Printer Configuration

[Charles Curley]

--gMR3gsNFwZpnI/Ts
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, May 03, 2003 at 03:01:23PM -0600, Chuck Allison wrote:
>=20
> CC> I conjecture from your other message that you are running Red Hat 8.0
> CC> here. Also, it isn't clear whether the printer is on your Linux box (a
> CC> local printer) or on the Windows box. I'll assume the latter.
>=20
> Not sure how to use SWAT. I believe I did choose to install it.

It is web based. You may have to turn it on; try
redhat-config-services.

Try http://localhost:901. Log in as root with root's password. You can
change that and add SWAT accounts later.

>=20
> CC> * Check the Samba documentation for the versions of Windows that come
> CC>   from M$ set up to use encrypted passwords (most all recent ones). If
> CC>   you are using one of those versions, I recommend you set Samba up to
> CC>   use encrypted passwords rather than disable encrypted passords on
> CC>   the Windows box. (Again, for security.)
>=20
> I'm on a LAN with 10. addresses served by a Cisco DSL router. Is
> security a problem? (I'm sort of naive about that - I thought I was
> effectively behind a firewall of sorts).

You are behind a firewall, if you have it set up correctly.

Some thoughts on security.

* One should always be in the habit of security. For example, I live
  in a rural part of the world, but to keep up the habits I lock my
  doors and vehicles anyway.

* Firewalls are not perfect. In theory an attacker could crack your
  firewall and go from there. Layers of defense.

* I am accustomed to enterprise networks, where attacks can come from
  inside the firewall as well as from outside.

>=20
> CC> Once you've done that, check to see what is on the target computer
> CC> like so:
>=20
> CC> smbclient -L NETBIOShostname

Sorry, that should be

smbclient -L hostname

hostname and NETBIOSname are usually the same, but not always.

>=20
> CC> If you can see the shares, including the printer, you should be able
> CC> to mount file shares and set up a printer to print to the shared
> CC> printer. Use redhat-config-printer for the porpoise.
>=20
> Can't see them. I get a connection failed message.

If you got something like this, your servers aren't turned on, are
misconfigured, or else the machine's firewall is rejecting the
packets.

[ccurley at charlesc linux]$ smbclient -L teckla
Server's Role (logon server) conflicts with share-level security
added interface ip=3D192.168.1.3 bcast=3D192.168.1.255 nmask=3D255.255.255.0
error connecting to 192.168.1.32:139 (Connection refused)
Error connecting to 192.168.1.32 (Connection refused)
Connection to teckla failed

What you should see is something like:

[ccurley at charlesc linux]$ smbclient -L teckla
Server's Role (logon server) conflicts with share-level security
added interface ip=3D192.168.1.3 bcast=3D192.168.1.255 nmask=3D255.255.255.0
Password:
Domain=3D[CURLEYNET] OS=3D[Unix] Server=3D[Samba 2.2.7-security-rollup-fix]

        Sharename      Type      Comment
        ---------      ----      -------
        homes          Disk
        ftp            Disk      Teckla's FTP server
        IPC$           IPC       IPC Service (Samba 2.2.7-security-rollup-f=
ix)
        ADMIN$         Disk      IPC Service (Samba 2.2.7-security-rollup-f=
ix)
        ccurley        Disk      Home directory of ccurley

        Server               Comment
        ---------            -------
        CHARLESC             Charles' Samba Server
        TECKLA               Samba 2.2.7-security-rollup-fix

        Workgroup            Master
        ---------            -------
        CURLEYNET            CHARLESC


--=20

Charles Curley                  /"\    ASCII Ribbon Campaign
Looking for fine software       \ /    Respect for open standards
and/or writing?                  X     No HTML/RTF in email
http://www.charlescurley.com    / \    No M$ Word docs in email

Key fingerprint =3D CE5C 6645 A45A 64E4 94C0  809C FFF6 4C48 4ECD DFDB

--gMR3gsNFwZpnI/Ts
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+tRQq//ZMSE7N39sRArAzAJ41ACrFUg/kde+PBhm7EWjb07xXiACdGavL
/DnuTXb72YP6AK/zJwz0+zs=
=jl/j
-----END PGP SIGNATURE-----

--gMR3gsNFwZpnI/Ts--