[cups] Question about groups

[Pförtsch, Franz]

Hello,

I created a similar solution using the samba way with winbind.

The magic is done in this solution via smb.conf:

	winbind use default domain = Yes
	winbind expand groups = 1
	winbind refresh tickets = Yes


I also create a long policy file for the different windows-groups and the corresponding printerqueues.

We or somebody should create a examples for different flavours of Kerberos integration.

Regards
Franz Pförtsch

-----Original Message-----
From: cups-bounces at cups.org [mailto:cups-bounces at cups.org] On Behalf Of Michael Walton
Sent: Thursday, February 11, 2016 7:16 PM
To: cups at cups.org
Subject: Re: [cups] Question about groups

Hi mailing list

I figured out how I have been sinning. Cups doesn't want to use any domain suffix when it looks up users, so in my sssd.conf file I added the line default_domain_suffix = AD.MYORG.COM then I can do "getent passwd username" instead of "getent passwd username at AD.MYORG.COM" and get the same result.
I didn't realise that this was possible until last night.
Now the groups are working fine and I'm not contemplating any messy workarounds

Thank you,
     Michael Walton


_______________________________________________
cups mailing list
cups at cups.org
https://www.cups.org/mailman/listinfo/cups