Kerberised printing to a Windows print queue

Michael Sweet mike at
Fri Aug 6 13:03:25 GMT 2004

Tom Shaw wrote:
> Hi folks
> I've been having a look at how to allow multiple users to print to a
> Windows 2003 print queue without having to specify their username and
> password each time. Authentication is important in this situation in
> order to keep track of quotas.
> As far as I can tell, the solution will need to involve a pam_krb5
> module to initialise the user's kerberos credentials on logon, then
> use a kerberos-enabled printing program to print to the Windows
> printer.
> It would be perfect I could modify smbspool to be kerberos-enabled and
> use it as a backend to CUPS. However the showstopper question is: Does
> any information about the user actually reach the CUPS backend? If so,
> then I'd love to have a go at modifying smbspool to support this.

As you noticed afterwards, the username is passed in as one of the
backend arguments.

If you *are* able to do this successfully, we'd be interested in
your work - perhaps we can leverage it to make CUPS fully kerberized!

Michael Sweet, Easy Software Products           mike at easysw dot com
Printing Software for UNIX             

More information about the samba-technical mailing list