[求助]SAMBA+cups配置打印机共享问题

cheneylou

1、环境
A电脑装ubuntu8.10系统，上面安装了cups1.39，samba3.2。连接了一台HP1022的激光打印机，共享出来给windows客户端打印。


2、问题
1、现在所有windows客户端都可以连接到ubuntu电脑上的HP1022打印机，问题是添加打印机的时候，要手动添加一下驱动。不像windows共享的时候，自动安装驱动。
2、在windows下看到共享的打印机提示：拒绝连接，访问受限；但是奇怪的是可以正常使用该打印机。
3、通过http://IP地址：631，只能在ubuntu本机上连接，再其他电脑上访问不了。

3、相关配置文件：
A、smb.conf

1. 
   
2. #
   
3. # Sample configuration file for the Samba suite for Debian GNU/Linux.
   
4. #
   
5. #
   
6. # This is the main Samba configuration file. You should read the
   
7. # smb.conf(5) manual page in order to understand the options listed
   
8. # here. Samba has a huge number of configurable options most of which
   
9. # are not shown in this example
   
10. #
    
11. # Some options that are often worth tuning have been included as
    
12. # commented-out examples in this file.
    
13. #  - When such options are commented with ";", the proposed setting
    
14. #    differs from the default Samba behaviour
    
15. #  - When commented with "#", the proposed setting is the default
    
16. #    behaviour of Samba but the option is considered important
    
17. #    enough to be mentioned here
    
18. #
    
19. # NOTE: Whenever you modify this file you should run the command
    
20. # "testparm" to check that you have not made any basic syntactic
    
21. # errors.
    
22. # A well-established practice is to name the original file
    
23. # "smb.conf.master" and create the "real" config file with
    
24. # testparm -s smb.conf.master >smb.conf
    
25. # This minimizes the size of the really used smb.conf file
    
26. # which, according to the Samba Team, impacts performance
    
27. #
    
28. 
    
29. #======================= Global Settings =======================
    
30. 
    
31. [global]
    
32. 
    
33. ## Browsing/Identification ###
    
34. 
    
35. # Change this to the workgroup/NT-domain name your Samba server will part of
    
36.    workgroup = Jimmy
    
37.     unix charset = utf8
    
38.      display charset = utf8
    
39.       dos charset = cp936
    
40. 
    
41. # server string is the equivalent of the NT Description field
    
42. # server string = sd
    
43. 
    
44. # Windows Internet Name Serving Support Section:
    
45. # WINS Support - Tells the NMBD component of Samba to enable its WINS Server
    
46. #   wins support = no
    
47. 
    
48. # WINS Server - Tells the NMBD components of Samba to be a WINS Client
    
49. # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
    
50. ;   wins server = w.x.y.z
    
51. 
    
52. # This will prevent nmbd to search for NetBIOS names through DNS.
    
53.    dns proxy = no
    
54. 
    
55. # What naming service and in what order should we use to resolve host names
    
56. # to IP addresses
    
57. ;   name resolve order = lmhosts host wins bcast
    
58. 
    
59. #### Networking ####
    
60. 
    
61. # The specific set of interfaces / networks to bind to
    
62. # This can be either the interface name or an IP address/netmask;
    
63. # interface names are normally preferred
    
64. ;   interfaces = 127.0.0.0/8 eth0
    
65. 
    
66. # Only bind to the named interfaces and/or networks; you must use the
    
67. # 'interfaces' option above to use this.
    
68. # It is recommended that you enable this feature if your Samba machine is
    
69. # not protected by a firewall or is a firewall itself.  However, this
    
70. # option cannot handle dynamic or non-broadcast interfaces correctly.
    
71. ;   bind interfaces only = yes
    
72. 
    
73. 
    
74. 
    
75. #### Debugging/Accounting ####
    
76. 
    
77. # This tells Samba to use a separate log file for each machine
    
78. # that connects
    
79.    log file = /var/log/samba/log.%m
    
80. 
    
81. # Cap the size of the individual log files (in KiB).
    
82.    max log size = 1000
    
83. 
    
84. # If you want Samba to only log through syslog then set the following
    
85. # parameter to 'yes'.
    
86. #   syslog only = no
    
87. 
    
88. # We want Samba to log a minimum amount of information to syslog. Everything
    
89. # should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
    
90. # through syslog you should set the following parameter to something higher.
    
91.    syslog = 0
    
92. 
    
93. # Do something sensible when Samba crashes: mail the admin a backtrace
    
94.    panic action = /usr/share/samba/panic-action %d
    
95. 
    
96. 
    
97. ####### Authentication #######
    
98. 
    
99. # "security = user" is always a good idea. This will require a Unix account
    
100. # in this server for every user accessing the server. See
     
101. # /usr/share/doc/samba-doc/htmldocs/Samba3-HOWTO/ServerType.html
     
102. # in the samba-doc package for details.
     
103.    security = share
     
104. 
     
105. # You may wish to use password encryption.  See the section on
     
106. # 'encrypt passwords' in the smb.conf(5) manpage before enabling.
     
107.    encrypt passwords = true
     
108. 
     
109. # If you are using encrypted passwords, Samba will need to know what
     
110. # password database type you are using.  
     
111.    passdb backend = tdbsam
     
112. 
     
113.    obey pam restrictions = yes
     
114. 
     
115. # This boolean parameter controls whether Samba attempts to sync the Unix
     
116. # password with the SMB password when the encrypted SMB password in the
     
117. # passdb is changed.
     
118.    unix password sync = yes
     
119. 
     
120. # For Unix password sync to work on a Debian GNU/Linux system, the following
     
121. # parameters must be set (thanks to Ian Kahan <<[email]kahan@informatik.tu-muenchen.de[/email]> for
     
122. # sending the correct chat script for the passwd program in Debian Sarge).
     
123.    passwd program = /usr/bin/passwd %u
     
124.    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
     
125. 
     
126. # This boolean controls whether PAM will be used for password changes
     
127. # when requested by an SMB client instead of the program listed in
     
128. # 'passwd program'. The default is 'no'.
     
129.    pam password change = yes
     
130. 
     
131. # This option controls how unsuccessful authentication attempts are mapped
     
132. # to anonymous connections
     
133. map to guest = bad user
     
134. 
     
135. ########## Domains ###########
     
136. 
     
137. # Is this machine able to authenticate users. Both PDC and BDC
     
138. # must have this setting enabled. If you are the BDC you must
     
139. # change the 'domain master' setting to no
     
140. #
     
141. ;   domain logons = yes
     
142. #
     
143. # The following setting only takes effect if 'domain logons' is set
     
144. # It specifies the location of the user's profile directory
     
145. # from the client point of view)
     
146. # The following required a [profiles] share to be setup on the
     
147. # samba server (see below)
     
148. ;   logon path = \\%N\profiles\%U
     
149. # Another common choice is storing the profile in the user's home directory
     
150. # (this is Samba's default)
     
151. #   logon path = \\%N\%U\profile
     
152. 
     
153. # The following setting only takes effect if 'domain logons' is set
     
154. # It specifies the location of a user's home directory (from the client
     
155. # point of view)
     
156. ;   logon drive = H:
     
157. #   logon home = \\%N\%U
     
158. 
     
159. # The following setting only takes effect if 'domain logons' is set
     
160. # It specifies the script to run during logon. The script must be stored
     
161. # in the [netlogon] share
     
162. # NOTE: Must be store in 'DOS' file format convention
     
163. ;   logon script = logon.cmd
     
164. 
     
165. # This allows Unix users to be created on the domain controller via the SAMR
     
166. # RPC pipe.  The example command creates a user account with a disabled Unix
     
167. # password; please adapt to your needs
     
168. ; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
     
169. 
     
170. ########## Printing ##########
     
171. 
     
172. # If you want to automatically load your printer list rather
     
173. # than setting them up individually then you'll need this
     
174.    load printers = yes
     
175. 
     
176. # lpr(ng) printing. You may wish to override the location of the
     
177. # printcap file
     
178. ;   printing = bsd
     
179. ;   printcap name = /etc/printcap
     
180. 
     
181. # CUPS printing.  See also the cupsaddsmb(8) manpage in the
     
182. # cupsys-client package.
     
183.    printing = cups
     
184.    printcap name = cups
     
185. 
     
186. ############ Misc ############
     
187. 
     
188. # Using the following line enables you to customise your configuration
     
189. # on a per machine basis. The %m gets replaced with the netbios name
     
190. # of the machine that is connecting
     
191. ;   include = /home/samba/etc/smb.conf.%m
     
192. 
     
193. # Most people will find that this option gives better performance.
     
194. # See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/Samba3-HOWTO/speed.html
     
195. # for details
     
196. # You may want to add the following on a Linux system:
     
197. #         SO_RCVBUF=8192 SO_SNDBUF=8192
     
198. #   socket options = TCP_NODELAY
     
199. 
     
200. # The following parameter is useful only if you have the linpopup package
     
201. # installed. The samba maintainer and the linpopup maintainer are
     
202. # working to ease installation and configuration of linpopup and samba.
     
203. ;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
     
204. 
     
205. # Domain Master specifies Samba to be the Domain Master Browser. If this
     
206. # machine will be configured as a BDC (a secondary logon server), you
     
207. # must set this to 'no'; otherwise, the default behavior is recommended.
     
208. #   domain master = auto
     
209. 
     
210. # Some defaults for winbind (make sure you're not using the ranges
     
211. # for something else.)
     
212. ;   idmap uid = 10000-20000
     
213. ;   idmap gid = 10000-20000
     
214. ;   template shell = /bin/bash
     
215. 
     
216. # The following was the default behaviour in sarge,
     
217. # but samba upstream reverted the default because it might induce
     
218. # performance issues in large organizations.
     
219. # See Debian bug #368251 for some of the consequences of *not*
     
220. # having this setting and smb.conf(5) for details.
     
221. ;   winbind enum groups = yes
     
222. ;   winbind enum users = yes
     
223. 
     
224. # Setup usershare options to enable non-root users to share folders
     
225. # with the net usershare command.
     
226. 
     
227. # Maximum number of usershare. 0 (default) means that usershare is disabled.
     
228. ;   usershare max shares = 100
     
229. 
     
230. # Allow users who've been granted usershare privileges to create
     
231. # public shares, not just authenticated ones
     
232.    usershare allow guests = yes
     
233. 
     
234. #======================= Share Definitions =======================
     
235. 
     
236. # Un-comment the following (and tweak the other settings below to suit)
     
237. # to enable the default home directory shares.  This will share each
     
238. # user's home directory as \\server\username
     
239. ;[homes]
     
240. ;   comment = Home Directories
     
241. ;   browseable = no
     
242. 
     
243. # By default, the home directories are exported read-only. Change the
     
244. # next parameter to 'no' if you want to be able to write to them.
     
245. ;   read only = yes
     
246. 
     
247. # File creation mask is set to 0700 for security reasons. If you want to
     
248. # create files with group=rw permissions, set next parameter to 0775.
     
249. ;   create mask = 0700
     
250. 
     
251. # Directory creation mask is set to 0700 for security reasons. If you want to
     
252. # create dirs. with group=rw permissions, set next parameter to 0775.
     
253. ;   directory mask = 0700
     
254. 
     
255. # By default, \\server\username shares can be connected to by anyone
     
256. # with access to the samba server.  Un-comment the following parameter
     
257. # to make sure that only "username" can connect to \\server\username
     
258. # This might need tweaking when using external authentication schemes
     
259. ;   valid users = %S
     
260. 
     
261. # Un-comment the following and create the netlogon directory for Domain Logons
     
262. # (you need to configure Samba to act as a domain controller too.)
     
263. ;[netlogon]
     
264. ;   comment = Network Logon Service
     
265. ;   path = /home/samba/netlogon
     
266. ;   guest ok = yes
     
267. ;   read only = yes
     
268. ;   share modes = no
     
269. 
     
270. # Un-comment the following and create the profiles directory to store
     
271. # users profiles (see the "logon path" option above)
     
272. # (you need to configure Samba to act as a domain controller too.)
     
273. # The path below should be writable by all users so that their
     
274. # profile directory may be created the first time they log on
     
275. ;[profiles]
     
276. ;   comment = Users profiles
     
277. ;   path = /home/samba/profiles
     
278. ;   guest ok = no
     
279. ;   browseable = no
     
280. ;   create mask = 0600
     
281. ;   directory mask = 0700
     
282. 
     
283. [printers]
     
284.    comment = All Printers
     
285.    browseable = yes
     
286.    path = /var/spool/samba
     
287.    printable = yes
     
288.    guest ok = yes
     
289.    read only = no
     
290.    create mask = 0700
     
291. 
     
292. # Windows clients look for this share name as a source of downloadable
     
293. # printer drivers
     
294. [print$]
     
295.    comment = Printer Drivers
     
296.    path = /var/lib/samba/printers
     
297.    browseable = yes
     
298.    read only = no
     
299.    guest ok = yes
     
300. # Uncomment to allow remote administration of Windows print drivers.
     
301. # Replace 'ntadmin' with the name of the group your admin users are
     
302. # members of.
     
303. ;   write list = root, @ntadmin
     
304. 
     
305. # A sample share for sharing your CD-ROM with others.
     
306. ;[cdrom]
     
307. ;   comment = Samba server's CD-ROM
     
308. ;   read only = yes
     
309. ;   locking = no
     
310. ;   path = /cdrom
     
311. ;   guest ok = yes
     
312. 
     
313. # The next two parameters show how to auto-mount a CD-ROM when the
     
314. #        cdrom share is accesed. For this to work /etc/fstab must contain
     
315. #        an entry like this:
     
316. #
     
317. #       /dev/scd0   /cdrom  iso9660 defaults,noauto,ro,user   0 0
     
318. #
     
319. # The CD-ROM gets unmounted automatically after the connection to the
     
320. #
     
321. # If you don't want to use auto-mounting/unmounting make sure the CD
     
322. #        is mounted on /cdrom
     
323. #
     
324. ;   preexec = /bin/mount /cdrom
     
325. ;   postexec = /bin/umount /cdrom
     
326. [D]
     
327. path = /media/disk/d
     
328. browseable = yes
     
329. read only = no
     
330. guest ok = yes
     
331. public = yes
     
332. [共享]
     
333. path= /media/disk-1/共享
     
334. browseable = yes
     
335. read only = no
     
336. guest ok = yes
     
337. public = yes
     

复制代码

B、cupsd.conf

1. 
   
2. LogLevel warning
   
3. SystemGroup lpadmin
   
4. # Allow remote access
   
5. Port 631
   
6. Listen /var/run/cups/cups.sock
   
7. # Share local printers on the local network.
   
8. Browsing On
   
9. BrowseOrder allow,deny
   
10. BrowseAddress @LOCAL
    
11. DefaultAuthType Basic
    
12. <Location />
    
13.   Allow From 192.168.1.0/28
    
14.   # Allow shared printing and remote administration...
    
15.   Order allow,deny
    
16.   Allow all
    
17. </Location>
    
18. <Location /admin>
    
19.   Encryption Required
    
20.   # Allow remote administration...
    
21.   Order allow,deny
    
22.   Allow all
    
23. </Location>
    
24. <Location /admin/conf>
    
25.   AuthType Default
    
26.   Require user @SYSTEM
    
27.   # Allow remote access to the configuration files...
    
28.   Order allow,deny
    
29.   Allow all
    
30. </Location>
    
31. <Policy default>
    
32.   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
    
33.     Require user @OWNER @SYSTEM
    
34.     Order deny,allow
    
35.   </Limit>
    
36.   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    
37.     AuthType Default
    
38.     Require user @SYSTEM
    
39.     Order deny,allow
    
40.   </Limit>
    
41.   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
    
42.     AuthType Default
    
43.     Require user @SYSTEM
    
44.     Order deny,allow
    
45.   </Limit>
    
46.   <Limit CUPS-Authenticate-Job>
    
47.     Require user @OWNER @SYSTEM
    
48.     Order deny,allow
    
49.   </Limit>
    
50.   <Limit All>
    
51.     Order deny,allow
    
52.   </Limit>
    
53. </Policy>
    

复制代码

[ 本帖最后由 cheneylou 于 2009-2-24 10:00 编辑 ]

kns1024wh

lz测试的现象正常
添加打印机需要驱动信息设置一下的，在就是cups需要设置ip访问信息

tiansky

关注一下