[26186] in resnet
Re: Authenticated printing w/ Mac clients and Equitrac
daemon@ATHENA.MIT.EDU (Doughty, Marc)
Wed Apr 6 16:59:15 2011
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=bcaec517ad147d890204a0463e55
Message-ID: <BANLkTinEqcVs2AkVPOZ8GSVFDOJgh=Fobw@mail.gmail.com>
Date: Wed, 6 Apr 2011 16:57:43 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Doughty, Marc" <marc_doughty@BROWN.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <4D9CCF2A.1030207@wheatoncollege.edu>
--bcaec517ad147d890204a0463e55
Content-Type: text/plain; charset=ISO-8859-1
Greetings,
Apple makes it pretty easy to call on the layer of services that would
pass the AD credentials along. Any chance you could get in touch with
Equitrac's developers or product managers and ask them to 'Kerberize' their
product? This should be an initial goal for any enterprise product that's
expected to work on Macs.
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way
vessel."
On Wed, Apr 6, 2011 at 4:38 PM, Brian Gibson <
gibson_brian@wheatoncollege.edu> wrote:
> Hi all,
>
> Anyone out there using the print authentication software from Equitrac? We
> run it on a Windows 2008 Server and Equitrac uses Active Directory for
> authentication. It works great for Windows machines that are joined to the
> domain but for the Macs we have (which are not joined to the domain) it is a
> real hassle. For the Macs they have to have the Equitrac Client software
> installed and every time you print it pops up a window for you to enter in
> your Active Directry username and password. I'm not a Mac admin but I
> 'think' I have tried just about everything to try and get around the end
> user having to enter in the username and password for every print job. Here
> is what I have tried.
>
> 1. I have tried joining the Macs to the domain but that didn't seem to help
> pass the user credentials along like it does on a Windows box.
>
> 2. Instead of setting up the queue as an Equitrac queue we have tried
> setting it up as a Windows client against the print server and this seems to
> work in certain cases. One problem is you have to be able to browse the
> network (like Network Neighborhood Browsing) to find the print server and
> our network is segmented and you can't always find it. I've setup a WINS
> server and pointed the clients and the print server at it but it doesn't
> help the client find the server in the browsing window.
>
> 3. There is a way to bring up an advanced printing menu to enter in an smb
> URL to the printing server and queue but in certain OS versions (10.6 I
> think) you have to embed your AD username and password in the URL. It gets
> saved in a text file in clear text which is an issue and it if you change
> your password (which we do every 6 months) you have to re-set up your
> queues.
>
> Has anyone out there gotten past this?
>
> Any suggestions would be greatly appreciated.
>
> --
>
>
>
> ++++++++++++++++++++++++++++
> Brian Gibson
> Systems Administrator
> Wheaton College
>
> Are you a musician? If so visit my Arbans Online music site at
> http://arbansonline.com and listen& contribute
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--bcaec517ad147d890204a0463e55
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Greetings,<br>=A0=A0=A0=A0 Apple makes it pretty easy to call on the layer =
of services that would pass the AD credentials along. Any chance you could =
get in touch with Equitrac's developers or product managers and ask the=
m to 'Kerberize' their product? This should be an initial goal for =
any enterprise product that's expected to work on Macs.<br clear=3D"all=
">
<br>- Marc Doughty<br><br>"If you aren't sure who is the give-way =
vessel, you are the give-way vessel."<br>
<br><br><div class=3D"gmail_quote">On Wed, Apr 6, 2011 at 4:38 PM, Brian Gi=
bson <span dir=3D"ltr"><<a href=3D"mailto:gibson_brian@wheatoncollege.ed=
u">gibson_brian@wheatoncollege.edu</a>></span> wrote:<br><blockquote cla=
ss=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pa=
dding-left:1ex;">
Hi all,<br>
<br>
Anyone out there using the print authentication software from Equitrac? We =
run it on a Windows 2008 Server and Equitrac uses Active Directory for auth=
entication. It works great for Windows machines that are joined to the doma=
in but for the Macs we have (which are not joined to the domain) it is a re=
al hassle. For the Macs they have to have the Equitrac Client software inst=
alled and every time you print it pops up a window for you to enter in your=
Active Directry username and password. I'm not a Mac admin but I '=
think' I have tried just about everything to try and get around the end=
user having to enter in the username and password for every print job. Her=
e is what I have tried.<br>
<br>
1. I have tried joining the Macs to the domain but that didn't seem to =
help pass the user credentials along like it does on a Windows box.<br>
<br>
2. Instead of setting up the queue as an Equitrac queue we have tried setti=
ng it up as a Windows client against the print server and this seems to wor=
k in certain cases. One problem is you have to be able to browse the networ=
k (like Network Neighborhood Browsing) to find the print server and our net=
work is segmented and you can't always find it. I've setup a =A0WIN=
S server and pointed the clients and the print server at it but it doesn=
9;t help the client find the server in the browsing window.<br>
<br>
3. There is a way to bring up an advanced printing menu to enter in an smb =
URL to the printing server and queue but in certain OS versions (10.6 I thi=
nk) you have to embed your AD username and password in the URL. It gets sav=
ed in a text file in clear text which is an issue and it if you change your=
password (which we do every 6 months) you have to re-set up your queues.<b=
r>
<br>
Has anyone out there gotten past this?<br>
<br>
Any suggestions would be greatly appreciated.<br>
<br>
-- <br>
<br>
<br>
<br>
++++++++++++++++++++++++++++<br>
Brian Gibson<br>
Systems Administrator<br>
Wheaton College<br>
<br>
Are you a musician? If so visit my Arbans Online music site at <a href=3D"h=
ttp://arbansonline.com" target=3D"_blank">http://arbansonline.com</a> and l=
isten& =A0contribute<br>
<br>
___________________________________________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives,<br>
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a><br>
___________________________________________________<br>
</blockquote></div><br>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--bcaec517ad147d890204a0463e55--
