Available in PaperCut NG and PaperCut MF.

Windows hosted print queues

This section discusses printer configuration on Mac Bone X workstation in environments systems where the print queues are hosted on a Windows operating system. See Mac hosted print queues for OS x.8+ if your print queues are hosted on Mac Bone 10.8+.

When a printer from a Windows environment is shared and added to a Mac system, Print and Scan requests printer access credentials in the grade of username and countersign. Whatever user that prints to this printer uses these supplied credentials. This means that the administrator that added the printer to the workstation is the owner of all documents printed from the workstation irrespective of the current logged in user.

The platonic solutions varies from network to network and depends on factors including:

  • Your existing network configuration

  • The mix and makeup of operating systems used on the network

  • The underlying directory technologies (Agile Directory, LDAPThe Lightweight Directory Admission Protocol (LDAP) is a directory service protocol that runs on a layer above the TCP/IP stack. It provides a mechanism used to connect to, search, and modify Internet directories. The LDAP directory service is based on a client-server model. , etc.) if used

  • Whether Macs are used by a single owner or multiple users

The post-obit sections outline common fix upwards scenarios and their pros and cons. Your solution might fit one of these scenarios or might be composed of a combination.

Scenario Ane: My own Mac (unmarried user)

Many networks, particularly those in a business concern environment, have a defended desktop system for each user. This allows the desktop system'southward global settings to be customized for the user. Common examples include:

  • Dedicated computers used in a business organization

  • Staff laptops or desktops used in instruction

Requirements

  • Printers hosted and shared from a Windows or Linux server.

  • Mac systems used by a single user (or minor group of known users).

  • Each user has a domain business relationship and password.

  • The username associated with the account on the Mac matches the domain username (either the account used to log in, or the account prepare every bit the automated log in account).

  • Running Mac OS 10 10.viii or higher.

Installation

Check the user account data:

  1. Starting time upward the Mac, log in as the local administrator, and ensure the system is connected to the network.

  2. Select Organization Preferences

  3. Depending on your Mac OS version, select Accounts or Users and Groups.

  4. Click MyAccount. (Skip this step in Mac Os x.8 and 10.9)

  5. Ensure that the Short name associated with the business relationship matches the user'southward domain business relationship username. If not, create a new working account as advisable.

Prepare the printers

  1. Select System Preferences > Print and Browse.

  2. Click + to add together a new printer.

  3. Control-click the toolbar; then select Customize Toolbar.

  4. Drag the Avant-garde icon onto the bar; then click Advanced.

  5. Select the Windows printer via spoolss device type.

  6. Enter a Device URL, such as: smb://username:password@server_name/printer_name

    • Tip: server_name is the proper name of the server hosting the printer, and printer_name is the printer's share name

    • Yous might need to include the port in the DeviceURL: smb://server_name:139/printer_name

    • Bone 10 tin struggle with printer share names containing spaces. We recommend a share proper noun without spaces

  7. In Name, enter a friendly and informative printer name.

  8. Choose a commuter for this printer by selecting Select Software from the list.

  9. Click Add.

  10. Test print and ensure jobs are logged in PaperCut NG/MF as the right user.

Install the PaperCut NG/MF User Client software

  1. Open Finder; then select Go > Connect to Server.

  2. Enter smb://servername/pcclient where servername is the name of the server hosting PaperCut NG/MF. If you are prompted for a username and password, this is a username that has access to connect to the SMB share on your Windows server.

  3. Drag the PCClient application across to the local Applications directory.

  4. Open System Preferences

  5. Select Users & Groups.

  6. Click the Login items tab.

  7. Click +; then select the newly installed PCClient application. Select the PC Client cheque box when it is displayed.

  8. Restart the organization and ensure the client starts upon login.

Tips and troubleshooting

  • Go the user to log in to the Mac. Verify that the PCClient programme starts automatically and shows the user'due south remainder.

  • Print to the newly fix printer. On the server'southward print queueA print queue displays information about documents that are waiting to exist printed, such as the press status, certificate owner, and number of pages to print. You can employ the print queue to view, pause, resume, restart, and abolish print jobs. , ensure that the job is displayed nether the correct username.

  • Ensure that the print task successfully reaches the printer and that the user gets charged in PaperCut.

  • Cheque that the balance has changed to reverberate the new remainder in the PCClient program.

Scenario Two: The multi-user Mac with popup authentication

Schools and universities ofttimes have Macs available for student use in dedicated computer labs. In these environments the Macs are shared by many users and Scenario One is not appropriate. Larger Mac networks already using LDAP or Active Directory authentication, or planning on doing and then, might want to consider Scenario Three explained in the side by side section.

Scenario Two uses a popup authenticationPopup authentication involves matching the source IP accost of the print job with the user confirmed to exist operating from the popup client IP address. Authentication is provided past the PaperCut NG customer software in the grade of a popup dialog requesting a username and password. To print with popup hallmark the client software must be running on the workstations or laptops. model. For more than information, encounter Popup authentication.

The terminate user's perspective:

  1. The user sees the PCClient programme running.

  2. When the user prints a chore, the client pops up a window requesting the user to enter a username and password. See Popup hallmark.

  3. The user enters a domain username and password.

  4. If the credentials are valid, the job is charged to the user account.

The caption:

  1. The print event is performed equally a generic user - For example, "macuser", "student", etc.

  2. In PaperCut NG/MF, the "macuser" account is ready to use popup hallmark by enabling the option Unauthenticated user. Encounter Popup hallmark for further details.

  3. The popup requests the user to enter a username and password.

  4. The countersign is authenticated and printing is charged against the supplied account.

Requirements

  • Printers are hosted and shared off a Windows, Mac or Linux server.

  • The Mac systems are fix to log in under a generic account name. (e.m. macuser, student, etc.)

  • The domain contains a user account matching the generic account.

Installing the PaperCut NG/MF User Customer software

  1. Open Finder; then select Go > Connect to Server.

  2. Enter smb://servername/pcclient where servername is the name of the server hosting PaperCut NG/MF. If you are prompted for a username and password, this is a username that has access to connect to the SMB share on your Windows server.

  3. Enter account details for an business relationship able to connect to the SMB share if requested

  4. Drag the PCClient application across to the local Applications directory.

  5. Command-click the newly copied PCClient application in the Applications directory. Select Open Package Contents.

  6. Navigate to Contents/Resources/.

  7. Double-click the install-login-hook.command script.

  8. Restart the system and ensure the customer starts upon login.

Configure the popup settings

  1. Click the Users tab.

    The User List page is displayed.

  2. Select macuser.

  3. In the Account Details area, complete the following:

    • Residue—set the account balance to zero.

    • select the Restricted bank check box.

  4. In the Advanced Options area, select the Unauthenticated user (enable popup hallmark) cheque box.

  5. Click Use.

If users log in to the Mac using their AD/LDAP username, you can eliminate the authentication popup past configuring the client as described in Popup authentication.

Tips and troubleshooting

  • Become the user to log in to the Mac. Verify that the PCClient programme starts automatically.

  • Print to the newly set upward printer. On the server's print queue, ensure that the job is displayed under the correct username.

  • An authentication popup should display on the Mac. Enter a valid domain username and countersign.

  • Accuse the corresponding user for the job. Also check that the balance has inverse to reflect the new balance in the PCClient program.

Scenario Three: Multi-user Macs using LDAP or Active Directory authentication

Larger networks oft run the Macs in a domain environment either authenticating with an Active Directory or an LDAP network. In an authenticated domain environs, the identity of the user (the user'due south username) is known and verified at the time of log in. With the help of the TCP/IP PrintingIP Press is a generic term used to describe a number of print protocols that are used to exchange print documents betwixt a reckoner, a server queue, or a physical printer. Services for Microsoft Windows, and the LPRThe Line Printer Remote protocol (LPR) is a network protocol for submitting print jobs to a remote printer. A server for the LPD/LPR protocol listens for requests on TCP port 515. A asking begins with a byte containing the request code, followed by the arguments to the request, and is terminated by an ASCII LF character. An LPD printer is identified by the IP address of the server car and the queue proper name on that machine. Many different queue names may exist in one LPD server, with each queue having unique settings. The LPR software is installed on the client device. /LPD back up on the Mac, print jobs can exist identified on the server and associated with the user'due south login proper noun. This avoids the need for the popup authentication used in Scenario Two.

Using the LPR and IPP printing protocols on Windows impress servers

LPR is a legacy protocol adult for UNIX that clients use to ship print jobs to print servers. Microsoft has supported this protocol for a number of years via an add-on module called Impress Services for UNIX (PSfU). Under certain weather Windows LPD printers can crusade issues when using PaperCut hold/release print queues. The data included here is to help customers understand the consequence and certificate suggested workarounds.

The mechanism used by the Windows PSfU subsystem to have LPR and IPPThe Internet Press Protocol (IPP) is an Net protocol for communication between a print server and its clients. It allows clients to send one or more print jobs to the server and perform assistants such equally querying the status of a printer, obtaining the status of impress jobs, or cancelling individual print jobs. IPP can run locally or over the Internet. Unlike other printing protocols, IPP also supports admission control, authentication, and encryption, making information technology a much more capable and secure printing machinery than older ones. print jobs is different from other implementations in Windows such native SMB based printers. In SMB the outcome notification to applications such as PaperCut is well behaved and reliable. Issue notification for LPR and IPP based printing does not employ the same set of underlying APIs and under some conditions the PaperCut impress monitoring layer receives notification afterwards the impress task has started. This means that some print jobs can start to print before the hold instruction is issued. This task is and so suspended in a Paused Printing state (i.eastward. both paused and printing) and this results in all other jobs on that queue being held upward by the paused job.

The symptoms are generally non consistent, suggesting an underlying race condition bug in Windows. Things that can bear upon the trouble include:

  • Running the print serverA print server is a system responsible for hosting print queues and sharing printer resource to desktops. Users submit print jobs to a print server rather then directly to the printer itself. A print server can be a dedicated server simply on many networks this server also performs other tasks, such as file serving on a virtual machine

  • The number of processors/cores

  • The current load on the print server

  • The version and patch level of Windows

Because the issue is in the underlying Windows print subsystem, it is non possible for PaperCut to quickly implement a reliable solution and Microsoft is unlikely to implement a fix to this legacy subsystem. If a site does experience this issue there are some steps that can assistance alleviate or ready the issue.

  1. Employ the SMB protocol for Windows based print server queues. Note that using SMB tin place some constraints on how users authenticate and how anonymous users are able to impress at your site. This is the recommended approach.

  2. Utilize two print queues. Queue A is virtual and queue B is the real queue fastened to the physical printer. Users print to A using LPR and PaperCut can ever identify a concur on the print job. PaperCut so redirects the job to B on release. Managing virtual impress queues is documented in section Detect-Me printing and printer load balancing. Configure queue A to use a port with no printer (eastward.g. LPT1:), it should be permanently paused ( Printer > Pause Printing ), and the virtual queue configuration for A in PaperCut should forward jobs to B (setting Jobs may exist redirected to these destination queues).

    If queue A is united nations-paused and then the job will error, however, it can all the same exist re-directed as needed.

Requirements

  • Macs set in multi-user mode authenticating off a domain. Either Active Directory or LDAP.

  • Printers hosted on a Windows print server.

  • The server needs the TCP Printing Services installed (also known as Print Services for Unix).

Installation

On the server hosting the printers, prepare up TCP/IP Printing:

  1. Log in to the server as a system administrator.

  2. Select Control Panel > Add Remove Programs.

  3. Click Add/Remove Windows Components.

  4. Select Other Network File and Impress Services.

  5. Click Details.

  6. Select Print Services for Unix.

  7. Click Next to complete the installation.

Some systems running firewall software can block LPD printing. On systems running firewall software, ensure that incoming connections from the local network are allowed on port 515.

On each Mac, add the required printers:

  1. Select Applications > Utilities.

    Open the Printer Setup Utility

  2. Click + to add together a new printer.

  3. Click the IP tab in the height toolbar.

  4. From the Protocol listing, select Line Printer Daemon - LPD.

  5. In Address, enter the IP accost of the server hosting the printers .

  6. In Queue, enter the printer'south share proper name .

  7. In Name, ascertain a user friendly name; then select the printer blazon.

  8. Click Add.

  9. Repeat for other printers as necessary.

Installing the PaperCut NG/MF User Client software

  1. Open up Finder; so select Become > Connect to Server.

  2. Enter smb://servername/pcclient where servername is the proper name of the server hosting PaperCut NG/MF. If you are promted for a username and password, this is a username that has access to connect to the SMB share on your Windows server.

  3. Enter account details for an account able to connect to the SMB share if requested

  4. Drag the PCClient application beyond to the local Applications directory.

  5. Control-click the newly copied PCClient application in the Applications directory.

  6. Select Open Package Contents.

  7. Navigate to Contents/Resource/.

  8. Double-click the install-login-hook.command script.

  9. Restart the system and ensure the client starts upon login.

Tips and troubleshooting

  • Restart the system and ensure the PCClient application starts on login and lists the user'south account balance.

  • Ensure print jobs correctly show in the PaperCut job logs under the user's PaperCut account.

  • Charge the respective user for the chore. Besides check that the residual has changed to reflect the new balance in the PCClient program.

Additional information and tips

The client install process is likewise covered in User Client. After the showtime Mac is set and the press process is tested, provide the simplified customer install notes covered in Deployment on Mac Bone X to end users or other SysAdmins.

The PCClient customer tin accept command line options equally explained in Configure the User Client using the command-line. If the client is started via the login hook, you can define the command-line options in the file:

/Applications/PCClient.app/Contents/Resources/login-hook-first

Look for the line starting with client_args and the associated comments higher up.