Printing Issue: insecure file permissions

English Network/Internet
#1

started setup of HP LaserJet 1020 connected to a windows printer server as described in

Printer Sharing: Windows Print Server for Suse/openSUSE Linux Clients [Samba and LPD]

attempted to add printer in localhost:631, put in profile name & password (root), clicked ok…

response: forbidden (aw microsoft’d)

went to yast>printers>print via network>connection wizard>windows(R) or Samba (SMB/CIFS)

plugged in static ip address, share printer name, workgroup, selected HP, clicked ok,
chose the fooz printer driver for the 1020, clicked ok, printed a single test page. no joy.

error log showed:

[Job 1] Session setup failed: NT_STATUS_NO_SUCH_FILE
[Job 1] Session setup failed: NT_STATUS_LOGON_FAILURE
[Job 1] Tree connect failed (NT_STATUS_BAD_NETWORK_NAME)
[Job 1] Unable to connect to CIFS host, will retry in 60 seconds…

okay, so then deleted printer profile, created a new one same as before but with User, Password, and
checked Support for Active Directory, same HP, same driver, print test page and again no joy.

error log showed:

Unable to execute /usr/lib/cups/backend/smb: insecure file permissions (0104750)
[Job 2] Stopping job because the sheduler could not execute the backend.

Sooooooo the back end or scheduler or baseball/cricket bat?

#2

In a post at TurboPrint & PrintFab • View topic - OpenSuse 11.4 with Canon Pixma MP830

They said that

The file /usr/lib/cups/backend/smb must be owned by root and must not be writeable by group or others.
The following terminal commands should fix the problem:

sudo chown root /usr/lib/cups/backend/smb
sudo chmod 755 /usr/lib/cups/backend/smb

So, since I seem to be having trouble…I guess I will give that a shot.

#3

In a post at TurboPrint & PrintFab • View topic - OpenSuse 11.4 with Canon Pixma MP830

They said that

The file /usr/lib/cups/backend/smb must be owned by root and must not be writeable by group or others.
The following terminal commands should fix the problem:

sudo chown root /usr/lib/cups/backend/smb
sudo chmod 755 /usr/lib/cups/backend/smb

So, since I seem to be having trouble…I guess I will give that a shot.

#4

now were getting somewhere. don’t know where as all the Admin are staying firmly lurker…

The following messages were recorded from 20:54:50 to 20:54:53
envp[4]=“CUPS_REQUESTROOT=/var/spool/cups”
envp[5]=“CUPS_SERVERBIN=/usr/lib/cups”
envp[6]=“CUPS_SERVERROOT=/etc/cups”
envp[7]=“CUPS_STATEDIR=/var/run/cups”
envp[8]=“HOME=/var/spool/cups/tmp”
envp[9]=“PATH=/usr/lib/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin”
envp[10]=“SERVER_ADMIN=root@charles”
envp[11]=“SOFTWARE=CUPS/1.4.6”
envp[12]=“TMPDIR=/var/spool/cups/tmp”
envp[13]=“USER=root”
envp[14]=“CUPS_SERVER=/var/run/cups/cups.sock”
envp[15]=“CUPS_ENCRYPTION=IfRequested”
envp[16]=“IPP_PORT=631”
envp[17]=“CHARSET=utf-8”
envp[18]=“LANG=en.UTF-8”
envp[19]=“PPD=/etc/cups/ppd/hp.ppd”
envp[20]=“RIP_MAX_CACHE=128m”
envp[21]=“CONTENT_TYPE=application/postscript”
envp[22]=“DEVICE_URI=smb://server/192.168.18.2/hplj1020”
envp[23]=“PRINTER_INFO=HP LaserJet 1020 Foomatic/foo2zjs-z1 (recommended)”
envp[24]=“PRINTER_LOCATION=”
envp[25]=“PRINTER=hp”
envp[26]=“CUPS_FILETYPE=document”
envp[27]=“FINAL_CONTENT_TYPE=printer/hp”
Started filter /usr/lib/cups/filter/pstops (PID 2097)
Started filter /usr/lib/cups/filter/foomatic-rip (PID 2098)
Started backend /usr/lib/cups/backend/smb (PID 2099)
Page = 612x792; 11,11 to 601,781
slow_collate=0, slow_duplex=0, slow_order=0
Before copy_comments - %!PS-Adobe-3.0
%!PS-Adobe-3.0
%%BoundingBox: 0 0 612 792
%%Pages: 1
%%LanguageLevel: 1
%%DocumentData: Clean7Bit
%%DocumentSuppliedResources: procset testprint/1.3
%%DocumentNeededResources: font Helvetica Helvetica-Bold Times-Roman
%%Creator: Michael Sweet, Apple Inc. - adapted by openSUSE/Novell
%%CreationDate: D:20090113092400+0800
%%Title: Test Page
%%EndComments
Before copy_prolog - %%BeginProlog
Before copy_setup - %%Page: 1 1
Before page loop - %%Page: 1 1
Copying page 1…
pagew = 589.3, pagel = 769.3
bboxx = 0, bboxy = 0, bboxw = 612, bboxl = 792
PageLeft = 11.3, PageRight = 600.7
PageTop = 780.7, PageBottom = 11.3
PageWidth = 612.0, PageLength = 792.0
Wrote 1 pages…
Getting input from file
foomatic-rip version 4.0.6.230 running…
Parsing PPD file …
Added option PageSize
Added option Quality
Added option Resolution
Added option ImageableArea
Added option PaperDimension
Added option InputSlot
Added option MediaType
Added option Density
Added option Copies
Added option halftone
Added option NupOrient
Added option NupPages
Added option Font

Parameter Summary

Spooler: cups
Printer: hp
Shell: /bin/bash
PPD file: /etc/cups/ppd/hp.ppd
ATTR file:
Printer model: HP LaserJet 1020 Foomatic/foo2zjs-z1 (recommended)
Job title: YaST2testprint_hp
File(s) to be printed:
<STDIN>

Ghostscript extra search path (‘GS_LIB’): /usr/share/cups/fonts
Printing system options:
Pondering option ‘finishings=3’
Unknown option finishings=3.
Pondering option ‘number-up=1’
Unknown option number-up=1.
Pondering option ‘page-label=hp:YaST2testprint@charles’
Unknown option page-label=hp:YaST2testprint@charles.
Pondering option ‘job-uuid=urn:uuid:0868aa41-6ee5-348d-6f48-9f5c13e47191’
Unknown option job-uuid=urn:uuid:0868aa41-6ee5-348d-6f48-9f5c13e47191.
Pondering option ‘job-originating-host-name=localhost’
Unknown option job-originating-host-name=localhost.
Pondering option ‘time-at-creation=1310648090’
Unknown option time-at-creation=1310648090.
Pondering option ‘time-at-processing=1310648090’
Unknown option time-at-processing=1310648090.
Pondering option ‘AP_D_InputSlot=’
Unknown option AP_D_InputSlot=.
Options from the PPD file:

================================================

File: <STDIN>

================================================

Filetype: PostScript
Reading PostScript input …
→ This document is DSC-conforming!
Found %RBINumCopies: 1

Found: %%BeginProlog
Found: %%EndProlog

Found: %%BeginSetup
Found: %%BeginFeature: *Quality normal
Option: Quality=normal
Setting option
Found: %% FoomaticRIPOptionSetting: Quality=normal
Option: Quality=normal
Setting option
Found: %%BeginFeature: *halftone default
Option: halftone=default
Setting option
Found: %% FoomaticRIPOptionSetting: halftone=default
Option: halftone=default
Setting option
Found: %%BeginFeature: *Resolution 1200x600dpi
Option: Resolution=1200x600dpi
Setting option
Found: %% FoomaticRIPOptionSetting: Resolution=1200x600dpi
Option: Resolution=1200x600dpi
Setting option
Found: %%BeginFeature: *PageSize Letter
Option: PageSize=Letter
Setting option
Found: %% FoomaticRIPOptionSetting: PageSize=Letter
Option: PageSize=Letter
Setting option
Found: %%BeginFeature: *Density Density3
Option: Density=Density3
Setting option
Found: %% FoomaticRIPOptionSetting: Density=Density3
Option: Density=Density3
Setting option
Found: %%BeginFeature: *MediaType Standard
Option: MediaType=Standard
Setting option
Found: %% FoomaticRIPOptionSetting: MediaType=Standard
Option: MediaType=Standard
Setting option
Found: %%BeginFeature: *NupOrient port
Option: NupOrient=port
Setting option
Found: %% FoomaticRIPOptionSetting: NupOrient=port
Option: NupOrient=port
Setting option
Found: %%BeginFeature: *NupPages 1up
Option: NupPages=1up
Setting option
Found: %% FoomaticRIPOptionSetting: NupPages=1up
Option: NupPages=1up
Setting option
Found: %%BeginFeature: *Copies 1
Option: Copies=1
Setting option
Found: %% FoomaticRIPOptionSetting: Copies=1
Option: Copies=1
Setting option
Found: %%EndSetup
Inserting PostScript code for CUPS’ page accounting

New page: %%Page: 1 1

Found: %%BeginPageSetup
Inserting option code into “PageSetup” section.
Flushing FIFO.

Starting renderer with command: "foo2zjs-wrapper -z1 -P -L0 -r1200x600 -p1 -T3 -m1 -s7 -n1 "
Starting process “kid3” (generation 1)

Closing renderer
Starting process “kid4” (generation 2)
Starting process “renderer” (generation 2)
JCL: e%-12345X@PJL
<job data>

PAGE: 1 1
renderer exited with status 0
kid4 received signal 13
kid3 finished
kid3 exited with status 0

Closing foomatic-rip.
Backend returned status 1 (failed)
Printer stopped due to backend errors; please consult the error_log file for details.
End of messages
printer-state=5(stopped)
printer-state-message="/usr/lib/cups/backend/smb failed"
printer-state-reasons=paused

Any recommendations???

#5

Not sure what you’re trying to achieve (and I suspect others are too). Is it a problem with your samba server itself, or possibly your windows printer sharing configuration? What version of Windows is used on the machine connected to the printer?

#6

I just yesterday tossed out my HPlJ-1020 (in favour of a new canon LBP6000, on super special due to post GFC retailing). But prior to that I had it working fine from an openSUSE Tumbleweed client to an openSUSE 11.1 server, set up as described in the tute you referenced in post #1. That’s not much help to you because you have (I think) an 11.4 server.

But I can’t see what’s going wrong from the data you present – it’s too complicated for me. sad. (except, have you got the printer in state “pause”? look on localhost :631).

Good luck.

BTW, maybe run this command and post here: cat /etc/samba/smb.conf

#7

opensuse 11.4 client in a POS,
the printer server is Windows Server 2003,
with TCP/IP Print Server, NetBios Helper, Telnet, Username Mapping, File Server for Mac, Kerberos Key Dist Center, TCP/IP network connection server, and Apple Talk started & automatic.

localhost:631 - not paused and not printing

charles:~ # cat /etc/samba/smb.conf

smb.conf is the main Samba configuration file. You find a full commented

version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the

samba-doc package is installed.

Date: 2011-03-01

[global]
workgroup = server
netbiosname = charles
passdb backend = tdbsam
printcap name = cups
cups options = raw
map to guest = Bad User
include = /etc/samba/dhcp.conf
#logon path = \%L\profiles.msprofile
#logon home = \%L%U.9xprofile
#logon drive = P:
local master = Yes
os level = 33
name resolve order = bast host lmhost wins
usershare allow guests = Yes

[homes]
comment = Home Directories
valid users = %S, %D%w%S
browseable = No
read only = No
inherit acls = Yes

[profiles]
comment = Network Profiles Service
path = %H
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700

[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/

[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes

[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775

[SHARE]
path = /home/charles/share/
guest ok = yes
read only = no
charles:~ #

#8

I don’t understand windows server 2003, but I do know it restricts sharing of resources (like printers) tightly when compared to the “workgroup” network. You are set up (nicely) for a “workgroup”. So, maybe you have to tell server 2003 to share the printer to the world, unfettered. But as I said, I don’t do server 2003.

Another thing you could think about: if you attach the printer to the client (briefly) and it doesn’t print, that tells you something (about the client). And if it does print when attached, that also tells you something (about the networking).

#9

I’m not familiar with MS Server connectivity either, but maybe this will be applicable

[Solved] Unable to print - Printers - Computer-Peripherals](http://www.tomshardware.com/forum/56518-3-unable-print)

#10

This MS guide mentions

On any Windows Server 2003 family product, the printer is shared by default when you add the printer

so all should be ok from that perspective. There is an additional step involved for Linux OS client connectivity:

On the Sharing tab, click Share this printer, and then type a name for the shared printer.

If you share the printer with users on different hardware or different operating systems, click Additional Drivers. Click the environment and operating system for the other computers, and then click OK to install the additional drivers.

Another test for smb connectivity with your server:

smbclient -L <servername> -U <username>

If you can pass the correct credentials, then the available shares should be listed. Otherwise, authentication may be your issue here… just a guess (with my limited knowledge here).

#11

Well, I appreciate you suggesting I look over the server for the drivers, again. The Windows 2003 already had the additional drivers. But it gave me a chance to look things over.

One minor little point that the guy I hired as in-house tech, web developer, server admin guy forgot to mention to me was that he changed the printer name.

When he heard “WHO THE HELL CHANGED THE NAME OF THE PRINTER” I turned just in time to see him run for the stairs.>:)

thanks guys…works fine now…

#12 
One minor little point that the guy I hired as in-house tech, web developer, server admin guy forgot to mention to me was that he changed the printer name.

When he heard "WHO THE HELL CHANGED THE NAME OF THE PRINTER" I turned just in time to see him run for the stairs.

thanks guys......works fine now...

LOL. Yes, it did look like a server-side issue. Thanks for the update.