I've got Samba 1/2 working, Please help with Printing

[swerdna]

I'm getting a bit confused. Here are some questions so we can see where you're at:

• "The one the first gentleman sent me didn't work" --- which one didn't work (link please)
• I think you have a windows xp guest running in vmware on the openSUSE printer server plus some other real windows workstations on the LAN -- is that right?
• I'm not familiar with the "RUNALLTIME protocol". Do you have a link so I can look at it.

[bobcal2000]

Don't be confused:

#1 - Here is the link that didn't work: "http://opensuse.swerdna.org/susesambaprint_1.html"

#2 - Yes that is correct!

#3 - "RUNALLTIME protocol" is a joke! You said:
"Finally, there are three or four sorts of printer server configurations. Are you trying to follow any particular protocol?"

What I mean is of the 3/4 configurations you know, the one I want is the one that "RUNs ALL the TIME" (works all the time)!

Let's try this an other way. Instead of troubleshooting something that may or not be working, let my tell you what I'm trying to do a you tell how to do it, or give me link to a doc that explains HowTo do it. I have two physical PCs, one is my wife's, one is mine.

My PC:
HP OfficeJet K80xi connected by USB
openSUSE 11.1 2.6 kernel HOST
VMware 6.5.3 for Linux
several MS Windows Guests
openSuse 11.1 Guest

Wife's PC
just a PC

Network connection between them

What I want:
1 - Share files on my HOST OS with all the VMware guests and my wife's PC
2 - Share the printer on my PC with the two physical PC OSs and all the VMware guests, so everyone can print
3 - Make my PC run fast
4 - Use simple, easy to configure methods to do this things
5 - document as I go to rebuild the system if it crashes
6 - Learn Linux!
7 - recompile my kernel without all the extra stuff

What I have:
1 - Everything in the list above except 2 and 7
2 - I'm not in a rush for 7, just 2
3 - I have setup CUPS using SWAT
4 adjusted my Samba and CUPS so many times, I don't know what I have

So that is my story, and I'm sticking to it!

Those are for the "RUNALLTIME protocol" hope you can laugh about that, I did!

[swerdna]

OK lets pick standard Samba sharing -- that should suit windows machines

I'll suggest changes to smb.conf and cupsd.conf so back them up before making changes, with these commands:

• sudo cp /etc/samba/smb.conf /etc/samba/smb.conf.backup
• sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.backup

If the file sharing is working, we better not disturb that.
So just take out of smb.conf the lines that are from left field:

disable spoolss = Yes
show add printer wizard = No
include = /etc/samba/dhcp.conf
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$
domain logons = No
domain master = No
wins support = Yes

Taking those out shouldn't change the file sharing. So do that then reboot and see if it's still OK.

Now this one might alter file sharing but it might also alter printing so make the change and then reboot and then see if sharing is still OK

take out this line from [global] stanza: security = share
and instead put it in the stanza for [sharedfiles]

So, is that all OK?

Then we need to consider fixed IP addressing for the server -- do you have a fixed IP on the openSUSE machine?

Got to attend to a client -- back later

[bobcal2000]

Okay: Here is the status report: Good Things: File Sharing still working; did more reading.

Bad things: printing is not working from openSUSE Host anymore, but it was not broken by what you told me to do. The reason I know this is because the Windows guests see the print queue as paused, I noticed that before but I didn't try printing from the Host.

Yes the Host was a static IP the guests are DHCPed, I could make them static if you think that's better. Let me know.

So Lets continue, here are the cupsd.conf and smb.conf: I have a question about one of the commands that are left, see below.

I think the printer sharing may be working because the Windows guests see the queue but it' not working because the printer is not working. Fix the printer, fix the printer sharing.




# Samba config file created using SWAT
# from UNKNOWN ()
# Date: 2009/09/23 21:41:18

[global]
workgroup = VMWWG
server string = Samba
name resolve order = bcast host lmhosts wins <--which are we using?
printing = cups
printcap name = cups
os level = 33
preferred master = Yes
ldap ssl = no <---- Remove? I'm not using LDAP, I'm I?
cups options = raw
use client driver = Yes

[sharedfiles]
comment = Files on VMware Host
path = /files/
read only = No
inherit acls = Yes
security = share

[printers]
comment = All Printers
path = /var/tmp
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No

****************************

LogLevel info
SystemGroup sys root
# Allow remote access
Port 631
Listen /var/run/cups/cups.sock
# Show shared local printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow @LOCAL
BrowseAddress @LOCAL
DefaultAuthType Basic
# Restrict access to the server...
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
#Allow From @LOCAL
Allow From 192.168.0.*
</Location>
<Location />
Allow 127.0.0.2
# Allow shared printing...
Order allow,deny
Allow @LOCAL
</Location>
<Location /admin>
Encryption Required
# Restrict access to the admin pages...
Order allow,deny
</Location>
<Location /admin/conf>
AuthType Default
Require user @SYSTEM
# Restrict access to the configuration files...
Order allow,deny
</Location>
<Policy default>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
<Limit CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
DefaultPolicy default
<Policy easy>
<Limit All>
Satisfy any
Order allow,deny
</Limit>
</Policy>
<Policy paranoid>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
<Limit All>
Require user @OWNER @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
</Policy>

[swerdna]

Bad things: printing is not working from openSUSE Host anymor

To be able to share a printer from a server, first the server must be able to print in the normal way, as a simple attached printer. So make sure you can log on from the keyboard, open a doc and print it as a normal user.

Yes the Host was a static IP the guests are DHCPed, I could make them static if you think that's better. Let me know.

Not necessary.

I have a question about one of the commands that are left, see below

What's the question?

For the smb.conf:
add this line in [global]: printcap cache time = 750
add this line in [global]: load printers = yes
remove this line from [global]: ldap ssl = no (well spotted)

For the cupsd.conf. I don't want to read the whole of your cupsd.conf and check it line by line. Instead, use this command to back it up:

sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf/backup_2

And then open the old file for editing in a superuser text editor with one of these commands:

• gnome use: gnomesu gedit /etc/cups/cupsd.conf
• or kde use: kdesu kwrite /etc/cups/cupsd.conf

Then copy the complete text from below and paste it over the top of the text in the edited version, replacing it completely:

#
# "$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $"
#
# Sample configuration file for the Common UNIX Printing System (CUPS)
# scheduler. See "man cupsd.conf" for a complete description of this
# file.
#

# Log general information in error_log - change "info" to "debug" for
# troubleshooting...
LogLevel info

# Administrator user group...
SystemGroup sys root

# Only listen for connections from the local machine.
# Listen localhost:631
# Listen /var/run/cups/cups.sock
port 631

# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow @local

# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Restrict access to the server...
<Location />
Order deny,allow
deny from all
Allow From 127.0.0.1
Allow From 127.0.0.2
Allow from 192.168.0.*
</Location>

# Restrict access to the admin pages...
<Location /admin>
Encryption Required
Order allow,deny
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
AuthType Default
Require user @SYSTEM
Order allow,deny
</Location>

# Set the default printer/job policies...
<Policy default>
# Job-related operations must be done by the owner or an administrator...
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>

# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>

# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

<Limit All>
Order deny,allow
</Limit>
</Policy>

DefaultPolicy default

# easy is a very relaxed policy
<Policy easy>
# Job-related operations must be done by the owner or an administrator...
<Limit All>
Satisfy any
Order allow,deny
</Limit>
</Policy>

# paranoid is a very restricted policy
<Policy paranoid>
# Job-related operations must be done by the owner
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

<Limit All>
Require user @OWNER @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
</Policy>

#
# End of "$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $".
#

Then save and reboot the computer.

Regarding any remote client: it must have the printer driver/s installed.

[bobcal2000]

I made all these changes and still no printing from the Host.

In CUPS Admin "Printers" tab the my printer looks good:

hpofficejetk80xi (Default Printer)
Description: HP OfficeJet K80xi with driver HP Officejet k80xi Foomatic/hpijs, hpijs 2.8.7.3
Location: Office
Printer Driver: HP OfficeJet K80xi - CUPS+Gutenprint v5.0.2
Printer State: idle, accepting jobs, published.
Device URI: smb://192.168.0.10/hpofficejetk80xi

A few days ago, I moved (tried to move) the spooler directory. That is probably the problem. But I forgot were I messed with it.

I can not find were the spooler queue is defined???


I gave all the machines static IPs and added all the machines IPs and Host names into the lmhost files on all the other machines.
Can we change this line in the smb.conf?: to just read lmhost
name resolve order = bcast host lmhosts wins

[swerdna]

Edit the line to become this:

name resolve order = lmhosts bcast host wins

Regarding the broken cups on the host: I have no expertise in fixing randomized cups configurations. I would maybe uninstall the cups rpm and delete the /etc/cups directory then reinstall cups. But defo it would be wise first to ask what to do in a new thread in an appropriate forum (e.g. Applications) to get that fixed.

[swerdna]

I noticed this: Device URI: smb://192.168.0.10/hpofficejetk80xi
Is that on the server or somewhere else? And where is the username and password? And the workgroup should be in there too?

[bobcal2000]

Should I use root?

[swerdna]

Originally Posted by bobcal2000

Should I use root?

I don't understand this question. Use root to what?

and

Please answer this question:

I noticed this: Device URI: smb://192.168.0.10/hpofficejetk80xi
Is that on the server or somewhere else?