Unable to connect to SAMBA host

Question

Unable to connect to SAMBA host

The MAC is connected to a network where there are several printer queues within a Windows 2000 Server.

I want to mention that I can "map" the windows server file system via SMBs without any problem. After logon I kinit to the domain, it asked my password, and then I SMB all the windows file system areas which I have access without type user name and password again.

When I add a printer thru Print & Fax, the default browser windows shows me all the printer queues to which I have access. I can select it, choose the features for the driver, etc. I can even see if the printer is busy or not.

But at the time to print, although I have my Kerberos certificate, I get the following error:

Unable to connect to SAMBA, will retry in 60 seconds, PS matching mode = Match on host. Later, appears NT STATUS_ACCESSDENIED

I tried and succeded, going thru More printers, choosing Network neighborhood, the network name, then there I look for the server and the printer within the server, then I must select for the driver, while in the browser window procedure it is already there. In this case not all drivers are present. Finally you must specify username and password; which is the real problem, as this will change from time to time and all the process must be done again.

I would like to know why the first mapping instance thru the default browser window does not work; why it isn't using the credentials already established by the KINIT?

Any suggestion please? Does anybosy knows about the way of definig these printers once, and not every time the password is changed?

Thank you all.

iMac G5, Mac OS X (10.4.8), iMac G5/ iMac G4 / eMac G4 Mac OS X (10.4.8) Motorola V555

Posted on Mar 14, 2007 3:50 PM

Reply

Answer 1

greg sahli

Level 7

25,508 points

Mar 14, 2007 7:27 PM in response to Guillermo cuervo

No, you can't make this permanent if the user:password changes.

For network printing, printer model/driver matters - please tell us which printer(s).

Reply

Answer 2

Mar 15, 2007 1:49 PM in response to greg sahli

I have tested the following models:

HP Laserjet 4250
HP Laserjet 3700
Ricoh Aficio 2016

If I must always specify the username and password, I wonder why it let me connect the printer in the first way and then the error shows up. It seems to me that something is not working, otherwise it should not let me choose it at the first time. Is this a MAC problem or a Windows problem?

Reply

Answer 3

greg sahli

Level 7

25,508 points

Mar 15, 2007 5:19 PM in response to Guillermo cuervo

Regarding the Samba authentication - I believe the password gets stored in Keychain, but I'm not 100% certain.

For the laserjets, I believe a part of your problem is driver mismatch - the printers are set up for PCL on the server (that's the default on Windows), but the Mac drivers are postscript drivers and send postscript to the server. You can fix this by changing some setting in Printer Properties on the server, or by changing the driver to the postscript one on the server.

For the Ricoh, you may find that the HP Laserjet 5 Series Gimp-Print driver works OK.

Reply

Answer 4

Mar 26, 2007 6:19 AM in response to greg sahli

I've changed the authentication process. I've created a new user in the Active Directoy. Within the MAC Directory Access utility I have the Active Directory service enabled; and in the Authentication tag I added, as a custom path, the MS Active Directory domain. Then, I logged in with the new MS Act.Dir. user I've created, which is not defined locally at the MAC in order to skip to the Active Directory for validation. I removed all the MS windows remembered passwords from the keychain. After that, I connected via SMB to the enabled file system resources for this user without problem.

Unfortunately, although I continue to see the domain printer queues and I can ADD them, when I print to one of them, I still get the same message. May be is something related with the printer queue definition at the MS Windows server. I am going to investigate around this.

So, please, if anyone has experience this problem and found a solution, let me know. What I'd like to achieve is to add the printer queue without typing a user and password, it shouldn't be necessary as the user is already validated by the MS Domain. If I add the printer (...more printers...) wit user name and password, it works, but whenever the password policy forces a password change, I need to delete all the printers and add it again with the new password.

Thank you all.

Reply

Answer 5

May 21, 2007 11:42 AM in response to Guillermo cuervo

create a dummy active directoy user ID and password that only will be used to pass through the print samba line.

Thus you do not have to change the user ID everytime the password changes.

Reply

Answer 6

Jan 6, 2009 4:50 AM in response to Guillermo cuervo

.

Reply