[PATCH]: Printing with kerberos ticket against AD on OSX 10.5

[oranki]

Hi ‘yall,

I got a bit frustrated with not being able to print in OSX 10.5 using Kerberos ticket.

Since the CUPS code Apple is using is not fully opensource, fixing the actual problem
is not very easy. So I hacked the user_kprintd to work in OSX 10.5. (Tested w/ OSX 10.5.4)

Get the shitz here:

[url]http://love.hole.fi/atte/kerbprint-osx105.tar.gz[/url]

Don’t look at the code at the same time when drinking something, might ruin your keyboard
and display… feel free to rewrite it. And don’t post it to thedailywtf.com either, k plz thx 😉

EDIT: List of possible improvements:

– Validate input; $2 is an existing user, stdin is actual PostScript, $DEVICE_URI exists
– Bail out if something doesn’t work out instead of $something, like segfaulting.
– Check variable sizes before shoving stuff in ’em (now they’re just “big enough” )
– Sanity checking to install script
– Install script to remove “RequiredAuth” from printers.conf if exists
– Conditionally install either as ‘smb’ or ‘ksmb’ and mungle printers.conf where needed

I won’t be doing these as I see current version “good enough”, hopefully Apple will some day get their act together and CUPS working as it really should.

[htsupport]

Hi, I tried this today with Mac OS X 10.5.4. When creating a printer I only see type Unknown. I can create a smb: printer but then when printing the dialogbox is coming up asking me for username and password.

The mac is integrated in AD (W2K3R2 Domain), the user has a correct kerberos ticket and I can connect to the smb share on the Domaincontroller (with a cifs kerberos ticket).

What can be wrong on my system (clean new installed os x patched for 10.5.4)

[oranki]

Try reading the README file in the tarball.

[Rine]

[QUOTE][u]Quote by: htsupport[/u][p]Hi, I tried this today with Mac OS X 10.5.4. When creating a printer I only see type Unknown. I can create a smb: printer but then when printing the dialogbox is coming up asking me for username and password.

The mac is integrated in AD (W2K3R2 Domain), the user has a correct kerberos ticket and I can connect to the smb share on the Domaincontroller (with a cifs kerberos ticket).

What can be wrong on my system (clean new installed os x patched for 10.5.4)
[/p][/QUOTE]

It’s the problem with trying a new hack. You always run the risk of screwing it up in a big way with minor mistakes. If you can show us exsactly what you did maybe we can help you.

[oranki]

Seems I’d forgotten all about this long ago.

love.hole.fi has been retired for ages now, I just re-uploaded the hack here:

http://kameli.org/kerbprint-osx105.tar.gz

Not tested on 10.6, I have had nothing to do with this issue since I wrote the hack and I won’t help anyone getting it to work, sorry.

[Author]

Posts