samba - Feb 2007 - Howto setup printing with Windows XP Clients, Cups and samba..

Hi there,

slowly but sure I'm getting absolutely insane with the printer setup on
a Samba PDC. I got Cups to work. It works like a charm if someone
installs a printer via the cups interface. It also prints in a good
quality. On Samba side I even have those "Printers and fax devices" in
the visible shares. And if i install CUPS6 Drivers manual on the target
system i can even print on the printers in there. Everything good.
But how do i get drivers uploaded to my samba, so that it works to
download them automatically on the clients. And which drivers should i
take? I've tried to add the cups drivers with cupsaddsmb, but that fails
because this util is searching for adobe postscript drivers. I then
tried to install the adobe postscript drivers, but it's hard to find a
package which can be extracted just like it is and it is even harder to
find out what these damn .exe does install.

Then: I searched those files, that cupsaddsmb is accessing on a windows
xp system and installed them to cupsaddsmb's source folder. That worked
for running it successful. I'm also able to connect windows xp printers,
  but printing is a catastrophe. It's like someone has thrown the
letters in a random order on the paper.

I also tried to install drivers by usage of the (Domain-) Administrator
account on a windows xp system, but i keep getting messages that i do
not have the permission to do so :-(

What do i do wrong?

See testparm output below.

Greets and Thanks in advance

Patrick

Load smb config files from /etc/samba/smb.conf
Processing section "[netlogon]"
Processing section "[profiles]"
Processing section "[Temp]"
Processing section "[Privat]"
Processing section "[Archiv]"
Processing section "[firma.in-medias-res]"
Processing section "[firma.rotas]"
Processing section "[firma.mcity]"
Processing section "[firma.returnit]"
Processing section "[install]"
Processing section "[printers]"
WARNING: The "printer admin" option is deprecated
Processing section "[print$]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

[global]
        workgroup = IMR
        server string = majestix
        passdb backend = ldapsam:ldap://127.0.0.1
        log level = 3
        printcap name = CUPS
        cups server = 192.168.2.120
        show add printer wizard = No
        add user script = /usr/bin/ldapadduser '%u' sambausers
        rename user script = /usr/bin/ldaprenameuser '%uold'
'%unew'
        delete user script = /usr/bin/ldapdeleteuser '%u'
        add group script = /usr/bin/ldapaddgroup '%g'
        delete group script = /usr/bin/ldapdeletegroup '%g'
        add user to group script = /usr/bin/ldapaddusertogroup '%u'
'%g'
        delete user from group script = /usr/bin/ldapdeleteuserfromgroup
'%u' '%g'
        set primary group script = /usr/bin/ldapsetprimarygroup '%u'
'%g'
        add machine script = /usr/bin/ldapaddmachine '%u' sambamachines
        logon path = \\%N\profiles\%U
        logon drive = J:
        domain logons = Yes
        os level = 255
        wins support = Yes
        ldap admin dn = cn=admin,dc=intra,dc=in-medias-res,dc=com
        ldap group suffix = ou=groups
        ldap machine suffix = ou=hosts
        ldap passwd sync = Yes
        ldap suffix = dc=intra,dc=in-medias-res,dc=com
        ldap ssl = no
        ldap user suffix = ou=users

[netlogon]
        path = /mnt/srv/data/netlogon
        read only = No

[profiles]
        path = /mnt/srv/data/Profiles
        valid users = %U, "@Domain Admins"
        force user = %U
        read only = No
        guest ok = Yes
        profile acls = Yes
        browseable = No
        csc policy = disable
        root preexec = /opt/domain/bin/create_profile.sh '%u'

[Temp]
        path = /mnt/srv/data/Temp
        read only = No

[Privat]
        path = /mnt/srv/data/Home
        read only = No

[Archiv]
        path = /mnt/srv/data/archiv
        read only = No

[firma.in-medias-res]
        path = /mnt/srv/data/firma.in-medias-res
        read only = No

[firma.rotas]
        path = /mnt/srv/data/firma.rotas
        read only = No

[firma.mcity]
        path = /mnt/srv/data/firma.mcity
        read only = No

[firma.returnit]
        path = /mnt/srv/data/firma.returnit
        read only = No

[install]
        path = /mnt/srv/data/firma.returnit
        read only = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printer admin = Administrator, schoenfeld, root
        guest ok = Yes
        printable = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = root, schoenfeld, Administrator

In my smb.conf file I have additional lines lines in 

[global]
...
load printers = yes
printing = cups

[printers]
...
public = yes
writable = no

[print$]
...
browseable = yes
guest ok = no
read only = yes

Try adding some of these
Regards
Paul
> -----Original Message-----
> From: "sch?nfeld / in-medias-res.com" 
> [mailto:schoenfeld@in-medias-res.com] 
> Sent: Thursday 08 February 2007 10:02
> To: samba@lists.samba.org
> Subject: [Samba] Howto setup printing with Windows XP 
> Clients, Cups and samba..
> 
> Hi there,
> 
> slowly but sure I'm getting absolutely insane with the 
> printer setup on a Samba PDC. I got Cups to work. It works 
> like a charm if someone installs a printer via the cups 
> interface. It also prints in a good quality. On Samba side I 
> even have those "Printers and fax devices" in the visible 
> shares. And if i install CUPS6 Drivers manual on the target 
> system i can even print on the printers in there. Everything good.
> But how do i get drivers uploaded to my samba, so that it 
> works to download them automatically on the clients. And 
> which drivers should i take? I've tried to add the cups 
> drivers with cupsaddsmb, but that fails because this util is 
> searching for adobe postscript drivers. I then tried to 
> install the adobe postscript drivers, but it's hard to find a 
> package which can be extracted just like it is and it is even 
> harder to find out what these damn .exe does install.
> 
> Then: I searched those files, that cupsaddsmb is accessing on 
> a windows xp system and installed them to cupsaddsmb's source 
> folder. That worked for running it successful. I'm also able 
> to connect windows xp printers,
>   but printing is a catastrophe. It's like someone has thrown 
> the letters in a random order on the paper.
> 
> I also tried to install drivers by usage of the (Domain-) 
> Administrator account on a windows xp system, but i keep 
> getting messages that i do not have the permission to do so :-(
> 
> What do i do wrong?
> 
> See testparm output below.
> 
> Greets and Thanks in advance
> 
> Patrick
> 
> Load smb config files from /etc/samba/smb.conf Processing 
> section "[netlogon]"
> Processing section "[profiles]"
> Processing section "[Temp]"
> Processing section "[Privat]"
> Processing section "[Archiv]"
> Processing section "[firma.in-medias-res]"
> Processing section "[firma.rotas]"
> Processing section "[firma.mcity]"
> Processing section "[firma.returnit]"
> Processing section "[install]"
> Processing section "[printers]"
> WARNING: The "printer admin" option is deprecated Processing 
> section "[print$]"
> Loaded services file OK.
> WARNING: You have some share names that are longer than 12 characters.
> These may not be accessible to some older clients.
> (Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.) 
> Server role: ROLE_DOMAIN_PDC Press enter to see a dump of 
> your service definitions
> 
> [global]
>         workgroup = IMR
>         server string = majestix
>         passdb backend = ldapsam:ldap://127.0.0.1
>         log level = 3
>         printcap name = CUPS
>         cups server = 192.168.2.120
>         show add printer wizard = No
>         add user script = /usr/bin/ldapadduser '%u' sambausers
>         rename user script = /usr/bin/ldaprenameuser '%uold'
'%unew'
>         delete user script = /usr/bin/ldapdeleteuser '%u'
>         add group script = /usr/bin/ldapaddgroup '%g'
>         delete group script = /usr/bin/ldapdeletegroup '%g'
>         add user to group script = 
> /usr/bin/ldapaddusertogroup '%u' '%g'
>         delete user from group script = 
> /usr/bin/ldapdeleteuserfromgroup '%u' '%g'
>         set primary group script = 
> /usr/bin/ldapsetprimarygroup '%u' '%g'
>         add machine script = /usr/bin/ldapaddmachine '%u' 
> sambamachines
>         logon path = \\%N\profiles\%U
>         logon drive = J:
>         domain logons = Yes
>         os level = 255
>         wins support = Yes
>         ldap admin dn = cn=admin,dc=intra,dc=in-medias-res,dc=com
>         ldap group suffix = ou=groups
>         ldap machine suffix = ou=hosts
>         ldap passwd sync = Yes
>         ldap suffix = dc=intra,dc=in-medias-res,dc=com
>         ldap ssl = no
>         ldap user suffix = ou=users
> 
> [netlogon]
>         path = /mnt/srv/data/netlogon
>         read only = No
> 
> [profiles]
>         path = /mnt/srv/data/Profiles
>         valid users = %U, "@Domain Admins"
>         force user = %U
>         read only = No
>         guest ok = Yes
>         profile acls = Yes
>         browseable = No
>         csc policy = disable
>         root preexec = /opt/domain/bin/create_profile.sh '%u'
> 
> [Temp]
>         path = /mnt/srv/data/Temp
>         read only = No
> 
> [Privat]
>         path = /mnt/srv/data/Home
>         read only = No
> 
> [Archiv]
>         path = /mnt/srv/data/archiv
>         read only = No
> 
> [firma.in-medias-res]
>         path = /mnt/srv/data/firma.in-medias-res
>         read only = No
> 
> [firma.rotas]
>         path = /mnt/srv/data/firma.rotas
>         read only = No
> 
> [firma.mcity]
>         path = /mnt/srv/data/firma.mcity
>         read only = No
> 
> [firma.returnit]
>         path = /mnt/srv/data/firma.returnit
>         read only = No
> 
> [install]
>         path = /mnt/srv/data/firma.returnit
>         read only = No
> 
> [printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printer admin = Administrator, schoenfeld, root
>         guest ok = Yes
>         printable = Yes
>         browseable = No
> 
> [print$]
>         comment = Printer Drivers
>         path = /var/lib/samba/drivers
>         write list = root, schoenfeld, Administrator
> 
> 
> 
>

---------- Forwarded message ----------
From: John Drescher <drescherjm@gmail.com>
Date: Feb 8, 2007 3:45 PM
Subject: Re: [Samba] Howto setup printing with Windows XP Clients,
Cups and samba..
To: Martin Zielinski <mz@seh.de>

> 3rd Assign your driver:
>
> - In the "printers and faxes" folder right-click on a printer
> - Select Properties
> - Tab "Advanced"
> - Select the driver from the drop down box
> - Ok
>
Any ideas why this 3rd step fails in both XP and the following command:

# rpcclient -U 'RADIMG\Administrator' -c 'setdriver HP-2100 "HP
LaserJet 2100"' FILESERVER
Password:
Connecting to host=FILESERVER
Connecting to 192.168.1.6 at port 445
Doing spnego session setup (blob length=58)
got OID=1 3 6 1 4 1 311 2 2 10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
rpc_pipe_bind: Remote machine FILESERVER pipe \lsarpc fnum 0x7044 bind
request returned ok.
lsa_io_sec_qos: length c does not match size 8
rpc_pipe_bind: Remote machine FILESERVER pipe \spoolss fnum 0x7045
bind request returned ok.
SetPrinter call failed!
result was WERR_ACCESS_DENIED


I have set the permissions correctly I believe:


# net rpc rights list accounts -S 'fileserver'
Password:
BUILTIN\Print Operators
SePrintOperatorPrivilege

Unix User\root
SePrintOperatorPrivilege

BUILTIN\Account Operators
No privileges assigned

BUILTIN\Backup Operators
No privileges assigned

BUILTIN\Server Operators
No privileges assigned

Unix Group\Domain Admins
SeMachineAccountPrivilege
SePrintOperatorPrivilege

BUILTIN\Administrators
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege

Everyone
No privileges assigned


-- 
John M. Drescher