Re: [Samba] Samba 4 and password policy pwsetting error

2010-08-26 Thread Glenn T. Arnold
Luk, 

Thanks that is what I needed. I did internet search on the proper syntax for 
the command and just could not figure out how run the command. 

-Glenn 

- Original Message - 
From: "Lukasz Zalewski"  
To: "Glenn T. Arnold"  
Cc: "samba"  
Sent: Thursday, August 26, 2010 1:06:13 PM 
Subject: Re: [Samba] Samba 4 and password policy pwsetting error 

On 08/26/2010 05:51 PM, Glenn T. Arnold wrote: 
> Hello, 
> 
> When I tried to change the password policy on a samba 4 domain controller I 
> get the following error. 
> 
> r...@server01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# 
> ./pwsettings.py --complexity=off 
> Traceback (most recent call last): 
> File "./pwsettings.py", line 25, in 
> import samba.getopt as options 
> ImportError: No module named samba.getopt 
> r...@lcsdc01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# 
> 
> What am I doing wrong when running this command? 
> 
> Thanks 
> -Glenn 

Glenn, 
run it as follows: 
/usr/local/samba/bin/net pwsettings  

HTH 

Luk 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 and password policy pwsetting error

2010-08-26 Thread Glenn T. Arnold
Hello, 

When I tried to change the password policy on a samba 4 domain controller I get 
the following error. 

r...@server01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# 
./pwsettings.py --complexity=off 
Traceback (most recent call last): 
File "./pwsettings.py", line 25, in  
import samba.getopt as options 
ImportError: No module named samba.getopt 
r...@lcsdc01:/usr/local/samba/lib/python2.6/site-packages/samba/netcmd# 

What am I doing wrong when running this command? 

Thanks 
-Glenn 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] printcap cache time using registry config on Ubuntu 9.04 samba 3.3.2

2010-01-13 Thread Glenn T. Arnold
I went back to smb.conf file instead of registry, because the printers were 
delayed showing when you browsed for the server on the network or if the 
printer is already connected it would take a while tell the printer would say 
ready instead of opening. when using the registry config. Has anybody seen this 
before? 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "Samba"  
Sent: Tuesday, January 12, 2010 4:17:47 PM 
Subject: [Samba] printcap cache time using registry config on Ubuntu 9.04 samba 
3.3.2 

I have been reading the man page on printcap cache time setting and have some 
questions. How much load does this put on a server if you have the setting less 
then 60? The reason I have this setting less than 60 is when I use an all 
registry samba configuration the printers do not show up if you browse the 
server or when you goto the Windows XP pc with the printer already connect 
shows printer status opening, but if you wait the default time period that 
samba sets for the printcap cache time the printer will eventually show up 
under the server. When I used the smb.conf file I did not observer this 
behavior. The reason I am using the all registry conf is to save some memory on 
the server. I have observed this behavior on another customers server with the 
same version ubuntu. The printcap cache time setting less than 60 seems to fix 
the issue or mask the issue enough to be liveable, but I want to make sure that 
I am not missing anything in configuring samba. Here is my config. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\global] 
"server string"="" 
"dos charset"="850" 
"unix charset"="ISO8859-1" 
"workgroup"="MYDOMAIN" 
"interfaces"="bond0, lo" 
"passdb backend"="ldapsam:ldap://myserver01.mthcs.net"; 
"passwd program"="/usr/sbin//smbldap-passwd %u" 
"username map"="/etc/samba/smbusers" 
"syslog"="0" 
"time server"="Yes" 
"socket options"="IPTOS_THROUGHPUT TCP_NODELAY" 
"add user script"="/usr/sbin//smbldap-useradd -m \"%u\"" 
"delete user script"="/usr/sbin//smbldap-userdel \"%u\"" 
"add group script"="/usr/sbin//smbldap-groupadd -p \"%g\"" 
"delete group script"="/usr/sbin//smbldap-groupdel \"%g\"" 
"add user to group script"="/usr/sbin//smbldap-groupmod -m \"%u\" \"%g\"" 
"delete user from group script"="/usr/sbin//smbldap-groupmod -x \"%u\" \"%g\"" 
"set primary group script"="/usr/sbin//smbldap-usermod -g \"%g\" \"%u\"" 
"add machine script"="/usr/sbin//smbldap-useradd -w \"%u\"" 
"logon script"="wkix32.exe logon.kix" 
"logon path"="" 
"logon drive"="h:" 
"logon home"="" 
"domain logons"="Yes" 
"os level"="60" 
"preferred master"="Yes" 
"domain master"="No" 
"wins server"="10.100.0.10" 
"lanman auth"="yes" 
"ldap admin dn"="cn=admin,dc=mthcs,dc=net" 
"ldap delete dn"="Yes" 
"ldap group suffix"="ou=Groups" 
"ldap idmap suffix"="ou=Users" 
"ldap machine suffix"="ou=Computers" 
"ldap passwd sync"="Yes" 
"ldap suffix"="dc=mthcs,dc=net" 
"ldap user suffix"="ou=Users" 
"ldap ssl"="no" 
"add share command"="/usr/bin/modify_samba_config.pl" 
"change share command"="/usr/bin/modify_samba_config.pl" 
"delete share command"="/usr/bin/modify_samba_config.pl" 
"utmp"="Yes" 
"idmap uid"="1-2" 
"idmap gid"="1-2" 
"printing"="cups" 
"printcap name"="cups" 
"force printername"="Yes" 
"default devmode"="no" 
"wins support"="no" 
"smb ports"="139" 
"usershare max shares"="0" 
"log level"="0" 
"printcap cache time"="30" 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
"comment"="Printer Drivers" 
"path"="/var/lib/samba/printers" 
"write list"="\"@Domain Admins\", root" 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printers] 
"comment"="All Printers" 
"path"="/var/spool/samba" 
"guest ok"="Yes" 
"printable"="Yes" 
"browseable"="No" 



Thanks 
-Glenn 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] printcap cache time using registry config on Ubuntu 9.04 samba 3.3.2

2010-01-12 Thread Glenn T. Arnold
I have been reading the man page on printcap cache time setting and have some 
questions. How much load does this put on a server if you have the setting less 
then 60? The reason I have this setting less than 60 is when I use an all 
registry samba configuration the printers do not show up if you browse the 
server or when you goto the Windows XP pc with the printer already connect 
shows printer status opening, but if you wait the default time period that 
samba sets for the printcap cache time the printer will eventually show up 
under the server. When I used the smb.conf file I did not observer this 
behavior. The reason I am using the all registry conf is to save some memory on 
the server. I have observed this behavior on another customers server with the 
same version ubuntu. The printcap cache time setting less than 60 seems to fix 
the issue or mask the issue enough to be liveable, but I want to make sure that 
I am not missing anything in configuring samba. Here is my config. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\global] 
"server string"="" 
"dos charset"="850" 
"unix charset"="ISO8859-1" 
"workgroup"="MYDOMAIN" 
"interfaces"="bond0, lo" 
"passdb backend"="ldapsam:ldap://myserver01.mthcs.net"; 
"passwd program"="/usr/sbin//smbldap-passwd %u" 
"username map"="/etc/samba/smbusers" 
"syslog"="0" 
"time server"="Yes" 
"socket options"="IPTOS_THROUGHPUT TCP_NODELAY" 
"add user script"="/usr/sbin//smbldap-useradd -m \"%u\"" 
"delete user script"="/usr/sbin//smbldap-userdel \"%u\"" 
"add group script"="/usr/sbin//smbldap-groupadd -p \"%g\"" 
"delete group script"="/usr/sbin//smbldap-groupdel \"%g\"" 
"add user to group script"="/usr/sbin//smbldap-groupmod -m \"%u\" \"%g\"" 
"delete user from group script"="/usr/sbin//smbldap-groupmod -x \"%u\" \"%g\"" 
"set primary group script"="/usr/sbin//smbldap-usermod -g \"%g\" \"%u\"" 
"add machine script"="/usr/sbin//smbldap-useradd -w \"%u\"" 
"logon script"="wkix32.exe logon.kix" 
"logon path"="" 
"logon drive"="h:" 
"logon home"="" 
"domain logons"="Yes" 
"os level"="60" 
"preferred master"="Yes" 
"domain master"="No" 
"wins server"="10.100.0.10" 
"lanman auth"="yes" 
"ldap admin dn"="cn=admin,dc=mthcs,dc=net" 
"ldap delete dn"="Yes" 
"ldap group suffix"="ou=Groups" 
"ldap idmap suffix"="ou=Users" 
"ldap machine suffix"="ou=Computers" 
"ldap passwd sync"="Yes" 
"ldap suffix"="dc=mthcs,dc=net" 
"ldap user suffix"="ou=Users" 
"ldap ssl"="no" 
"add share command"="/usr/bin/modify_samba_config.pl" 
"change share command"="/usr/bin/modify_samba_config.pl" 
"delete share command"="/usr/bin/modify_samba_config.pl" 
"utmp"="Yes" 
"idmap uid"="1-2" 
"idmap gid"="1-2" 
"printing"="cups" 
"printcap name"="cups" 
"force printername"="Yes" 
"default devmode"="no" 
"wins support"="no" 
"smb ports"="139" 
"usershare max shares"="0" 
"log level"="0" 
"printcap cache time"="30" 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
"comment"="Printer Drivers" 
"path"="/var/lib/samba/printers" 
"write list"="\"@Domain Admins\", root" 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printers] 
"comment"="All Printers" 
"path"="/var/spool/samba" 
"guest ok"="Yes" 
"printable"="Yes" 
"browseable"="No" 



Thanks 
-Glenn 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do

2010-01-12 Thread Glenn T. Arnold
I finally fixed my problem by removing samba completely removing samba and 
reinstalling it. What I discovered is it appears to be an issue with rights. 
When I reinstalled samba the /var/lib/samba had rights like this. 

drwxrwxr-x+ 5 root root 4096 2010-01-11 23:27 samba 

On my original install where the 5 is it was a 6. After the reinstall the 
rights the rights on /var/lib/samba was reset to 5 and I made Domain Admins 
have read write execute rights on the folder with setfacl. Now everything is 
working. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "Samba"  
Sent: Thursday, July 16, 2009 4:16:48 PM 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Dale, 

Yes, I have the right assigned to my Domain Admins group and I just added it to 
my account just encase there is a group rights problem. Here is my user id 
rights. 

net rpc rights list "Domain\myaccount" 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 


Thanks for the suggestion! 
-Glenn 

- Original Message ----- 
From: "Dale Schroeder"  
To: "Glenn T. Arnold"  
Cc: "Samba"  
Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Glenn, 

Have you granted your user Print Operator privileges? 

net rpc rights grant  SePrintOperatorPrivilege -U root 

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337
 

Dale 


Glenn T. Arnold wrote: 

Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  To: "Harry Jede" 
 Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 
10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share "the proper way" it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: "Harry Jede"  To: samba@lists.samba.org Sent: Friday, 
July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 

I just made my print$ share settings to match my print drivers share 
which should work same This is what you believe. 

and I still cannot create folders or files on 
the print$ share, but I can all day on the print drivers share. Would 
someone explain why this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
"path"="/var/lib/samba/printers" 
"comment"="Printer Drivers" 
"read only"="no" 


[HKEY_LO

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-20 Thread Glenn T. Arnold
Jeremy, 

I do not think you got my log files, because I went through the log and I did 
not see the error you are referencing. When I went through the logs I did see 
references to print$ in the logs. What is a the proper way to post a log? I got 
bounced by the Samba List server when I paste the information in a post. I sent 
the log gziped did not get a bounce message, but I am not sure you got the log 
files. The file that I sent gzip was named print$level10.tar.gz Here is what I 
found under the two log files for print$ 

[2009/07/16 16:33:14, 2] param/loadparm.c:do_section(7498) 
Processing section "[print$]" 
[2009/07/16 16:33:14, 8] param/loadparm.c:add_a_service(5830) 
add_a_service: Creating snum = 1 for print$ 
[2009/07/16 16:33:14, 10] param/loadparm.c:hash_a_service(5877) 
hash_a_service: hashing index 1 for service name print$ 




-Glenn 

- Original Message - 
From: "Jeremy Allison"  
To: "Glenn T. Arnold"  
Cc: "Jeremy Allison" , samba@lists.samba.org 
Sent: Thursday, July 16, 2009 6:01:44 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thu, Jul 16, 2009 at 05:31:21PM -0400, Glenn T. Arnold wrote: 
> Here is the level 10 log files I sent the first one as attachments which look 
> like did not make it through. 

I don't see any attempts to open the print$ share in these logs. 

I do see an error : 

netlogon_creds_server_check: challenge : 14D0450551344C93 
calculated: BAB7D8066C1D3129 
netlogon_creds_server_check: credentials check failed. 
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting 
auth request from client WIN7 machine account WIN7$ 

Is this a Win7 machine ? 3.3.2 doesn't have the fixes 
for Win7 netlogon credentials in it (hardly suprising 
as Win7 wasn't even a twinkle in Microsoft's release 
schedule when 3.3.2 was shipped :-). 

Jeremy. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do

2009-07-16 Thread Glenn T. Arnold
Dale, 

Yes, I have the right assigned to my Domain Admins group and I just added it to 
my account just encase there is a group rights problem. Here is my user id 
rights. 

net rpc rights list "Domain\myaccount" 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 


Thanks for the suggestion! 
-Glenn 

- Original Message - 
From: "Dale Schroeder"  
To: "Glenn T. Arnold"  
Cc: "Samba"  
Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Glenn, 

Have you granted your user Print Operator privileges? 

net rpc rights grant  SePrintOperatorPrivilege -U root 

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337
 

Dale 


Glenn T. Arnold wrote: 

Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  To: "Harry Jede" 
 Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 
10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share "the proper way" it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: "Harry Jede"  To: samba@lists.samba.org Sent: Friday, 
July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 

I just made my print$ share settings to match my print drivers share 
which should work same This is what you believe. 

and I still cannot create folders or files on 
the print$ share, but I can all day on the print drivers share. Would 
someone explain why this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
"path"="/var/lib/samba/printers" 
"comment"="Printer Drivers" 
"read only"="no" 


[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
"path"="/var/lib/samba/printers" 
"read only"="no" Why are you doing this? 

I think you should reread the excellent Samba docu again. 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  To: "samba" 
 Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 
US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
even though I do;-) 

Harry, 

You did give me an idea though. For grins I just set rights to 0777 
even on the extended acls and I still get access denied when trying 
to upload print drivers. Here is the updated rights on 
/var/lib/samba/printers. You make your own changes. That's really fine. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-16 Thread Glenn T. Arnold
Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "Harry Jede"  
Cc: samba@lists.samba.org 
Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share "the proper way" it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: "Harry Jede"  
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
> I just made my print$ share settings to match my print drivers share 
> which should work same 
This is what you believe. 

> and I still cannot create folders or files on 
> the print$ share, but I can all day on the print drivers share. Would 
> someone explain why this is happening? Here is my share settings. 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
> "path"="/var/lib/samba/printers" 
> "comment"="Printer Drivers" 
> "read only"="no" 
> 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
> "path"="/var/lib/samba/printers" 
> "read only"="no" 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

> Thanks 
> -Glenn 
> 
> - Original Message - 
> From: "Glenn T. Arnold"  
> To: "samba"  
> Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
> Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
> even though I do;-) 
> 
> Harry, 
> 
> You did give me an idea though. For grins I just set rights to 0777 
> even on the extended acls and I still get access denied when trying 
> to upload print drivers. Here is the updated rights on 
> /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-08 Thread Glenn T. Arnold
I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "Harry Jede"  
Cc: samba@lists.samba.org 
Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share "the proper way" it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: "Harry Jede"  
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
> I just made my print$ share settings to match my print drivers share 
> which should work same 
This is what you believe. 

> and I still cannot create folders or files on 
> the print$ share, but I can all day on the print drivers share. Would 
> someone explain why this is happening? Here is my share settings. 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
> "path"="/var/lib/samba/printers" 
> "comment"="Printer Drivers" 
> "read only"="no" 
> 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
> "path"="/var/lib/samba/printers" 
> "read only"="no" 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

> Thanks 
> -Glenn 
> 
> - Original Message - 
> From: "Glenn T. Arnold"  
> To: "samba"  
> Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
> Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
> even though I do;-) 
> 
> Harry, 
> 
> You did give me an idea though. For grins I just set rights to 0777 
> even on the extended acls and I still get access denied when trying 
> to upload print drivers. Here is the updated rights on 
> /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-06 Thread Glenn T. Arnold
Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share "the proper way" it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: "Harry Jede"  
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
> I just made my print$ share settings to match my print drivers share 
> which should work same 
This is what you believe. 

> and I still cannot create folders or files on 
> the print$ share, but I can all day on the print drivers share. Would 
> someone explain why this is happening? Here is my share settings. 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
> "path"="/var/lib/samba/printers" 
> "comment"="Printer Drivers" 
> "read only"="no" 
> 
> 
> [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
> "path"="/var/lib/samba/printers" 
> "read only"="no" 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

> Thanks 
> -Glenn 
> 
> - Original Message - 
> From: "Glenn T. Arnold"  
> To: "samba"  
> Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
> Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
> even though I do;-) 
> 
> Harry, 
> 
> You did give me an idea though. For grins I just set rights to 0777 
> even on the extended acls and I still get access denied when trying 
> to upload print drivers. Here is the updated rights on 
> /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I just made my print$ share settings to match my print drivers share which 
should work same and I still cannot create folders or files on the print$ 
share, but I can all day on the print drivers share. Would someone explain why 
this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
"path"="/var/lib/samba/printers" 
"comment"="Printer Drivers" 
"read only"="no" 


[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
"path"="/var/lib/samba/printers" 
"read only"="no" 

Thanks 
-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "samba"  
Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

Harry, 

You did give me an idea though. For grins I just set rights to 0777 even on the 
extended acls and I still get access denied when trying to upload print 
drivers. Here is the updated rights on /var/lib/samba/printers. 

r...@server01:/var/lib/samba# getfacl printers/* 
# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

r...@server01:/var/lib/samba# 


-Glenn 

- Original Message - 
From: "Harry Jede" < walk2...@arcor.de > 
To: samba@lists.samba.org 
Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: 
> Here is the rights on the /var/lib/samba/printers directory 
> 
> r...@server01:/var/lib/samba# getfacl printers -R 
> # file: printers 
> # owner: root 
> # group: Domain\040Admins 
> user::rwx 
> group::r-x 
# grant Domain\040Admins write access 
group::rwx 
> group:Domain\040Admins:rwx 
> mask::rwx 
> other::r-x 
> default:user::rwx 
> default:group::r-x 
> default:group:Domain\040Admins:rwx 
> default:mask::rwx 
> default:other::r-x 



-- 

Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "samba"  
Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: &

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
Harry, 

You did give me an idea though. For grins I just set rights to 0777 even on the 
extended acls and I still get access denied when trying to upload print 
drivers. Here is the updated rights on /var/lib/samba/printers. 

r...@server01:/var/lib/samba# getfacl printers/* 
# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

r...@server01:/var/lib/samba# 


-Glenn 

- Original Message - 
From: "Harry Jede" < walk2...@arcor.de > 
To: samba@lists.samba.org 
Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: 
> Here is the rights on the /var/lib/samba/printers directory 
> 
> r...@server01:/var/lib/samba# getfacl printers -R 
> # file: printers 
> # owner: root 
> # group: Domain\040Admins 
> user::rwx 
> group::r-x 
# grant Domain\040Admins write access 
group::rwx 
> group:Domain\040Admins:rwx 
> mask::rwx 
> other::r-x 
> default:user::rwx 
> default:group::r-x 
> default:group:Domain\040Admins:rwx 
> default:mask::rwx 
> default:other::r-x 



-- 

Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "samba"  
Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "samba"  
Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern 
Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I 
do;-) 

I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous "unable to install driver access 
denied" message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivileg

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: "Glenn T. Arnold"  
To: "samba"  
Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern 
Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I 
do;-) 

I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous "unable to install driver access 
denied" message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

net rpc rights list "Domain Admins" 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

Here is the rights on the /var/lib/samba/printers directory 

r...@server01:/var/lib/samba# getfacl printers -R 
# file: printers 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rw- 
group::r-x #effective:r-- 
group:Domain\040Admins:rwx #effective:rw- 
mask::rw- 
other::r-- 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

I created a second share called printer drivers to prove I have rights to write 
to the /var/lib/samba/printers folder from a windows xp. Which I can create and 
copy files and folders with no problems through the print drivers share, but 
when I connect to the /var/lib/samba/printers folder through print$ I get 
access denied. But, I can add workstations to the domain with no problems, I 
can change security on the printer I am trying to upload a print driver with no 
problems. If you run smbstatus you can see when I connect with root that it 
only shows read only rights here is my smbstatus ouptput . 
Locked files: 
Pid Uid DenyMode Access R/W Oplock SharePath Name Time 

[Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous "unable to install driver access 
denied" message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

net rpc rights list "Domain Admins" 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

Here is the rights on the /var/lib/samba/printers directory 

r...@server01:/var/lib/samba# getfacl printers -R 
# file: printers 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rw- 
group::r-x #effective:r-- 
group:Domain\040Admins:rwx #effective:rw- 
mask::rw- 
other::r-- 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

I created a second share called printer drivers to prove I have rights to write 
to the /var/lib/samba/printers folder from a windows xp. Which I can create and 
copy files and folders with no problems through the print drivers share, but 
when I connect to the /var/lib/samba/printers folder through print$ I get 
access denied. But, I can add workstations to the domain with no problems, I 
can change security on the printer I am trying to upload a print driver with no 
problems. If you run smbstatus you can see when I connect with root that it 
only shows read only rights here is my smbstatus ouptput . 
Locked files: 
Pid Uid DenyMode Access R/W Oplock SharePath Name Time 
--
 
12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:13:34 2009 
12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:13:34 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:06:46 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:06:46 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:35:05 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /home/gtarnold . Thu Jul 2 13:39:55 
2009 


Below is my smb