[global] guest account = nobody invalid users = root ; Tighten security just a little: only allow local access interfaces = 127.0.0.1 eth0 bind interfaces only = Yes ; This assumes you are on a local network with 192.168.x.x IP addresses hosts allow = 192.168. ; Share-level security is generally easier, although not as secure security=share workgroup=WORKGROUP ; Set up a public share, this will be used to retrieve PDFs ; The name of the share will be seen as "shr" by Windows users [shr] path = /shr browseable = yes writeable = yes guest ok = yes force user = nobody ; Set up our PDF-creation print service [pdf] path = /tmp printable = yes guest ok = yes print command = /usr/bin/printpdf %s ; There is no need to support listing or removing print jobs, ; since the server begins to process them as soon as they arrive. ; So, we set the lpq (list queued jobs) and lprm (remove jobs in queue) ; commands to be empty. lpq command = lprm command =