Installation guide for Samba, Winbind, CUPS and PyKota

[Geoff]

I couldn't use etch because there was no driver support for some of the newer printers I have (photocopiers mainly).

[ICTNUT]

Yeah I had a brain wave and decided to check support and found that our Canon iR range of copiers is not supported.

I have installed ubuntu 7.10 and has worked of the bat, to say that I have CUPS up and running now going for PYKOTA.

Will update you as I go....

[ICTNUT]

OK here goes,

I have ubuntu 7.10 instaled and working, I have cups installed and working (have added two printer thus far and done test prints to them OK), I have pykota installed.

When doing that last section on the CUPS config:

chown -R administrator:"domain admins" /etc/samba/drivers/

I get the following return ed back:

chown: `administrator:domain admins': invalid user

on the next line:

cupsaddsmb -H servername -U administrator -a

I assume that servername is replaced with the name of my print server??

Onto the Pykota config, where it says add a printer via the CUPS interface I can do this but the is nowhere to select the type of "Pykota Managed"

Any ideas?....

[Geoff]

1. Verify you've edited the /etc/nsswitch.conf file as I earlier suggested.
2. Yes.
3. Verify the /usr/lib/cups/backend/cupspykota symbolic link exists and the permissions are correct on /usr/share/pykota/cupspykota file.

[ICTNUT]

OK after a great deal of effort ubuntu is out the window.

I have installed debian etch (4.0 r3) and have got most of the way with no errors at all, however, I am not at the bit where we change some permissions:

# chown -R administrator:"domain admins" /etc/samba/drivers/

and i get:

chown: `administrator:domain admins': invalid user

I have tried variations of domain admin accounts / groups non of which work, any ideas anyone??.....

[ICTNUT]

bump sorry

[Ric_]

Sorry that I missed your post...

I had a problem with this during my migration. Things to check are that the directory exists (!) and that winbind, etc. are working - particularly check there is no clock skew!

[Geoff]

(Third time now) Did you edit /etc/nsswitch.conf so the system knows to ask winbind about users/groups?

[ICTNUT]

@Ric_: i did see a mention somewhere about NTP, I can gaurantee this has not yet been setup but I guess it should be, any pointers??

@Geoff: Yes see below:

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         files winbind
group:          files winbind
shadow:         files winbind

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

[Geoff]

i did see a mention somewhere about NTP, I can gaurantee this has not yet been setup but I guess it should be, any pointers??

apt-get install openntpd

Then edit /etc/openntpd/ntp.conf Mine looks like this:

# Addresses to listen on (ntpd does not listen by default)
listen on *
#listen on 127.0.0.1
#listen on ::1

# sync to a single server
server ntp0.lancsngfl.ac.uk
server ntp1.lancsngfl.ac.uk

see below

you have the order wrong, your using winbind for shadow (which is wrong). Here's how mine works:

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         winbind compat
group:          winbind compat
shadow:         compat

hosts:          files dns mdns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

verify that your nsswitch is working correctly like so:

root@goliath:~# getent passwd | grep Administrator
administrator:x:11761:10015:Administrator:/home/CARRHILL/administrator:/bin/bash
root@goliath:~# getent group | grep "Domain Admins"
Domain Admins:x:10015:Ctx_ConfigMgr,zimbra,EMLibUser1,sweepupd,gking,manager

As you can see, mine works

[ICTNUT]

Ok as you can see the following works:

4428-prtsvr:~# getent passwd | grep ozanpakyuz
JKHS-PD\ozanpakyuz:*:11763:10002:OzanPakyuz:/home/JKHS-PD/ozanpakyuz:/bin/false
ozanpakyuz:x:1000:1000:Ozan Pakyuz,,,:/home/ozanpakyuz:/bin/bash

but this does not:

4428-prtsvr:~# getent group | grep "Domain Admins"
4428-prtsvr:~#

So i guess soemthing is still missing somewhere.

I copied you nsswitch.conf file as you posted it and we have moved foreward and it look like it is able to see users just not groups

[Geoff]

So can winbind see groups?

root@titan:~# wbinfo -g | grep "Domain Admins"
Domain Admins

[ICTNUT]

Nope, I get the same thing, just returns an empty line

[Geoff]

What about 'wbinfo -g' on it's own?

[ICTNUT]

I get the following:

4428-prtsvr:~# wbinfo -g
BUILTIN administrators
BUILTIN users
domain users
teachers
domain guests
domain computers
group policy creator owners
cert publishers
domain admins
domain controllers
_web applications
exchange domain servers
dnsupdateproxy
_web anonymous users
students
jkhsadmins
reports
alcusers
2005_intake
2004_intake
2003_intake
2002_intake
2001_intake
smt
banned_internet
alcstaff
2006_intake
moodlecreators
ict_reset_passwords
ras and ias servers
exchange enterprise servers
dhcp users
dhcp administrators
netopactivity
dnsadmins
wins users
debugger users
telnetclients
iis_wpg
sqlserver2005mssqluser$jkhs-dc1$microsoft##ssee
sqlserver2005msfteuser$jkhs-dc1$microsoft##ssee
wsus reporters
wsus administrators
certsvc_dcom_access
enterprise admins
schema admins
all staff
resources
2006
2005
2004
2003
2002
mathsgroup
orangeteam

Which is really wierd as domain admins is in there