Chapter 9. Using Samba to print to a Windows print server with Kerberos authentication

Procedure

1. Install the samba-krb5-printing, samba-client, and krb5-workstation packages:

   # dnf install samba-krb5-printing samba-client krb5-workstation

   Copy to Clipboard Toggle word wrap

2. Optional: Authenticate as a domain administrator and display the list of printers that are shared on the Windows print server:

   # smbclient -L win_print_srv.ad.example.com -U administrator@AD_KERBEROS_REALM --use-kerberos=required

   Copy to Clipboard Toggle word wrap

   	Sharename       Type      Comment
   	---------       ----      -------
   	Example         Printer   Example

   Copy to Clipboard Toggle word wrap

3. Optional: Display the list of CUPS models to identify the PPD name of your printer:

   lpinfo -m

   Copy to Clipboard Toggle word wrap

   samsung.ppd Samsung M267x 287x Series PXL

   Copy to Clipboard Toggle word wrap

   You require the name of the PPD file when you add the printer in the next step.

4. Add the printer to CUPS:

   # lpadmin -p "example_printer" -v smb://win_print_srv.ad.example.com/Example -m samsung.ppd -o auth-info-required=negotiate -E

   Copy to Clipboard Toggle word wrap

   The command uses the following options:

   • -p printer_name sets the name of the printer in CUPS.
   • -v URI_to_Windows_printer sets the URI to the Windows printer. Use the following format: smb://host_name/printer_share_name.
   • -m PPD_file sets the PPD file the printer uses.
   • -o auth-info-required=negotiate configures CUPS to use Kerberos authentication when it forwards print jobs to the remote server.
   • -E enables the printer and CUPS accepts jobs for the printer.

Verification

1. Log into the RHEL host as an AD domain user.

2. Authenticate as an AD domain user:

   # kinit domain_user_name@AD_KERBEROS_REALM

   Copy to Clipboard Toggle word wrap

3. Print a file to the printer you added to the local CUPS print server:

   # lp -d example_printer file

   Copy to Clipboard Toggle word wrap