Versions Compared

Old Version 23

changes.mady.by.user Martos Robert (ID)

Saved on

compared with

New Version Current

changes.mady.by.user Martos Robert (ID)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...



Warning
titleRequests, failure reports and repairs
Please contact us via email servicedesk@id.ethz.ch or phone +41 44 632 77 77


Note

Switch to the page in German language


Info
titleService Information and Update

Blog eintrag


  • With the instruction "keyring" the login data can be stored locally encrypted. With "kerberos" the login is done via the Active Directory.
  • The Ubuntu Keyring version is recommended as the standard manual.
  • Please understand that we are not able to describe all distributions individually for all versions.

Manuals:


Expand
titleUsing lpadmin command to set up Follow-me printer


Info
iconfalse
lpadmin -p 'card-stud' -E -v 'smb://piastud01.d.ethz.ch/card-stud' -P 'multibrand-2.49.ppd' -o auth-info-required=username,password


Expand
titleUbuntu 18.04, 19.10 and 20.04 Keyring


Info
iconfalse

1. Foreword

These instructions can be used to set up an ETH Print Service SMB network printer.
The password is stored locally and encrypted in the Gnome Keyring.


The manual is for personal (unmanaged) computers.
The root password is required for setup.

2. Check operating system version

The Ubuntu version can be checked as follows:

lsb_release -r

3. Install missing packages

The following additional packages are required for the installation and can be added as follows:

sudo apt-get install smbclient python3-smbc

4. Automatic start

For the automatic start the file

~/.config/autostart/system-config-printer-applet.desktop

with the following content must be created:

[Desktop Entry]
Type=Application
Exec=/usr/bin/system-config-printer-applet
Hidden=false
NoDisplay=false
X-GNOME-Autostart-enabled=true
Name[en_US]=system-config-printer-applet
Name=system-config-printer-applet
Comment[en_US]=
Comment=

The application can be started in the background as follows:

nohup system-config-printer-applet >/dev/null 2>&1 &

5. Setting up a new printer

5.1. General part for all printers

Start the Printer Setup dialog:

system-config-printer

Add a new printer with "+Add":

Select a "Network Printer" with "Windows Printer via SAMBA". Then the server can be specified under "SMB Printer":


 

smb://piastud01.ethz.ch/printer
(Print server for students. Only on the "card-stud" queue can be printed. "Hidden queues" with $ characters at the end are locked.)

smb://pia01.ethz.ch/printer
(Print server for employees in the center)

smb://pia02.ethz.ch/printer
(Print server for employees on the Hönggerberg)


After pressing the button "Browse..." a window for the authentication appears:

After login with username, domain and password the list of available printers appears.
In addition, the model and the person responsible for the device are listed:


 

After selecting the printer, the printer driver can be chosen:

See specific part for the different printer brands below!

The printer name can be individually defined:


 

The test page completes the installation:

5.2. Specific part for Nashuatec printers

The printer drivers for the Nashuatec brand are included in the distribution and can be found under "NRG".


 


 


Further Nashuatec printer drivers can be found on the website "http://www.openprinting.org/driver/Postscript-NRG/".

Both the PDF and the PostScript (PS) printer driver can be used.

5.2.1. Nashuatec MP C3003SP


 

Here follows a possible configuration for the "Installable Options". Depending on the device, the
Settings may differ.

  • Option Tray: "Tray 3 (LCT)" for Tandem Tray (one tray) / "Lower Paper Tays" for two trays.
  • Large Capacity Tray: "Installed" if available.
  • Internal Tray 2: "Not installed".
  • Internal Shift Tray: "Not installed".
  • External Tray: "Not installed".
  • Finisher: "SR3150" for Booklet Finisher (with output tray at the bottom) / "SR3140" for Staple Finisher (without output tray at the bottom) / "SR3130" for internal Finisher (Finisher is located under the display) / "Not installed" without Finisher.


 

5.3 Specific part for HP printers

The printer drivers for the HP brand are stored on our website.


 

5.3.1 HP Color LaserJet Managed Flow MFP E87650


 

Here follows a possible configuration for the "Installable Options". Depending on the device, the settings may differ.

  • Tray 4 Large-capacity tray with 2'000 sheet "HP 2000-Sheet Input Tray".
  • Tray 5 "Not installed".
  • Tray 6 Additional tray 3'000 sheet (side tray) "HP 3000-Sheet Input Tray".


6. Passwords in the keyring

6.1. Saving the password

The first printout is preceded by a prompt for authentication with the AD password.
With the selection "Remember password" the login data are stored in the keyring:


 

6.2. Show entries

With the program "seahorse" the keyring entries can be checked:


 

6.3. Changed passwords

After a password has been changed, a prompt for authentication appears again. Authentication sets the password in the keyring again.


7. Adaptions für Ubuntu 19.10 and 20.04

If the job is waiting for authentication, the problem can be solved as follows:


Stop Print Service:

sudo systemctl stop cups

Adjust the following file:

/etc/cups/printers.conf

Before that:

AuthInfoRequired none

Later:

AuthInfoRequired username,password

Restart print service:

sudo systemctl start cups





Expand
title RHEL / Fedora Kerberos


Info
iconfalse


Expand
title1. Preface


Info

For printing via Kerberos, the IT Services make their own Cups backend available.
The instructions refer primarily to managed multi-user computers:

The administrator manages several computers.
The manual is structured in such a way that the individual steps can be included in a script.



Expand
title2. Requirements


Info
iconfalse

The administrator has root rights.
The user-login on the computer should already be done with Active-Directory.
The binding to the Active Directory is described in the following instructions:

https://cd-portal.sp.ethz.ch/linux/Wiki/Authentisierung%20mit%20sssd.aspx



Expand
title3. Version of the operating system


Info
iconfalse

The version can be verified with the following command:

$ cat /etc/os-release



Expand
title4. Install Cups backend smbethz


Info
iconfalse

Download the cups backend smbethz and copy it into the right directory:

$ su -c 'wget https://printing.sp.ethz.ch/ethps/SiteAssets/SitePages/RHEL-7-Fedora-22-kerberos/smbethz -O /usr/lib/cups/backend/smbethz'


Set the access rights and the owner:

$ su -c 'chmod 700 /usr/lib/cups/backend/smbethz'
$ su -c 'chown root:root /usr/lib/cups/backend/smbethz'



Expand
title5. Setting up a new printer with the backend


Expand
title5.1 Device URI


Info
iconfalse

The following format is used for our setup:

smbethz://<printserver>/<printqueue>

For example:

smbethz://pia01.d.ethz.ch/p-stbh-02

A list of the available printers can be found at :

https://pia01.d.ethz.ch (Zentrum)
https://pia02.d.ethz.ch (Hönggerberg)



Expand
title5.2 Installing PPD


Info
iconfalse

Under ’openprinting.org’ PPD can be searched and installed as a package.
In this manual we install the PPD for a ’Ricoh MPC 3003’.

$ su -c 'rpm -ip http://www.openprinting.org/download/printdriver/components/lsb3.2/main/RPMS/noarch/openprinting-ppds-postscript-ricoh-20140829-1lsb3.2.noarch.rpm'

The PPD is then stored at :

/opt/OpenPrinting-Ricoh/ppds/Ricoh/Ricoh-MP_C3003-Postscript-Ricoh-en.ppd.gz



Expand
title5.3 Start printer installation


Info
iconfalse

The installation is done according to the following scheme:

lpadmin -p <NAME> -v smbethz://<SERVER>/<PRINTER> -E -P <PATH-TO-PPD> -D <NAME> -L <LOCATION> -o printer-is-shared=false -o auth-info-required=negotiate

In our example, that would be:

$ su -c 'lpadmin -p Ricoh3003 -v smbethz://pia01.d.ethz.ch/p-stbh-02 -E -P /opt/OpenPrinting-Ricoh/ppds/Ricoh/Ricoh-MP_C3003-Postscript-Ricoh-en.ppd.gz -D Ricoh3003 -L STBH -o printer-is-shared=false -o auth-info-required=negotiate'




Expand
title6. Testing


Info
iconfalse

Send a test job as an authenticated user (not as root):

$ echo -e '%!PS-Adobe-1.0\n /Helvetica findfont 200 scalefont setfont 100 100 moveto (Test) show showpage' | lpr -P Ricoh3003



Expand
title7. SELinux Policy


Info
iconfalse

If SELinux is enabled, an appropriate policy extension must be created.
The policy extension is described in the following instructions:

https://cd-portal.sp.ethz.ch/linux/Wiki/SELinux%20Basics.aspx

For testing purposes, the policy can be turned off as follows:

$ su -c 'setenforce 0'



Expand
title8. Unnecessary authentication message under Fedora 21


Info
iconfalse

If an unnecessary message appears, it can be removed with a patch.
The following command creates the file '/etc/yum.repos.d/print-auth.repo':

$ echo -e '[print-auth]
name=Print Auth $releasever - $basearch
baseurl=http://files.intevation.de/projects/print-auth/kerberos/$releasever
enabled=1
gpgcheck=1
gpgkey=http://files.intevation.de/projects/print-auth/kerberos/$releasever/\c' >/etc/yum.repos.d/print-auth.repo; echo -e 'repodata/repomd.xml.key' >>/etc/yum.repos.d/print-auth.repo

And then update:

$ su -c 'yum update'



Expand
title9. Error message in RHEL


Info
iconfalse

If you get the error message '/usr/lib/cups/filter/foomatic-rip not available' in the log '/var/log/cups/error_log' you have to add the following package:

$ su -c 'yum install foomatic'





Files:

Cups backend:
smbethz

Print Service PPD:

multibrand-2.9.ppd (PPD with the most important functions for all multifunction devices from Print Service.)

HP PPDs:

HP_Color_LaserJet_Flow_E87650.ppd
HP_Color_LaserJet_Flow_E77830.ppd
HP_Color_LaserJet_Flow_E67660.ppd
HP_Color_LaserJet_Flow_E57540(M577).ppd
HP_Color_LaserJet_Flow_E55040(M553).ppd