Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do

2010-01-12 Thread Glenn T. Arnold
I finally fixed my problem by removing samba completely removing samba and 
reinstalling it. What I discovered is it appears to be an issue with rights. 
When I reinstalled samba the /var/lib/samba had rights like this. 

drwxrwxr-x+ 5 root root 4096 2010-01-11 23:27 samba 

On my original install where the 5 is it was a 6. After the reinstall the 
rights the rights on /var/lib/samba was reset to 5 and I made Domain Admins 
have read write execute rights on the folder with setfacl. Now everything is 
working. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: Samba samba@lists.samba.org 
Sent: Thursday, July 16, 2009 4:16:48 PM 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Dale, 

Yes, I have the right assigned to my Domain Admins group and I just added it to 
my account just encase there is a group rights problem. Here is my user id 
rights. 

net rpc rights list Domain\myaccount 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 


Thanks for the suggestion! 
-Glenn 

- Original Message - 
From: Dale Schroeder d...@briannassaladdressing.com 
To: Glenn T. Arnold garn...@unrealsolutions.com 
Cc: Samba samba@lists.samba.org 
Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Glenn, 

Have you granted your user Print Operator privileges? 

net rpc rights grant user SePrintOperatorPrivilege -U root 

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337
 

Dale 


Glenn T. Arnold wrote: 

Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede 
walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 
10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share the proper way it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, 
July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 

I just made my print$ share settings to match my print drivers share 
which should work same This is what you believe. 

and I still cannot create folders or files on 
the print$ share, but I can all day on the print drivers share. Would 
someone explain why this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
path=/var/lib/samba/printers 
comment=Printer Drivers 
read only

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-20 Thread Glenn T. Arnold
Jeremy, 

I do not think you got my log files, because I went through the log and I did 
not see the error you are referencing. When I went through the logs I did see 
references to print$ in the logs. What is a the proper way to post a log? I got 
bounced by the Samba List server when I paste the information in a post. I sent 
the log gziped did not get a bounce message, but I am not sure you got the log 
files. The file that I sent gzip was named print$level10.tar.gz Here is what I 
found under the two log files for print$ 

[2009/07/16 16:33:14, 2] param/loadparm.c:do_section(7498) 
Processing section [print$] 
[2009/07/16 16:33:14, 8] param/loadparm.c:add_a_service(5830) 
add_a_service: Creating snum = 1 for print$ 
[2009/07/16 16:33:14, 10] param/loadparm.c:hash_a_service(5877) 
hash_a_service: hashing index 1 for service name print$ 




-Glenn 

- Original Message - 
From: Jeremy Allison j...@samba.org 
To: Glenn T. Arnold garn...@unrealsolutions.com 
Cc: Jeremy Allison j...@samba.org, samba@lists.samba.org 
Sent: Thursday, July 16, 2009 6:01:44 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thu, Jul 16, 2009 at 05:31:21PM -0400, Glenn T. Arnold wrote: 
 Here is the level 10 log files I sent the first one as attachments which look 
 like did not make it through. 

I don't see any attempts to open the print$ share in these logs. 

I do see an error : 

netlogon_creds_server_check: challenge : 14D0450551344C93 
calculated: BAB7D8066C1D3129 
netlogon_creds_server_check: credentials check failed. 
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting 
auth request from client WIN7 machine account WIN7$ 

Is this a Win7 machine ? 3.3.2 doesn't have the fixes 
for Win7 netlogon credentials in it (hardly suprising 
as Win7 wasn't even a twinkle in Microsoft's release 
schedule when 3.3.2 was shipped :-). 

Jeremy. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-16 Thread Glenn T. Arnold
Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: Harry Jede walk2...@arcor.de 
Cc: samba@lists.samba.org 
Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share the proper way it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de 
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
 I just made my print$ share settings to match my print drivers share 
 which should work same 
This is what you believe. 

 and I still cannot create folders or files on 
 the print$ share, but I can all day on the print drivers share. Would 
 someone explain why this is happening? Here is my share settings. 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
 path=/var/lib/samba/printers 
 comment=Printer Drivers 
 read only=no 
 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
 path=/var/lib/samba/printers 
 read only=no 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

 Thanks 
 -Glenn 
 
 - Original Message - 
 From: Glenn T. Arnold garn...@unrealsolutions.com 
 To: samba samba@lists.samba.org 
 Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
 Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
 even though I do;-) 
 
 Harry, 
 
 You did give me an idea though. For grins I just set rights to 0777 
 even on the extended acls and I still get access denied when trying 
 to upload print drivers. Here is the updated rights on 
 /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do

2009-07-16 Thread Dale Schroeder

Glenn,

Have you granted your user Print Operator privileges?

   net rpc rights grant user SePrintOperatorPrivilege -U root

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337

Dale


Glenn T. Arnold wrote:
Initially when I posted my access problems to print$ I was using the new registry based smb.conf I had my whole configuration in the registry. Now I move my printers and print$ back to the text based smb.conf and I copied the standard ubuntu debian [printers] and [print$] out of the original ubuntu package smb.conf and the only modification that I made was under the [print$] I change read only to no instead of yes. I can not write to the share. Simply renaming print$ section to print I can access the share and write to it with no problems. Any more suggestions? I need to get this resolved. Here is my smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: Harry Jede walk2...@arcor.de 
Cc: samba@lists.samba.org 
Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) 

Well, I did read the fine documentation and the documentation for this current situation it was no help. The reason I am using the registry for the smb.conf is memory savings, instance changes of smb.conf going into effect, and maybe future clustering. Also, I will state if using the samba registry method is not the proper way of doing things then why would the Samba developers add this feature into Samba? ;-) The reason I set the share with the current rights, is to troubleshoot the problem and prove that my file rights were correct. When I setup the print$ share the proper way it is still read-only even though I had writelist in effect. I currently have 1200 pc connect to a samba-ldap servers with the proper setup with no problems. I will investigate the app armor settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de 
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
  
I just made my print$ share settings to match my print drivers share 
which should work same 

This is what you believe. 

  
and I still cannot create folders or files on 
the print$ share, but I can all day on the print drivers share. Would 
someone explain why this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
path=/var/lib/samba/printers 
comment=Printer Drivers 
read only=no 



[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
path=/var/lib/samba/printers 
read only=no 

Why are you doing this? 

I think you should reread the excellent Samba docu again. 

  
Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
even though I do;-) 

Harry, 

You did give me an idea though. For grins I just set rights to 0777 
even on the extended acls and I still get access denied when trying 
to upload print drivers. Here is the updated rights on 
/var/lib/samba/printers. 

You make your own changes. That's really fine. 



  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do

2009-07-16 Thread Glenn T. Arnold
Dale, 

Yes, I have the right assigned to my Domain Admins group and I just added it to 
my account just encase there is a group rights problem. Here is my user id 
rights. 

net rpc rights list Domain\myaccount 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 


Thanks for the suggestion! 
-Glenn 

- Original Message - 
From: Dale Schroeder d...@briannassaladdressing.com 
To: Glenn T. Arnold garn...@unrealsolutions.com 
Cc: Samba samba@lists.samba.org 
Sent: Thursday, July 16, 2009 3:58:08 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do 

Glenn, 

Have you granted your user Print Operator privileges? 

net rpc rights grant user SePrintOperatorPrivilege -U root 

http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#id2601337
 

Dale 


Glenn T. Arnold wrote: 

Initially when I posted my access problems to print$ I was using the new 
registry based smb.conf I had my whole configuration in the registry. Now I 
move my printers and print$ back to the text based smb.conf and I copied the 
standard ubuntu debian [printers] and [print$] out of the original ubuntu 
package smb.conf and the only modification that I made was under the [print$] I 
change read only to no instead of yes. I can not write to the share. Simply 
renaming print$ section to print I can access the share and write to it with no 
problems. Any more suggestions? I need to get this resolved. Here is my 
smb.conf now: 
[global] 
# configbackend = registry 
include = registry 
[printers] 
comment = All Printers 
browseable = no 
path = /var/spool/samba 
printable = yes 
guest ok = no 
read only = yes 
create mask = 0700 

[print$] 
comment = Printer Drivers 
path = /var/lib/samba/printers 
browseable = yes 
read only = no 
guest ok = no 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com To: samba@lists.samba.org 
Sent: Wednesday, July 8, 2009 1:17:21 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com To: Harry Jede 
walk2...@arcor.de Cc: samba@lists.samba.org Sent: Monday, July 6, 2009 
10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share the proper way it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de To: samba@lists.samba.org Sent: Friday, 
July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 

I just made my print$ share settings to match my print drivers share 
which should work same This is what you believe. 

and I still cannot create folders or files on 
the print$ share, but I can all day on the print drivers share. Would 
someone explain why this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
path=/var/lib/samba/printers 
comment=Printer Drivers 
read only=no 


[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
path=/var/lib/samba/printers 
read only=no Why are you doing this? 

I think you should reread the excellent Samba docu again. 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com To: samba 
samba@lists.samba.org Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 
US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
even though I do;-) 

Harry, 

You did give me an idea though. For grins I just set rights to 0777 
even on the extended acls and I still get access denied when trying 
to upload print drivers. Here is the updated rights on 
/var/lib/samba/printers. You make your own changes. That's really fine

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-16 Thread Jeremy Allison
On Thu, Jul 16, 2009 at 03:11:00PM -0400, Glenn T. Arnold wrote:
 Initially when I posted my access problems to print$ I was using the new 
 registry based smb.conf I had my whole configuration in the registry. Now I 
 move my printers and print$ back to the text based smb.conf and I copied the 
 standard ubuntu debian [printers] and [print$] out of the original ubuntu 
 package smb.conf and the only modification that I made was under the [print$] 
 I change read only to no instead of yes. I can not write to the share. Simply 
 renaming print$ section to print I can access the share and write to it with 
 no problems. Any more suggestions? I need to get this resolved. Here is my 
 smb.conf now: 

Please post a debug level 10 log of the client trying to write.
This should make things clearer.

Jeremy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-16 Thread Jeremy Allison
On Thu, Jul 16, 2009 at 05:31:21PM -0400, Glenn T. Arnold wrote:
 Here is the level 10 log files I sent the first one as attachments which look
 like did not make it through.

I don't see any attempts to open the print$ share in these logs.

I do see an error :

netlogon_creds_server_check: challenge : 14D0450551344C93
calculated: BAB7D8066C1D3129
netlogon_creds_server_check: credentials check failed.
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client WIN7 machine account WIN7$

Is this a Win7 machine ? 3.3.2 doesn't have the fixes
for Win7 netlogon credentials in it (hardly suprising
as Win7 wasn't even a twinkle in Microsoft's release
schedule when 3.3.2 was shipped :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-08 Thread Glenn T. Arnold
I did the suggested updates to app armor and this did not solve the problem. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: Harry Jede walk2...@arcor.de 
Cc: samba@lists.samba.org 
Sent: Monday, July 6, 2009 10:05:14 AM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share the proper way it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de 
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
 I just made my print$ share settings to match my print drivers share 
 which should work same 
This is what you believe. 

 and I still cannot create folders or files on 
 the print$ share, but I can all day on the print drivers share. Would 
 someone explain why this is happening? Here is my share settings. 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
 path=/var/lib/samba/printers 
 comment=Printer Drivers 
 read only=no 
 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
 path=/var/lib/samba/printers 
 read only=no 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

 Thanks 
 -Glenn 
 
 - Original Message - 
 From: Glenn T. Arnold garn...@unrealsolutions.com 
 To: samba samba@lists.samba.org 
 Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
 Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
 even though I do;-) 
 
 Harry, 
 
 You did give me an idea though. For grins I just set rights to 0777 
 even on the extended acls and I still get access denied when trying 
 to upload print drivers. Here is the updated rights on 
 /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-06 Thread Glenn T. Arnold
Well, I did read the fine documentation and the documentation for this current 
situation it was no help. The reason I am using the registry for the smb.conf 
is memory savings, instance changes of smb.conf going into effect, and maybe 
future clustering. Also, I will state if using the samba registry method is not 
the proper way of doing things then why would the Samba developers add this 
feature into Samba? ;-) The reason I set the share with the current rights, is 
to troubleshoot the problem and prove that my file rights were correct. When I 
setup the print$ share the proper way it is still read-only even though I had 
writelist in effect. I currently have 1200 pc connect to a samba-ldap servers 
with the proper setup with no problems. I will investigate the app armor 
settings 

Thanks 
-Glenn 

- Original Message - 
From: Harry Jede walk2...@arcor.de 
To: samba@lists.samba.org 
Sent: Friday, July 3, 2009 3:22:19 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thursday, 2. Juli 2009 wrote Glenn T. Arnold: 
 I just made my print$ share settings to match my print drivers share 
 which should work same 
This is what you believe. 

 and I still cannot create folders or files on 
 the print$ share, but I can all day on the print drivers share. Would 
 someone explain why this is happening? Here is my share settings. 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
 path=/var/lib/samba/printers 
 comment=Printer Drivers 
 read only=no 
 
 
 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
 path=/var/lib/samba/printers 
 read only=no 
Why are you doing this? 

I think you should reread the excellent Samba docu again. 

 Thanks 
 -Glenn 
 
 - Original Message - 
 From: Glenn T. Arnold garn...@unrealsolutions.com 
 To: samba samba@lists.samba.org 
 Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
 Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights 
 even though I do;-) 
 
 Harry, 
 
 You did give me an idea though. For grins I just set rights to 0777 
 even on the extended acls and I still get access denied when trying 
 to upload print drivers. Here is the updated rights on 
 /var/lib/samba/printers. 
You make your own changes. That's really fine. 


-- 

Gruss 
Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-03 Thread Ray Anderson

Glenn T. Arnold wrote:
Harry, 

You did give me an idea though. For grins I just set rights to 0777 even on the extended acls and I still get access denied when trying to upload print drivers. Here is the updated rights on /var/lib/samba/printers. 


Harry,

Check your apparmor setttings:

/etc/apparmor.d/abstractions/samba

Mine looks like this:

abstractions/samba:2:  /etc/samba/smb.conf r,
abstractions/samba:3:  /usr/share/samba/*.dat mr,
abstractions/samba:4:  /var/lib/samba/**.tdb mrw,
abstractions/samba:5:  /var/log/samba/cores/* w,
abstractions/samba:6:  /var/log/samba/log.* w,
abstractions/samba:7:  /var/run/samba/*.tdb mrw,

Seems you'd need to add /var/lib/samba/printers/* mrw or similar.

Ray


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-03 Thread Harry Jede
On Thursday, 2. Juli 2009 wrote Glenn T. Arnold:
 I just made my print$ share settings to match my print drivers share
 which should work same
This is what you believe.

 and I still cannot create folders or files on 
 the print$ share, but I can all day on the print drivers share. Would
 someone explain why this is happening? Here is my share settings.

 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$]
 path=/var/lib/samba/printers
 comment=Printer Drivers
 read only=no


 [HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers]
 path=/var/lib/samba/printers
 read only=no
Why are you doing this? 

I think you should reread the excellent Samba docu again.

 Thanks
 -Glenn

 - Original Message -
 From: Glenn T. Arnold garn...@unrealsolutions.com
 To: samba samba@lists.samba.org
 Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern
 Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights
 even though I do;-)

 Harry,

 You did give me an idea though. For grins I just set rights to 0777
 even on the extended acls and I still get access denied when trying
 to upload print drivers. Here is the updated rights on
 /var/lib/samba/printers.
You make your own changes. That's really fine.


-- 

Gruss
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-03 Thread Harry Jede
On Friday, 3. Juli 2009 wrote Ray Anderson:
 Glenn T. Arnold wrote:
  Harry,
 
  You did give me an idea though. For grins I just set rights to 0777
  even on the extended acls and I still get access denied when trying
  to upload print drivers. Here is the updated rights on
  /var/lib/samba/printers.

 Harry,

 Check your apparmor setttings:

 /etc/apparmor.d/abstractions/samba

I am using GNU/Linux.
There is no apllication called apparmor.

BTW
I donn't have any problems with samba, Glenn has the problems.


-- 

Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous unable to install driver access 
denied message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

net rpc rights list Domain Admins 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

Here is the rights on the /var/lib/samba/printers directory 

r...@server01:/var/lib/samba# getfacl printers -R 
# file: printers 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rw- 
group::r-x #effective:r-- 
group:Domain\040Admins:rwx #effective:rw- 
mask::rw- 
other::r-- 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

I created a second share called printer drivers to prove I have rights to write 
to the /var/lib/samba/printers folder from a windows xp. Which I can create and 
copy files and folders with no problems through the print drivers share, but 
when I connect to the /var/lib/samba/printers folder through print$ I get 
access denied. But, I can add workstations to the domain with no problems, I 
can change security on the printer I am trying to upload a print driver with no 
problems. If you run smbstatus you can see when I connect with root that it 
only shows read only rights here is my smbstatus ouptput . 
Locked files: 
Pid Uid DenyMode Access R/W Oplock SharePath Name Time 
--
 
12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:13:34 2009 
12885 0 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:13:34 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:06:46 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:06:46 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /var/lib/samba/printers . Thu Jul 2 
13:35:05 2009 
12471 1 DENY_NONE 0x100081 RDONLY NONE /home/gtarnold . Thu Jul 2 13:39:55 
2009 


Below is my 

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern 
Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I 
do;-) 

I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous unable to install driver access 
denied message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

net rpc rights list Domain Admins 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege 
SeRemoteShutdownPrivilege 
SePrintOperatorPrivilege 
SeAddUsersPrivilege 
SeDiskOperatorPrivilege 

Here is the rights on the /var/lib/samba/printers directory 

r...@server01:/var/lib/samba# getfacl printers -R 
# file: printers 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rw- 
group::r-x #effective:r-- 
group:Domain\040Admins:rwx #effective:rw- 
mask::rw- 
other::r-- 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::r-x 
group:Domain\040Admins:rwx 
mask::rwx 
other::r-x 
default:user::rwx 
default:group::r-x 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::r-x 

I created a second share called printer drivers to prove I have rights to write 
to the /var/lib/samba/printers folder from a windows xp. Which I can create and 
copy files and folders with no problems through the print drivers share, but 
when I connect to the /var/lib/samba/printers folder through print$ I get 
access denied. But, I can add workstations to the domain with no problems, I 
can change security on the printer I am trying to upload a print driver with no 
problems. If you run smbstatus you can see when I connect with root that it 
only shows read only rights here is my smbstatus ouptput . 
Locked files: 
Pid Uid DenyMode Access R/W Oplock SharePath Name Time

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-02 Thread Harry Jede
On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold:
 Here is the rights on the /var/lib/samba/printers directory

 r...@server01:/var/lib/samba# getfacl printers -R
 # file: printers
 # owner: root
 # group: Domain\040Admins
 user::rwx
 group::r-x
# grant Domain\040Admins write access
group::rwx
 group:Domain\040Admins:rwx
 mask::rwx
 other::r-x
 default:user::rwx
 default:group::r-x
 default:group:Domain\040Admins:rwx
 default:mask::rwx
 default:other::r-x



-- 

Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
Harry, 

You did give me an idea though. For grins I just set rights to 0777 even on the 
extended acls and I still get access denied when trying to upload print 
drivers. Here is the updated rights on /var/lib/samba/printers. 

r...@server01:/var/lib/samba# getfacl printers/* 
# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

r...@server01:/var/lib/samba# 


-Glenn 

- Original Message - 
From: Harry Jede  walk2...@arcor.de  
To: samba@lists.samba.org 
Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: 
 Here is the rights on the /var/lib/samba/printers directory 
 
 r...@server01:/var/lib/samba# getfacl printers -R 
 # file: printers 
 # owner: root 
 # group: Domain\040Admins 
 user::rwx 
 group::r-x 
# grant Domain\040Admins write access 
group::rwx 
 group:Domain\040Admins:rwx 
 mask::rwx 
 other::r-x 
 default:user::rwx 
 default:group::r-x 
 default:group:Domain\040Admins:rwx 
 default:mask::rwx 
 default:other::r-x 



-- 

Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern 
Subject: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I 
do;-) 

I am setting up a OpenLdap PDC with file and print services on Ubuntu Jaunty. 
Jaunty ships with samba 3.3.2. I configured samba to just use the registry back 
in which I think is pretty cool! What happend when I use the Add print wizard 
to add my Windows XP drivers I get the famous unable to install driver access 
denied message. I can ssh into the box with my user id and create files in the 
/var/lib/samba/printers folder with no problem. I have gave the Domain Admins 
and root all privileges to manage the domain see bellow. 

r...@server01:/var/lib/samba/printers# net rpc rights list root 
Enter root's password: 
SeMachineAccountPrivilege 
SeTakeOwnershipPrivilege 
SeBackupPrivilege 
SeRestorePrivilege

Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do;-)

2009-07-02 Thread Glenn T. Arnold
I just made my print$ share settings to match my print drivers share which 
should work same and I still cannot create folders or files on the print$ 
share, but I can all day on the print drivers share. Would someone explain why 
this is happening? Here is my share settings. 

[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\print$] 
path=/var/lib/samba/printers 
comment=Printer Drivers 
read only=no 


[HKEY_LOCAL_MACHINE\SOFTWARE\Samba\smbconf\printer drivers] 
path=/var/lib/samba/printers 
read only=no 

Thanks 
-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 3:29:29 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

Harry, 

You did give me an idea though. For grins I just set rights to 0777 even on the 
extended acls and I still get access denied when trying to upload print 
drivers. Here is the updated rights on /var/lib/samba/printers. 

r...@server01:/var/lib/samba# getfacl printers/* 
# file: printers/COLOR 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/IA64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/showtrueconfig 
# owner: root 
# group: root 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 

# file: printers/W32ALPHA 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32MIPS 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32PPC 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/W32X86 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/WIN40 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

# file: printers/x64 
# owner: root 
# group: Domain\040Admins 
user::rwx 
group::rwx 
group:Domain\040Admins:rwx 
mask::rwx 
other::rwx 
default:user::rwx 
default:group::rwx 
default:group:Domain\040Admins:rwx 
default:mask::rwx 
default:other::rwx 

r...@server01:/var/lib/samba# 


-Glenn 

- Original Message - 
From: Harry Jede  walk2...@arcor.de  
To: samba@lists.samba.org 
Sent: Thursday , July 2, 2009 2:53:41 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Donnerstag, 2. Juli 2009 wrote Glenn T. Arnold: 
 Here is the rights on the /var/lib/samba/printers directory 
 
 r...@server01:/var/lib/samba# getfacl printers -R 
 # file: printers 
 # owner: root 
 # group: Domain\040Admins 
 user::rwx 
 group::r-x 
# grant Domain\040Admins write access 
group::rwx 
 group:Domain\040Admins:rwx 
 mask::rwx 
 other::r-x 
 default:user::rwx 
 default:group::r-x 
 default:group:Domain\040Admins:rwx 
 default:mask::rwx 
 default:other::r-x 



-- 

Harry Jede 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 2:49:27 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do;-) 

I found in the samba log for my machine the following error: 

[2009/07/02 13:13:34, 0] groupdb/mapping.c:pdb_create_builtin_alias(802) 
pdb_create_builtin_alias: Could not add group mapping entry for alias 545 
(NT_STATUS_GROUP_EXISTS) 

Any input on this would be appreciated! I researching this error now. 

-Glenn 

- Original Message - 
From: Glenn T. Arnold garn...@unrealsolutions.com 
To: samba samba@lists.samba.org 
Sent: Thursday, July 2, 2009 2:09:15 PM GMT -05:00 US/Canada Eastern 
Subject