Discussion:
[Samba] printer admin deprecated: please explain
Franz Pfoertsch
2006-05-03 18:48:39 UTC
Permalink
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated

Ok, I understood I should use

net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..

But I haven't any adminuser to grant this rights.

In my environment I put the machine into the AD by
kinit <UserWithPermissionsToJoinIntoTheDomain>@<DOMAIN>
net ads join -> joined

and all permission granted by the "printer admin" option.

Is there any other way to get SePrintOperator without a other strong user?

regards
Franz
Gerald (Jerry) Carter
2006-05-04 23:03:06 UTC
Permalink
Post by Franz Pfoertsch
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
Either root or a Domain Admin is able to grant rights.





cheers, jerry
=====================================================================
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
david rankin
2006-05-05 05:59:46 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Post by Franz Pfoertsch
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
Either root or a Domain Admin is able to grant rights.
Hmm... Herr Jerry, what causes this?

***@nemesis:~> smbclient -U% -L localhost
WARNING: The "printer admin" option is deprecated
Domain=[RB_LAW] OS=[Unix] Server=[Samba 3.0.20b-3.3-SUSE]


--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--
Gerald (Jerry) Carter
2006-05-05 17:45:06 UTC
Permalink
Post by david rankin
Hmm... Herr Jerry, what causes this?
WARNING: The "printer admin" option is deprecated
Domain=[RB_LAW] OS=[Unix] Server=[Samba 3.0.20b-3.3-SUSE]
ERR_NOT_ENOUGH_INFO: There's not enough background for me
to give a proper response. :-)

What causes "what" ?



cheers, jerry
=====================================================================
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
Franz Pfoertsch
2006-05-05 15:56:03 UTC
Permalink
I tried the following:
net rpc rights grant "<GroupWithDomain>" SePrintOperatorPrivilege -U <host>/root
Password:
And got ->>
Failed to grant privileges for <GroupWithDomain> (NT_STATUS_NO_SUCH_PRIVILEGE)

What's going on?

regards
Franz
Post by Gerald (Jerry) Carter
Post by Franz Pfoertsch
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
Either root or a Domain Admin is able to grant rights.
Gerald (Jerry) Carter
2006-05-05 17:41:42 UTC
Permalink
Post by Franz Pfoertsch
net rpc rights grant "<GroupWithDomain>" SePrintOperatorPrivilege -U <host>/root
And got ->>
Failed to grant privileges for <GroupWithDomain> (NT_STATUS_NO_SUCH_PRIVILEGE)
Set 'enable privileges = yes'. This will be the default in
the next Samba release.





cheers, jerry
=====================================================================
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
Franz Pfoertsch
2006-05-05 19:02:34 UTC
Permalink
It worked!

thanks a lot.

Franz
Ryan Novosielski
2006-05-12 10:08:57 UTC
Permalink
Post by Franz Pfoertsch
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
In my environment I put the machine into the AD by
net ads join -> joined
and all permission granted by the "printer admin" option.
Is there any other way to get SePrintOperator without a other strong user?
regards
Franz
How can you not have an admin user -- who do you have defined under
"printer admin"? Or were you not using this definition at all and that
is a spurious error message? If you ARE using printer admin = someone,
then you'd just grant the rights to that same user.
--
---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | | Ryan Novosielski - User Support Spec. III
|$&| |__| | | |__/ | \| _| | ***@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.| IST/AST - NJMS Medical Science Bldg - C630
Franz Pfoertsch
2006-05-12 12:34:02 UTC
Permalink
Post by Ryan Novosielski
Post by Franz Pfoertsch
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
I filled in a windows group, I haven't a special user, I have a special
Windows-Group.


winbind separator = +
printer admin = @BROSE+COB_CUPS_Printer_Admin


regards
Franz
Post by Ryan Novosielski
Post by Franz Pfoertsch
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
In my environment I put the machine into the AD by
net ads join -> joined
and all permission granted by the "printer admin" option.
Is there any other way to get SePrintOperator without a other strong user?
regards
Franz
How can you not have an admin user -- who do you have defined under
"printer admin"? Or were you not using this definition at all and that
is a spurious error message? If you ARE using printer admin = someone,
then you'd just grant the rights to that same user.
Ryan Novosielski
2006-05-12 20:27:29 UTC
Permalink
Yeah, but you can assign privileges to groups also. Check out the
following relevant commands:

net groupmap
net rpc rights

You can do things exactly the way you had been, just via different
framework.

---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - User Support Spec. III
|$&| |__| | | |__/ | \| _| |***@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
Post by Franz Pfoertsch
Post by Ryan Novosielski
Post by Franz Pfoertsch
I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
I filled in a windows group, I haven't a special user, I have a special
Windows-Group.
winbind separator = +
regards
Franz
Post by Ryan Novosielski
Post by Franz Pfoertsch
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The "printer admin" option is deprecated
Ok, I understood I should use
net rpc rights grant "<User or Group>" SePrintOperatorPrivilege -U ..
But I haven't any adminuser to grant this rights.
In my environment I put the machine into the AD by
net ads join -> joined
and all permission granted by the "printer admin" option.
Is there any other way to get SePrintOperator without a other strong user?
regards
Franz
How can you not have an admin user -- who do you have defined under
"printer admin"? Or were you not using this definition at all and that
is a spurious error message? If you ARE using printer admin = someone,
then you'd just grant the rights to that same user.
Loading...