Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Active Directory and Kerberized printing?

Title: Re: Active Directory and Kerberized printing?
I cant get Kerberized printing to work at all.

We have a Windows 2003 print server which host print queues for our HP printers. All the queues are published in our AD 2003 domain directory.

I have set CUPS to "negotiate" in the cupsd.conf, as instructed on the local CUPS admin page (located at localhost:631) but I have several issues...

1. Kerberos SSO doesn't seem to work. Even though the Mac is bound to AD and has a valid Kerberos TGT from the AD DC/KDC. Other services on my LAN such as SMB are working with Kerberos with no problems.

2. instead of using Kerberos, which isn’t working (See #1 above) the user is prompted to manually enter a username and password to print. This isnt too bad (better than Tiger not working at ALL), except that the print auth dialog box is auto-populated with the form "last name, first name" (e.g.; “Jobs, Steve”) which fails to authenticate with the DC to print (NT_Auth errors). My workaround is to tell the users that they must delete the existing "last name, first name" string and enter their short AD user name "i.e.; "sjobs") Then it will print.

3. What really sucks is that once I set CUPS to “negotiate” I can ever REMOVE printer queues at all. I have tried removing them as a local admin, and even as root. No luck. I have also tried removing the print queues off the Mac as various AD domain Admin accounts – no luck. I finaly had to log in as root and kill the /etc/cups/ files.

So far I am disappointed in printing with Leopard. At least in terms of AD based print servers being compatible with Mac OS X.





>
> When a Leopard-based Mac is bound to an Active Directory, is the client now
> using Kerberos for authenticated printing?
>
> It has been noted that authenticated AD printing is now working. Leopard
> includes CUPS 1.3.3, and the CUPS "What's new" page lists Kerberized
> printing as a feature of CUPS v1.3. I'm just trying to put the pieces
> together.
 
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/printing/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.