Printing
Printing from a Macintosh desktop or laptop to a CSE printer now requires authentication prior to printing. Kerberos printing requires that you have an active Kerberos ticket on your desktop or laptop, and IPPS printing requires you to provide your Kerberos credentials when you print a document. The steps necessary to
set up printing on your desktop or laptop are similar, whichever method you choose, but the IPPS method is simpler to use.
Before You Start: Setting Up The Preference Pane
If you haven't set up a CSE printer on your Macintosh before, there's one task you must accomplish: the "Printers and Scanners" System Preference pane needs the "Advanced" icon (it looks like a gear) available for you to use(Please DO NOT use the globe icon(IP) for printer setup). Follow this sequence of instructions to make it happen:
- Open the "System Settings"(formerly System Preferences) application, and select "Printers and Scanners."
- Select the "Add Printer, Scanner, or Fax..." button on the right side of the panel (or the "+" icon at the bottom of the "Printers" list on the left side of this pane for older Macs). The "Add Printer" window will appear.
- Right-click just to the right of the icons already displayed at the top of the "Add Printer" window (or to the left of the "Search" box on older Macs) and select "Customize Toolbar." A window with "...favorite items..." will appear in the toolbar (near where you just right-clicked).
- Drag the "Advanced" icon - the gear - from the list of "...favorite items..." into the blank spacing at the top of the "Add Printer" window with the other now shaking icons, and select "Done."
Before You Start: If You've Been Around For A While...
If the local account name on your Macintosh doesn't match your CSE username, and you'd previously added "User cseusername" to one or both of these files on your Macintosh: /etc/cups/client.conf or ~/.cups/client.conf, you must remove that "User cseusername" command before attempting to print with either of the printing methods described here.
[+] IPPS printing (wireless AND wired)
[-] IPPS printing (wireless AND wired)
This printing method can be used for both wired and wireless connections.
Setup
You only need to do this part once, regardless of the number of printers you wish to set up.
- Download three files - two printer description files, and one which assists in the printing process.
In a Terminal window, type one of the following commands, which will put three new files into your Macintosh home directory: "cse-ps.ppd," "cse-psc.ppd," and "kipps."
If you have an instructional (attu) account: cd; scp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
If you do not have an instructional account: cd; scp username@recycle.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.
- The "kipps" file - which assists in the printing process - needs to be in a specific folder and have specific ownership and permission. These three commands will take care of all of that:
sudo cp -p kipps /usr/libexec/cups/backend
sudo chown root /usr/libexec/cups/backend/kipps
sudo chmod 700 /usr/libexec/cups/backend/kipps
The "sudo" command will ask for your Macintosh account password, and enables you to do things as root.
If you'd prefer, download this script, and run it in a Terminal window with this command: bash ./kps.sh to automate those steps.
Adding a Printer
You'll need to do this once for each printer you want to set up.
- Open the "System Settings"(formerly System Preferences) application, and select "Printers and Scanners."
- Select the "Add Printer, Scanner, or Fax..." button on the right side of the panel (or the "+" icon at the bottom of the "Printers" list on the left side of this pane for older Macs). The "Add Printer" window will appear.
- Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")
- In the "Type:" field, select "Internet Printing Protocol (ipps)."
- Leave the "Device:" field alone.
- In the "URL:" field, complete the URL: "ipps://macps.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."
- In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.
- In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.
- In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.
- (Note: If you want to print in color, you must set up one of the color printers - psc381 or pgc270, for example. The "c" in the printer name is important!)
- Select the "Add" button.
(If you see a dialog box that says "Unable to communicate with the printer at this time." please select the "Continue" button and the printer will be set up.)
Printing
When you print to a device set up with this method, you will see a dialog box after selecting the "Print" button from the application in which you are printing. Enter your CSE username and password into the dialog box. You may choose to save your CSE username and password in your keychain, by checking the appropriate box. If you do that, you will not be asked for your CSE username and password when you print.
The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Click on the arrow-in-a-circle icon at the right edge of the job entry in that window, and re-enter your CSE username and password, to authenticate the print job.
[+] Kerberos printing (wireless)
[-] Kerberos printing (wireless)
This printing method can be used if you connect to a wireless network.
Setup
You only need to do this part once, regardless of the number of printers you wish to set up.
- Use the "Ticket Viewer" app, or the "kinit user@CS.WASHINGTON.EDU" command in a Terminal window to get a Kerberos ticket. The "CS.WASHINGTON.EDU" part must be capitalized.
- Download three files - two printer description files, and one which assists in the Kerberos printing process.
In a Terminal window, type the following commands:
cd
scp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
which will put the files "cse-ps.ppd," "cse-psc.ppd," and "kipps" in your Macintosh home directory. Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.
- The "kipps" file - which assists in the printing process - needs to be in a specific folder and have specific ownership and permission. These three commands will take care of all of that:
sudo cp -p kipps /usr/libexec/cups/backend
sudo chown root /usr/libexec/cups/backend/kipps
sudo chmod 700 /usr/libexec/cups/backend/kipps
The "sudo" command will ask for your Macintosh account password, and enables you to do things as root.
Adding a Printer
You'll need to do this once for each printer you want to set up.
- Open the "System Settings"(formerly System Preferences); application, and select "Printers and Scanners."
- Select the "Add Printer, Scanner, or Fax..." button on the right side of the panel (or the "+" icon at the bottom of the "Printers" list on the left side of this pane for older Macs). The "Add Printer" window will appear.
- Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")
- In the "Type:" field, select "Internet Printing Protocol (kipps)."
- Leave the "Device:" field alone.
- In the "URL:" field, complete the URL: "kipps://kups.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."
- In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.
- In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.
- In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.
- Select the "Add" button and, if the printer has any specific options, such as duplex printing, take care of that here.
At this point, you will need to log out and back in, and get a new Kerberos ticket.
Printing
When you print to a device set up with this method, you will see a dialog box after selecting the "Print" button from the application in which you are printing. Your CSE username will be in the "username" field. Type a random string into the password field. Do not type in your Kerberos password. If you do, please delete and reinstall this printer on your computer.
The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Cancel that print job, and submit it again, and you should be successful.
[+] Kerberos printing (wired)
[-] Kerberos printing (wired)
This printing method can be used if your Macintosh has a wired (not wireless) network connection.
Setup
You only need to do this part once, regardless of the number of printers you wish to set up.
- Use the "Ticket Viewer" app, or the "kinit user@CS.WASHINGTON.EDU" command in a Terminal window to get a Kerberos ticket. The "CS.WASHINGTON.EDU" part must be capitalized.
- Download two printer description files.
In a Terminal window, type the following commands:
cd
scp username@attu.cs.washington.edu:/cse/lab/sw/MacOS/'*' .
which will put the files "cse-ps.ppd," and "cse-psc.ppd" in your Macintosh home directory. Replace "username" with your CSE username in the "scp" command, and enter your Kerberos password when asked.
Adding a Printer
You'll need to do this once for each printer you want to set up.
- Open the "System Settings"(formerly System Preferences); application, and select "Printers and Scanners."
- Select the "Add Printer, Scanner, or Fax..." button on the right side of the panel (or the "+" icon at the bottom of the "Printers" list on the left side of this pane for older Macs). The "Add Printer" window will appear.
- Select the "Advanced" (gear) icon from the toolbar in this window. (No gear? Follow the directions in "Before You Start: Setting Up The Preference Pane.")
- In the "Type:" field, select "Internet Printing Protocol (ipps)."
- Leave the "Device:" field alone.
- In the "URL:" field, complete the URL: "ipps://rups.cs.washington.edu/printers/PRINTERNAME" where "PRINTERNAME" is the name of a CSE printer, like "psc381" or "ps002."
- In the "Name:" field, type in the name of the printer - "psc381" or "ps002," for example.
- In the "Location:" field, type in the location of the printer - "CS 381" or "CS 002," for example.
- In the "Use:" field, select "Other..." from the option menu, and find one of the files you downloaded earlier. "cse-ps.ppd" is for black and white printers, and "cse-psc.ppd" is for color printers.
- Select the "Add" button and, if the printer has any specific options, such as duplex printing, take care of that here.
At this point, you need to log out and back in, and get a new Kerberos ticket.
Printing
When you print to a device set up with this method, you will encounter no interstitial dialogs.
The very first print job you send to a newly-added printer will likely be "held for authentication" even though you've done everything correctly. Cancel that print job, and submit it again, and you should be successful.
Using the Poster Printers
Macintosh-specific information about setting up and using the poster printers can be found in this document.
Printing Preferences: Banner Pages and Duplex Printing
Users can set their preferences, for any CSE printer, for banner pages and duplex printing at https://lpprefs.cs.washington.edu/lpprefs.
Remote Access
Connection to a Linux Host
Use the Macintosh "Terminal" application, and use the "ssh" command with your Kerberos credentials:
ssh -Y hostname.cs.washington.edu
The "-Y" ensures X11-forwarding; with the proper X11 software installed on your Macintosh - see
this resource - you can redirect the GUI from a Linux program to your Macintosh.
Connection to a Windows Host
The "Husky OnNet" VPN service is now required for connection to on-campus resources, when connecting from off-campus locations. Detailed information about this service can be found on the UW IT Connect pages, or you may choose to proceed directly to the Husky OnNet download page. (Accessing this link requires UWNetID authentication.)
To install the software, download and unpack the "ZIP" file, and run the "mac_edgesvn.pkg" installer.
To use the software, start the "BIG-IP Edge Client" program, found in your Applications folder, and authenticate with your UWNetID credentials. Once connected, you can use Microsoft Remote Desktop (see below) to connect to on-campus resources, with no additional gateway configuration necessary.
Use the Microsoft Remote Desktop Connection application, available for free from the App Store. Please note, the version of RDC that comes with Office 2011 is obsolete; the version available from the App Store includes modern encryption protocols necessary for connecting to our Windows resources. Use your CSENETID credentials.
Network File Access
There are several ways of accessing networked file shares on your Macintosh. These methods assume that your Macintosh is connected to the department's network; i.e., you're not working from home or some remote location.
Mounting a Remote Directory with "Samba"
Your departmental home directory, or project directory, can be mounted temporarily or permanently on your Macintosh via Samba, by following these directions.
Mounting a Remote Directory with "sshfs"
- Install the
OSXFUSE and SSHFS packages from http://osxfuse.github.io/.
- Open the "Terminal" application.
- Create the mountpoint:
mkdir MOUNTPOINT. ("csehome" is a good example.)
- Determine the host to which you should connect. For example, if you would like to mount your CSE home directory, connect to a CSE Linux host and run this command: "
df | grep USERNAME" and the result will tell you the host and the path to your home directory -- "cash:/homes/gws/bradley" might be the result. Make sure to add ".cs.washington.edu" to the hostname in the next command.
- Mount the remote directory by typing the following command all on one line:
sshfs -p 22 username@host:/path/to/remote/directory MOUNTPOINT -oauto_cache,reconnect,defer_permissions,negative_vncache,volname=MOUNTPOINT
- You'll be asked for your password - this would be your Kerberos password.
- MOUNTPOINT is now the mount point for that remote directory.
Security
If you've been issued a Macintosh laptop, by the department or your research group, we strongly recommend that you take the steps necessary to enable the "Find My Mac" service. There's an Apple Support document which goes into great detail on this topic, but the "quick start" overview is:
- On your Mac, choose Apple menu > System Preferences, then click iCloud.
- If you're asked to sign in, enter your Apple ID, or if you don't have one, click Create new Apple ID, then follow the instructions.
- If "Find My Mac" is turned off, select it to turn it on.
If / when you need to find your Mac, you can sign into iCloud from another Mac, or use the iPhone app (available from the App Store).
It bears repeating: a good backup is always a good thing.
Software
Community Support
Many of the Macintosh-using students, staff, and faculty in the department are members of the macusers@cs mailing list.
