Installation on Linux (CUPS and/or Samba)

Important

The following section assumes the reader has knowledge of general Unix/Linux system management including using the command-line, creating users, editing configuration files and understanding file permissions.

Step 1 - System Requirements

Before proceeding with the installation the system administrator should take a few moments to verify system requirements. Is the operating system version supported and are patches up-to-date? Take a few minutes to verify the system is current and supported (see the section called “System Requirements”).

Are printer(s) installed and hosted on this system and are they exposed to the network either via CUPS or Samba? Administrators should ensure that the print queues are set up and working as expected before attempting to install PaperCut ChargeBack.

In a multi-user environment, printers are often shared with other network users. Other workstations should connect to these printers as "Network Printers". Ensure workstations are configured to print to the shared print queues. For example a Windows workstation may connect to a samba exposed printer via \\[samba_server]\[printer]. Other Linux or Mac workstations will use IPP via CUPS.

If the printers are currently not installed and configured, this task should be performed and verified before proceeding further.

Step 2 - Create the host user account and firewall settings

PaperCut ChargeBack runs and installs under a non-privileged user account called "papercut". The installation location for the application is the papercut user's home directory. Create a user account on this system called papercut. This is usually done by logging in as root and at the command prompt entering:

    shell> useradd -d /home/papercut papercut
                

The syntax for useradd and groupadd may differ slightly on different versions of Linux. They may also be called adduser and addgroup.

The user's home directory (the -d option) denotes the install location. /home/papercut is the recommended location. Administrators may however also consider alternate install locations depending on personal preference. Alternatives may include:

  • /usr/local/papercut

  • /opt/papercut

Important

This quick start guide assumes the install location is /home/papercut. If an alternate home location is defined, some of the paths listed in subsequent sections will require modification.

Some Linux distributions have strict default firewall policies. PaperCut ChargeBack uses TCP ports 9191 (for HTTP) and ports 9192 (for HTTPS/SSL) and these ports must be open. Take some time now to ensure these ports are open. Consult your distribution documentation for details on how to open firewall TCP ports.

Step 3 - Download and installing

PaperCut ChargeBack is supplied as a self-extracting and self-installing archive. The installation is done under the rights of the newly created papercut and temporary root access will be required. Please have the root password handy. (Administrators who are after a detailed explination of the install process should also consult the background information in Chapter 19, PaperCut ChargeBack on Linux).

Log on as the newly created papercut user and download and execute the installer:

    shell> su - papercut
    shell> wget [download url from PaperCut Software website]
    shell> sh ./pcng-setup-linux-i686.sh
                

Follow the installation instructions and enter the root password when requested.

Important

Ensure you login as the user papercut so that the user's environment is sourced so the home directory (install location) is correctly defined.

The Linux install process

Figure 2.20. The Linux install process

The installation process will take between two and five minutes depending on the speed of the system. A system restart is not required but administrators are advised to perform installation on live production systems during periods of low activity - for example, not during backup operations or other administration activities.

Step 4 - Configuration Wizard

After installation, you will be prompted to open a web browser at http://[server-name]:9191/admin to complete configuration. The configuration stages are explained below:

Administrator Password

This is the master password for the main in-built admin account. This password is independent of the operating system or domain passwords. Keep knowledge of this password secure! This screen also sets the system's physical location. Ensure the location and language setting is correct.

PaperCut ChargeBack Configuration wizard

Figure 2.21. PaperCut ChargeBack Configuration wizard

Tip

Treat this password like your router/modem management passwords. It is independent of your domain accounts and needs to be kept secure.

Select Modules

PaperCut ChargeBack contains modules for both printing and Internet usage control. Both of these modules are optional and licensed separately. Select the modules to enable on this system.

NOTE: The Internet control module requires an authenticating web proxy server like Microsoft ISA Server or Squid Proxy. For more information, see Chapter 14, Net Control in Detail.

Default Print Cost

This is the default cost-per-page assigned to the printers. This setting can be changed on a per printer basis after installation. Choosing a sensible cost now will help minimize future setup. For example in the USA, a value of $0.05 would be appropriate for many standard black & white printers.

User/group synchronization

PaperCut ChargeBack extracts user information out of the System or Domain. The options presented here will vary depending on the Operating System and its environment. During evaluation, most sites will opt to import all users from the system/domain into PaperCut ChargeBack. An option also exists to import a subset of users from a given group. This option is pertinent when it is known that only a subset of users will only ever use the printers.

User sync configuration wizard page

Figure 2.22. User sync configuration wizard page

Options on Linux include Unix Standard (PAM, NIS, etc.), LDAP, or Samba.

Select Unix Standard if the user accounts are setup and defined on the local system as standard Unix accounts or mapped into the system from a central directory service such as LDAP via nsswitch.conf and PAM. Most large established networks will use this option.

The LDAP option is appropriate for large networks with existing Open Directory domains. This includes networks running Open LDAP and Windows domains running Active Directory. PaperCut ChargeBack will do it's best to auto-discover LDAP settings, but some knowlege of LDAP and/or Open Directory will be required. More information on LDAP is available in the section called “Using LDAP for user synchronization”.

Select Samba if the central user directory is a Windows Domain. The Samba option is only available if Samba is installed on the system. The Samba option is appropriate on medium to small networks currently operating in a Windows Domain environment.

The Samba option requires additional information such as the name of a domain server, and login credentials for an Administrator level account. This information is requested on the subsequent wizard screen. Take care to ensure this information is complete and correct.

More information on user/group synchronization on Linux is available in Chapter 19, PaperCut ChargeBack on Linux.

Client Settings

PaperCut ChargeBack's main focus is on allowing users to allocate print jobs to accounts. The process works by:

  • Pausing all jobs that enter the print queues.

  • Displaying a popup on the user's workstation asking them to allocate the print job to an account. This is done by selecting the account from a list.

  • After the user has responded to the popup, the job is released to the printer.

You can read more about the account selection process and shared accounts at Chapter 8, Shared Accounts.

The account selection popup option is enabled at the user level. Once the option is enabled, the user must run the client software. If the client software is not running, the popup cannot display, and the job will remain paused in the print queue. This option is hence considered high impact. You are presented with two strategies that allow you to choose the implementation approach that best suits your needs:

Minimal impact (Initial single user testing)

In this strategy the account popup is only initially enabled on a single user for testing. You need to nominate the testing account. You may already have an approprate test user account on your system/domain or alternativly selecting your own personal account is a good choice. The name should be in the format used to log into the domain/system (usually the short form).

The minimal impact stratagy will give you time to test the popup with the nominated test user Then the Advanced account selection popup option can be enabled for other users when appropriate.

Immediate implementation (Enable for all users)

This stratagy enables the account selection popup on all users. This option is good for smaller networks as it minimizes the amount of post-install configuration - just deploy the client and your up! If this option is selected you should be in a position to install the client software on user desktops as soon as possible.

If in doubt, select the minimal impact stratagy. This will ensure the impact is isolated to only the nominated test user.

Wizard Completion

After completing the configuration wizard you will be presented with a user synchronization status screen and an option to Login. Take some time to log in and browse the interface. There are many options and now is a good time to have a look at some of the key areas of the application. Take some time to explore!

Step 5 - Printer Configuration

Unlike Windows and Mac with single print system environments, Linux is a more complex environment with a choice of print system implementations. At this stage some manual printer configuration is required. Please see the section called “Linux Print Queue Integration” and follow the steps for integrating with the print queues in your environment before returning to this section and following on with the next step.

Step 6 - Sharing Client Software

The PaperCut ChargeBack client software is located in the directory [app-path]/client. It may be useful to share this directory over the network so workstations can access/install the client application. Common sharing methods include:

  • Samba - used to share files to Windows based workstations. Mac OS X Server tools such as the Workgroup Manager or other 3rd party tools such as SharePoint may help with sharing the client directory via Samba. Similar GUI tools exist on Linux.

    Advanced system administrators may be comfortable sharing this directory by hand-editing the /etc/smb.conf file. The following configuration will share the directory in read-only form:

    [pcclient]
       path = /home/papercut/client
       comment = PaperCut Client
       public = yes
       only guest = yes
       read only = yes
                                

  • NFS - a popular sharing method used for Linux/Unix based workstations.

Step 7 - Testing

It is now time to test the system and the popup client:

  1. Log into the admin interface after completing the configuration wizard.

  2. Under the Users section, locate and click on your test user account. The quick find feature may assist here.

  3. Ensure that the user has the Print account selection option is set to Show the advanced account selection popup.

    Ensure the advanced popup is enabled

    Figure 2.23. Ensure the advanced popup is enabled

Now we need to log onto a workstation, start the client and test printing. The follow instructions assume testing is performed from a Windows desktop system. For other platforms please consult the client deployment process as explained in the section called “User Client”.

  1. Log onto a workstation and open the Windows Explorer (the file explorer). In the address bar enter:

        \\[server_name]\PCClient
                            

    The file explorer will connection to the share on the server containing the client software.

  2. Browse into the win directory and double-click on the pc-client.exe. The client should launch and an icon should appear in the task tray.

  3. Print a test document such as a web page or basic document.

  4. The client popup window should display. Select My Personal Account.

    The account selection popup (displaying extra accounts)

    Figure 2.24. The account selection popup (displaying extra accounts)

  5. Back in the PaperCut ChargeBack server admin interface, navigate to the PrintersPrint Log tab.

  6. Your print job should now be listed in the log.

  7. Your personal user account should also be charged an appropriate amount.

Step 8 - Deployment

Now that the system is tested and working, it is time to deploy the client software and enable the account popup for their use. It is important to deploy the client software before enabling the popup, otherwise users' printing will be stopped/paused.

Deploy the client software

As discussed earlier in the chapter the client can be run directly from a network share (which is automatically configured on Windows). There is also the option to install the software locally on each workstation, however this is not usually recommended because it makes the process of updating the client software more complicated.

Client deployment options and instruction are discussed in detail in the section called “User Client Deployment”. Follow those instructions to deploy the client software, and then enable the popup as described below.

Enable the advanced client popup for all users

Once the client software is deployed on user workstations, the advanced client popup must be enabled for all users within PaperCut ChargeBack. The popup can be enabled on one user at a time or can be updated for all users in bulk. The user details page can be used to enable to popup for a single user. To enable the popup for all users in bulk:

  1. Log into the admin interface.

  2. Under the Users section, select the Bulk user actions... action from the left.

  3. Select the group to enable the popup for. To enable for all users select the [All Users] group.

  4. In the Change account selection setting section, enable the Change account selection option.

  5. Select the Show the advanced account selection popup option from the list.

  6. If you do not want to allow users to charge printing to their personal account, then disable the Allow user to charge to their personal account option.

  7. Press the OK button, and confirm the operation. Once completed, all your users will have the account popup enabled.

Once the popup has been enabled on all users some testing should be performed from users' desktops. To test, login to the user workstation, perform a print, and check that the account popup appears and the job is logged as expected.

What next?

This concludes the Install Guide. You may like to take some time to explore the features of PaperCut ChargeBack before continuing reading at Chapter 3, Implementation by Example or Chapter 4, Quick Tour. Business users may be particularly interested in trying the popup client software as covered in the section called “Client Software”. If desired, the client software should also be deployed to other workstations. This procedure is detailed in the section called “User Client”.

To setup the optional Internet Control module, see the instructions in Chapter 14, Net Control in Detail.