Samba Printing - "Access Denied, Unable to Connect"

[sullysnet]

Hello,
I have a OpenSUSE 10.3 Server setup with Samba (file\printer shares) using CUPS. Clients in use are XP Pro and Vista Ultimate. I can print to my HP Laserjet 1012 on both XP and Vista but next to the printer icon I see a message "Access Denied, Unable to Connect.". I can get it to show open then ready using the "use client driver = yes" but I receive an error in the log about spoolss and something related to NT error. Later tonight I can post the complete error from my log to the forum. I can also post my smb file and my cupsd file if that helps. I was curious how many people see that access denied but can still print or how many do not see this and experience no errors in there log files.

thanks for any help

[sullysnet]

I found the error in the log online

rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to MACHINE
owner-PC. Error was NT_STATUS_ACCESS_DENIED

thanks

[swerdna]

Sounds like a bit of a red herring if you get the print jobs to work; but even so it must be annoying. Yes let's have a look at the smb.comf and the cupsd.conf just to check.

[sullysnet]

interesting part is when I first logged in today it say "Ready" I was excited. I had to print something out and now it is back to the old way. I am going to view the log file now and post my two config files. One thing I would love to know is if I can slim down my CUPS config so I do not see all the junk that is commented out and disabled. I know you can do that in Samba thanks

[sullysnet]

First is my smb.conf


[global]
server string = Sambanet
log level = 1
log file = /var/log/samba/SMBnet.log
max log size = 100
socket options = IPTOS_LOWDELAY TCP_NODELAY
hosts allow = 127.0.0.1 192.168.1.*
printing = cups
load printers = yes
printcap name = /etc/cups/printcap
preferred master = no
domain master = yes
wins support = yes
ldap ssl = no
read only = no
smb ports = 139



[SMBNET-D]
comment = Net Share
path = /windows/D

[SMBNET-E]
comment = Net Share
path = /windows/E

[SMBNET-F]
comment = Net Share
path = /windows/F

[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
browseable = yes
public = yes
create mode = 0700


Any recommened changes I am open to. This is a local gigabit network for file sharing and printer sharing only

thanks

[sullysnet]

sorry since it is too big I needed to put it on an uploader. This is why I want to strip it back it is painful to read.

http://www.mediafire.com/?4t9j8admlnj

thanks

[sullysnet]

Okay I did more researching today at work and found a line to add that talked about spoolss. I still have no idea what that error is and what spoolss is but I think I resolve it (knock on wood) PLEASE let this be it LOL
Anyway so far in my testing this is what I've been using and it says ready even after printing.


[global]
server string = Sambanet
log level = 1
log file = /var/log/samba/SMBnet.log
max log size = 100
socket options = IPTOS_LOWDELAY TCP_NODELAY
hosts allow = 127.0.0.1 192.168.1.*
printing = cups
load printers = yes
printcap name = /etc/cups/printcap
disable spoolss = yes
preferred master = no
domain master = yes
wins support = yes
ldap ssl = no
read only = no
smb ports = 139



[SMBNET-D]
comment = Net Share
path = /windows/D

[SMBNET-E]
comment = Net Share
path = /windows/E

[SMBNET-F]
comment = Net Share
path = /windows/F

[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
guest ok = yes
use client driver = yes
browseable = no

If you see any recommended changes (besides printing LOL) let me know
Also my question about trimming down the cupsd file so at least I can read it and troubleshoot it.

thanks

[swerdna]

Since you have a Linux print server that works I'd seriously recommend making backups of smb.conf and cupsd.conf before altering them. Then you can restore to how it was.

First
Suggest you make the log level to 0

Second
Here are your printing functions in [global]:
printing = cups
load printers = yes
printcap name = /etc/cups/printcap

Suggest you change them to these:
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
load printers = yes
use client driver = yes

Third
Suggest change this:
[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
guest ok = yes
use client driver = yes
browseable = no

to this:
[printers]
comment = Net Printers
path = /var/tmp
printable = Yes
create mask = 0700
browseable = No
guest ok = Yes

Fourth:
Install the drivers in the windows machines so they can "use client driver"

Fifth
Regarding cupsd.conf:
you need these lines:
Browsing On
BrowseOrder allow,deny
BrowseAllow @LOCAL

and this set:
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
#Allow From @LOCAL
Allow From 192.168.1.*
</Location>

I'm going top leave it to you to hunt through your long cupsd.conf.

But if you want those incorporated into the default/original cupsd.conf for Suse 10.2 and set aside the long one that you seem to have generated, I have a new one here (change the 192.168.2 to your 192.168.1):
http://www.swerdna.net.au/printsamba/cupsd.102.txt

Don't forget to keep copies of the current setup.

[sullysnet]

thanks friend, I just made a backup just before I logged into the forum. I'm going to test your setttings and let you know my results. Can I ask why these settings? Only curious I always like to know why I am doing something. Also do you have suggestions overall with my smb.conf, like my sock option and so on.

thanks I shall begin testing

[sullysnet]

okay everything is still fine but I had to add this in to dump off that error disable spoolss = yes
without that I receive the error in the log and I never receive a log info for the print job, with disable spoolss = yes I see the printer access and so on. Still do not understand the error and why this resolve the error.

[2008/12/19 13:49:26, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine XP-QUAD. Error was NT_STATUS_ACCESS_DENIED
[2008/12/19 13:49:27, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine XP-QUAD. Error was NT_STATUS_ACCESS_DENIED


Still love to know about the changes and to why. Also I would like to know why I can login to my CUPS management page but I can't view the printer. Before I could, am I missing something?

thanks again