PaperCut MF - multi-domain setup using UPNs

[thegavna]

Hi All,

 

We are currently trialling a multi-domain Papercut MF instance across our cluster of 11 schools and as we don't want to risk the possibility of duplicated accounts using the default SAMAccount name we have enabled the use of UPN. Using this method I haven't so far been able to get the Papercut MF client to sign in automatically as it usually does using the SAMAccount, has anyone else experienced this?

 

I've tried the following:

 

• feature.properties.txt also tried feature.properties.tmpl : UPN_AUTHENTICATION=true
  
• print-provider.conf: UPNSuffix: #domain of 1 of our test schools#
  
• UserGroup sync/ ticked Use UPN as username
  
• Account usernames have their email addresses as username
  
• I can sign in manually to the client using email address and password
  

 

Cheers in advance

[pete]

Sorry, not an answer to your question - we don't use the PaperCut client here apart from reprographics staff.

 

But I am interested in seeing how you're getting on - I'm considering similar across 5 schools, but the sparse information on the KB article has sent me looking for other companies/schools that have successfully implemented it.

[Primus]

We use the UPN and the only way we could get it to automatically sign in was to add a username alias without the @DomAin part of the UPN which does rather defeat the point somewhat but it does work and we've been lucky enough to not have any clashes yet.

[AdamKearn]

@Primus @pete @thegavna

Hi Guys - I've been facing this issue as well and have been trying to find a solution on this for almost a week.

I've managed to get it working in our environment now.

 

We have a single application server and multiple site servers across our trust.

We are syncing our users using Entra/365, but it should also work with those who are syncing with AD using the UPN name too.

 

I've written a quick note on my GitHub page that explains it in depth.   Force PaperCut to send Print Jobs as the UPN instead of SAM Account Name

 

You have to essentially copy a "shared secret" file over to each device with papercut installed and then force the client to login as your user manually.

 

"\path\to\pc-client.exe" --user "[email protected]" --pre-authenticate --shared-secret-file "\path\to\pc-shared-secret.dat"
"\path\to\pc-client.exe" --user "[email protected]" --use-pre-authentication

 

I've created a batch script that will grab the UPN automatically of the current logged-on user and inject this into those commands above.

You should be able to follow the steps on my GitHub post, but if you have any issues, just let me know.

 

It's really annoyed me that papercut has not implemented this feature natively when turning on the UPN option....