[cups.general] Printing to a kerberized SMB printer (Windows) - the missing link

Adrian Gschwend ktk at netlabs.org
Thu Oct 16 06:48:43 PDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi group,

We try to get smb printing to work using kerberos tickets, we are pretty
close:

- - in our Linux setup, KRB5CCNAME is set once the user logged in and he
has a valid kerberos ticket. This works perfectly fine against SMB
shares on our filer
- - We can print to the server using the manual command:

cat test.ps | DEVICE_URI=smb://ourprinter/ourqueue /usr/bin/smbspool 1
myuser Untitles1 1 job-uuid=urn:uuid:3d59ed0f-c4ad-3f80-5833-41b0ca74807b

Now with cups cupsd is running as root, which is calling smbspool with
user lp (on Ubuntu at least). So KRB5CCNAME is not set and even if it
would be set, user lp couldn't access it.

We could now do some nasty scripts to get that to work but I suppose
there is a proper way to do that :-)

Anyone knows how we can link cups/smbspool to kerberos properly?

Thanks

Adrian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI90YhqpMUYrZbQBERAp0WAJ9Y/L2tMSgipYrw4CTLgHpeTPfXWgCZAdpr
aIx6BglMeIanJkIUXXRJDSA=
=knxi
-----END PGP SIGNATURE-----





More information about the cups mailing list