When sending print job requests, OSX prompts for password

credentials, but populates their Lastname, Firstname - Instead of >their
short lan id. How can I bypass that (preferably the whole request for
credentials, or at the very least auto-populate the users >lan id) while
still using the print queues?

I can help on SSO AD printing but not on making the Lan ID show.

First the stations HostName must be a FQDN.

Scutil --get HostName

Scutil --set HostName abc123.test.com

Then you have to find the CUPS queue name for the printer.

Lpstat -v | awk '{print $3}' | sed 's/://'

That should spit out the queue name only. Be sure to test.

Then you have to set the auth-info-required.

Lpadmin -p <CUPS queue name from above> -o auth-info-required=negotiate

This has worked for me in testing on 10.6. YMMV

- JD

Similar issues with my testing using Windows print queues with AD accounts. I will check this out. Thanks!

Craig E

Here is what we used to get authenticated printing.

http://www.deploystudio.com/News/Entries/2009/5/9_ksmbprintd_v1.1.html

Brad

---------------------------------------------------------------------
Brad Gunnells
University of Iowa
Information Technology Services
Campus Technology Services/Learning Spaces Technology
Iowa City IA 52242
(319)335-5524 FAX (319)335-5505
mailto:brad-gunnells at uiowa.edu
---------------------------------------------------------------------

When I was setting up our Uniflow printers, I found making a policy to execute the following command helps:

/usr/sbin/cupsctl DefaultAuthType=Negotiate

This seems to work only if you've configured your printer object in the CUPS config webpage to use kerberos. (localhost:631)

Here's what we do to get the shortname instead of Real Name

defaults write /Library/Preferences/com.apple.NetworkAuthorization UseDefaultName -bool NO

defaults write /Library/Preferences/com.apple.NetworkAuthorization UseShortName -bool YES

Test it out but has been working for us. We run that in our first boot scripts.

Tom