Question about printers in an AD setup

[kcalderw]

I have our Mac users pulling printer queues from our Mac mini. The printer queues are pulled from AD on the mini then pushed out using Profile Manager. This is working with one small issue, each time a user tries to print it's asking for authentication. If the user is logged in using their AD credentials, how can I get the printer to stop asking for them?

[iamjezz]

Make sure you dont have require Administrator password ticked on profile manager and try re-adding the printer to your OSX server. I had a similar issue where profile manager didn't show new printers. Ended up using terminal and refreshing that part of profile manager and worked fine ever since.

[kcalderw]

Sadly I've already tried those steps. I went into CUPS and AuthInfoRequired is set to negotiate.

[iamjezz]

If you add the printer manually on a mac without the profile do you get the same thing?

[SWC]

hi there

 

I am having the exact same issues with printers in the college I work for. Mountain Lion Mac Mini Server pulling printers from a Win server 2008 R2 print server and being deployed via Profile Manager. Printers appear for user but once they try to print there is a padlock symbol beside the printer and once they click on it, it asks for local admin credentials to unlock the printer.

 

Would love to find a fix for this

[10101010]

I've got the same problem here. If I login with a user that doesn't get the Workgroup Manager settings I can manually add the printer and it prints no problem.

I have also tried to print directly from CUPS Admin on the Mac Server (10.6.2) the Cups log shows "Session setup failed: NT_STATUS_LOGON_FAILURE" when I send a test print.

[davidacland]

Hi, this is a common problem because the print service in OS X isn't set to use Kerberos authentication.

 

I haven't tried it for a while as we're using follow-me printing most of the time now but this command used to work to kerberize the print queue:

 

/usr/sbin/lpadmin -p "name of printer" -o auth-info-required=negotiate

 

David Acland - Amsys