Univention Bugzilla – Bug 54156
96univention-samba4.inst grant SePrintOperatorPrivilege
Last modified: 2023-01-18 18:46:23 CET
We should consider granting the privilege for printer drivers so that users can upload and preconfigure printer drivers for samba4/role=DC. While univention-samba/26univention-samba.inst does that in L342-243 for older versions of Samba, but for current Samba installations univention-samba4/96univention-samba4.inst does not grant SePrintOperatorPrivilege # set default printer permissions net rpc rights -U"$samba_account"%"$samba_pwd" grant Printer-Admins SePrintOperatorPrivilege net rpc rights -U"$samba_account"%"$samba_pwd" grant Administrator SePrintOperatorPrivilege A customer reported that adding these rights for UCS4, successfully resolved the problem described in the forum: https://help.univention.com/t/problem-with-my-newest-windows-client-i-cant-upload-printerdrivers/18889 See also: https://docs.software-univention.de/handbuch-4.4.html#print-services:winclients https://wiki.samba.org/index.php/Setting_up_Automatic_Printer_Driver_Downloads_for_Windows_Clients
Workaround for Administrator user: Check current situation about the SePrintOperatorPrivilege flag # net rpc rights -U"$(hostname -d)\Administrator" list privileges SePrintOperatorPrivilege Manually set SePrintOperatorPrivilege # net rpc rights -U"$(hostname -d)\Administrator" grant "$(hostname -d)\Administrator" SePrintOperatorPrivilege
Gilt für UCS 4.4 und UCS 5.0
232f5a9185 | Grant SePrintOperatorPrivilege to Administrator and Printer-Admins Package: univention-samba4 Version: 9.0.8-10A~5.0.0.202301161733 Branch: ucs_5.0-0 Scope: errata5.0-2
OK: Administrator gets printer privilege OK: Domain Admins get printer privilege OK: YAML OK: Package update/install Verified
<https://errata.software-univention.de/#/?erratum=5.0x547>