Rick,
> On Jun 16, 2016, at 4:28 PM, Rick Cochran <[email protected]> wrote:
>
> Hi,
>
> Here is a note from one of my co-workers regarding the creation of print
> queues for authenticated printing to a Windows print server using SMB
> protocol. The bottom line question is whether to use "-o auth-info-required"
> or "-o auth-info-required=negotiate" when creating a queue.
"-o auth-info-required" (no values) is not valid. The three values you might
use for a SMB queue are:
-o auth-info-required=none No authentication required
("guest printing" mode)
-o auth-info-required=negotiate Use Kerberos/AD
-o auth-info-required=username,password Use username and password
Most AD sites use Kerberos. Some have to fall back on username and password
due to domain and/or client complications, although these days I think we are
doing pretty well with the AD domain guessing game for SMB (at least) so I see
this a lot less than I used to.
If you *don't* set it then there are (unfortunately) situations where the SMB
backend will see that authentication is required but not know that Kerberos is
supported by the server, so it will pause the job and set the queue
configuration to username + password. Setting auth-info-required to negotiate
up front is definitely the right thing for you to do in this case.
> The behavior my co-worker is seeing is strange and troubling.
>
> Thanks for any help.
> -Rick
>
> Hello,
> The issue that occurred a month ago when I was testing the installer is back.
> I'll try to be short and concise.
>
> Some macs while printing will permanently enter a phase where it cannot print
> (keeps pausing) and persists through reboots. It isn't cached or incorrect
> credentials as I clear the keychain and the printer asks anyway when printing.
>
> This computer printed a few times yesterday with no issue. Now it pauses.
>
> The only way to get the job out is to map smb://files.cornell.edu and then
> hit play on the printer (so it proves to be an auth issue).
>
> To test:
> I manually added campus-bw with 'windows printer via spoolss' in the GUI.
> I then used the net print installer to add campus-color
>
> I printed to the campus-bw (the one i manually added). It asked for user/pass
> and it successfully printed.
> I printed to the campus-color (the one installed via np installer). It asked
> for user/pass and it successfully printed.
>
> hmmm...
>
> I rebooted
> Printed to the campus-color first. Asked for user/pass and then it paused the
> queue.
> Printed to the campus-bw (the one i manually added). It printed!
> Un-paused the campus-color, it printed!
>
> So...
> I went into /etc/cups/printers.conf and compared the two printers.
> Lo and behold there was a difference.
> campus-color had AuthInfoRequired username,password (printer was added via
> the installer)
> campus-bw had AuthInfoRequired negotiate (printer was added manually through
> the GUI)
>
> moving on...
> I went inside /Net-PrintPC Printer Installer/Contents/Resources/bin and
> edited the line in install_netprintpc_printer to say: my $cmd = "/bin/sh -c
> '/usr/sbin/lpadmin -p $queue -E -P $tmpdir/drivers/$ppd -o
> auth-info-required=negotiate -v 'smb://$server/$queue'";
>
> I then removed both printers, rebooted, and then re-added them with the
> modified NetprintPC installer.
> They both work now.
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Printing mailing list ([email protected])
> Help/Unsubscribe/Update your Subscription:
> https://lists.apple.com/mailman/options/printing/msweet%40apple.com
>
> This email sent to [email protected]
_________________________________________________________
Michael Sweet, Senior Printing System Engineer
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list ([email protected])
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/printing/archive%40mail-archive.com
This email sent to [email protected]
