This guide goes through the steps of installing and configuring a Windows network printer with CUPS on a Debian/Ubuntu desktop machine using Kerberos authentication.
All of the steps here are to be executed on a Debian/Ubuntu desktop machine. Some commands require sudo/pkexec (explicitly mentioned).
- AppArmor prevents usage of smbspool_krb5_wrapper: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=998327
- The "usr.sbin.cupsd" AppArmor profile must be modified to allow CUPS to execute smbspool_krb5_wrapper
- The workaround below may be overwritten by future updates to the
cups-daemon
package!