Bug 1221217 - Samba printer allways requires authentication
Summary: Samba printer allways requires authentication
Status: NEW
Alias: None
Product: openSUSE Distribution
Classification: openSUSE
Component: Samba (show other bugs)
Version: Leap 15.5
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: The 'Opening Windows to a Wider World' guys
QA Contact: The 'Opening Windows to a Wider World' guys
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-03-11 02:27 UTC by Hillwood Yang
Modified: 2024-04-09 07:38 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---
scabrero: needinfo? (hillwoodroc)


Attachments
samba printer log (15.69 KB, text/x-log)
2024-03-25 01:58 UTC, Hillwood Yang
Details
bsc1221217.pcap (20.91 KB, application/vnd.tcpdump.pcap)
2024-04-09 07:38 UTC, Hillwood Yang
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Hillwood Yang 2024-03-11 02:27:01 UTC
I have a samba printer in the LAN. It have been installed successfully in openSUSE. But printing allways requires authentication even if I provide correct username and password. I try to use the smbclient to test the printer, the smbclient show me a "NT_STATUS_ACCESS_DENIED" error. And in windows, A "Remote Downlevel Document" appears in the print queue.

hillwood@localhost:~> smbclient -U administrator //10.113.90.105/CanonLBP3000
Password for [WORKGROUP\administrator]:
Try "help" to get a list of possible commands.
smb: \> print /home/hillwood/test.txt
NT_STATUS_ACCESS_DENIED opening remote file test.txt-8305
Comment 1 Hillwood Yang 2024-03-11 02:41:57 UTC
BTW, the samba printer works fine in windows clients.
Comment 2 Samuel Cabrero 2024-03-19 16:40:01 UTC
Hi Hillwood,

could you provide more details about your environment? Is the print server joined to a domain? Your windows clients might be using Kerberos authentication, have you tried to get a ticket and run smbclient with '--use-kerberos=desired'?
Comment 3 Hillwood Yang 2024-03-20 01:53:36 UTC
(In reply to Samuel Cabrero from comment #2)
> Hi Hillwood,
> 
> could you provide more details about your environment? Is the print server
> joined to a domain? Your windows clients might be using Kerberos
> authentication, have you tried to get a ticket and run smbclient with
> '--use-kerberos=desired'?

The samba server allows anonymous access. So the password is not required (in a windows client). And the server doesn't joined to a domain. I use smb://10.113.90.105 to visit it directly.
Comment 4 Samuel Cabrero 2024-03-22 14:54:41 UTC
(In reply to Hillwood Yang from comment #3)
> (In reply to Samuel Cabrero from comment #2)
> > Hi Hillwood,
> > 
> > could you provide more details about your environment? Is the print server
> > joined to a domain? Your windows clients might be using Kerberos
> > authentication, have you tried to get a ticket and run smbclient with
> > '--use-kerberos=desired'?
> 
> The samba server allows anonymous access. So the password is not required
> (in a windows client). And the server doesn't joined to a domain. I use
> smb://10.113.90.105 to visit it directly.

Could you please try

$ smbclient //10.113.90.105/CanonLBP3000 -N -d10

and attach the output, together with a network capture?

It is necessary to add -N for anon access.
Comment 5 Hillwood Yang 2024-03-25 01:58:58 UTC
Created attachment 873761 [details]
samba printer log
Comment 6 Samuel Cabrero 2024-03-27 17:02:14 UTC
(In reply to Hillwood Yang from comment #5)
> Created attachment 873761 [details]
> samba printer log

Could you attach the capture? Just run the same command while running in other terminal:

$ tcpdump -w bsc1221217.pcap -i br0 'host 10.113.90.105'
Comment 7 Hillwood Yang 2024-04-09 03:08:55 UTC
I run smbclient on other terminal. But it does not output anything useful:

pc@pc-07:~> sudo tcpdump -w bsc1221217.pcap -i br0 'host 10.113.90.105'
tcpdump: listening on br0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
Comment 8 Samuel Cabrero 2024-04-09 07:35:36 UTC
(In reply to Hillwood Yang from comment #7)
> I run smbclient on other terminal. But it does not output anything useful:
> 
> pc@pc-07:~> sudo tcpdump -w bsc1221217.pcap -i br0 'host 10.113.90.105'
> tcpdump: listening on br0, link-type EN10MB (Ethernet), snapshot length
> 262144 bytes

It should had created a file named "bsc1221217.pcap", please attach it.
Comment 9 Hillwood Yang 2024-04-09 07:38:38 UTC
Created attachment 874149 [details]
bsc1221217.pcap