[Pkg-samba-maint] Bug#740266: samba: cupsaddsmb does not work after squeeze->wheezy upgrade

[SZABO Zsolt]

Package: samba
Version: 2:3.6.6-6+deb7u2
Severity: normal

Dear Maintainer,

Earlier I installed CUPS printer drivers for windows printing according to
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/CUPS-printing.html#id2641105
using cupsaddsmb, e.g.:
galilei:# smbpasswd -e root && cupsaddsmb -H galilei -U root cups-pdf && smbpasswd -d root

After upgrading our linux server to wheezy this does not work anymore;
I get a lot of NT_STATUS_ACCESS_DENIED message, e.g.:

galilei:# cupsaddsmb -H galilei -U root -v xerox
Password for root required to access galilei via SAMBA: 
Running command: smbclient //galilei/print$ -N -A /tmp/065c35315eeae -c
'mkdir W32X86;put /tmp/065c353194ce4 W32X86/xerox.ppd;put
/usr/share/cups/drivers/ps5ui.dll W32X86/ps5ui.dll;put
//usr/share/cups/drivers/pscript.hlp W32X86/pscript.hlp;put
///usr/share/cups/drivers/pscript.ntf W32X86/pscript.ntf;put
////usr/share/cups/drivers/pscript5.dll W32X86/pscript5.dll'
WARNING: The "password level" option is deprecated
Domain=[MM] OS=[Unix] Server=[Samba 3.6.6]
NT_STATUS_MEDIA_WRITE_PROTECTED making remote directory \W32X86
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/xerox.ppd
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/ps5ui.dll
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/pscript.hlp
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/pscript.ntf
NT_STATUS_ACCESS_DENIED opening remote file \W32X86/pscript5.dll

Unable to copy Windows 2000 printer driver files (1).

The dirs are as follows:
galilei:# ls -la /var/lib/samba/printers/
total 40
drwxr-xr-x 10 root root 4096 Oct 22  2009 .
drwxr-xr-x  5 root root 4096 Feb 27 13:54 ..
drwxr-xr-x  2 root root 4096 Oct 10  2009 COLOR
drwxr-xr-x  2 root root 4096 Oct 10  2009 IA64
drwxr-xr-x  2 root root 4096 Oct 10  2009 W32ALPHA
drwxr-xr-x  2 root root 4096 Oct 10  2009 W32MIPS
drwxr-xr-x  2 root root 4096 Oct 10  2009 W32PPC
drwxr-xr-x  3 root root 4096 Mar  7  2011 W32X86
drwxr-xr-x  3 root root 4096 Oct 30  2009 WIN40
drwxr-xr-x  2 root root 4096 Oct 10  2009 x64

I have also tried to add a regular user (szazs) to the write list of the
share [print$], with no luck (I got the same otuput).

Removing the "guest ok = Yes" option from the [print$] share, it seems 
that I cannot access the share as root. As szazs it is OK, however, then I 
have no write access to the dirs below /var/lib/samba/printers.

galilei:# smbclient -U root //galilei/print\$
WARNING: The "password level" option is deprecated
Enter root's password:
Domain=[MM] OS=[Unix] Server=[Samba 3.6.6]
tree connect failed: NT_STATUS_ACCESS_DENIED

How can I enable the root to access this share?
Or should I change the owners of /var/lib/samba/printers ?

TIA,
Zsolt
PS: smb.conf


-- System Information:
Debian Release: 7.4
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/8 CPU cores)
Locale: LANG=hu_HU, LC_CTYPE=hu_HU (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/bash

Versions of packages samba depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  dpkg                   1.16.12
ii  libacl1                2.2.51-8
ii  libattr1               1:2.4.46-8
ii  libc6                  2.13-38+deb7u1
ii  libcap2                1:2.22-1.2
ii  libcomerr2             1.42.5-1.1
ii  libcups2               1.5.3-5+deb7u1
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u1
ii  libk5crypto3           1.10.1+dfsg-5+deb7u1
ii  libkrb5-3              1.10.1+dfsg-5+deb7u1
ii  libldap-2.4-2          2.4.31-1+nmu2
ii  libpam-modules         1.1.3-7.1
ii  libpam-runtime         1.1.3-7.1
ii  libpam0g               1.1.3-7.1
ii  libpopt0               1.16-7
ii  libtalloc2             2.0.7+git20120207-1
ii  libtdb1                1.2.10-2
ii  libwbclient0           2:3.6.6-6+deb7u2
ii  lsb-base               4.1+Debian8+deb7u1
ii  procps                 1:3.3.3-3
ii  samba-common           2:3.6.6-6+deb7u2
ii  update-inetd           4.43
ii  zlib1g                 1:1.2.7.dfsg-13

Versions of packages samba recommends:
ii  logrotate  3.8.1-4
pn  tdb-tools  <none>

Versions of packages samba suggests:
pn  ctdb                              <none>
pn  ldb-tools                         <none>
ii  openbsd-inetd [inet-superserver]  0.20091229-2
pn  smbldap-tools                     <none>

-- debconf information:
   samba/nmbd_from_inetd:
* samba/log_files_moved:
* samba/tdbsam: true
* samba/generate_smbpasswd: false
* samba/run_mode: daemons
   samba-common/title:

-- 
SZS                        http://www.mm.bme.hu/~szazs
SZS            1909 POCSCS             http://www.mm.bme.hu/~szazs
Zsolt Szabo, Associate Professor	Szabó Zsolt, egyetemi docens
Department of Applied Mechanics		Műszaki Mechanikai Tanszék
         Budapest University of Technology and Economics (BME)
                  T: +36 1 463-1370, F: +36 1 463-3471
*                               Problems with Windows? Reboot!
*                               Problems with Unix?   Be root!
# An authority is a person who can tell you more about something than you
# really care to know.