Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Fixing Gimp-Print after March 24 Security Update System
While reading another hint on this site, I came across the macwindows.com site and the article "Fix for Mac OS X SMB printing woes after security update". In summary, the latest security update broke samba authentication to NT servers. In turn, this broke SMB printing using Gimp-Print. I have a printer configured in this manner and was not even aware it was broken until I read this article.

One of the proposed solutions was to reinstall older samba binaries that were replaced during the security update. Since I generally have a problem re-installing outdated binaries, I decided to go the other direction. Using Fink, I installed a newer version of samba and replaced the binaries in /usr/bin with those from /sw/bin. This fixed my problem and now I can print using SMB and Gimp-Print again.

If you read the articles on macwindows.com, they indicate you should replace smbspool, smbclient and another article suggests rpcclient. Personally, I found that my printer problems were resolved by just replacing smbspool. Having said that, I decided to update all smb* binaries and rpcclient just so I have the latest versions.

Here are the steps I performed:
  1. Using FinkCommander, I installed samba 2.2.7-1

  2. From the Terminal, execute the following commands as root:
     % cd /usr/bin
     % mkdir /samba.0324
     % ditto smb* samba.0324
     % ditto rpcclient samba.0324
     % ditto /sw/bin/smb* .
     % ditto /sw/bin/rpcclient .
All of this should be done as root. If you don't have root enabled, type "sudo bash" before any of the other commands so you don't have to "sudo" each of the other lines.
    •    
  • Currently 2.50 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (2 votes cast)
 
[9,646 views]  

Fixing Gimp-Print after March 24 Security Update | 18 comments | Create New Account
Click here to return to the 'Fixing Gimp-Print after March 24 Security Update' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Fixing Gimp-Print after March 24 Security Update
Authored by: cpac on Apr 08, '03 02:13:44PM

could you provide a little more detail - I downloaded FinkCommander no problem, but I don't have Fink installed - this is another process, and then I have to figure out what I'm supposed to download from Samba.

So could you add just a few more details? (like which Samba file to download, where to find Fink installation instructions, etc.)

thanks!

---
---------

cpac



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: cpac on Apr 08, '03 02:50:20PM

ok, so installing Fink & Fink Commander wasn't a big deal, but I still don't know how to go about installing the latest version of samba from here....

(thanks)

---
---------

cpac



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: rotaiv on Apr 08, '03 10:34:14PM

Once you have Fink and FinkCommander installed, start FinkCommander then srcroll down the list of apps until you find "samba 2.2.7-1". Control-Click on the application name then select "Source -> Install" Accept all default prompts and you should be all set. Once samba is installed, follow the steps in my original message.



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: Gonzonia on Apr 09, '03 09:00:52AM

Problem is. There is no samba in the list of packages.



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: z0mbi3 on Apr 09, '03 10:32:36AM

there is, try running 'fink index' after the next 'fink selfupdate-cvs' and check if you have the unstable tree enabled.

---
http://tomb.mine.nu



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: natenate on Apr 09, '03 11:57:37AM
The easiest solution to this problem is to revert back to the old /usr/bin/smbspool. Really, you're not making yourself vulnerable by doing this.

http://cibo.ath.cx/hold/files/smbspool.tgz

[ Reply to This | # ]

Fixing Gimp-Print after March 24 Security Update
Authored by: Gonzonia on Apr 09, '03 08:56:39PM

Sadly, none of this. Either going to the old smbspool or installing the new samba helped. I still can't print to the Samsung 1430 (same as the 1210) on my win2k machine like I could before the 10.2.4 update



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: Gonzonia on Apr 10, '03 06:52:37PM

DOH! Found the problem. I switched the machine the printer was connected to at one point and never installed the unix printing services on the windows box. Installed that and I can print again! Thanks folks!



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: ssevenup on Apr 09, '03 09:26:45PM

It's probably fine to revert to the old smbspool, but for those who want to install Samba via Fink as a fix, how about this shell script...

<code>

#!/bin/sh

# 3/24/03 OSX security update Gimp-Print Samba fix

# Look for the update
if [ ! -d /Library/Receipts/SecurityUpd2003-03-24.pkg ]; then
echo "3/24/03 Security update not detected"
exit 1
fi

# Check that we are being run as root
if [ $USER != "root" ]; then
echo "You must be root to execute this script."
echo ""
exit
fi

# Check for Fink and install Samba there in /sw/bin
if [ -x /sw/bin/fink ]; then
if [ ! -z /usr/bin/smbclient ]; then
/sw/bin/fink install samba
else
echo "Fink Samba is already installed... continuing"
fi
else
echo "Fink needs installing first"
exit 1
fi

mkdir /usr/bin/samba_0324.sav
mv /usr/bin/smb* /usr/bin/samba_0324.sav
mv /usr/bin/rpcclient /usr/bin/samba_0324.sav
ln -s /sw/bin/smbcacls /usr/bin/smbcacls
ln -s /sw/bin/smbclient /usr/bin/smbclient
ln -s /sw/bin/smbcontrol /usr/bin/smbcontrol
ln -s /sw/bin/smbpasswd /usr/bin/smbpasswd
ln -s /sw/bin/smbspool /usr/bin/smbspool
ln -s /sw/bin/smbstatus /usr/bin/smbstatus
ln -s /sw/bin/smbtar /usr/bin/smbtar
ln -s /sw/bin/smbutil /usr/bin/smbutil
ln -s /sw/bin/rpcclient /usr/bin/rpcclient

##------

It would be more useful if the <code> tag worked, but it just runs all the lines together.. sorry. Any clue what's up? I looked for a FAQ on this but I find no posting FAQ anywhere :-(

--MM

---
Mark Moorcroft
ELORET Corp. - NASA/Ames RC
Sys. Admin.



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: robt11011 on Apr 10, '03 10:08:59AM

>1. Using FinkCommander, I installed samba 2.2.7-1

I have Fink and Fink Commander installed. Samba 2.2.7-1 doesn't
appear in the NAME list, so I need some direction on how/where to get
this, and where to put it so it shows up in the list to be able to install!



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: Gonzonia on Apr 10, '03 01:19:10PM

Use Source--> Selfupdate-cvs (this will take a little while), then Source --> Utilities --> Index.



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: robt11011 on Apr 10, '03 02:27:48PM

I found that going through the drop downs, and here is what happens
there. For some reason I can login as anon???

su <my user name here> -c 'cvs -
d:pserver:anonymous@cvs.sourceforge.net:/cvsroot/fink login'

cvs: Command not found.
### execution of su failed, exit code 1

Failed: Logging into the CVS server for anonymous read-only access
failed.



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: robt11011 on Apr 10, '03 03:42:17PM

a little experimentation on my part, in areas I really have no business...
I found that cvs wasn't installed. Installed that, then did cvs-update from
shell, noticed samba in the long list of files. Updated fink index, then
found samba in list. installed in shell. Then followed directions from
ROTAIV

went to print center, selected start jobs, and the held document printed
to my windows 2k served printer!


Thanks ROTAIV, zombi3 and ssevenup



[ Reply to This | # ]
Fixes SMB printing, Gimp-Print or no
Authored by: blrutter on Apr 10, '03 06:28:46PM

I do not have Gimp-Print, but just use the drivers and access provided by Jaguar's CUPS system, through Print Center. I just installed 10.2.5, which sadly does not fix the problem introduced after the security update. I then used Fink to get the newer SAMBA packages, and only replaced /usr/bin/smbspool with /sw/bin/smbspool . My authentication-requiring windows printers now work again- thanks!

-BLR



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: robt11011 on Apr 16, '03 05:00:31PM

Not to be surprised, but the 4/10/03 Apple Mac OS X Updater 10.2.5
broke the Samba printing again. Reinstalled Samba through Fink
Commmander, then ran ssvenup's script

mkdir /usr/bin/samba_0324.sav
mv /usr/bin/smb* /usr/bin/samba_0324.sav
mv /usr/bin/rpcclient /usr/bin/samba_0324.sav
ln -s /sw/bin/smbcacls /usr/bin/smbcacls
ln -s /sw/bin/smbclient /usr/bin/smbclient
ln -s /sw/bin/smbcontrol /usr/bin/smbcontrol
ln -s /sw/bin/smbpasswd /usr/bin/smbpasswd
ln -s /sw/bin/smbspool /usr/bin/smbspool
ln -s /sw/bin/smbstatus /usr/bin/smbstatus
ln -s /sw/bin/smbtar /usr/bin/smbtar
ln -s /sw/bin/smbutil /usr/bin/smbutil
ln -s /sw/bin/rpcclient /usr/bin/rpcclient

Works again. I suppose we are going to need this after every update
now?



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: nikitaurzbv on Apr 27, '03 06:11:21PM

Why 0324 ??? Where do these numbers come from?

---
/ Nikita



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: shavital on Sep 02, '03 05:39:24PM

I have followed all the steps, installed Samba and ran the CLI indicated.
When trying to print from an iBook networked via AirPort card, to a HP 5550 printer connected to a PC running XP, I get the following output in Print Center:
SMB tree connected failed:NT_STATUS_ACCESS_DENIED.
In Print Center I have added the HP printer as follows:
- hold Option and click ADD, to get the 'Advanced' settings.
- selected 'Device: Windows Printer via Samba
- 'Device URL:' smb://HP1G/hpdeskje (where HP1G is the server where the printer is on, and hpdeskje is the name of the shared printer (not hpdeskjet, but hpdeskje as indicated in the PC running XP)
- 'Printer Model' is HP, where the selected driver is :
HP Deskjet 5550, Foomatic + hpijs (recommended).

I shall appreciate all help, also directly to shavital@mac.com

Thanks, really.

---
=Charly+Avital



[ Reply to This | # ]
Fixing Gimp-Print after March 24 Security Update
Authored by: shavital on Sep 02, '03 12:33:03PM

Running OS 10.2.6.
Installed Fink, and ran Finkcommander.
Available Samba version was 2.2.8-a1, installed Samba 2.2.8-a1 ldap.

The command : ditto rPClient etc. outputs:
% rPClient no such file or directory.
Please assist.
Thanks in advance
Charly


---
=Charly+Avital



[ Reply to This | # ]