samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] Printer Admin Difficulties

Re: [Samba] Printer Admin Difficulties

From: <christoph.beyer_at_nospam>
Date: Thu May 06 2010 - 19:08:23 GMT
To: Ryan Suarez <ryan.suarez@sheridanc.on.ca>

Hi Jeff,

I fiddled around for a while with this too ;)

Looks broken to me, anyway I did put it like this and it worked for me
then:

in smb.conf:

username map = /opt/samba/smbusers.map
admin users = root

[print$]
         path = /opt/samba/samba_drivers
         write list = root

uid@host:~$ cat /opt/samba/smbusers.map
!root = <my win uid>
!root = <WIN DOMAIN\uid>

This worked for me only with the root account while in earlier versions I
used the same mechanism with the uid lp and it worked fine ...

good luck

christoph

On Thu, 6 May 2010, Ryan Suarez wrote:

> Hi Jeff,
>
> Jeff Hardy wrote:
>> On 04/01/2010 05:39 PM, Jeff Hardy wrote:
>> > I have been trying to setup a new print server on Fedora 12 based around
>> > samba-3.4.7-58.fc12.x86_64 and cups-1.4.2-28.fc12.x86_64. All looks good
>> > except for the ability for printer administrators to manage printers.
>> > Whether I specify users in a system group using the deprecated printer
>> > admin option, or specifically using net rpc rights and the
>> > SePrinterOperatorPrivilege, it does not matter. This is against an NT4
>> > domain on samba-3.4.2.
>>
>> After a tdb wipe, I ended up with no users who can manage printers. This
>> at least made the behavior consistently broken. I ended up trying samba
>> 3.3 and 3.2 seeking some way to manage printers. Only by going back to
>> samba-3.2.15 built from a Fedora 10 source RPM was I able to restore
>> functionality by way of the printer admin option. The
>> SePrinterOperatorPrivilege did not seem to work in any version no matter
>> what I did. Surely other folks are managing printers with sambas later
>> than 3.2.x I would think. Anyone have any experience like this?
>
> How about adding users as members to the BUILTIN\administrators group on the
> newer version of samba to see if that works?
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>

best regards
         ~christoph

-- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY | Phone: 040-8998-2317 * * - IT - | Fax: 040-8998-4060 * \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba