CUPS persistence

CUPS domain administrator permission
dcerpc as a separate service

Dockerfile

@@ -55,8 +55,7 @@ RUN apt-get -y update && \
         cups && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* && \
-    systemctl enable sssd && \
-    mkdir -p /var/lib/samba/private
+    systemctl enable sssd
 
 #RUN chmod 777 /home
 
@@ -67,9 +66,15 @@ COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 
-VOLUME /etc/samba /var/lib/samba
+RUN mkdir -p /etc/cups-persist/ppd && \
+	ln -s /etc/cups-persist/printers.conf /etc/cups/printers.conf && \
+	ln -s /etc/cups-persist/ppd /etc/cups/ppd && \
+	sed -i "s:Listen localhost\:631:Port 631\nServerAlias \*:" /etc/cups/cupsd.conf && \
+	sed -E -i "s:(Order allow\,deny):\1\n  Allow all:" /etc/cups/cupsd.conf
 
-EXPOSE 137 138 139 445
+VOLUME /etc/samba /var/lib/samba /etc/cups-persist
+
+EXPOSE 135 137 138 139 445 631 9100
 
 ENTRYPOINT ["/entrypoint.sh"]
 CMD ["/usr/bin/supervisord","-c","/etc/supervisor/conf.d/supervisord.conf"]

entrypoint.sh

@@ -113,12 +113,18 @@ if [ ! -f /var/lib/samba/private/secrets.tdb ]; then
 
   echo "Joining domain using net ads"
   mkdir -p /var/lib/samba/private
+  mkdir -p /var/lib/samba/printerdrivers
   net ads join -U"$ADMIN_ACCOUNT"%"$ADMIN_PASSWORD"
 
   # Shares are not visible otherwise
   chmod 666 /var/lib/samba/share_info.tdb
 fi
 
+# CUPS persistence and permissions
+mkdir -p /etc/cups-persist/ppd
+touch /etc/cups-persist/printers.conf
+sed -i -E "s:^(lpadmin\:x\:[0-9]+\:)(.*)$:\1$ADMIN_ACCOUNT\,\2:" /etc/group
+
 echo 'Restarting Samba using supervisord'
 /etc/init.d/winbind stop
 /etc/init.d/nmbd stop

smb.conf.j2

@@ -1,6 +1,16 @@
 # Generated by entrypoint.sh. Add customizations under /etc/samba/conf.d.
 #  DO NOT EDIT THIS FILE.
 
+[printers]
+   path = /var/tmp/
+   printable = yes
+   cups options = "raw"
+
+[print$]
+   comment = Printer drivers
+   path = /var/lib/samba/printerdrivers
+   read only = no
+
 [global]
 	netbios name = {{ NETBIOS_NAME }}
 	realm = {{ REALM }}
@@ -18,3 +28,8 @@
 	winbind refresh tickets = Yes
 	winbind use default domain = {{ WINBIND_USE_DEFAULT_DOMAIN }}
 
+	rpc start on demand helpers = false
+	printing = cups
+	load printers = yes
+	dcerpc endpoint servers = +spoolss
+	rpcd_spoolss:idle_seconds=300

supervisord.conf

@@ -19,7 +19,10 @@ redirect_stderr=true
 command=/usr/sbin/winbindd --foreground --no-process-group
 redirect_stderr=true
 
+[program:dcerpcd]
+command=/usr/libexec/samba/samba-dcerpcd --libexec-rpcds --foreground --no-process-group
+redirect_stderr=true
+
 [program:cups]
 command=/usr/sbin/cupsd -f
 redirect_stderr=true
-