Chapter 11. Using Samba to print to a Windows print server with Kerberos authentication

Procedure

1. Install the samba-krb5-printing, samba-client, and krb5-workstation packages:

   # dnf install samba-krb5-printing samba-client krb5-workstation

2. Optional: Authenticate as a domain administrator and display the list of printers that are shared on the Windows print server:

   # smbclient -L <windows_print_server> -U administrator@<AD_KERBEROS_REALM> --use-kerberos=required

   	Sharename       Type      Comment
   	---------       ----      -------
   	Example         Printer   Example

3. Optional: Display the list of CUPS models to identify the PPD name of your printer:

   lpinfo -m

   samsung.ppd Samsung M267x 287x Series PXL

   You require the name of the PPD file when you add the printer in the next step.

4. Add the printer to CUPS:

   # lpadmin -p "<printer_name>" -v smb://<windows_print_server>/<printer_share_name> -m samsung.ppd -o auth-info-required=negotiate -E

   The command uses the following options:

   • -p <printer_name> sets the name of the printer in CUPS.
   • -v <URI_to_Windows_printer> sets the URI to the Windows printer. Use the following format: smb://<host_name>/<printer_share_name>.
   • -m <PPD_file> sets the PPD file the printer uses.
   • -o auth-info-required=negotiate configures CUPS to use Kerberos authentication when it forwards print jobs to the remote server.
   • -E enables the printer and CUPS accepts jobs for the printer.

Verification

1. Log in to the RHEL host as an AD domain user.

2. Authenticate as an AD domain user:

   # kinit <domain_user_name>@<AD_KERBEROS_REALM>

3. Print a file to the printer you added to the local CUPS print server:

   # lp -d <printer_name> <file>