- With the instruction "keyring" the login data can be stored locally encrypted. With "kerberos" the login is done via the Active Directory.
- The Ubuntu Keyring version is recommended as the standard manual.
- Please understand that we are not able to describe all distributions individually for all versions.
These instructions can be used to set up an ETH Print Service SMB network printer.
The password is stored locally and encrypted in the Gnome Keyring.
The manual is for personal (unmanaged) computers.
The root password is required for setup.
2. Check operating system version
The Ubuntu version can be checked as follows:
3. Install missing packages
The following additional packages are required for the installation and can be added as follows:
sudo apt-get install smbclient python3-smbc
4. Automatic start
For the automatic start the file
with the following content must be created:
The application can be started in the background as follows:
nohup system-config-printer-applet >/dev/null 2>&1 &
5. Setting up a new printer
5.1. General part for all printers
Start the Printer Setup dialog:
Add a new printer with "+Add":
Select a "Network Printer" with "Windows Printer via SAMBA". Then the server can be specified under "SMB Printer":
(Print server for students. Only on the "card-stud" queue can be printed. "Hidden queues" with $ characters at the end are locked.)
(Print server for employees in the center)
(Print server for employees on the Hönggerberg)
After pressing the button "Browse..." a window for the authentication appears:
After login with username, domain and password the list of available printers appears.
In addition, the model and the person responsible for the device are listed:
After selecting the printer, the printer driver can be chosen:
See specific part for the different printer brands below!
The printer name can be individually defined:
The test page completes the installation:
5.2. Specific part for Nashuatec printers
The printer drivers for the Nashuatec brand are included in the distribution and can be found under "NRG".
Further Nashuatec printer drivers can be found on the website "http://www.openprinting.org/driver/Postscript-NRG/".
Both the PDF and the PostScript (PS) printer driver can be used.
5.2.1. Nashuatec MP C3003SP
Here follows a possible configuration for the "Installable Options". Depending on the device, the
Settings may differ.
- Option Tray: "Tray 3 (LCT)" for Tandem Tray (one tray) / "Lower Paper Tays" for two trays.
- Large Capacity Tray: "Installed" if available.
- Internal Tray 2: "Not installed".
- Internal Shift Tray: "Not installed".
- External Tray: "Not installed".
- Finisher: "SR3150" for Booklet Finisher (with output tray at the bottom) / "SR3140" for Staple Finisher (without output tray at the bottom) / "SR3130" for internal Finisher (Finisher is located under the display) / "Not installed" without Finisher.
5.3 Specific part for HP printers
The printer drivers for the HP brand are stored on our website.
5.3.1 HP Color LaserJet Managed Flow MFP E87650
Here follows a possible configuration for the "Installable Options". Depending on the device, the settings may differ.
- Tray 4 Large-capacity tray with 2'000 sheet "HP 2000-Sheet Input Tray".
- Tray 5 "Not installed".
- Tray 6 Additional tray 3'000 sheet (side tray) "HP 3000-Sheet Input Tray".
6. Passwords in the keyring
6.1. Saving the password
The first printout is preceded by a prompt for authentication with the AD password.
With the selection "Remember password" the login data are stored in the keyring:
6.2. Show entries
With the program "seahorse" the keyring entries can be checked:
6.3. Changed passwords
After a password has been changed, a prompt for authentication appears again. Authentication sets the password in the keyring again.
7. Adaptions für Ubuntu 19.10 and 20.04
If the job is waiting for authentication, the problem can be solved as follows:
Stop Print Service:
sudo systemctl stop cups
Adjust the following file:
Restart print service:
sudo systemctl start cups
For printing via Kerberos, the IT Services make their own Cups backend available.
The instructions refer primarily to managed multi-user computers:
The administrator manages several computers.
The manual is structured in such a way that the individual steps can be included in a script.
The administrator has root rights.
The user-login on the computer should already be done with Active-Directory.
The binding to the Active Directory is described in the following instructions:
The version can be verified with the following command:
$ cat /etc/os-release
Download the cups backend smbethz and copy it into the right directory:
$ su -c 'wget https://printing.sp.ethz.ch/ethps/SiteAssets/SitePages/RHEL-7-Fedora-22-kerberos/smbethz -O /usr/lib/cups/backend/smbethz'
Set the access rights and the owner:
$ su -c 'chmod 700 /usr/lib/cups/backend/smbethz'
$ su -c 'chown root:root /usr/lib/cups/backend/smbethz'
The following format is used for our setup:
A list of the available printers can be found at :
Under ’openprinting.org’ PPD can be searched and installed as a package.
In this manual we install the PPD for a ’Ricoh MPC 3003’.
$ su -c 'rpm -ip '
The PPD is then stored at :
The installation is done according to the following scheme:
lpadmin -p <NAME> -v smbethz://<SERVER>/<PRINTER> -E -P <PATH-TO-PPD> -D <NAME> -L <LOCATION> -o printer-is-shared=false -o auth-info-required=negotiate
In our example, that would be:
$ su -c 'lpadmin -p Ricoh3003 -v smbethz://pia01.d.ethz.ch/p-stbh-02 -E -P /opt/OpenPrinting-Ricoh/ppds/Ricoh/Ricoh-MP_C3003-Postscript-Ricoh-en.ppd.gz -D Ricoh3003 -L STBH -o printer-is-shared=false -o auth-info-required=negotiate'
Send a test job as an authenticated user (not as root):
$ echo -e '%!PS-Adobe-1.0\n /Helvetica findfont 200 scalefont setfont 100 100 moveto (Test) show showpage' | lpr -P Ricoh3003
If SELinux is enabled, an appropriate policy extension must be created.
The policy extension is described in the following instructions:
For testing purposes, the policy can be turned off as follows:
$ su -c 'setenforce 0'
If an unnecessary message appears, it can be removed with a patch.
The following command creates the file '/etc/yum.repos.d/print-auth.repo':
$ echo -e '[print-auth]
name=Print Auth $releasever - $basearch
gpgkey=' >/etc/yum.repos.d/print-auth.repo; echo -e 'repodata/repomd.xml.key' >>/etc/yum.repos.d/print-auth.repo
And then update:
$ su -c 'yum update'
If you get the error message '/usr/lib/cups/filter/foomatic-rip not available' in the log '/var/log/cups/error_log' you have to add the following package:
$ su -c 'yum install foomatic'
Print Service PPD:
multibrand-2.9.ppd (PPD with the most important functions for all multifunction devices from Print Service.)
- No labels