To be able to send a printing job to our CUPS server, your local CUPS client needs to
- support Kerberos Authentification
- have our CUPS server configured
- the local user login has to be identical to your IMT login
First of all, you must ensure that you have a valid Kerberos ticket. How to set up Kerberos is described here.
If this is done, enter the following in your /etc/cups/client.conf:
SSLOptions MinTLS1.2 DenyCBC
This file is usually empty. You can create the file if it does not yet exist.
Staff members may replace the ServerName line by
Afterwards, restart your local CUPS clients. You should be able to print now.
Arch Linux problems
The default cups package on Arch Linux does not support Kerberos because this was deprecated by cups and is not included by default.
As an alternative the AUR package cups-gssapi can be used or the cups package can be compiled with the option --enable-gssapi.