Oracle Solaris Trusted Extensions Administrator's Procedures

How to Configure Cascade Printing on a Labeled System

Cascade printing provides the ability to print from a Windows desktop session to a Trusted Extensions labeled zone interface, where the zone IP address of the physical interface acts as the print spooler. The multilevel port (MLP) listener that is on the zone IP address of the physical interface talks to the Trusted Extensions printing subsystem and prints the file with the appropriate labeled header and trailer sheets.

This procedure enables unlabeled systems that are in the same subnet as labeled systems to use the labeled network printer. The rfc1179 service handles cascade printing. You must perform this procedure in every labeled zone from which you permit cascade printing.

Before You Begin

You have completed How to Configure a Network Printer for Sun Ray Clients.

Remove the rfc1179 service's dependency on the print/server service.

labeled-zone # cat <<EOF | svccfg
      select application/print/rfc1179
      delpg lpsched
      end
   EOF

labeled-zone # svcadm refresh application/print/rfc1179

Ensure that the rfc1179 service is enabled.
labeled-zone # svcadm enable rfc1179

If the labeled zone was installed with netservices limited, enable the printer to reach the network.

The rfc1179 service must listen on addresses other than localhost. The LP service listens only on a named pipe.
# inetadm -m svc:/application/print/rfc1179:default bind_addr='' # svcadm refresh rfc1179
Note –
If you are running netservices open, the preceding command generates the following message: Error: "inetd" property group missing.

Configure cascade printing from the labeled zone.
labeled-zone # lpset -n system -a spooling-type=cascade printer-name
This command updates the zone's /etc/printers.conf file.

Test a Solaris system that is on the same subnet as this labeled zone.

For example, test the Solaris1 system. This system is on the same subnet as the internal zone. The configuration parameters are the following:

math-printer IP address is 192.168.4.6
Solaris1 IP address is 192.168.4.12
internal zone IP address is 192.168.4.17

Solaris1# uname -a
SunOS Solaris1 Generic_120011-11 sun4u sparc SUNW,Sun-Blade-1000
Solaris1# lpadmin -p math-printer -s 192.168.4.17
Solaris1# lpadmin -d math-printer

Solaris1# lpstat -t
   scheduler is not running
   system default destination: math-printer
   system for _default: 192.168.4.17 (as printer math-printer)
   system for math-printer: 192.168.4.17
   default accepting requests since Feb 28 00:00 2008
   math-printer accepting requests since Feb 28 00:00 2008
   printer _default is idle. enabled since Feb 28 00:00 2008. available.
   printer math-printer is idle. enabled since Feb 28 00:00 2008. available.

Test the lp command.

Solaris1# lp /etc/hosts
   request id is math-printer-1 (1 file)

Test printing from applications such as StarOffice and the browser.

Test a Windows 2003 server that is on the same subnet as this labeled zone.
1. Set up the printer on the Windows server.
  
  Use the Start Menu->Settings->Printers & Faxes GUI.
  
  Specify the following printer configuration:
  - Add A Printer
  - Local Printer attached to this computer
  - Create a new port – Standard TCP/IP Port
  - Printer Name or IP Address – 192.168.4.17, that is, the IP address of the labeled zone
  - Port Name – Accept default
  - Additional Port Information Required – Accept default
    - Device Type = Custom
    - Settings – Protocol = LPR
    - LPR Settings – Queue Name = math-printer, that is, the UNIX Queue Name
    - LPR Byte Counting Enabled
  Finish the printer prompts by specifying the manufacturer, model, driver and other printer parameters.

Test the printer by selecting the printer from an application.

For example, test the winserver system that is on the same subnet as the internal zone. The configuration parameters are the following:

math-printer IP address is 192.168.4.6
winserver IP address is 192.168.4.200
internal zone IP address is 192.168.4.17

winserver C:/> ipconfig
Windows IP Configuration
   Ethernet adapter TP-NIC:
      Connection-specific DNS Suffix  . :
      IP Address. . . . . . . . . . . . : 192.168.4.200
      Subnet Mask . . . . . . . . . . . : 255.255.255.0
      Default Gateway . . . . . . . . . : 192.168.4.17