Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Active Directory and Kerberized printing?



On 11/5/07 2:38 PM, "Michael R Sweet" <email@hidden> wrote:

>> When a Leopard-based Mac is bound to an Active Directory, is the client now
>> using Kerberos for authenticated printing?
>> 
>> It has been noted that authenticated AD printing is now working. Leopard
>> includes CUPS 1.3.3, and the CUPS "What's new" page lists Kerberized
>> printing as a feature of CUPS v1.3. I'm just trying to put the pieces
>> together.
> 
> Not by default - you still need to activate Kerberos ("Negotiate")
> authentication in the cupsd.conf file.  Look at the help file at:
> 
>      http://localhost:631/help/kerberos.html
> 
> for instructions.  Once configured on the server, you should be able
> do Kerberos-authenticated printing from your client machines assuming
> they are also using Leopard and have AD or OD setup for logins...
> 
> That said, there is a reported bug with our current implementation
> with Windows Server 2003 R2 - apparently the credentials that Windows
> supplies are larger than 2k (the limit set in the current Leopard
> build), so Kerberos authentication doesn't currently work against
> (at least) that version of Windows.  The fix is already in the current
> stable CUPS release (1.3.4)...

Thanks for the quick response; I'll pass it along to people on the
MacEnterprise list.

Without trying to ask too much about futures, is it possible v1.3.4 might be
included in a future software update of Leopard? Or is it likely Leopard
will be locked at v1.3.3?

Is it possible -- or even advisable -- for systems administrators to install
v1.3.4 on top of Leopard (without ill effects to what's bundled with the OS)
if they need that fix?

Thanks!


-- 
Jeremy Reichman

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/printing/email@hidden

This email sent to email@hidden

References: 
 >Re: Active Directory and Kerberized printing? (From: Michael R Sweet <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.