Hai Christian, Hm,, you tried that Universal driver and it did not work for you,. .. :-/ That worked fine for me, so its one to have a better look at. I saw you used acl_xattr:ignore system acl also. After you changed smb.conf, did you re-apply also the rights on the shares? Try it in this order, first setup the share and correct the rights. Then correct the rights on the file system, but only use windows for it. I instaled that driver on a Debian Buster, samba 4.11.3 server and i was able to publish it to my windows 7 and 10 clients. Did you get any other error messages, or anything in the logs? And offcourse, increasing the log level might help to see whats going. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Haase via samba > Verzonden: woensdag 18 december 2019 14:27 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Hosted printer drivers can not be used > > Hi Louis, > > > Ow.. Wait... @Christian > > Your using the wrong driver here. > > > > Try this one, the Universal driver: 3.6.0.0 Dec 13, > 2019 PCL6 > > > > That one worked for me, just installed it, i almost felt > out of my chair.. > > The one you tried failed here also. This is the first > driver that worked for me in months.. > Hmm interesting.. This driver does not work for me either. > Well I file this as a bug > > Cheers, > Christian > > -- > ifu Hamburg - Member of iPoint Group > "Productivity meets Sustainability" > > ifu Institut f?r Umweltinformatik Hamburg GmbH > Max-Brauer-Allee 50 - 22765 Hamburg - Germany > fon: +49 40 480009-0 - fax: +49 40 480009-22 - email: info at ifu.com > > Managing Director: Jan Hedemann - Commercial Register: > Hamburg, HRB 52629 > www.ifu.com - www.umberto.de - www.e-sankey.com > > In der Zeit vom 23.12.2019 bis einschlie?lich 03.01.2020 bleibt das > ifu Hamburg geschlossen. Ein Notdienst ist eingerichtet. > Alle Mitarbeiter des ifu w?nschen Ihnen eine frohe Weihnachtszeit! > > In the period from 23rd of December 2019 until the 3rd of January 2020 > ifu Hamburg will remain closed. An emergency service has been set up. > All ifu employees wish you a merry christmas time! > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Mandi! L.P.H. van Belle via samba In chel di` si favelave...> I instaled that driver on a Debian Buster, samba 4.11.3 server and i was able to publish it to my windows 7 and 10 clients.I publish KM drivers mee too, without fuss. My experience is that drivers does not install correctly on clients, because need local administrative privileges. Eg: a) drivers get loaded to print$ flawlessy (supposing to have a box WITHOUT that driver installed, of course) b) if i connect the printer by a unprivileged user, does not work (eg, printer connect, but does not print, thow an error...). c) if i try with a privileged user, works as expected (and clearly, all subsequent unprivileged users that try to conect the printer, works because the driver is just installed). I don't think is a samba bug... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bont?, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
Hai Marco,
In case of your setup. This is a design flaw, or nicer rephrased.. :-p
You missed a few things. ;-)
You need a few things more to make this work.
Expand the following branch in the Group Policy editor:
Computer Configuration -> Policies -> Windows Settings
-> Security Settings -> Local Policies -> Security Options,
where you need to find the policy Devices: Prevent users from installing printer
drivers.
Disable this policy.
Allow user to install the printer drivers via GPO.
Allow non-administrators to install drivers for these device setup classes in
the section :
Computer Configuration -> Policies -> Administrative Templates ->
System -> Driver Installation.
Enable this policy, allow non-sysadmins to install drivers ( i dont know that
its states in IT or English ).
( and today to lazy to look it up.. But you see and will find what i mean. )
You need these also :
Class = Printer {4658ee7e-f050-11d1-b6bd-00c04fa372a7}
Class = PNPPrinters {4d36e979-e325-11ce-bfc1-08002be10318}
When above is done, your at the point your now are. ( users can not
connect/install the driver ) .
Which is correct .. ;-)
Computer Configuration -> Policies -> Administrative Templates ->
Printers
Enable the Point and print restrictions.
set : do not show warning or elevation prompt when installing drivers for a new
connection and when updating drivers for an existing connection
And you also must assign trusted server in FQDN in the "point and print
trusted servers"
Disable only allow Point and Print within own forest.
( at least i did need it, my previous print server was in an other domain ).
User Policies.
See computer policies, set same where possible.
And
ConfigurationScreen/Printers, disable allow default printer control of windows.
(enabled)
And then i publish the printers from control panel/Printers
Share names: \\fq.dn\share
Run in user security context.
(optional, only apply once)
(optional, only if member of group.)
Pff. Longer mail then expected..
I hope you guys can use it.
Above workes for me on Win7/10 x32/x64
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Marco Gaiarin via samba
> Verzonden: woensdag 18 december 2019 15:25
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Hosted printer drivers can not be used
>
>
> b) if i connect the printer by a unprivileged user, does not work (eg,
> printer connect, but does not print, thow an error...).
Which error, (optional mail me the print screen)
>
> c) if i try with a privileged user, works as expected (and
> clearly, all
> subsequent unprivileged users that try to conect the printer, works
> because the driver is just installed).
>
Yes, then it always works, correct, so if you setup a new pc,
you most probley always login at least once with an admin users.
Create one gpo that installes all needed printers and while setting up a new pc.
Drivers install in the back ground for you.
>
>
> I don't think is a samba bug...
Nope, its windows design. And yeah, it sucks.. ;-)
Greetz,
Louis
Mandi! L.P.H. van Belle via samba In chel di` si favelave...> You need a few things more to make this work.We'll see...> Expand the following branch in the Group Policy editor: > Computer Configuration -> Policies -> Windows Settings > -> Security Settings -> Local Policies -> Security Options, > where you need to find the policy Devices: Prevent users from installing printer drivers. > Disable this policy.But policy editor say me that is disabled by default on workstation...> Allow user to install the printer drivers via GPO. > Allow non-administrators to install drivers for these device setup classes in the section : > Computer Configuration -> Policies -> Administrative Templates -> System -> Driver Installation. > Enable this policy, allow non-sysadmins to install drivers ( i dont know that its states in IT or English ). > ( and today to lazy to look it up.. But you see and will find what i mean. ) > > You need these also : > Class = Printer {4658ee7e-f050-11d1-b6bd-00c04fa372a7} > Class = PNPPrinters {4d36e979-e325-11ce-bfc1-08002be10318} > > When above is done, your at the point your now are. ( users can not connect/install the driver ) . > Which is correct .. ;-)But i don't need to have users install all the print drivers, only the driver in domain servers...> Computer Configuration -> Policies -> Administrative Templates -> Printers > Enable the Point and print restrictions. > > set : do not show warning or elevation prompt when installing drivers for a new connection and when updating drivers for an existing connection > > And you also must assign trusted server in FQDN in the "point and print trusted servers" > Disable only allow Point and Print within own forest.Just done. These are standard settings i've just set in previous 'NT mode' domains. Anyway: drivers installation for users works as expected with other drivers (eg, HP Laserjets PCL6) but does not work for KM drivers.> Yes, then it always works, correct, so if you setup a new pc, > you most probley always login at least once with an admin users. > Create one gpo that installes all needed printers and while setting up a new pc. > Drivers install in the back ground for you.I prefere install printers by users, and if drivers have trouble, use some other sort of things (eg, SCM WPKG) to install driver locally. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bont?, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)