samba - Dec 2016 - ?==?utf-8?q? unable to upload printer drive

-------- Original-Nachricht -------- 
Betreff: Re: [Samba] ?=  unable to  upload printer drive 
Datum: Mittwoch, 07. Dezember 2016 09:08 CET 
Von: Heinz Hölzl <heinz.hoelzl at gvcc.net> 
An: "Rowland Penny" <rpenny at samba.org> 
 
 
> >  Hi,
> >  
> > > Follow this wiki page:
> > > 
> > >
https://wiki.samba.org/index.php/Setup_a_Samba_print_server#Setup_the_.5Bprinters.5D_share
> > > Then the page you referred and use windows ACLs not posix ACLs
> > 
> > done
> > 
> > > 
> > > I also take it you have given your users & groups uidNumber
or
> > > gidNumber attributes.
> > 
> > yes, this is a test-environment and i have given the unix-id to
> > administrator, domain admins and domain users. 
> 
> Please remove the uidNumber from Administrator, you have just turned it
> into a normal Unix user without the permisions (i.e. 'root' users)
it> requires.

If i remove the uidNumber from Administrator, then i can not connect to the
shares as administrator. In this case, i have to add the administrator to
/etc/passwd ?

heinz
 
 
 
-- 
Heinz Hölzl
EDV-Abteilung | Ripartizione EDP
Südtiroler Gemeindenverband Genossenschaft
Consorzio dei Comuni della Provincia di Bolzano Societá Cooperativa
I – 39100 Bozen – Kanonikus-Michael-Gamper-Straße 10
I – 39100 Bolzano – via Canonico Michael Gamper 10

Hai, 

No adding administrator to /etc/passwd. 
Map user administrator to root.  

Add in smb.conf:
   username map = /etc/samba/samba_usermapping

which contains : 
!root = SAMBADOM\Administrator SAMBADOM\administrator Administrator
administrator

and if your setting up for windows ACL. 
Put : acl_xattr:ignore system acl = yes to the share.

Now, you also need these SePrivileges. 

Enter SAMBADOM\Administrator's password:
BUILTIN\Print Operators
SePrintOperatorPrivilege

SAMBADOM\Domain Admins
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SePrintOperatorPrivilege
SeDiskOperatorPrivilege
SeSecurityPrivilege

BUILTIN\Administrators
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege
SeSecurityPrivilege
SeSystemtimePrivilege
SeShutdownPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeSystemProfilePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeLoadDriverPrivilege
SeCreatePagefilePrivilege
SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeUndockPrivilege
SeManageVolumePrivilege
SeImpersonatePrivilege
SeCreateGlobalPrivilege
SeEnableDelegationPrivilege


>> Which brother printer is it ? you didnt tell us that. 
>I tryed it with various drivers, e.g. HP Laserjet Enterprise M603 PCL6
Ok, try the universal driver 6.0.0 or 6.2.1 these worked the best for me.
Dont use the tool to modify the drivers, if you do that you loose the signing.
For adjustments, get the ADMX and set a group policy.


After the above changes are done, restart the samba server. 
Reboot the pc. This is just to make sure you start upclean. 

Login as "SAMBADOM\Adminsitrator" on you pc. 
Now first set the share rights for the print server. 
Second the security rights. 
Voor both, reset everything start clean.

And upload the drivers from the windows pc. 

If setup correct, above wil work. 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Heinz Hölzl via
> samba
> Verzonden: woensdag 7 december 2016 9:10
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] ?==?utf-8?q? unable to upload printer drive
> 
> 
> 
> 
> -------- Original-Nachricht --------
> Betreff: Re: [Samba] ?=  unable to  upload printer drive
> Datum: Mittwoch, 07. Dezember 2016 09:08 CET
> Von: Heinz Hölzl <heinz.hoelzl at gvcc.net>
> An: "Rowland Penny" <rpenny at samba.org>
> 
> 
> > >  Hi,
> > >
> > > > Follow this wiki page:
> > > >
> > > >
> https://wiki.samba.org/index.php/Setup_a_Samba_print_server#Setup_the_.5Bp
> rinters.5D_share
> > > > Then the page you referred and use windows ACLs not posix
ACLs
> > >
> > > done
> > >
> > > >
> > > > I also take it you have given your users & groups
uidNumber or
> > > > gidNumber attributes.
> > >
> > > yes, this is a test-environment and i have given the unix-id to
> > > administrator, domain admins and domain users.
> >
> > Please remove the uidNumber from Administrator, you have just turned
it
> > into a normal Unix user without the permisions (i.e. 'root'
users) it>
> requires.
> 
> 
> If i remove the uidNumber from Administrator, then i can not connect to
> the shares as administrator. In this case, i have to add the administrator
> to /etc/passwd ?
> 
> heinz
> 
> 
> 
> --
> Heinz Hölzl
> EDV-Abteilung | Ripartizione EDP
> Südtiroler Gemeindenverband Genossenschaft
> Consorzio dei Comuni della Provincia di Bolzano Societá Cooperativa
> I ? 39100 Bozen ? Kanonikus-Michael-Gamper-Straße 10
> I ? 39100 Bolzano ? via Canonico Michael Gamper 10
> 
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba