Scenario Three: Multi-user Macs using LDAP or Active Directory authentication

Larger networks often run the Macs in a domain environment either authenticating with an Active Directory or an LDAP network. In an authenticated domain environment, the identity of the user (the user's username) is known and verified at the time of login. With the help of the TCP/IP Printing Services for Microsoft Windows, and the LPR/LPD support on the Mac, print jobs can be identified on the server and associated with the user's login name. This avoids the need for the popup authentication used in Scenario Two.

Requirements

  • Macs set up in multi-user mode authenticating off a domain. Either Active Directory or LDAP.

  • Printers hosted on a Windows print server.

  • The server needs the TCP Printing Services installed (also known as Print Services for Unix).

Installation

On the server hosting the printers, setup TCP/IP Printing:

  1. Log into the server as a system administrator.

  2. Select Control PanelAdd Remove Programs.

  3. Click on Add/Remove Windows Components.

  4. Select Other Network File and Print Services

    Windows Component: Other Network File and Print Service

    Figure 19.18. Windows Component: Other Network File and Print Service

  5. Click Details... and ensure Print Services for Unix is selected.

  6. Click Next to complete the installation.

Tip

Some systems running firewall software may block LPD printing. On systems running firewall software, ensure that incoming connections from the local network are allowed on port 515.

On each Mac, add the required printers:

  1. Open the Printer Setup Utility from Applications -> Utilities.

  2. Click the Add button to add a new printer.

    Add a printer

    Figure 19.19. Add a printer

  3. Click the IP Printing button at the top toolbar.

  4. From the Protocol dropdown, select Line Printer Daemon - LPD.

  5. Enter the IP address of the server hosting the printers in the Address field.

  6. Enter the printer's share name in the Queue field.

    Adding an LPR/LPD printer

    Figure 19.20. Adding an LPR/LPD printer

  7. Define a user friendly name in the Name field and select the printer type.

  8. Click the Add button.

  9. Repeat for other printers as necessary.

To install the PaperCut NG client software:

  1. Open the Finder.

  2. From the Go menu, select Connect to Server...

    Connecting to a Windows server

    Figure 19.21. Connecting to a Windows server

  3. Enter the pcclient share's connection details like:

        smb://server_name/pcclient
                                

    Where server_name is the name of the server hosting the PaperCut NG server software.

    The PCClient share's connection string

    Figure 19.22. The PCClient share's connection string

  4. Enter password information if requested.

  5. Drag the PCClient package over to the local hard disk's global Applications folder. The copy process will commence.

  6. Control-click on the newly copied PCClient application in the Applications directory. Select Show Package Contents.

  7. Browse to Contents/Resources/.

  8. Double-click on the install-login-hook.command script.

    Double-click to install the login hook

    Figure 19.23. Double-click to install the login hook

  9. Restart the system and verify the client starts on login.

Testing:

  1. Restart the system and ensure the client starts on login and lists the user's account balance.

  2. Ensure print jobs correctly account under the user's PaperCut NG account.