Kerberos printing using smbspool backend

[Jeremy Allison]

On Tue, Sep 03, 2013 at 12:47:55PM +0200, Marcus Moeller wrote:
> Hi all.
> 
> I am trying to set up Kerberos printing using the cups smbspool backend.
> 
> The user from which the print job is released is logged in via
> Kerberos and got a valid ticket.
> 
> I have not found a lot of information about how to configure cups in
> order to use Kerberos printing, but by default it prompts for a
> password.
> 
> I found some notes that to enable Kerberos ?k should be added to the
> device uri but no official information about that.
> 
> Other sources state that AuthInfoRequired negotiate needs to be set,
> but none of that helped, either.
> 
> Could one of you please point out which steps are required in order
> to print through smbspool using Kerberos?

As I recall it's fiddly and distro dependent. The user has
to have a ticket in their kerberos cache and the cups driver
has to have setuid'ed to the correct user before invoking
smbspool -k.

I think SuSE do this right out of the box, not sure about
Ubuntu or Fedora.

Jeremy.