Samba Printer ACL

[Willott]

Hi,

 

According to Samba documentation, it should be possible to use NT ACLs on printers... I've tried everything I can think of, but have no luck. I open up my print server from a windows client, open printer properties, and change the security to deny another user... however, I can then still access the printer from that other user. Has anyone got this working before, or does anyone have any ideas how to resolve it. I'm basically trying to have 1 printserver for the school but block access to certain printers, so teachers/students can't print to the admin printers.

 

If anyone has another suggestion for how to do this, would be gratefully received.

 

smb.conf below just incase

[global]
idmap gid = 10000-40000
obey pam restrictions = yes
dns proxy = no
netbios name = printserve
printing = cups
printcap = cups
invalid users = root
idmap uid = 10000-20000
workgroup = DOMAIN
os level = 20
printcap name = cups
security = ads
max log size = 1000
winbind separator = +
log file = /var/log/samba/log.%m
load printers = yes
socket options = TCP_NODELAY
wins server = ***.***.***.***
encrypt passwords = true
public = yes
realm = DOMAIN.INTERNAL
winbind use default domain = yes
wins proxy = no
server string = Cups Server
winbind enum users = yes
password server = *
winbind gid = 10000-20000
winbind enum groups = yes
winbind cache time = 180
syslog = 0
preferred master = no
panic action = /usr/share/samba/panic-action %d
winbind nested groups = yes

[printers]
printable = yes
writable = no
path = /var/spool/samba
comment = All Printers
public = no
create mode = 0700

[print$]
comment = Printer Drivers
path = /etc/samba/drivers
browseable = yes
read only = no
guest ok = yes
write list = administrator, @"domain admins"

[pdfs]
writeable = no
path = /home/pykota
browseable = yes
read only = yes

[Geoff]

It would probably help if you enabled ACL support.

 

nt acl support = yes
ea support = yes

[CyberNerd]

you also need to make sure the filesystem supports acl and that you have acl installed - in the fstab there should be something like:

/dev/VolGroup01/LogVol00 /sharename 	 ext3  defaults,[b]acl[/b],user_xattr 1 2

[Willott]

Thanks Geoff... I looked through loads of Samba docs and how tos... but never saw that conf line!