[cups.general] Managing a SMB queue through CUPS

[Michael R Sweet]

John Hodrien wrote:
> On Thu, 17 Jan 2008, Michael R Sweet wrote:
> 
>> You *can* use IPP with Windows 2000 and higher using http: or https:
>> URIs of the form:
>>
>>     {http|https}://host-or-ip/printers/sharename/.printer
>>
>> That will give you *slightly* more reliable printing, but means you
>> need to have IIS and the IPP support enabled on your server which
>> exposes you to additional security risks on the Windows box...
> 
> I've configured Kerberos with IPP on Windows Server 2003.  I can merrily
> browse to it with firefox on linux and have it authenticate, and have verified
> this is definitely the case using wireshark.
> 
> Now for setting cups up (as I was planning on having:
> 
> cups client -> cups server -> windows server.

You need a newer version of Kerberos on both the client and
server, as remote Kerberos printing depends on the systems
supporting delegated credentials.  I *think* that MIT Kerberos
1.6.3 contains the necessary fixes for this to work...

-- 
______________________________________________________________________
Michael R Sweet                        Senior Printing System Engineer