Skip to main content
Question

Casper Admin not capturing kerberized printers

  • May 15, 2012
  • 2 replies
  • 22 views
R
Forum|alt.badge.img+5

Have only recently noticed that our printers have been deploying without the -o auth-info-required=negotiate option (kerberized cups). Checked and rechecked and triple checked and it appears Casper Admin (8.52) isn't capturing this option. I can't say anything about previous versions working or not as we were using ksmbprintd up until recently.

Simple fix is to throw this command into the policy (Advanced | Run Command);

sudo cat /etc/cups/printers.conf | grep "<Printer" | sed -e 's/<Printer //;s/>//' | xargs -n1 lpadmin -o auth-info-required=negotiate -p

Hope this helps someone.

    2 replies

    L
    Forum|alt.badge.img+16
    • Look
    • Valued Contributor
    • November 19, 2012

    I added a sleep 60 in front of this to allow a brand new printer time to write to printers.conf, made it into a script set to run after, then added it when deploying a new printer, seems to work pretty well.

    K
    Forum|alt.badge.img+13
    • Kumarasinghe
    • Contributor
    • November 20, 2012

    We use this and method in the script and (plus sleep 10).
    You can grep something specific to run this only to your enterprise printers only and not to private printers installed.
    https://jamfnation.jamfsoftware.com/discussion.html?id=4075#respond

    e.g. - look for printers with your "ad.mycomp.com" AD domain name.

    From

    declare -x SMBPRINTERS="$("$lpstat" -v | "$grep" smb | "$perl" -p -e 's/device for (.*): smb.*/$1/g')"

    To

    declare -x SMBPRINTERS="$("$lpstat" -v | "$grep" -i 'ad.mycomp.com' | "$perl" -p -e 's/device for (.*): smb.*/$1/g')"
    Terms & ConditionsCookie settingsAccessibility statement