PaperCut and Mac SMB printing

[agarabaghi]

Anyone having issues with macs not being able to authenticate....

 

We cant seem to find a consistent reason why or a consistent fix.

 

We have the AD alias (which papercut apparently needs to authenticate) added to the local users profiles

We add the prints using the Advanced printer options and Windows printer via spoolss

following this format: smb://print.server.name/print.queue.name

We have even tried adding the AD username and password to the beginning smb://ADUSERNAME:[email protected]/print.queue.name

 

Sometimes it works, sometimes it doesnt work, sometimes it works for a day then stops....

 

Very confused....

[DMcCoy]

Does papercut work with print services for unix? I used lpd to share windows printers to Macs with Print manage plus, and it would still record a username, but without requiring the kerberos authentication, which as you have found is somewhat unreliable.

[MicrodigitUK]

How to enable Kerberos authentication for shared printers

 

1. Execute the following Terminal command to enable the CUPS web interface:

cupsctl WebInterface=yes

 

2. Open the URL localhost:631 in Safari. Login with local admin details

 

3. Open “Printers” tab

 

4. For each printer you wish to share using Kerberos:

 

4a. Click the printer name in the list.

 

4b. Choose “Set Default Options” from the “Administration” pop-up menu.

 

4c. Click “Policies”.

 

4d. Choose “kerberos” from the “Operation Policy:” pop-up menu. 4e. Click “Set Default Options”.

 

5. local admin details

 

 

Automatic Authenticated Printing

 

 

To enable auto authencticated printing as the logged in user to a windows printer share you will need to firstly find the name that the mac has assigned the printer this can be found by typing

lpstat -v

 

 

Then type in the following comman in the termial, replacing text between quotes with the desired printer as established by using the above command. Root is not required.

lpadmin -p "mcx_0" -o auth-info-required=negotiate

 

 

Repeat this comand for each of the printers on your Mac. (Note do this in your master image Mac before tacking an image)

lpadmin -p "mcx_0" -o auth-info-required=negotiate

lpadmin -p "mcx_1" -o auth-info-required=negotiate

lpadmin -p "mcx_2" -o auth-info-required=negotiate

Edited August 5, 2014 by MicrodigitUK

[agarabaghi]

what is kerberos... ?? ive never even heard of this lol

[MicrodigitUK]

Sorry, I presumed your users log onto your Macs with a Windows AD username. The Same user that you want to show as accessing the SMB print server. Kerberos is the Windows AD authentication. You need to tell the Mac to use that for each SMB printer, or it will randomly use the computer account or prompt for additional authentication. Edited August 5, 2014 by MicrodigitUK

[agarabaghi]

nope, we have 3 scenarios...

 

AD macs with single users

AD macs with multiple users and deepfreeze (labs)

Non AD macs with single users