RSAT Print Management won't show shared printers under the "Printers" section

classic Classic list List threaded Threaded
17 messages Options
Reply | Threaded
Open this post in threaded view
|

RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hello,

currently I am trying to setup a Samba environment (Samba AD DC, Samba Fileserver, Samba Printserver) using Samba version 4.5.8-Debian and CUPS version 2.2.1-8 on Debian 9 "Stretch". I am trying to setup "Point'n'Print" atm.
While my Active Directory domain and the fileserver work well with my Windows 7 clients, I am having some issues with the printserver. Config files will be down below.

What I have so far in this setup and a quick rundown of what I've done already:
1.) Samba is configured for an AD membership and both the "printers" as well as the "print$" share are configured. Permissions seem OK.
2.) The printserver is properly joined to the domain ("net ads testjoin" and some other tests are OK)
3.) CUPS is installed and configure to accept global connections for administration
4.) A printer is configured in CUPS and is also listed using either smbclient or the "enumpriners" command
5.) I have RSAT tools installed on a domain joined Windows 7 client and I am logged in as such a Domain Admin
6.) The Domain Admins group (which my admin user is in) has the "SePrintOperator" privilege, the "Print Operator" group is shown using "Active Directory Users and Computers" in the "Member Of" tab in the "Domain Admins" group.
7.) The printer is listed in the Explorer when I browse to \\printserver and I can connect to it and also print with the printer if I set it up manually
8.) I can open up the Print Management tool and upload drivers just fine, they get listed (both in Windows and using the "enumdrivers" command)
9.) Under "Ports" I can see the "Samba Printer Port" that also has my configured printer under "Printer Name"
10.) Under "Printers", it's just empty, so I can never link up the driver with the printer or preconfigure the driver like I want to in Windows. However, if I do connect the driver from the shell on the printserver (using the "setdriver" command) itself, the command gets completed successfully and the driver gets installed on connection on a Windows client.
11.) Samba on log level 3 doesn't list any errors trying to access the "Printers" option in the Print Management tool.
12.) I get the same problem using Debian 8 "Jessie" with Samba 4.2.14-Debian and CUPS 1.0.61-5+deb8u3 in the same domain

Here are screenshots from the Print Management tool on Windows 7 using a Domain Admin member account: https://imgur.com/a/iwtAh
You will see that the printer is listed in "Ports" but not in "Printers".

Screenshots of the "Domain Admins" group using "Active Directory Users and Computers", currently logged in user is "Administrator": https://imgur.com/a/fp9Ad
You can see that everything seems to be alright.

The articles I followed were from the German book "Samba 4 - Das Praxisbuch für Administratoren" (pp. 403 - 417) and the Samba Wiki and in both texts they get their printers listed.

I honestly have no idea what to do next. No one on the net seems to have the same issue I am facing because either it work correctly or it doesn't work at all for most people. Are there any more places to look for errors or more places to check where I went wrong? Is an issue on the DC the main issue and is it only showing that way?

Thanks for any suggestions.

--
Best regards
Thomas

Additional information:

smb.conf (on the printserver)
----------- 8< ------------
[global]
security = ADS
workgroup = EXAMPLE
realm = AD.EXAMPLE.COM

log file = /var/log/samba/%m.log
log level = 3

idmap config * : backend = tdb
idmap config * : range = 10000 - 19999
idmap config EXAMPLE : backend = rid
idmap config EXAMPLE : range = 1000000 - 1999999

winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind refresh tickets = yes

template homedir = /home/%D/%U
template shell = /bin/bash

client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
restrict anonymous = 2

domain master = no
local master = no
preferred master = no

os level = 0

rpc_server:spoolss = external
rpc_daemon:spoolssd = fork

[printers]
comment = All printers
path = /var/spool/samba
browseable = yes
printable = yes
create mask = 0700
guest ok = no
read only = no

[print$]
comment = Print drivers
path = /var/lib/samba/drivers
create mask = 0775
inherit permissions = yes
guest ok = no
read only = no
------------ >8 ------------

krb5.conf (on the printserver)
----------- 8< ------------
[libdefaults]
   default_realm = AD.EXAMPLE.COM
   dns_lookup_realm = false
   dns_lookup_kdc = true
------------ >8 ------------

cupsd.conf (on the printserver, the parts not shown here are left as is in the original distribution)
----------- 8< ------------
[...]
Listen 192.168.0.251:631
[...]
# Restrict access to the server...
<Location />
 Order allow,deny
 Allow from 192.168.0.*
</Location>

# Restrict access to the admin pages...
<Location /admin>
 Order allow,deny
 Allow from 192.168.0.*
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
 AuthType Default
 Require user @SYSTEM
 Order allow,deny
 Allow from 192.168.0.*
</Location>

# Restrict access to log files...
<Location /admin/log>
 AuthType Default
 Require user @SYSTEM
 Order allow,deny
 Allow from 192.168.0.*
</Location>
[...]
------------ >8 ------------

Checking permissions of the shares
----------- 8< ------------
root@printserver:~# ls -ld /var/spool/samba/
drwxrwxrwt 2 root domain admins 4096 Okt  7 23:18 /var/spool/samba

root@printserver:~# ls -ld /var/lib/samba/drivers/
drwsrwsr-x 9 root domain admins 4096 Okt  7 19:33 /var/lib/samba/drivers/
------------ >8 ------------

"smbclient -L printserver -U Administrator"
----------- 8< -------------
Domain=[EXAMPLE] OS=[Windows 6.1] Server=[Samba 4.5.8-Debian]

        Sharename       Type      Comment
        ---------       ----      -------
        print$          Disk      Print drivers
        IPC$            IPC       IPC Service (Samba 4.5.8-Debian)
        Brother_HL-3040CN_series_MANUAL Printer   Brother HL-3040CN manuell hinzugefuegt
[...]
------------ >8 ------------

"rpcclient printserver -U Administrator -c enumprinters"
----------- 8< -------------
[...]
        flags:[0x800000]
        name:[\\PRINTSERVER\Brother_HL-3040CN_series_MANUAL]
        description:[\\PRINTSERVER\Brother_HL-3040CN_series_MANUAL,Brother HL-3040CN series,Brother HL-3040CN manuell hinzugefuegt]
        comment:[Brother HL-3040CN manuell hinzugefuegt]
[...]
------------ >8 ------------

"rpcclient printserver -U Administrator -c enumdrivers"
----------- 8< ------------
[Windows NT x86]
Printer Driver Info 1:
        Driver Name: [Brother HL-3040CN series]


[Windows x64]
Printer Driver Info 1:
        Driver Name: [Brother HL-3040CN series
------------ >8 -----------

"net rpc rights list accounts -U Administrator -S printserver"
----------- 8< ------------
EXAMPLE\Domain Admins
SePrintOperatorPrivilege
------------ >8 -----------

How the samba domain was provisioned (on the DC)
----------- 8< ------------
samba-tool domain provision \
                   --use-rfc2307 \
                   --server-role=dc \
                   --dns-backend=BIND9_DLZ \
                   --realm="ad.example.com" \
                   --domain="example" \
                   --adminpass="Test1234"
------------ >8 -----------
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hi Thomas,


Am 08.10.2017 um 01:53 schrieb Thomas Keppler via samba:
> 5.) I have RSAT tools installed on a domain joined
> Windows 7 client and I am logged in as such a Domain Admin

Does this also happen on Win 8.1 or 10? Please try, if you did not already.
Do the clients have all available updates applied?



> smb.conf (on the printserver)
> ----------- 8< ------------
> rpc_server:spoolss = external
> rpc_daemon:spoolssd = fork

Can you temporarily try it without spoolssd (remove the two lines).
Don't forget to restart smbd (restart, not reload in this case).



> [printers]
> comment = All printers
> path = /var/spool/samba
> browseable = yes
> printable = yes
> create mask = 0700
> guest ok = no
> read only = no

Can you try it with the following [printers] section:
[printers]
       path = /var/spool/samba
       printable = yes
       printing = CUPS

The other parameters in your [printers] section are either not necessary
or default.



I don't see any problem in your smb.conf. However, just for testing
purposes: Can you disable automatic printer sharing and manually share
one of the printers? See:
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server#Disabling_the_Automatic_Printer_Sharing
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Print_Server#Manual_Sharing_of_Printers



Regards,
Marc

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hi Marc,

thank you for your quick reply. Here are my results so far:

> Does this also happen on Win 8.1 or 10? Please try, if you did not already.
It actually works like it should on Windows 8.1. I can manage the printers here like I should be able to from Windows 7.
But, even after configuration from Windows 8.1, it doesn't appear on Windows 7. Yet, Windows 7 is my target platform.
Couldn't check Windows 10 as it refused to cooperate with me today. Was always stuck on updates and the RSAT link is broken, given up on that.

> Do the clients have all available updates applied?
Yup.

> Can you temporarily try it without spoolssd (remove the two lines).
I had it running the longest times without those lines and it didn't work. Taking them out or putting them in unfortunately doesn't change a thing.

> Can you try it with the following [printers] section:
Tried it, but still doesn't work.

> Can you disable automatic printer sharing and manually share
> one of the printers?
I've shared one of the printers manually. While it works great (shown in Explorer, shown in the "Ports" section of Print Management), I can still not see the printer in the "Printers" section of Print Management.

What I forgot to include yesterday was a log on level 3 of what I was seeing on the printserver when I refresh the "Printers" section in Print Management (on Windows 7), here it is:
------------ 8< ------------
==> /var/log/samba/smbd.log.14 <==
[2017/10/07 23:26:55.763928,  2] ../source3/printing/spoolssd.c:459(spoolss_handle_client)
  Spoolss preforked child 1002 got client connection!
[2017/10/07 23:26:55.764894,  3] ../source3/rpc_server/srv_pipe.c:733(api_pipe_bind_req)
  api_pipe_bind_req: spoolss -> spoolss rpc service
[2017/10/07 23:26:55.764919,  3] ../source3/rpc_server/srv_pipe.c:356(check_bind_req)
  check_bind_req for spoolss context_id=0
[2017/10/07 23:26:55.764928,  3] ../source3/rpc_server/srv_pipe.c:399(check_bind_req)
  check_bind_req: spoolss -> spoolss rpc service
[2017/10/07 23:26:55.765600,  3] ../source3/rpc_server/srv_pipe.c:1455(api_rpcTNP)
  api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS
[2017/10/07 23:26:55.773494,  2] ../source3/rpc_server/rpc_server.c:537(named_pipe_packet_process)
  Fatal error(NT_STATUS_CONNECTION_DISCONNECTED). Terminating client(192.168.0.1) connection!
[2017/10/07 23:26:55.790581,  2] ../source3/printing/spoolssd.c:459(spoolss_handle_client)
  Spoolss preforked child 1002 got client connection!
[2017/10/07 23:26:55.791580,  3] ../source3/rpc_server/srv_pipe.c:733(api_pipe_bind_req)
  api_pipe_bind_req: spoolss -> spoolss rpc service
[2017/10/07 23:26:55.791601,  3] ../source3/rpc_server/srv_pipe.c:356(check_bind_req)
  check_bind_req for spoolss context_id=0
[2017/10/07 23:26:55.791609,  3] ../source3/rpc_server/srv_pipe.c:399(check_bind_req)
  check_bind_req: spoolss -> spoolss rpc service
[2017/10/07 23:26:55.793046,  3] ../source3/rpc_server/srv_pipe.c:1455(api_rpcTNP)
  api_rpcTNP: rpc command: SPOOLSS_ENUMPRINTERDRIVERS
[2017/10/07 23:26:55.805135,  2] ../source3/rpc_server/rpc_server.c:537(named_pipe_packet_process)
  Fatal error(NT_STATUS_CONNECTION_DISCONNECTED). Terminating client(192.168.0.1) connection!
------------ >8 ------------

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
In reply to this post by Samba - General mailing list
A small update:

Fiddled some more with Windows 10 and that works, too. Windows 7 still doesn't see the printer in Print Management, not even on a second, freshly installed client.

I have set up the printer now from Windows 8.1 and configured some printer preferences and installed the printer on a Windows 7 client. That works.
However, I would really like to configure the printer form Windows 7, if that's possible.

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hi Thomas,

Am 08.10.2017 um 17:42 schrieb Thomas Keppler:
> Fiddled some more with Windows 10 and that works, too. Windows 7
> still doesn't see the printer in Print Management, not even on
> a second, freshly installed client.>
> I have set up the printer now from Windows 8.1 and
> configured some printer preferences and installed the printer
> on a Windows 7 client. That works.> However, I would really like to
configure the
> printer form Windows 7, if that's possible.


I can confirm that the printers aren't listed in the Printer Management
console on Windows 7 in my test environment, but it works as expected on
8.1 and 10. I've tested it with Samba 4.7.0 on the print server.

It seems like a bug or maybe an incompatibility introduced by a recent
Windows 7 update.

Can you please open a bug report against Samba 4.7 (see
https://wiki.samba.org/index.php/Bug_Reporting) and include the
information from this thread and a level 10 debug log. Thanks.

As a workaround, on Win 7 you can still assign drivers without using the
Print Management console:
- Start / Run
- Enter \\print_server_name\, click "OK"
- Press the "View remote printers" button
There you can right-click to printers and manage them same as in the
console. Win7 was the last version where you can manage printer this
way. Anyway, please open the bug report.


Regards,
Marc

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hello Marc.

thanks for the workaround. Seems to work for me.
I will probably use Windows 8.1 on a management VM just so I can use the Windows 8.1 RSAT tools to work around the issue in the mean time.

> Can you please open a bug report against Samba 4.7 (see
> https://wiki.samba.org/index.php/Bug_Reporting) and include the
> information from this thread and a level 10 debug log. Thanks.
I will do my best to open up a bug report during the upcoming week (I want to setup a clean environment for testing and logging). Shall I mention you in it?

> It seems like a bug or maybe an incompatibility introduced by a recent
> Windows 7 update.

I have tried the Windows 7 IE11 Virtual Machine provided directly by Microsoft. It was last updates on 26th November 2014 by default (Last update: KB2835361). Installed most recent version of RSAT tools on that and I've got the same problem. It might be an issue in the Print Management snap-in itself, though. But we'll find that out sooner or later during the bug report. :-)

For anyone finding this via Google, as Marc pointed out, the workaround seems to be:
> As a workaround, on Win 7 you can still assign drivers without using the
> Print Management console:
> - Start / Run
> - Enter \\print_server_name\, click "OK"
> - Press the "View remote printers" button
> There you can right-click to printers and manage them same as in the
> console. Win7 was the last version where you can manage printer this
> way.
Alternatively, you can use Windows 10 or Windows 8.1's RSAT tools.
One caveat by using the technique above seems that printer preferences aren't persisted or only in a way Windows 7 can see it.

Thank you for being so helpful so far and quick to respond. I hope the bug hunt will reveal what the real issue is here.

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hai Mard ans Tomas,

Just out of interest and maybe this helps also for bug 12761.

Are you still able to test this on a VM? Can you try my samba 4.6.8 package.

That one contains a patch for printer driver problems. This bug report.
https://bugzilla.samba.org/show_bug.cgi?id=12761  ( reported my Marc itself. )
Its more about the 32bit driver upload and delete of drivers, but who knows, i suggest try it.
Because i dont see this beheavior on my print server with the 4.6.8 package.

My setup is same as yours, i use RSAT in win7 64b for RSAT tools.
Debian stretch, samba 4.6.8. cups in Point and print setup with kerberos auth configured.
This server started as debian jessie with samba 4.2.x. has seen 4.5.8 on stretch and now 4.6.8.

I only noticed on thing, as you if a new printer is added, it takes some time, but a refesh after about 2-4 sec,
in the printer manager view, shows the printer and i can configure it.

My apt info : http://apt.van-belle.nl
For Stretch: (4.6.x)
 echo "deb http://apt.van-belle.nl/debian stretch-backports main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list
 echo "deb http://apt.van-belle.nl/debian stretch main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list

Now import the public key with :
 wget -O - http://apt.van-belle.nl/louis-van-belle.gpg-key.asc | apt-key add -
And update and run dist-upgrade since samba 4.6 has some extra packages to be installed.
Make a good backup or /var/lib/samba and /var/cache/samba and /etc/samba
That, if needed gives the options to revert back to the debian packages.

> For anyone finding this via Google, as Marc pointed out, the
> workaround seems to be:
> > As a workaround, on Win 7 you can still assign drivers
> without using the Print Management console:

Any domain admin, on any windows ( domain joined) pc, can configure the printer as show above.


Greetz,

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:[hidden email]] Namens
> Thomas Keppler via samba
> Verzonden: zondag 8 oktober 2017 19:33
> Aan: Marc Muehlfeld
> CC: [hidden email]
> Onderwerp: Re: [Samba] RSAT Print Management won't show
> shared printers under the "Printers" section
>
> Hello Marc.
>
> thanks for the workaround. Seems to work for me.
> I will probably use Windows 8.1 on a management VM just so I
> can use the Windows 8.1 RSAT tools to work around the issue
> in the mean time.
>
> > Can you please open a bug report against Samba 4.7 (see
> > https://wiki.samba.org/index.php/Bug_Reporting) and include the
> > information from this thread and a level 10 debug log. Thanks.
> I will do my best to open up a bug report during the upcoming
> week (I want to setup a clean environment for testing and
> logging). Shall I mention you in it?
>
> > It seems like a bug or maybe an incompatibility introduced
> by a recent
> > Windows 7 update.
>
> I have tried the Windows 7 IE11 Virtual Machine provided
> directly by Microsoft. It was last updates on 26th November
> 2014 by default (Last update: KB2835361). Installed most
> recent version of RSAT tools on that and I've got the same
> problem. It might be an issue in the Print Management snap-in
> itself, though. But we'll find that out sooner or later
> during the bug report. :-)
>
> For anyone finding this via Google, as Marc pointed out, the
> workaround seems to be:
> > As a workaround, on Win 7 you can still assign drivers
> without using
> > the Print Management console:
> > - Start / Run
> > - Enter \\print_server_name\, click "OK"
> > - Press the "View remote printers" button There you can
> right-click to
> > printers and manage them same as in the console. Win7 was the last
> > version where you can manage printer this way.
> Alternatively, you can use Windows 10 or Windows 8.1's RSAT tools.
> One caveat by using the technique above seems that printer
> preferences aren't persisted or only in a way Windows 7 can see it.
>
> Thank you for being so helpful so far and quick to respond. I
> hope the bug hunt will reveal what the real issue is here.
>
> --
> Best regards
> Thomas
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hi Louis,

Am 09.10.2017 um 09:36 schrieb L.P.H. van Belle via samba:
> That one contains a patch for printer driver problems. This bug report.
> https://bugzilla.samba.org/show_bug.cgi?id=12761  ( reported my Marc itself. )
> Its more about the 32bit driver upload and delete of drivers,
> but who knows, i suggest try it. >
> Because i dont see this beheavior on my print server with the 4.6.8 package.

I compiled 4.6.8 including the v2 patch from the bug report. However,
it's the same behaviour on Win7: No printers in Print Management Console.



> My apt info : http://apt.van-belle.nl
> For Stretch: (4.6.x)
>  echo "deb http://apt.van-belle.nl/debian stretch-backports main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list
>  echo "deb http://apt.van-belle.nl/debian stretch main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list

Unfortunately, I can't test your package. My whole test environment is
RHEL7-based.



Regards,
Marc

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
In reply to this post by Samba - General mailing list
Hello Louis,

> On 9. Oct 2017, at 09:36, L.P.H. van Belle via samba <[hidden email]> wrote:
>
> Just out of interest and maybe this helps also for bug 12761.
>
> Are you still able to test this on a VM? Can you try my samba 4.6.8 package.

I did try out your package (just upgraded Samba), but nothing changed in behaviour.
Printers are still not showing up in Print Management.

> My setup is same as yours, i use RSAT in win7 64b for RSAT tools.
> Debian stretch, samba 4.6.8. cups in Point and print setup with kerberos auth configured.
> This server started as debian jessie with samba 4.2.x. has seen 4.5.8 on stretch and now 4.6.8.

Hm, how odd... There must be a difference between our setups.

--
Best regards
Thomas




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
In reply to this post by Samba - General mailing list
Hm, I really am wondering now:

@Louis: How "recent" is your version of the RSAT tools on Windows 7? Everything up to date?
If you, in turn, try out the standard Debian 4.5.8 version of Samba, can you still see printers?
Do you have WINS enabled and working?

@Marc: Good that you can replicate my scenario. :-D

I don't have WINS support just yet with my domain.

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hai Tomas,

And Marc thank for having a look also.

@ Tomas, now i think you setup is ok, but review it based on my setup below.
Now, i am using samba 4.6.8 here, but this is working as of 4.2.x.
There where a few small problems, i just cant recall exact what these where.
If you want to stay in the 4.5 line, then its an option to try my 4.5.14 package if needed.

I did some testing also, my steps,
add printer in cups through webinterface, ( other network printers / HP Jet direct )
Add socket: socket://hostname:9100
Ext, name disc loc connection: ( socket )
Enabled Share This Printer.

Driver RAW.
Model Raw Queue
Add printer, banner none.
Cups result : Printer Test default options have been set successfully.  

Changing to Win7 64Bit pc, start Print management. ( logged in as Admin ( member of domain admins) )
And.. No Test printer..  When you look directly after creating the printer in cups.
But, i've waited about 5-10 min, after i added the printer in cups.
Then a refresh and it did show up in my printer list.
And from that point i linked the driver, ( the view in Print management does not show it. )
A manual refresh and the printer is shown with with the driver.

Now, i browse with my windows explorer to the print server, the test printer is there.
And as a normal domain user, i connected to this printer and its installed. *Note, the driver was already deployed to the pc.
So except it takes some "waiting" time, this works fine for me.

The is a snap of my config(s)

This is my smb.conf.

[global]
    log level = 0
    workgroup = YOURNTDOM
    security = ADS
    realm = CHANGE.TO.YOUR_REALM
    preferred master = no
    domain master = no
    host msdfs = no

    interfaces = 192.168.0.5 127.0.0.1
    bind interfaces only = yes

    tls enabled = yes
    tls keyfile = /etc/ssl/private/XXXXXXXXXX.key.pem
    tls certfile = /etc/ssl/certs/XXXXXXXXXX.cert.pem
    tls cafile = /etc/ssl/certs/XXXXXXXXXX-ca.pem

    # !Note, samba 4.6.x idmap setup.
    idmap config * :backend = tdb
    idmap config * :range = 2000-9999
    idmap config YOURNTDOM : backend = ad
    idmap config YOURNTDOM : schema_mode = rfc2307
    idmap config YOURNTDOM : range = 10000-3999999
    idmap config YOURNTDOM : unix_nss_info = yes

    dedicated keytab file = /etc/krb5.keytab
    kerberos method = secrets and keytab
    winbind refresh tickets = yes
    winbind trusted domains only = no
    winbind use default domain = yes
    winbind offline logon = yes
    winbind expand groups = 4

    username map = /etc/samba/samba_usermapping
    usershare path =

    vfs objects = acl_xattr
    map acl inherit = yes
    store dos attributes = yes

    veto files = /.bash_logout/.bash_profile/.bash_history/.bashrc/
    hide unreadable = yes

    rpc_server:spoolss = external
    rpc_daemon:spoolssd = fork
    spoolss:architecture = Windows x64
    load printers = yes

    enumports command = /etc/samba/bin/show-ports.sh

# (optional) I change these path locations to my own.
[print$]
   comment = Printer Drivers
   path = /home/samba/printing/drivers
   acl_xattr:ignore system acl = yes
   browseable = yes
   writable = yes
   guest ok = no
   write list = root, administrator, @"Domain Admins", @lpadmin, @"Print Operators"

[printers]
   comment = All Printers
   path = /home/samba/printing/spool
   acl_xattr:ignore system acl = yes
   browseable = yes
   printable = yes
   printing = CUPS

# Optional
The path steps, normaly not needed, but this is how i did setup.
mkdir -p /home/samba/printing/{drivers,spool}
cp -R /var/lib/samba/printers/* /home/samba/printing/drivers
chmod -R 755 /home/samba
chmod -R 2777  /home/samba/printing/spool


My /etc/cups/cupsd.conf

LogLevel warn
MaxLogSize 0
# Allow remote access
Port 631
Listen /var/run/cups/cups.sock
ServerName FQDN
ServerAlias *
ServerTokens None
ServerCertificate /etc/cups/ssl/server.crt
ServerKey /etc/cups/ssl/server.key
Browsing Off
BrowseLocalProtocols none
DefaultAuthType Negotiate
WebInterface Yes

The other settings in cupsd.conf are unchanged, i use the debian default where possible.
The certificates for cups are the same as in samba, but symlinked.


The "show-port.sh" , uses dedicated hostname for my printers in the DNS, A and PTR records.
#!/bin/bash
# To change the ports, only adjust the ip range in the line
# for ip in {10..40} ...
# means, start ip 10 until end ip 40
# Your local range is autodetected. ( like 192.168.0 )
# sample, ptr-010 = 192.168.0.10

# We dont want to lose the old printer ports..
echo "Samba Printer Port"
# Default local domain. ( rotterdam.bazuin.nl )
IPRANGE=$(hostname -i | cut -d"." -f1,2,3)
DOMAIN=$(hostname -d)
for ip in {10..40}
do
 echo "${IPRANGE}.${ip}"
 echo "ptr-0${ip}.${DOMAIN}"
Done
## optional.
# Other remote location
#IPRANGE="10.1.2"
#DOMAIN="other.domain.tld"
#for ip in {11..23}
#do
# echo "${IPRANGE}.${ip}"
# echo "loc-ptr-0${ip}.${DOMAIN}"
#done

( kinit Administrator )
SePrivileges, i've set the followin for BUILTIN\Administrators
net rpc rights list accounts -k -S NETBIOS_HOSTNAME
BUILTIN\Administrators
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege
SeSecurityPrivilege
SeSystemtimePrivilege
SeShutdownPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeSystemProfilePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeLoadDriverPrivilege
SeCreatePagefilePrivilege
SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeUndockPrivilege
SeManageVolumePrivilege
SeImpersonatePrivilege
SeCreateGlobalPrivilege
SeEnableDelegationPrivilege

AND more important is this one.
# all SePrivileges set for the FQDN.
net rpc rights list accounts -k -S $(hostname -f)
BUILTIN\Print Operators
SePrintOperatorPrivilege

BUILTIN\Account Operators
No privileges assigned

BUILTIN\Backup Operators
No privileges assigned

BUILTIN\Server Operators
No privileges assigned

NTDOM\Domain Admins
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SePrintOperatorPrivilege
SeDiskOperatorPrivilege
SeSecurityPrivilege

BUILTIN\Administrators
SeMachineAccountPrivilege
SeTakeOwnershipPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege
SeSecurityPrivilege
SeSystemtimePrivilege
SeShutdownPrivilege
SeDebugPrivilege
SeSystemEnvironmentPrivilege
SeSystemProfilePrivilege
SeProfileSingleProcessPrivilege
SeIncreaseBasePriorityPrivilege
SeLoadDriverPrivilege
SeCreatePagefilePrivilege
SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeUndockPrivilege
SeManageVolumePrivilege
SeImpersonatePrivilege
SeCreateGlobalPrivilege
SeEnableDelegationPrivilege

Everyone
No privileges assigned


Greetz,

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:[hidden email]] Namens
> Thomas Keppler via samba
> Verzonden: maandag 9 oktober 2017 20:55
> Aan: Marc Muehlfeld
> CC: [hidden email]
> Onderwerp: Re: [Samba] RSAT Print Management won't show
> shared printers under the "Printers" section
>
> Hm, I really am wondering now:
>
> @Louis: How "recent" is your version of the RSAT tools on
> Windows 7? Everything up to date?
> If you, in turn, try out the standard Debian 4.5.8 version of
> Samba, can you still see printers?
> Do you have WINS enabled and working?
>
> @Marc: Good that you can replicate my scenario. :-D
>
> I don't have WINS support just yet with my domain.
>
> --
> Best regards
> Thomas
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hi Louis,

Is your Windows 7 fully up to date? Are your RSAT tools up to date?
For me, this simply does not work. No matter which Samba version I try.
I checked the permissions once again (FQDN vs. NetBIOS etc.) and I even tried your enumports script. I get all the ports but no printers even though they are connected to one of the ports. On Windows 8 and up everything is alright. I think I won't get around of having to write a bug report including a tcpdump etc.

Do you have a WINS server setup?

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hai,

Just checked, no, i did missed 2 KB's
KB4041681 and october cleanup kb890830.
I've installed them now, rebooting and i'll go setup a new printer, and try again.
See what happens. I'll report back.

Greetz,

Louis




> -----Oorspronkelijk bericht-----
> Van: Thomas Keppler [mailto:[hidden email]]
> Verzonden: dinsdag 10 oktober 2017 22:21
> Aan: L.P.H. van Belle
> CC: [hidden email]
> Onderwerp: Re: [Samba] RSAT Print Management won't show
> shared printers under the "Printers" section
>
> Hi Louis,
>
> Is your Windows 7 fully up to date? Are your RSAT tools up to date?
> For me, this simply does not work. No matter which Samba
> version I try.
> I checked the permissions once again (FQDN vs. NetBIOS etc.)
> and I even tried your enumports script. I get all the ports
> but no printers even though they are connected to one of the
> ports. On Windows 8 and up everything is alright. I think I
> won't get around of having to write a bug report including a
> tcpdump etc.
>
> Do you have a WINS server setup?
>
> --
> Best regards
> Thomas
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers under the "Printers" section

Samba - General mailing list
Hai,


I can confirm that when KB4041681 is installed, a new printer isnt shown in the print manager.
You can confirm it youself also.

Follow the these steps.  ( with or without the KB installed )
add printer in cups through webinterface, ( other network printers / HP Jet direct ) Add socket: socket://hostname:9100 Ext, name disc loc connection: ( socket ) Enabled Share This Printer.

Driver RAW.
Model Raw Queue
Add printer, banner none.
Cups result : Printer Test default options have been set successfully.  

Now, it takes a few min before its shown in the print manager ( if the KB is not installed )
So wait 5 min.
Then start Print management

If kb is not installed, you will see you printer.
Now, install the KB, reboot the pc.

Repeat the cups create a printer.
Again wait 5 min, 10-20 min, nothing in printer manager.

Remove the KB, reboot the PC, start print manager, and there is your printer.

So this KB is giving problems.

Test setup:
Debian Stretch 9.2
Samba 4.6.8 ( debian package of my own apt. )
Samba Member dedicated print server setup. AD backend.
Package list :

Samba and cups dont show any errors.
I've reviews all windows events.. Yes all.




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:[hidden email]] Namens
> L.P.H. van Belle via samba
> Verzonden: woensdag 11 oktober 2017 14:34
> Aan: [hidden email]
> Onderwerp: Re: [Samba] RSAT Print Management won't show
> shared printers under the "Printers" section
>
> Hai,
>
> Just checked, no, i did missed 2 KB's
> KB4041681 and october cleanup kb890830.
> I've installed them now, rebooting and i'll go setup a new
> printer, and try again.
> See what happens. I'll report back.
>
> Greetz,
>
> Louis
>
>
>
>
> > -----Oorspronkelijk bericht-----
> > Van: Thomas Keppler [mailto:[hidden email]]
> > Verzonden: dinsdag 10 oktober 2017 22:21
> > Aan: L.P.H. van Belle
> > CC: [hidden email]
> > Onderwerp: Re: [Samba] RSAT Print Management won't show shared
> > printers under the "Printers" section
> >
> > Hi Louis,
> >
> > Is your Windows 7 fully up to date? Are your RSAT tools up to date?
> > For me, this simply does not work. No matter which Samba version I
> > try.
> > I checked the permissions once again (FQDN vs. NetBIOS etc.) and I
> > even tried your enumports script. I get all the ports but
> no printers
> > even though they are connected to one of the ports. On
> Windows 8 and
> > up everything is alright. I think I won't get around of having to
> > write a bug report including a tcpdump etc.
> >
> > Do you have a WINS server setup?
> >
> > --
> > Best regards
> > Thomas
> >
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers underthe "Printers" section

Samba - General mailing list
In reply to this post by Samba - General mailing list
+  ( grr ctrl+e again.. ) now i go disable these shortcut key first.

And no messages in the windows event logs. So very annoying to find.

Package list debian.
ii  cups                                  2.2.1-8                        amd64        Common UNIX Printing System(tm) - PPD/driver support, web interface
ii  cups-browsed                          1.11.6-3                       amd64        OpenPrinting CUPS Filters - cups-browsed
ii  cups-bsd                              2.2.1-8                        amd64        Common UNIX Printing System(tm) - BSD commands
ii  cups-client                           2.2.1-8                        amd64        Common UNIX Printing System(tm) - client programs (SysV)
ii  cups-common                           2.2.1-8                        all          Common UNIX Printing System(tm) - common files
ii  cups-core-drivers                     2.2.1-8                        amd64        Common UNIX Printing System(tm) - PPD-less printing
ii  cups-daemon                           2.2.1-8                        amd64        Common UNIX Printing System(tm) - daemon
ii  cups-filters                          1.11.6-3                       amd64        OpenPrinting CUPS Filters - Main Package
ii  cups-filters-core-drivers             1.11.6-3                       amd64        OpenPrinting CUPS Filters - PPD-less printing
ii  cups-ppdc                             2.2.1-8                        amd64        Common UNIX Printing System(tm) - PPD manipulation utilities
ii  cups-server-common                    2.2.1-8                        all          Common UNIX Printing System(tm) - server common files
ii  krb5-config                           2.6                            all          Configuration files for Kerberos Version 5
ii  krb5-locales                          1.15-1                         all          internationalization support for MIT Kerberos
ii  krb5-user                             1.15-1                         amd64        basic programs to authenticate using MIT Kerberos
ii  libcups2:amd64                        2.2.1-8                        amd64        Common UNIX Printing System(tm) - Core library
ii  libcupscgi1:amd64                     2.2.1-8                        amd64        Common UNIX Printing System(tm) - CGI library
ii  libcupsfilters1:amd64                 1.11.6-3                       amd64        OpenPrinting CUPS Filters - Shared library
ii  libcupsimage2:amd64                   2.2.1-8                        amd64        Common UNIX Printing System(tm) - Raster image library
ii  libcupsmime1:amd64                    2.2.1-8                        amd64        Common UNIX Printing System(tm) - MIME library
ii  libcupsppdc1:amd64                    2.2.1-8                        amd64        Common UNIX Printing System(tm) - PPD manipulation library
ii  libgssapi-krb5-2:amd64                1.15-1                         amd64        MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii  libkrb5-3:amd64                       1.15-1                         amd64        MIT Kerberos runtime libraries
ii  libkrb5support0:amd64                 1.15-1                         amd64        MIT Kerberos runtime libraries - Support library
ii  libnss-winbind:amd64                  2:4.6.8+nmu-1~deb9             amd64        Samba nameservice integration plugins
ii  libpam-krb5:amd64                     4.7-4                          amd64        PAM module for MIT Kerberos
ii  libpam-winbind:amd64                  2:4.6.8+nmu-1~deb9             amd64        Windows domain authentication integration plugin
ii  libwbclient0:amd64                    2:4.6.8+nmu-1~deb9             amd64        Samba winbind client library
ii  python-samba                          2:4.6.8+nmu-1~deb9             amd64        Python bindings for Samba
ii  samba                                 2:4.6.8+nmu-1~deb9             amd64        SMB/CIFS file, print, and login server for Unix
ii  samba-common                          2:4.6.8+nmu-1~deb9             all          common files used by both the Samba server and client
ii  samba-common-bin                      2:4.6.8+nmu-1~deb9             amd64        Samba common files used by both the server and the client
ii  samba-dsdb-modules                    2:4.6.8+nmu-1~deb9             amd64        Samba Directory Services Database
ii  samba-libs:amd64                      2:4.6.8+nmu-1~deb9             amd64        Samba core libraries
ii  samba-vfs-modules                     2:4.6.8+nmu-1~deb9             amd64        Samba Virtual FileSystem plugins
ii  ssh-krb5                              1:7.4p1-10+deb9u1              all          secure shell client and server (transitional package)
ii  winbind                               2:4.6.8+nmu-1~deb9             amd64        service to resolve user and group information from Windows NT servers

Happend in Windows 7 64bit, i havent tested win10 since i dont have one ready for management.
So if someone has, and also has this problem, please test and report back also.

Greetz,

Louis



> -----Oorspronkelijk bericht-----
> Van: L.P.H. van Belle [mailto:[hidden email]]
> Verzonden: woensdag 11 oktober 2017 15:14
> Aan: '[hidden email]'
> CC: '[hidden email]'; 'Marc Muehlfeld'
> Onderwerp: RE: [Samba] RSAT Print Management won't show
> shared printers under the "Printers" section
>
> Hai,
>
>
> I can confirm that when KB4041681 is installed, a new printer
> isnt shown in the print manager.
> You can confirm it youself also.
>
> Follow the these steps.  ( with or without the KB installed )
> add printer in cups through webinterface, ( other network
> printers / HP Jet direct ) Add socket: socket://hostname:9100
> Ext, name disc loc connection: ( socket ) Enabled Share This Printer.
>
> Driver RAW.
> Model Raw Queue
> Add printer, banner none.
> Cups result : Printer Test default options have been set
> successfully.  
>
> Now, it takes a few min before its shown in the print manager
> ( if the KB is not installed ) So wait 5 min.
> Then start Print management
>
> If kb is not installed, you will see you printer.
> Now, install the KB, reboot the pc.
>
> Repeat the cups create a printer.
> Again wait 5 min, 10-20 min, nothing in printer manager.
>
> Remove the KB, reboot the PC, start print manager, and there
> is your printer.
>
> So this KB is giving problems.
>
> Test setup:
> Debian Stretch 9.2
> Samba 4.6.8 ( debian package of my own apt. ) Samba Member
> dedicated print server setup. AD backend.
> Package list :
>
> Samba and cups dont show any errors.
> I've reviews all windows events.. Yes all.
>
>
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:[hidden email]] Namens L.P.H. van
> > Belle via samba
> > Verzonden: woensdag 11 oktober 2017 14:34
> > Aan: [hidden email]
> > Onderwerp: Re: [Samba] RSAT Print Management won't show shared
> > printers under the "Printers" section
> >
> > Hai,
> >
> > Just checked, no, i did missed 2 KB's
> > KB4041681 and october cleanup kb890830.
> > I've installed them now, rebooting and i'll go setup a new printer,
> > and try again.
> > See what happens. I'll report back.
> >
> > Greetz,
> >
> > Louis
> >
> >
> >
> >
> > > -----Oorspronkelijk bericht-----
> > > Van: Thomas Keppler [mailto:[hidden email]]
> > > Verzonden: dinsdag 10 oktober 2017 22:21
> > > Aan: L.P.H. van Belle
> > > CC: [hidden email]
> > > Onderwerp: Re: [Samba] RSAT Print Management won't show shared
> > > printers under the "Printers" section
> > >
> > > Hi Louis,
> > >
> > > Is your Windows 7 fully up to date? Are your RSAT tools
> up to date?
> > > For me, this simply does not work. No matter which Samba
> version I
> > > try.
> > > I checked the permissions once again (FQDN vs. NetBIOS
> etc.) and I
> > > even tried your enumports script. I get all the ports but
> > no printers
> > > even though they are connected to one of the ports. On
> > Windows 8 and
> > > up everything is alright. I think I won't get around of having to
> > > write a bug report including a tcpdump etc.
> > >
> > > Do you have a WINS server setup?
> > >
> > > --
> > > Best regards
> > > Thomas
> > >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers underthe "Printers" section

Samba - General mailing list
Hi,

> Happend in Windows 7 64bit, i havent tested win10 since i dont have one ready for management.
> So if someone has, and also has this problem, please test and report back also.
On Windows 8.1 and 10 it has always worked for me.

Guys, I seem to have the "solution":

Out of curiosity, I activated WINS on the DC by adding those lines to the smb.conf (the rest of the file was the auto generated one from the DC promotion):
------------ 8< ------------
[global]
[...]
wins support = yes
name resolve order = wins lmhosts hosts bcast
local master = yes
preferred master = yes
domain master = yes
os level = 255
[...]
------------ >8 ------------

...and by extending my DHCP config like so (192.168.0.253 is my DC):
------------ 8< ------------
subnet 192.168.0.0 netmask 255.255.255.0 {
[...]
  option netbios-name-servers 192.168.0.253;
[...]
}
------------ >8 ------------

net view on Windows 7 did not immediately want to work, for some reason I had to enable network discovery in the "Advanced file sharing settings" like so: https://imgur.com/9wdFLpC <https://imgur.com/9wdFLpC>

Et voilà, printers!
https://imgur.com/jUpqt53 <https://imgur.com/jUpqt53>

My final smb.conf on the printserver is:
------------ 8< ------------
[global]
security = ADS
workgroup = EXAMPLE
realm = AD.EXAMPLE.COM

log file = /var/log/samba/%m.log
log level = 1

idmap config * : backend = tdb
idmap config * : range = 10000 - 19999
idmap config EXAMPLE : backend = rid
idmap config EXAMPLE : range = 1000000 - 1999999

winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind refresh tickets = yes

template homedir = /home/%D/%U
template shell = /bin/bash

client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
restrict anonymous = 2

domain master = no
local master = no
preferred master = no
os level = 0

load printers = yes
rpc_server:spoolss = external
rpc_daemon:spoolssd = fork

[printers]
path = /var/spool/samba
printable = yes
printing = CUPS

[print$]
comment = Print drivers
path = /var/lib/samba/drivers
create mask = 0775
inherit permissions = yes
guest ok = no
read only = no
------------ >8 ------------

Adding a new printer in CUPS works like a charm. After about 15min of waiting, the printer appears in the Print Management console.

NOTE: I didn't have to do ANY of this on Windows 8.1/10, including I didn't need WINS on those systems. The Windows 7 machine I used was up-to-date (even with the KB installed mentioned by Louis).

I will try to setup Samba once again using that config from scratch (DC, fileserver and printserver) on the weekend to see if it's solved now for me. That will also be the test to determine if I write a bug report or instead improve the documentation at this point because right now, it just seems like Windows 7 is a bit picky of whom it's talking to.

@Louis, @Marc: Can you two please test out the setup using WINS, making sure to enable the network discovery and file sharing on Windows 7? I would be really interested to see if that fixes your problems, too.

Thank you!

--
Best regards
Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: RSAT Print Management won't show shared printers underthe "Printers" section

Samba - General mailing list
Hai Thomas,
 
Thanks for figuring that out and reporting back. First i go install the latest update again.
Then i'll go check again against your findings. I think i waited to short with the KB installed.
But as said, i'll go try that again.
.... And done, and great, you totaly right about that his worked with the KB. It only takes more time.
Almost exact 15min. And everything works as it should.

And i hope Marc or Rowland, can give a good comment on the paramaters set what i show here.
Now, i do beleave that you make the right direction, and solved a problem by settting a wrong setting.  ;-)
And that somehow fixed you problem.
 
> I activated WINS on the DC.
wins support = yes    , but if i read man smb.conf : wins support.
it stats, This boolean controls if the nmbd(8) process in Samba will act as a WINS server.
but nmbd is not started in an AD DC.
 
local master = yes
This option allows nmbd(8)  ..   see above. AD DC no nmbd.
preferred master...  see above. AD DC no nmbd.  

If you took the settings you found for my example thats ok, but, i have a other server setup as master browser.
in that config i have this part . ( my file server with the profiles and user home )
 
    # set master browser for the network.
    # preffered + domain master = guarantee master browser ( man smb.conf )
    preferred master = yes
    domain master = yes
 
    interfaces = 192.168.0.2 127.0.0.1
    bind interfaces only = yes
    dns proxy = yes
    wins support = yes

The combination of these parameters,should be set on a member server since nmbd is started there.

Nw the dns proxy = yes settings.
Specifies that nmbd(8) when acting as a WINS server and finding that a NetBIOS name has not
been registered, should treat the NetBIOS name word-for-word as a DNS name.

Now if you going it reinstall this all, then i suggest, do have a look at my howtos.
l'll try to add my print server config today or tomorrow. ( but already here on the list also ),
its basicly a snap of the member (fileserver) howto, but with some changes in both member for
the wins and master browser setup. ) and the needed packages for cups etc.


Greetz,
 
Louis
 
 



________________________________

        Van: Thomas Keppler [mailto:[hidden email]]
        Verzonden: woensdag 11 oktober 2017 23:28
        Aan: L.P.H. van Belle
        CC: [hidden email]; Marc Muehlfeld
        Onderwerp: Re: [Samba] RSAT Print Management won't show shared printers underthe "Printers" section
       
       
        Hi,


                Happend in Windows 7 64bit, i havent tested win10 since i dont have one ready for management.
                So if someone has, and also has this problem, please test and report back also.
               

        On Windows 8.1 and 10 it has always worked for me.

        Guys, I seem to have the "solution":

        Out of curiosity, I activated WINS on the DC by adding those lines to the smb.conf (the rest of the file was the auto generated one from the DC promotion):
        ------------ 8< ------------
        [global]
        [...]
        wins support = yes
        name resolve order = wins lmhosts hosts bcast
        local master = yes
        preferred master = yes
        domain master = yes
        os level = 255
        [...]
        ------------ >8 ------------

        ...and by extending my DHCP config like so (192.168.0.253 is my DC):
        ------------ 8< ------------
        subnet 192.168.0.0 netmask 255.255.255.0 {
        [...]
          option netbios-name-servers 192.168.0.253;
        [...]
        }
        ------------ >8 ------------

        net view on Windows 7 did not immediately want to work, for some reason I had to enable network discovery in the "Advanced file sharing settings" like so: https://imgur.com/9wdFLpC
       
       
        Et voilà, printers!
        https://imgur.com/jUpqt53

        My final smb.conf on the printserver is:
        ------------ 8< ------------
        [global]
        security = ADS
        workgroup = EXAMPLE
        realm = AD.EXAMPLE.COM

        log file = /var/log/samba/%m.log
        log level = 1

        idmap config * : backend = tdb
        idmap config * : range = 10000 - 19999
        idmap config EXAMPLE : backend = rid
        idmap config EXAMPLE : range = 1000000 - 1999999
       
       
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        winbind refresh tickets = yes

        template homedir = /home/%D/%U
        template shell = /bin/bash

        client use spnego = yes
        client ntlmv2 auth = yes
        encrypt passwords = yes
        restrict anonymous = 2

        domain master = no
        local master = no
        preferred master = no
        os level = 0

        load printers = yes
        rpc_server:spoolss = external
        rpc_daemon:spoolssd = fork

        [printers]
        path = /var/spool/samba
        printable = yes
        printing = CUPS

        [print$]
        comment = Print drivers
        path = /var/lib/samba/drivers
        create mask = 0775
        inherit permissions = yes
        guest ok = no
        read only = no
        ------------ >8 ------------

        Adding a new printer in CUPS works like a charm. After about 15min of waiting, the printer appears in the Print Management console.
       
       
        NOTE: I didn't have to do ANY of this on Windows 8.1/10, including I didn't need WINS on those systems. The Windows 7 machine I used was up-to-date (even with the KB installed mentioned by Louis).
       
       
        I will try to setup Samba once again using that config from scratch (DC, fileserver and printserver) on the weekend to see if it's solved now for me. That will also be the test to determine if I write a bug report or instead improve the documentation at this point because right now, it just seems like Windows 7 is a bit picky of whom it's talking to.

        @Louis, @Marc: Can you two please test out the setup using WINS, making sure to enable the network discovery and file sharing on Windows 7? I would be really interested to see if that fixes your problems, too.
       
       
        Thank you!

        --
        Best regards
        Thomas



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba