CUPS Access Security with AD

[Shane]

> Shane wrote:
> > Is it possible to provide access and control to the CUPS UI using Windows Active Directory ??  I need to be able to limit access to the GUI Admin functions to Domain Admins only.
>
> In general, yes.  You'll need a recent version of MIT Kerberos on your
> CUPS system that is bound to the AD server.  You can either use PAM to
> authenticate with a username and password or check the "Use Kerberos
> Authentication" box on the CUPS admin page to use your Kerberos
> credentials directly (that does require a Kerberos-enabled web
> browser...)
>
> --
> ______________________________________________________________________
> Michael R Sweet                        Senior Printing System Engineer
>
Fantastic news ...

We have already 'joined' our server to the domain (net ads join) and use kerberos to pass-thru AD authentication requests.

What other configuration will I require in my cups.conf or do I need to configure PAM/LDAP as well ??