On 12/11/15 13:32, S Sarath kumar wrote:> Hi,
>
> I have implemented print server using samba 4.1 & CUPS 1.7 by following
> steps provided at
> https://wiki.samba.org/index.php/Setup_a_Samba_print_server
>
> I have granted seprinteroperator rights to my domain group.
> While adding printer or driver am getting "access denied" error.
>
> My configurations as follows,
>
> workgroup = MYGROUP
> realm = MYGROUP
> security = ADS
> encrypt passwords = yes
> password server = MYDC.MYGROUP
> idmap uid = 10000-20000
> idmap gid = 10000-20000
> winbind enum users = yes
> winbind enum groups = yes
> winbind refresh tickets = true
> template homedir = /home/%D/%U
> template shell = /bin/bash
> winbind use default domain = yes
> restrict anonymous = 2
> winbind offline logon = yes
>
>
>
>
> ################## PRINTERS ####################
>
> [printers]
> comment = All Printers
> browseable = no
> path = /var/spool/samba
> printable = yes
> guest ok = no
> read only = yes
> create mask = 0700
> printing = CUPS
>
>
>
> [print$]
> comment = Printer Drivers
> path = /var/lib/samba/printers
> browseable = yes
> read only = no
> guest ok = no
I would go and have a look here:
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member
Set up your domain member correctly and then see if it works.
Also, is your workgroup name really the same as your kerberos realm ????
Rowland