LINUX.ORG.RU
Форум — Admin  

Samba не даёт подключиться к принтерам!

 , ,


0

1

Всем привет коллеги! Подскажите поднял smb + cups. Добавил пару принтеров. Зайдя на smb сервер c виндовой машины я вижу эти 2 принтера, но подключиться к ним не могу.

Ошибка «Указанное сетевое имя более не доступно!».

В логах log.smbd.spoolssd вот такие вот записи:

[2022/10/17 06:37:05.522953, 0] ../../auth/gensec/gensec.c:306(gensec_verify_features) Did not manage to negotiate mandatory feature SIGN

[2022/10/17 06:37:09.669941, 0] ../../auth/gensec/gensec.c:306(gensec_verify_features) Did not manage to negotiate mandatory feature SIGN

[2022/10/17 06:37:09.711370, 0] ../../auth/gensec/gensec.c:306(gensec_verify_features) Did not manage to negotiate mandatory feature SIGN



Последнее исправление: Alexey_G (всего исправлений: 1)

Ответ на: комментарий от cashalot

Global parameters

[global]

    log file = /var/log/samba/log.%m
    passdb backend = smbpasswd
    security = USER
    server role = standalone server
    server string = Test Fileserver Samba
    smb passwd file = /etc/samba/smbusers
    rpc_daemon: spoolssd = fork
    rpc_server: spoolss = external
    idmap config * : backend = tdb

[printers]

    browseable = No
    comment = All Printers
    create mask = 0700
    guest ok = Yes
    path = /var/spool/samba
    printable = Yes

[print$]

    comment = Printer Drivers
    path = /var/lib/samba/printers
    write list = root @lpadmin
Alexey_G
() автор топика
Ответ на: комментарий от Alexey_G

Думаю, что надо сначала определиться с версиями SMB протокола, поддерживаемые вашей виндой:

Как проверить поддерживаемые версии SMB в Windows?

https://winitpro.ru/index.php/2014/12/01/podderzhka-smb-1-0-v-windows-server-...

После этого играться с указанными параметрами server signing и client signing:

server signing (G)

    This controls whether the client is allowed or required to use SMB1 and SMB2 signing. Possible values are default, auto, mandatory and disabled.

    By default, and when smb signing is set to default, smb signing is required when server role is active directory domain controller and disabled otherwise.

    When set to auto, SMB1 signing is offered, but not enforced. When set to mandatory, SMB1 signing is required and if set to disabled, SMB signing is not offered either.

    For the SMB2 protocol, by design, signing cannot be disabled. In the case where SMB2 is negotiated, if this parameter is set to disabled, it will be treated as auto. Setting it to mandatory will still require SMB2 clients to use signing.

    Default: server signing = default 



client signing (G)

    This controls whether the client is allowed or required to use SMB signing. Possible values are desired, required and disabled.

    When set to desired or default, SMB signing is offered, but not enforced.

    When set to required, SMB signing is mandatory and if set to disabled, SMB signing is not offered either.

    IPC$ connections for DCERPC e.g. in winbindd, are handled by the client ipc signing option.

    Default: client signing = default
cashalot
()
Admin