Date: Mon, 29 Aug 2005 17:04:39 -0700 From: Graham North <northg@shaw.ca> To: K Anderson <freebsduser@comcast.net> Cc: questions freebsd <freebsd-questions@freebsd.org> Subject: Re: Security level problem with Samba Apsfilter print server Message-ID: <4313A297.4010407@shaw.ca> In-Reply-To: <006501c5acf0$8228fd20$3264a8c0@opteron> References: <43139283.4010407@shaw.ca> <006501c5acf0$8228fd20$3264a8c0@opteron>
next in thread | previous in thread | raw e-mail | index | archive | help
--=======AVGMAIL-4313A29818A2======= Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Thank you for these suggestions - I may try them but to be honest think that the problem lies elsewhere. I did have this working fine more than a year ago but then changed computers, removed the printserver function and am only now coming back to re-install as a printserver (old smb.conf lost of course!) Does not FreeBSD allow a "guest" logon for printers and put into "nobody" user group, or something of that ilk. It seems to me that was what it did before. On another note, this was working perfectly with CUPS about 2 weeks ago - well almost, it actually didn't print localhost ascii files very well, they needed switches for manually shifting the margins. My solution was to create an alias for the lpr command which blew everything apart so that the lpd refused to load - finally I blew it all away and loaded apsfilter again. (that took a couple of tries too, because CUPS leaves behind a few boogeymen gotchas). Print server guest accounts anyoneone? Graham/ K Anderson wrote: >----- Original Message ----- >From: "Graham North" <northg@shaw.ca> >To: "questions freebsd" <freebsd-questions@freebsd.org> >Sent: Monday, August 29, 2005 3:56 PM >Subject: Security level problem with Samba Apsfilter print server > > > > >>Recently I tried using Samba to print from the WinXP box to a FreeBSD >>webserver which has been using Samba 2.2.12 successfully to share >>folders to WinXP. >> >>It works - sort of. Problem is Samba keeps applying user level security >>to printer access. I thought that I could change security to "share" >>in the [printers} definition but that does not seem to work. Probably a >>doddle to fix for you pros..! >> >>I was able to connect printer to FBSD box, and install it as a printer >>in WinXP, however if I shutdown WinXP then the next time I boot WinXP my >>printer is inaccessible until I "login" to my FBSD file shares using a >>user id. There are lots of settings which I have tried which are >>currently commented out as they did not seem to be effective. Help with >>this would be greatly appreciated as I do not want to have to "login" to >>my webserver every time I need to print from Windows. >> >> >My guess is that your XP user name and password are different from your >FreeBSD user name and password. You can try a couple of things: On your XP >computer create a user account that matchs your FreeBSD account and login >information and see if it pesters for the password and name; the other is >create an account on your FreeBSD computer to match your XP user name and >password and see what happens. > > > >>Here is my smb.conf: (sorry the [printers] is at bottom) >>#======================= Global Settings >>===================================== >>[global] >> printing = BSD >> workgroup = DELNORTE >> encrypt passwords = yes >> server string = soleado server >> hosts allow = 127.0.0.1 192.168.0.100 192.168.0.101 192.168.0.102 >>192.168.0.103 >> printcap = /etc/printcap >> load printers = yes >> log file = /var/log/log.%m >> >> max log size = 50 >> security = user >> socket options = TCP_NODELAY >> >> wins support = no >> >>#============================ Share Definitions >>============================== >>[gn] >> comment = Soleado WebServer >> path = /home/gn >> browseable = yes >> writeable = yes >> read only = no >> >>[configs] >> comment = Soleado Configs >> path = /home/soleado_configs >> browseable = yes >> writeable = yes >> read only = no >> >>[wqs] >> comment = WQS WebServer >> path = /home/wqs >> browseable = yes >> writeable = yes >> read only = no >> >># NOTE: If you have a BSD-style print system there is no need to >>#20060826 Opened up printer section again. >>[printers] >> comment = All Printers >> path = /var/spool/lpd >># print command = /usr/bin/lpr -P%p -r %s >> public = yes >> browseable = no >># security = share >># set client driver use to no >> use client driver = yes >># Set public = yes to allow user 'guest account' to print >> guest ok = yes >># guest account = nobody >># writeable = yes >> printable = yes >> printer = lp >> >> >>-- >>Kindness can be infectious - try it. >> >>Graham North >>Vancouver, BC >>www.soleado.ca >> >> >> >> >> > > >-------------------------------------------------------------------------------- > > >No virus found in this outgoing message. >Checked by AVG Anti-Virus. >Version: 7.0.344 / Virus Database: 267.10.17/84 - Release Date: 8/29/2005 > > > >-------------------------------------------------------------------------------- > > > > >>_______________________________________________ >>freebsd-questions@freebsd.org mailing list >>http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>To unsubscribe, send any mail to >>"freebsd-questions-unsubscribe@freebsd.org" >> >> > > > > > > -- Kindness can be infectious - try it. Graham North Vancouver, BC www.soleado.ca --=======AVGMAIL-4313A29818A2======= Content-Type: text/plain; x-avg=cert; charset=us-ascii Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Content-Description: "AVG certification" No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.10.17/84 - Release Date: 8/29/2005 --=======AVGMAIL-4313A29818A2=======--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4313A297.4010407>