samba - Nov 2011 - Permissions in printer share

Hi everyone,


I'm trying to migrate my print server to Samba. All is working well 
except security. In my domain, some groups are able to print to certain 
printers and others to other printers. I tried with "write list = 
@group" but it doesn't worked. How do I configure the permissions on 
samba's printers, for a user group can print to only certain printers?


Here is my smb.conf file:

[global]
workgroup = MYDOMAIN
server string = Samba Server
security = DOMAIN
password server = PASS1 PASS2
log file = /var/log/samba/log.%m
max log size = 50
idmap uid = 15000-20000
idmap gid = 15000-20000
template homedir = /homes/%D/%U
template shell = /sbin/nologin
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
hosts allow = 127., 192.168.23.
cups options = raw

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[prnhpp3015]
comment = HP LaserJet P3015
path = /var/spool/samba/rcprnhpp3015
write list = @group1
printable = Yes




Thanks in advance


Orlando

On 11/07/2011 2:13 PM, Orlando Irrazabal wrote:
> Hi everyone,
>
>
> I'm trying to migrate my print server to Samba. All is working well 
> except security. In my domain, some groups are able to print to 
> certain printers and others to other printers. I tried with "write 
> list = @group" but it doesn't worked. How do I configure the 
> permissions on samba's printers, for a user group can print to only 
> certain printers?
>
>
> Here is my smb.conf file:
>
> [global]
> workgroup = MYDOMAIN
> server string = Samba Server
> security = DOMAIN
> password server = PASS1 PASS2
> log file = /var/log/samba/log.%m
> max log size = 50
> idmap uid = 15000-20000
> idmap gid = 15000-20000
> template homedir = /homes/%D/%U
> template shell = /sbin/nologin
> winbind separator = +
> winbind enum users = Yes
> winbind enum groups = Yes
> hosts allow = 127., 192.168.23.
> cups options = raw
>
> [printers]
> comment = All Printers
> path = /var/spool/samba
> printable = Yes
> browseable = No
>
> [prnhpp3015]
> comment = HP LaserJet P3015
> path = /var/spool/samba/rcprnhpp3015
> write list = @group1
> printable = Yes
Try replacing "write list = @group1"
with "valid users = @group1"

Dale
>
> Thanks in advance
>
> Orlando