Re: [Samba] result was WERR_ACCESS_DENIED

I think I'm having a similar problem to you and I've had no reply as yet
(except an out-of-office one) to my post.
I think it's just an authentication problem. I've got security = domain
and I'm guessing that since the user 'root' is not present in my domain
(and even if it was it wouldn't necessarily have any clout on the samba
print server anyway), logging into the samba server as root doesn't give
you the permissions to do 'setdriver'. I've tried adding a domain user
(DOMAIN\USER style) into the 'printer admin' option for the Printers
share. I've tried adding my domain user to a local group (ntadmins) and
adding @ntadmins to the 'printer admin' option. I've tried using 'net
rpc rights grant...' to give print management rights to my domain user.
Still no joy. I've decided to change to 'security = server' in the
hope that I can then get the printers configured as I want them before
changing back to 'security = domain' but I haven't had the time to do
this yet. I'd like to know if there is a more elegant solution (if
indeed my proposal is a solution) so I'd like to know if you've found
out anything useful.

Cheers,
James.


E. Dandrades wrote:
> Anyone know what this means and how to fix it?
>
> Thanks.
>
> Running command: rpcclient 10.0.0.1 -N -U'root%password' -c 'setdriver HPPRINTER HPPRINTER'
> Connecting to host=10.0.0.1
> Connecting to 10.0.0.1 at port 445
> Doing spnego session setup (blob length=58)
> got OID=1 3 6 1 4 1 311 2 2 10
> got principal=NONE
> Got challenge flags:
> Got NTLMSSP neg_flags=0x608a0215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60080215
> lsa_io_sec_qos: length c does not match size 8
> SetPrinter call failed!
> result was WERR_ACCESS_DENIED
>
> Password for root required to access 10.0.0.1 via SAMBA:

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba