Hi everyone,
Ive posted this on another forum and the samba mailing list with no responses so i might drop it here aswell :P.
Recently i setup my Gentoo server to do the following
Share files
Host website
and Share a printer.
Samba file sharing works perfectly but i have a few questions (more on that later!) but my main problem is with the printer.
I can print all the test pages i want however when i try to connect to it from a networked PC i get this message
"Access Denied"
http://img.photobucket.com/albums/v4.../problemmo.jpg
I believe it is to do with samba because in the samba error logs i see
Code:
[2007/05/07 07:36:35, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2222)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine Julius-PC. Error was NT_STATUS_ACCESS_DENIED
[2007/05/07 07:36:37, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2222)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine Julius-PC. Error was NT_STATUS_ACCESS_DENIED
I have samba set up properly to allow access to the printer, and the user does have printer permissions
Code:
[global]
workgroup = ROSCH
server string = Samba Server %v
printcap name = cups
printing = cups
load printers = yes
log file = /var/log/samba/log.%m
max log size = 100
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
interfeaces = lo eth1
hosts allow = 127.0.0.1 192.168.0.*
vfs object = vsan-clamav
vscan-clamav:config-file = /etc/samba/vscan-oav.conf
security = user
force user = julius
guest ok = Yes
hosts allow = 127.0.0.1, 192.168.0., 192.168.1., 192.168.0.
hosts deny = 0.0.0.0/0
vfs objects = vscan-clamav
[print$]
comment = Printer Drivers
path = /etc/samba/printer
browseable = yes
guest ok = yes
read only = yes
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
public = yes
guest ok = yes
Here is my cups.conf
Code:
LogLevel info
SystemGroup lpadmin
# Allow remote access
Port 631
Listen /var/run/cups/cups.sock
# Share local printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAddress @LOCAL
DefaultAuthType Basic
<Location />
# Allow shared printing and remote administration...
Order allow,deny
Allow @LOCAL
</Location>
<Location /admin>
Encryption Required
# Allow remote administration...
Order allow,deny
Allow @LOCAL
</Location>
<Location /admin/conf>
AuthType Basic
Require user @SYSTEM
# Allow remote access to the configuration files...
Order allow,deny
Allow @LOCAL
</Location>
<Policy default>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
AuthType Basic
Require user @SYSTEM
Order deny,allow
</Limit>
<Limit CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
Ive been scratching my head as to whats going on with that.
Now for my other question, on my home network i want the majority of the pc's to just connect to the tv dir as read only however i want to be able to edit them myself. The thing is i dont want a user + password prompt to come up every single time. To avoid this can i do smbpasswd -a *windows box user name*
and set the password as the windows password? Or do i have to have existing unix users?
Or can i have it so that one IP has write access, or one IP gets logged into a seperate admin account.
After i get all this working ill have to think about upgrading to the next gentoo release heh but ill ask bout that later :P
Thanks for reading
Julius
