Print Server Configuration

Introduction

This manual describes the configuration of the server-side components of the application GBS Print.

The configuration procedure must be performed only after the installation step. For more information, consult the GBS Apps Installation Manual.

Configuration

The steps for configuration are:

1. Configure Tomcat;

2. Configure the certificates;

3. Generate the encrypted password;

4. Configure other properties in the config.properties file;

5. Install and configure the printing systems;

6. Install the fonts;

All steps are described below. An example of the file config.properties can be found in the section Configuration File Example.

All lines must be present in the configuration file. Commenting out or deleting lines may cause unexpected behavior. For additional information, contact the Griaule Support Team.

Tomcat Configuration

Edit Tomcat's configuration file to configure the certificates and the port the application will use.

vi /var/lib/tomcats/print/conf/server.xml

To change the port, search for Connector port=. This is the port for backend operations.

The default port of GBS Print is 8127.

Certificates Configuration

To enable SSL authentication, search for Connector port= in the file /conf/server.xml.

There are several entries. Look for the one that defines a SSL HTTP/1.1 Connector. If necessary, remove the comment delimiters <!-- and -->. Then, adjust the following settings:

port="58194"
keystoreFile="/home/griaule/keystore"
keystorePass="password"
keyAlias="1"
clientAuth="true"
truststoreFile="/home/griaule/keystore"
truststorePass="password"

The parameter port must be the desired network port for the application.

Change the path of keystoreFile and truststoreFile to the correct values. Do the same for keystorePass and truststorePass.

The parameter clientAuth="true" will require server authentication to the client and client authentication to the server. This means the client will need to import the certificate into the browser to be able to access the application.

When clientAuth is set to true, the system administrator must provide the file certificate.pfx to end users.

Database Password Encryption

In the file config.properties, the parameter jdbc.password is an encrypted password. To generate the encrypted password, follow the steps below:

1. Go to the following directory:

   cd /var/lib/tomcats/print/webapps/gbs-print-server/WEB-INF/lib

2. Run the command:

   java -cp gbs-common-db-<version>.jar com.griaule.commons.util.EncryptUtil <desiredPassword>

3. The encrypted password will appear after the message: "Encrypted password is:"

Save the encrypted password. It will be used in the next step.

Application Configuration File

To configure the file, open it with:

vi /var/lib/tomcats/print/conf/config.properties

The most important changes in this file are the parameters jdbc.url, jdbc.username, jdbc.password and gbds.url. Configure them according to your environment.

The complete configuration file is shown in the section Configuration File Example.

Remember to replace the encrypted password generated in the section Database Password Encryption in this file.

Print Settings

The last step is to configure the IP and port of the application that the end user will access. It must be the same IP and port configured in the section Tomcat Configuration.

print.ip=<ip>
print.port=<port>
print.protocol=<protocol>

Make sure the configuration parameters print.ip, print.port and print.protocol are correctly specified in the file config.properties. In many cases, the IP will be the same for several applications. However, each application will have a different and unique port.

Make sure the configuration parameter resizeFloat=0.3 be present in the configuration file (config.properties). It determines the percentage of compression of the document image to be saved in the database at the end of the process. The default value is 0.3 (30% compression).

Printing Systems

CUPS Installation

The Common UNIX Printing System (CUPS) is a printing system for UNIX-based operating systems. It allows a computer to act as a print server, receiving print jobs from client computers and sending them to the appropriate printer. To install CUPS, follow these steps:

Install CUPS:

sudo yum install cups -y

Enable and start the CUPS service:

sudo systemctl enable cups
sudo systemctl start cups

Then, install the graphical interface for CUPS:

sudo yum install system-config-printer -y

If the install command fails, try cleaning the yum:

sudo yum clean all

CUPS Configuration

To configure CUPS, edit the configuration file:

sudo vim /etc/cups/cupsd.conf

To allow access from other computers to the CUPS server, change the following line from:

Listen localhost:631

To:

Listen 0.0.0.0:631

Then, to allow access to the server, add the permission Allow from all address to <Location />. To do this, look for the following lines and change them as follows:

# Restrict access to the server...
<Location />
   Order allow,deny
   Allow from all
</Location>

Also, to allow access to the administration pages, add the permission Allow from all address to <Location /admin>. To do this, look for the following lines and change them as follows:

# Restrict access to the admin pages...
<Location /admin>
   Order allow,deny
   Allow from all
</Location>

Then, save and close the configuration file.

Finally, to apply the changes, restart the CUPS service:

sudo systemctl restart cups

HPLIP Installation (HP Printer Drivers)

The HP Linux Imaging and Printing (HPLIP) is a free and open-source solution developed by HP for printing on Linux using HP printers. To install HPLIP, run:

sudo yum install hplip -y

Then, create a group for printer administration:

sudo groupadd lpadmin

Finally, add the user root to the group lpadmin:

sudo usermod -a -G lpadmin root

Printer Configuration

First, start the network printer discovery service by running:

sudo systemctl enable cups-browsed.service
sudo systemctl start cups-browsed.service
sudo systemctl status cups-browsed.service

Next, access the CUPS web interface at http://<server_ip>:631 using a browser.

In the top menu, click the Administration tab and then the Add Printer button.

If a message appears saying an update is required, click the displayed URL, then the Advanced button and Proceed to https://<server_ip>:631 (unsafe).

When returning to the CUPS web interface, click the Add Printer button again and, if prompted, log in with the user credentials root of the server.

On the Add Printerpage, in the Local Printerssection, select HP Printer (HPLIP) and click the Continue button.

Then, in the Connection, enter socket://<printer_IP> and click the Continue button.

Then, enter a Name, Description and Location for the printer, following the instructions on the page for each field, and click the Continue button.

In the Makeselect the printer manufacturer and click the Continue button.

Then, in the Modelselect the printer model from the list and click the Add Printer button.

Then, check the printer default settings and make sure they fit the environment.

Be sure to select the correct paper size in the General / Media Size.

section.

Finally, click the Set Default Options button to save the printer settings. If everything works as expected, a message will appear saying the printer was added successfully and you will be redirected to the printer page.

CUPS PDF (optional)

CUPS PDF provides a way to print to a PDF file. It is recommended for testing purposes.

To install CUPS PDF, run:

sudo yum install cups-pdf -y The default path to save PDF files is/root

. To change the path, edit the CUPS PDF configuration file:

Then, edit the CUPS PDF configuration file:

Under vim /etc/cups/cups-pdf.confPath Settings , change the parameter Out <path>

Next, access the CUPS web interface at http://<server_ip>:631 using a browser.

In the top menu, click the Administration tab and then the Add Printer button.

On the Add Printerpage, in the Local Printerssection, select to the desired path. and click the Continue button.

Then, enter a Name, Description and Location for the printer, following the instructions on the page for each field, and click the Continue button.

Then, in the CUPS-PDF (Virtual PDF Printer)Or Provide a PPD File , click the Choose File button and select the fileCups-PDF.ppd . That .ppd file can be found in the directory /etc/cups/ppd/

on the server where CUPS PDF is installed. Then, click the Add Printer button.

Be sure to select the correct paper size in the General / Media Size.

section.

Check the printer default settings and make sure they fit the environment.

Font Installation The application uses three fonts that must be installed:, Arial and OCR-B-10 BT.

The application uses three fonts that must be installed:

Tahoma Bold

First, check if the font is already installed:

fc-list | grep arial

If the font is not installed (empty result), download the font:

wget http://www.itzgeek.com/msttcore-fonts-2.0-3.noarch.rpm

Then, install it:

rpm -Uvh msttcore-fonts-2.0-3.noarch.rpm

First, check if the font is already installed:

Check if the font was installed successfully: .rpm files You can then remove the

downloaded file:

Arial

rm msttcore-fonts-2.0-3.noarch.rpm root.

First, make sure you are logged in as

Then, check if the font is already installed:

fc-list | grep ocr If the font is not installed (empty result), create a directory in ocrb:

/usr/share/fonts/

mkdir /usr/share/fonts/ocrb For the following steps, you must have the .ttf Arialfont file

. Download it from a trusted source or copy it from another machine. Transfer the font file to the server and move it to the directory.

/usr/share/fonts/ocrb

Then run:

fc-cache -f /usr/share/fonts/

Then, check if the font is already installed:

OCR-B-10 BT

rm msttcore-fonts-2.0-3.noarch.rpm root.

First, make sure you are logged in as

Finally, check if the font was installed successfully:

fc-list | grep tahoma The result should includeTahoma:style=Bold . If the font is not installed, create a directory in ocrb:

tahomabd

mkdir /usr/share/fonts/ocrb For the following steps, you must have the .ttf OCR-B-10 BTfont file

. Download it from a trusted source or copy it from another machine. mkdir /usr/share/fonts/tahomabd.

/usr/share/fonts/ocrb

Then run:

fc-cache -f /usr/share/fonts/

Finally, check if the font was installed successfully:

fc-list | grep tahoma The result should include.

Finishing the Configurations

/usr/share/fonts/tahomabd GBS Apps Installation Manual - Configuration Section.

Configuration File Example

This section shows an example of the file config.properties.

The parameters <rdb_ip>, <rdb_username>, <rdb_encrypted_password>, <gbds_ip>, <gbds_username>, <gbds_password>, <ldap_ip>, <ldap_username>, <ldap_password>, <email_password>, After all configuration steps are complete, return to and <print_ip> <print_service_ip>

# ************************************************************
#
#        /$$$$$$$  /$$$$$$$  /$$$$$$ /$$   /$$ /$$$$$$$$
#       | $$__  $$| $$__  $$|_  $$_/| $$$ | $$|__  $$__/
must be replaced with the correct values.
#       | $$$$$$$/| $$$$$$$/  | $$  | $$ $$ $$   | $$
#       | $$____/ | $$__  $$  | $$  | $$  $$$$   | $$
#       | $$  \ $$| $$  \ $$  | $$  | $$$$| $$   | $$
#       | $$      | $$  \ $$  | $$  | $$\  $$$   | $$
#       | $$      | $$  | $$ /$$$$$$| $$ \  $$   | $$
#
# ************************************************************

#       |__/      |__/  |__/|______/|__/  \__/   |__/

jdbc.driverClassName=com.mysql.jdbc.Driver
# GBS Print Server
jdbc.username=<rdb_username>
jdbc.password=<rdb_encrypted_password>
jdbc.dialect=org.hibernate.dialect.MySQLDialect
jdbc.showSql=false

locale=en_us

gbds.url=http://<gbds_ip>:8085
gbds.user=<gbds_username>
gbds.key=<gbds_password>
gbds.logLevel=INFO
gbds.additionalHeaders={}
gbds.flushDebugRequests=false
gbds.timeout=300
gbds.listExceptions.labels=

gbds.latent.search.url=null
gbds.proxy.url=null
gbds.proxy.port=0

jdbc.url=jdbc:mysql://<rdb_ip>:3306/print
keystore.path=null
keystore.password=null
truststore.path=null

same.user.simultaneous.login=true
fingerprint.useSDK=false
image.convert.useJnbis=false
filter.people.pguid=ALL
faceQuality.qtdeMinErrors=2

session.expirationTime.server=8h
session.expirationTime.web=8h

notification.last.timestamp=15

truststore.password=null
ldap.user=<ldap_username>
ldap.password=<ldap_password>

codeValidTime=10
deviceTime=6

email.host=smtp.gmail.com
email.host.port=587
email.password=<email_password>
ldap.url=ldap://<ldap_ip>:389
email.python.path=python
email.use.script.python=true

[email protected]
# Print back on front/back layouts

ci.printBack=true
# Timeout in seconds to force a print job even if queue has not enough cis to print

queue.timeout=-1
# Station

station.initials=HEADQUARTERS

batchSizes=FOUR_CI:8
defaultStation=HEADQUARTERS
forceDefaultStationPrinting=true
print.service.on=true

print.mirror.page=true
#printService.url=http://<print_service_ip>:8090/gbs-print-service/service/
printService.logLevel=DEBUG

printService.timeout=300

#autoPrint=FOUR_CI:true,TWO_CF:false,ONE_CI:true,TWO_CA:false,TWO_CC:false,ONE_CS:false
print.ip=<print_ip>
print.port=8127

resizeFloat=0.3