ppr-list-digest volume 5, number 35, message 2

Note: please don't spam any of the e-mail addresses which you see here. Follow this link if you want some addresses to misuse.


From: Kenneth Tindle <ktindle@uky.edu>
Date: Wed, 11 Jun 2003 15:05:24 -0400
Subject: Re: PPR: queue management not working

At 02:03 PM 6/11/2003 +0200, you wrote:
>Hi,
>I use samba 2.2.7a
>ppr 1.50a under linux MDK 9.0
>
>I've got a problem: The users can't see (and also manage)  their jobs in 
>server printer queues from Pc under windows2K.

Two things:

Samba 2.2.7a has a known serious security hole.  Get thee to 2.2.8a at
once!

Second, Samba now, in the later versions of the 2.2 series, has support
for MS-RPC.  By default, Samba grants only permissions needed to put
jobs into a queue, without any management permissions.

You have to log in to the Samba server from a Win2K box as the admin
for that server.  Select the network printer you want to manage in an
Explorer view, right-click, and choose the Security tab.  Grant the
Everyone group more permissions.

Note that admin on the Samba server is NOT the local "Administrator"
account on the Win2K box.  Normally, this will be "root", whose password
is stored in /etc/samba/smbpasswd.  NOT the "root" account used to
manage the Linux box itself, which really should have a separate
password.

The newest Samba docs talk about MS-RPC vs. local ACL printers.  A
recommended read.  I'm unsure how up to date PPR 1.50 is vis-a-vis
MS-RPC.