Chapter 11. Using Samba to print to a Windows print server with Kerberos authentication

Procedure

1. Install the samba-krb5-printing, samba-client, and krb5-workstation packages:

   # dnf install samba-krb5-printing samba-client krb5-workstation

   Copy to Clipboard Toggle word wrap

2. Optional: Authenticate as a domain administrator and display the list of printers that are shared on the Windows print server:

   # smbclient -L <windows_print_server> -U administrator@<AD_KERBEROS_REALM> --use-kerberos=required
   
   	Sharename       Type      Comment
   	---------       ----      -------
   	...
   	Example         Printer   Example
   	...

   Copy to Clipboard Toggle word wrap

3. Optional: Display the list of CUPS models to identify the PPD name of your printer:

   lpinfo -m
   ...
   samsung.ppd Samsung M267x 287x Series PXL
   ...

   Copy to Clipboard Toggle word wrap

   You require the name of the PPD file when you add the printer in the next step.

4. Add the printer to CUPS:

   # lpadmin -p "<printer_name>" -v smb://<windows_print_server>/<printer_share_name> -m samsung.ppd -o auth-info-required=negotiate -E

   Copy to Clipboard Toggle word wrap

   The command uses the following options:

   • -p <printer_name> sets the name of the printer in CUPS.
   • -v <URI_to_Windows_printer> sets the URI to the Windows printer. Use the following format: smb://<host_name>/<printer_share_name>.
   • -m <PPD_file> sets the PPD file the printer uses.
   • -o auth-info-required=negotiate configures CUPS to use Kerberos authentication when it forwards print jobs to the remote server.
   • -E enables the printer and CUPS accepts jobs for the printer.

Verification

1. Log in to the RHEL host as an AD domain user.

2. Authenticate as an AD domain user:

   # kinit <domain_user_name>@<AD_KERBEROS_REALM>

   Copy to Clipboard Toggle word wrap

3. Print a file to the printer you added to the local CUPS print server:

   # lp -d <printer_name> <file>

   Copy to Clipboard Toggle word wrap