Re: [Fed-Talk] Printing to Kerberized queues.
Re: [Fed-Talk] Printing to Kerberized queues.
- Subject: Re: [Fed-Talk] Printing to Kerberized queues.
- From: "Trouton, Rich" <email@hidden>
- Date: Fri, 18 Feb 2011 15:52:20 +0000
- Thread-topic: [Fed-Talk] Printing to Kerberized queues.
Tim,
Have you seen this PDF?:
http://images.apple.com/business/solutions/it/docs/L418078A-US_Enterprise_Printing_with_Mac_OS_X_Technical_White_Paper-1.pdf
I found it while taking a look at Deploy Studio's recently retired "ksmbprintd" project:
http://www.deploystudio.com/News/Entries/2011/1/10_ksmbprintd_[discontinued].html
Thanks,
Rich
On Feb 18, 2011, at 10:45 AM, Nichols, Jared - 1170 - MITLL wrote:
> Yup. Problem. Our new print server (2008 R2) fortunately somehow can tell
> non-windows clients and doesn't ask for creds.
>
> j
> --
> Jared F. Nichols
> Desktop Engineer, Client Services
> Information Services Department
> MIT Lincoln Laboratory
> 244 Wood Street
> Lexington, Massachusetts 02420
> 781.981.5436
>
>
>
>
>
>
> On 2/18/11 10:29 AM, "Miller, Timothy J." <email@hidden> wrote:
>
>> Has anyone managed to get printing on Snow Leopard to use the logged-on
>> user's Kerberos credentials? Printing to AD-managed queues consistently
>> pops up wanting my password, despite the Kerberos credentials I already
>> have. There's little out there except for this:
>>
>> http://support.apple.com/kb/HT2364
>>
>> Which I read to mean that the local CUPS service needs to have an SPN in
>> AD, and therefore would have its *own* ccache separate from the logged-on
>> user. This is not exactly what I'd call useful integration, since
>> running sso_util requires rights in AD that the average user *does not
>> have*.
>>
>> Pointers and corrections appreciated.
>>
>> -- Tim
>>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
---
Rich Trouton
email@hidden
JFRC Help Desk
phone: x4030
email: email@hidden
The best way to get in touch with me is through email.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden