How to add a Printer to your personal device (Linux) Student

With the instruction "keyring" the login data can be stored locally encrypted. With "kerberos" the login is done via the Active Directory.
The Ubuntu Keyring version is recommended as the standard manual.
Please understand that we are not able to describe all distributions individually for all versions.

Manuals:

Using lpadmin command to set up Follow-me printer

lpadmin -p 'card-stud' -E -v 'smb://piastud01.d.ethz.ch/card-stud' -P 'multibrand-2.9.ppd' -o auth-info-required=username,password

Ubuntu 18.04, 19.10 and 20.04 Keyring

1. Foreword

These instructions can be used to set up an ETH Print Service SMB network printer.
The password is stored locally and encrypted in the Gnome Keyring.

The manual is for personal (unmanaged) computers.
The root password is required for setup.

2. Check operating system version

The Ubuntu version can be checked as follows:

lsb_release -r

3. Install missing packages

The following additional packages are required for the installation and can be added as follows:

sudo apt-get install smbclient python3-smbc

4. Automatic start

For the automatic start the file

~/.config/autostart/system-config-printer-applet.desktop

with the following content must be created:

[Desktop Entry]
Type=Application
Exec=/usr/bin/system-config-printer-applet
Hidden=false
NoDisplay=false
X-GNOME-Autostart-enabled=true
Name[en_US]=system-config-printer-applet
Name=system-config-printer-applet
Comment[en_US]=
Comment=

The application can be started in the background as follows:

nohup system-config-printer-applet >/dev/null 2>&1 &

5. Setting up a new printer

5.1. General part for all printers

Start the Printer Setup dialog:

system-config-printer

Add a new printer with "+Add":

Select a "Network Printer" with "Windows Printer via SAMBA". Then the server can be specified under "SMB Printer":

smb://piastud01.ethz.ch/printer
(Print server for students. Only on the "card-stud" queue can be printed. "Hidden queues" with $ characters at the end are locked.)

smb://pia01.ethz.ch/printer
(Print server for employees in the center)

smb://pia02.ethz.ch/printer
(Print server for employees on the Hönggerberg)

After pressing the button "Browse..." a window for the authentication appears:

After login with username, domain and password the list of available printers appears.
In addition, the model and the person responsible for the device are listed:

After selecting the printer, the printer driver can be chosen:

See specific part for the different printer brands below!

The printer name can be individually defined:

The test page completes the installation:

5.2. Specific part for Nashuatec printers

The printer drivers for the Nashuatec brand are included in the distribution and can be found under "NRG".

Further Nashuatec printer drivers can be found on the website "http://www.openprinting.org/driver/Postscript-NRG/".

Both the PDF and the PostScript (PS) printer driver can be used.

5.2.1. Nashuatec MP C3003SP

Here follows a possible configuration for the "Installable Options". Depending on the device, the
Settings may differ.

Option Tray: "Tray 3 (LCT)" for Tandem Tray (one tray) / "Lower Paper Tays" for two trays.
Large Capacity Tray: "Installed" if available.
Internal Tray 2: "Not installed".
Internal Shift Tray: "Not installed".
External Tray: "Not installed".
Finisher: "SR3150" for Booklet Finisher (with output tray at the bottom) / "SR3140" for Staple Finisher (without output tray at the bottom) / "SR3130" for internal Finisher (Finisher is located under the display) / "Not installed" without Finisher.

5.3 Specific part for HP printers

The printer drivers for the HP brand are stored on our website.

5.3.1 HP Color LaserJet Managed Flow MFP E87650

Here follows a possible configuration for the "Installable Options". Depending on the device, the settings may differ.

Tray 4 Large-capacity tray with 2'000 sheet "HP 2000-Sheet Input Tray".
Tray 5 "Not installed".
Tray 6 Additional tray 3'000 sheet (side tray) "HP 3000-Sheet Input Tray".

6. Passwords in the keyring

6.1. Saving the password

The first printout is preceded by a prompt for authentication with the AD password.
With the selection "Remember password" the login data are stored in the keyring:

6.2. Show entries

With the program "seahorse" the keyring entries can be checked:

6.3. Changed passwords

After a password has been changed, a prompt for authentication appears again. Authentication sets the password in the keyring again.

7. Adaptions für Ubuntu 19.10 and 20.04

If the job is waiting for authentication, the problem can be solved as follows:

Stop Print Service:

sudo systemctl stop cups

Adjust the following file:

/etc/cups/printers.conf

Before that:

AuthInfoRequired none

Later:

AuthInfoRequired username,password

Restart print service:

sudo systemctl start cups

RHEL / Fedora Kerberos

1. Preface

For printing via Kerberos, the IT Services make their own Cups backend available.
The instructions refer primarily to managed multi-user computers:

The administrator manages several computers.
The manual is structured in such a way that the individual steps can be included in a script.

2. Requirements

The administrator has root rights.
The user-login on the computer should already be done with Active-Directory.
The binding to the Active Directory is described in the following instructions:

https://cd-portal.sp.ethz.ch/linux/Wiki/Authentisierung%20mit%20sssd.aspx

3. Version of the operating system

The version can be verified with the following command:

$ cat /etc/os-release

4. Install Cups backend smbethz

Download the cups backend smbethz and copy it into the right directory:

$ su -c 'wget https://printing.sp.ethz.ch/ethps/SiteAssets/SitePages/RHEL-7-Fedora-22-kerberos/smbethz -O /usr/lib/cups/backend/smbethz'

Set the access rights and the owner:

$ su -c 'chmod 700 /usr/lib/cups/backend/smbethz'
$ su -c 'chown root:root /usr/lib/cups/backend/smbethz'

5. Setting up a new printer with the backend

5.1 Device URI

The following format is used for our setup:

smbethz://<printserver>/<printqueue>

For example:

smbethz://pia01.d.ethz.ch/p-stbh-02

A list of the available printers can be found at :

https://pia01.d.ethz.ch (Zentrum)
https://pia02.d.ethz.ch (Hönggerberg)

5.2 Installing PPD

Under ’openprinting.org’ PPD can be searched and installed as a package.
In this manual we install the PPD for a ’Ricoh MPC 3003’.

$ su -c 'rpm -ip http://www.openprinting.org/download/printdriver/components/lsb3.2/main/RPMS/noarch/openprinting-ppds-postscript-ricoh-20140829-1lsb3.2.noarch.rpm'

The PPD is then stored at :

/opt/OpenPrinting-Ricoh/ppds/Ricoh/Ricoh-MP_C3003-Postscript-Ricoh-en.ppd.gz

5.3 Start printer installation

The installation is done according to the following scheme:

lpadmin -p <NAME> -v smbethz://<SERVER>/<PRINTER> -E -P <PATH-TO-PPD> -D <NAME> -L <LOCATION> -o printer-is-shared=false -o auth-info-required=negotiate

In our example, that would be:

$ su -c 'lpadmin -p Ricoh3003 -v smbethz://pia01.d.ethz.ch/p-stbh-02 -E -P /opt/OpenPrinting-Ricoh/ppds/Ricoh/Ricoh-MP_C3003-Postscript-Ricoh-en.ppd.gz -D Ricoh3003 -L STBH -o printer-is-shared=false -o auth-info-required=negotiate'

6. Testing

Send a test job as an authenticated user (not as root):

$ echo -e '%!PS-Adobe-1.0\n /Helvetica findfont 200 scalefont setfont 100 100 moveto (Test) show showpage' | lpr -P Ricoh3003

7. SELinux Policy

If SELinux is enabled, an appropriate policy extension must be created.
The policy extension is described in the following instructions:

https://cd-portal.sp.ethz.ch/linux/Wiki/SELinux%20Basics.aspx

For testing purposes, the policy can be turned off as follows:

$ su -c 'setenforce 0'

8. Unnecessary authentication message under Fedora 21

If an unnecessary message appears, it can be removed with a patch.
The following command creates the file '/etc/yum.repos.d/print-auth.repo':

$ echo -e '[print-auth]
name=Print Auth $releasever - $basearch
baseurl=http://files.intevation.de/projects/print-auth/kerberos/$releasever
enabled=1
gpgcheck=1
gpgkey=http://files.intevation.de/projects/print-auth/kerberos/$releasever/\c' >/etc/yum.repos.d/print-auth.repo; echo -e 'repodata/repomd.xml.key' >>/etc/yum.repos.d/print-auth.repo

And then update:

$ su -c 'yum update'

9. Error message in RHEL

If you get the error message '/usr/lib/cups/filter/foomatic-rip not available' in the log '/var/log/cups/error_log' you have to add the following package:

$ su -c 'yum install foomatic'

Files:

Cups backend:
smbethz

Print Service PPD:

multibrand-2.9.ppd (PPD with the most important functions for all multifunction devices from Print Service.)

HP PPDs:

HP_Color_LaserJet_Flow_E87650.ppd
HP_Color_LaserJet_Flow_E77830.ppd
HP_Color_LaserJet_Flow_E67660.ppd
HP_Color_LaserJet_Flow_E57540(M577).ppd
HP_Color_LaserJet_Flow_E55040(M553).ppd

Space shortcuts

Page tree