Samba Printing - "Access Denied, Unable to Connect"

Hello,
I have a OpenSUSE 10.3 Server setup with Samba (file\printer shares) using CUPS. Clients in use are XP Pro and Vista Ultimate. I can print to my HP Laserjet 1012 on both XP and Vista but next to the printer icon I see a message “Access Denied, Unable to Connect.”. I can get it to show open then ready using the “use client driver = yes” but I receive an error in the log about spoolss and something related to NT error. Later tonight I can post the complete error from my log to the forum. I can also post my smb file and my cupsd file if that helps. I was curious how many people see that access denied but can still print or how many do not see this and experience no errors in there log files.

thanks for any help :wink:

I found the error in the log online

rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to MACHINE
owner-PC. Error was NT_STATUS_ACCESS_DENIED

thanks

Sounds like a bit of a red herring if you get the print jobs to work; but even so it must be annoying. Yes let’s have a look at the smb.comf and the cupsd.conf just to check.

interesting part is when I first logged in today it say “Ready” I was excited. I had to print something out and now it is back to the old way. I am going to view the log file now and post my two config files. One thing I would love to know is if I can slim down my CUPS config so I do not see all the junk that is commented out and disabled. I know you can do that in Samba :slight_smile: thanks

First is my smb.conf

[global]
server string = Sambanet
log level = 1
log file = /var/log/samba/SMBnet.log
max log size = 100
socket options = IPTOS_LOWDELAY TCP_NODELAY
hosts allow = 127.0.0.1 192.168.1.*
printing = cups
load printers = yes
printcap name = /etc/cups/printcap
preferred master = no
domain master = yes
wins support = yes
ldap ssl = no
read only = no
smb ports = 139

[SMBNET-D]
comment = Net Share
path = /windows/D

[SMBNET-E]
comment = Net Share
path = /windows/E

[SMBNET-F]
comment = Net Share
path = /windows/F

[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
browseable = yes
public = yes
create mode = 0700

Any recommened changes I am open to. This is a local gigabit network for file sharing and printer sharing only

thanks

sorry since it is too big I needed to put it on an uploader. This is why I want to strip it back it is painful to read.

http://www.mediafire.com/?4t9j8admlnj

thanks

Okay I did more researching today at work :stuck_out_tongue: and found a line to add that talked about spoolss. I still have no idea what that error is and what spoolss is but I think I resolve it :):slight_smile: (knock on wood) PLEASE let this be it LOL
Anyway so far in my testing this is what I’ve been using and it says ready even after printing.

[global]
server string = Sambanet
log level = 1
log file = /var/log/samba/SMBnet.log
max log size = 100
socket options = IPTOS_LOWDELAY TCP_NODELAY
hosts allow = 127.0.0.1 192.168.1.*
printing = cups
load printers = yes
printcap name = /etc/cups/printcap
disable spoolss = yes
preferred master = no
domain master = yes
wins support = yes
ldap ssl = no
read only = no
smb ports = 139

[SMBNET-D]
comment = Net Share
path = /windows/D

[SMBNET-E]
comment = Net Share
path = /windows/E

[SMBNET-F]
comment = Net Share
path = /windows/F

[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
guest ok = yes
use client driver = yes
browseable = no

If you see any recommended changes (besides printing LOL) let me know
Also my question about trimming down the cupsd file so at least I can read it and troubleshoot it.

thanks

Since you have a Linux print server that works I’d seriously recommend making backups of smb.conf and cupsd.conf before altering them. Then you can restore to how it was.

First
Suggest you make the log level to 0

Second
Here are your printing functions in [global]:
printing = cups
load printers = yes
printcap name = /etc/cups/printcap

Suggest you change them to these:
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
load printers = yes
use client driver = yes

Third
Suggest change this:
[Printers]
comment = Net Printers
printable = yes
path = /windows/E/spool
guest ok = yes
use client driver = yes
browseable = no

to this:
[printers]
comment = Net Printers
path = /var/tmp
printable = Yes
create mask = 0700
browseable = No
guest ok = Yes

Fourth:
Install the drivers in the windows machines so they can “use client driver”

Fifth
Regarding cupsd.conf:
you need these lines:
Browsing On
BrowseOrder allow,deny
BrowseAllow @LOCAL

and this set:
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
#Allow From @LOCAL
Allow From 192.168.1.*
</Location>

I’m going top leave it to you to hunt through your long cupsd.conf.

But if you want those incorporated into the default/original cupsd.conf for Suse 10.2 and set aside the long one that you seem to have generated, I have a new one here (change the 192.168.2 to your 192.168.1):
http://www.swerdna.net.au/printsamba/cupsd.102.txt

Don’t forget to keep copies of the current setup.

thanks friend, I just made a backup just before I logged into the forum. I’m going to test your setttings and let you know my results. Can I ask why these settings? Only curious I always like to know why I am doing something. Also do you have suggestions overall with my smb.conf, like my sock option and so on.

thanks I shall begin testing

okay everything is still fine but I had to add this in to dump off that error :slight_smile: disable spoolss = yes
without that I receive the error in the log and I never receive a log info for the print job, with disable spoolss = yes I see the printer access and so on. Still do not understand the error and why this resolve the error.

[2008/12/19 13:49:26, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine XP-QUAD. Error was NT_STATUS_ACCESS_DENIED
[2008/12/19 13:49:27, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2227)
cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine XP-QUAD. Error was NT_STATUS_ACCESS_DENIED

Still love to know about the changes and to why. Also I would like to know why I can login to my CUPS management page but I can’t view the printer. Before I could, am I missing something?

thanks again

always like to know why I am doing something.

I recommended those things because they work for me. Figured them out so long ago and recorded them for reference. Can’t remember the nitty gritty any more and don’t want to spend the time to get it fresh in my mind. So it will have to remain a bit of a puzzle (to us both).

okay everything is still fine but I had to add this in to dump off that error disable spoolss = yes
without that I receive the error in the log and I never receive a log info for the print job, with disable spoolss = yes I see the printer access and so on. Still do not understand the error and why this resolve the error.

I’ve not encountered this parameter before. And I’ve always operated with the default log level. So that’s a bit of a mystery to me too. I have seen via Google that you can get worrying log messages that are not actually a worry. And you do have a weird [global] in smb.conf. For example do you really mean to have a “wins server” installed?

An afterthought: this is the default, you don’t have to put it in: TCP_NODELAY.
The general recommendation is to leave the socket options to the defaults set by the devs. There is a hangover of using socket options from Debian (and therefore also from Xbuntu), but I really don’t know why because the choices there are the defaults AFAICS. Maybe that’s where you got the wins server thing too (Deb/Ubuntu)?

thanks for the answer to both. Not sure why I see the error and it’s no big deal either way I am using your settings (thanks) and that one spoolss so I can’t see the error LOL. Since it works with that setting I will leave it.

Well I figured it was good to use the Wins server no? Since I have the machine set to master browser I figured I needed that set as well. Mostly my configs come from google and a older book I have. I am open to removing un needed overhead and senseless things.

So do you think I should remove that line for TCP completely and let it do the default settings? I changed that cause it was recommended for a local network but if you feel it is doing nothing for me I will remove it. Everything is for the best performance anyway.

Also about the CUPS managment page do you know why I can’t view that anymore? I can see the page but I can’t view my printer.

thanks

A wins server is a fine thing. I just seldom see them in openSUSE. Stay with it (particularly if it’s working).

So do you think I should remove that line for TCP completely and let it do the default settings? I changed that cause it was recommended for a local network but if you feel it is doing nothing for me I will remove it. Everything is for the best performance anyway.

It should make no difference at all. Try commenting it out and see if it does make a difference.

Also about the CUPS managment page do you know why I can’t view that anymore? I can see the page but I can’t view my printer.

thanks

I assume you’re looking on the address: http://localhost:631
If you can’t see the printer on that add a user to the cups admin database like this in a console:
sudo lppasswd -a username
or the root user if the cupsd.conf is configured to refuse the above:
sudo lppasswd -g sys -a root

I am not trying to access it form the server, only from my Vista machine. Would that make a difference?

I will try the command and try removing the socket option
thanks

interesting when trying to add a user account or root I get access denied… wonder why

come to find out this is an issue with SUSE 11.0 I think I told you I was using 10.3 but I think my DVD is label wrong… sorry about that. So there is an issue using that command

Cups lppasswd problems in 11.0 - openSUSE Forums

oh and I am also sorry I had a cached page I cannot view the http://localhost:631 page at all

I haven’t added a printer to openSUSE 11.1 yet (first 24 hours). I’ll get back when I have.

I am questioning these configs because in my oringinal config I would see the printer and queues. I would also print a test page but I don’t recall if I could admin it. I just liked the ability as a troubleshooting too to print from the web interface.

these lines Require user @

I tried the AuthType Basic to AuthType None but that didn’t change a thing. Changing it to Default I couldn’t do.

Oh and thanks for all the help

OK I just installed a printer in 11.1 via the CUPS GUi at localhost:632 and at the end of the install (using “add printer”) I was asked for a username and password for which I simply used my linux root credentials.

Now I’ll share the printer over Samba and see whether the procedure/config has changed (apart from no use of lppasswd) from the one outlined in this tutorial, which was current up to and including 11.0:
Printer Sharing: Samba Print Server for Suse/openSUSE 10.x Linux & Windows Clients