test
## Section - [printers]
[printers]
create mask = 0600
comment = All Printers
browseable = no
public = yes
printable = yes
path = /var/spool/samba
printer admin = root, @ntadmin
use client driver = yes
## Section - [print$]
[print$]
create mask = 0664
directory mask = 0775
comment = Printer Drivers
path = /var/lib/samba/drivers
force group = ntadmin
write list = @ntadmin root
## Section - [homes]
[homes]
readonly = no
comment = Home Directories
browseable = no
inherit acls = yes
valid users = %S
## Section - [IT]
[IT]
comment = Comment
path = /srv/smb/test//IT
read only = no
## Section - [profiles]
[profiles]
read only = no
create mask = 0600
directory mask = 0700
comment = Network Profiles Service
store dos attributes = yes
path = %H
