Technology As A Journey, Not a Destination

This week has been a struggle of getting Lion to play nicely with Windows Server 2003 based print queues.  After numerous visits to a variety of forums, trying everything from forcing them out with Workroup Manager to IP Printing, I have found a (somewhat) simple solution.

Scenario:  I would add a printer that was hosted on a Windows share, send a print job and the printer would act like it was going to print, then pause.

It usually would never prompt me to enter a username and password (as required with Windows Server, even when group EVERYONE can print.) and would just set the print queue to paused.  Having had an issue with Keychain entries not working, my first step was to delete any keychain entries for the printers, which made no difference.

The logs would be generally full of this type of error:

Backend returned status 1 (failed)
[Job 58] Printer stopped due to backend errors; please consult the error_log file for details.
[Job 58] End of messages
[Job 58] printer-state=5(stopped)

This didn’t help much because I was consulting the error_log file, and this was the error. I tweaked just about every imaginable setting, even attempting to add it via the localhost:631 web based CUPS interface.  No matter what I tried, I never got much further than this.

Eventually it dawned on me to check the config files using the command line.  One thing I noticed right away was that in the /etc/cups/printers.conf file, there was a line called AuthInfoRequired and the value was negotiate.  I had an old printer that was working that I had added prior to the Lion upgrade, and that value was set to username,password instead of negotiate.  Surely it can’t be this easy.  I made the change in vi, saved it, tried again and it still failed.  It then occurred to me that since I was modifying this file, I needed to restart cups.   Even after this, it never prompted me for the username and password, which made me believe it wasn’t the solution and I moved on.

Fast forward three days and it’s 3:30 on Friday afternoon.  I just kept going back to that printers.conf file knowing there had to be something with that one difference.  Nothing else I found in three days of working on this was different, that was the only piece.  I tried it again, and made sure I cleared out every Keychain entry for the variety of printers I had tried.  I completely cleared my printer list and started fresh.  Step by step, here is what I did:

1. Cleared all references to the printer out of Keychain.
2. Deleted the printer(s)
3. Click + to add Other Printer or Scanner.
4. Click the Advanced Tab.  (If Advanced Tab isn’t available, Control-Click in the toolbar and choose Customize Toolbar and drag the advanced button to the toolbar)
5. Under Type choose Windows printer via spoolss
6. In the URL, make it smb://servername/printername
7. Give it a Name in the Name: field.  I stuck with the same name just for kicks, but it shouldn’t make a difference.
8. Choose the printer driver/model and click Add.
9. Jump over to Terminal and edit /etc/cups/printers.conf and change the AuthInfoRequired negotiate to AuthInfoRequired username,password using vi or text editor of choice.
   
10. Save the changes and restart the computer
11. Print a test page and you should be prompted to enter Windows credentials.  Save them in Keychain and bask in the glory of a functioning printer.

If you are not familiar with how printers.conf looks, each printer is included in a section that will start with <Printer the_printer_name_here> and all settings between that tag and </Printer> apply to that printer.  If you have multiple printers, you may have to scroll through it to locate it.  The AuthInfoRequired is about three lines down, directly under the UUID field.

By now, you’re probably wondering why didn’t I just click Windows and add it there.  For whatever reason, when I did, it would eventually show the domain, but only one or two random computers.  Thinking it was taking a bit to scan the network, I let it sit and think.  Nothing.  Once the server happened to be one of the random computers that showed up, so I clicked the printer and added it with no problems, just as in Snow Leopard.  For whatever, reason it doesn’t work the same in Lion, especially (it seems) when the server is on a different subnet than the client machine.

As background of why I discovered this, we moved away from central print queues due to some networking/territorial disputes/politics on our Macs and moved to strictly IP based printing.  If the printer was not networkable, we would use direct USB connections.  We are now moving to a managed printing system that requires it to go through a server to track page counts for supply replenishment and billing.  We are also moving toward using PaperCut to monitor and eventually attempt to reduce unnecessary printing.  Both of these tasks require a hosted print queue.

The IP based printing works flawlessly.  With my Snow Leopard machines, moving to the Windows print queues has been painless and worked (so far) without any problems.  Part of the problem with our old way of managing them had to do with some integration issues with the Macs.  Over the course of the past few months, I believe we’ve solved most of them.

Today I had to make a very difficult decision.  At the beginning of the year we updated most of our student computers in one building to OS X Lion.  Our district participates in the Apple program to get the latest updates for all Apple software and the move to Lion was a natural step.

In the beginning I noticed some problems with Wifi staying connected.  My computer would randomly drop the wifi connection and sometimes just seemed to just “hang” a bit.  I knew from experience that with the first version of a major software upgrade sometimes you have to put up with a few bugs.  All in all, though, it was a good trade because I really did (and do) like Lion.

Shortly after the problems seemed to increase in frequency, 10.7.1 came along that had a fix to supposedly solve the wifi issues.  For the computers I used regularly, it did solve them.  For others, we had a few workarounds such as PRAM and SMC reset, removing the network and adding it again, changing the location, adding odd DNS entries, believe me, we tried them all.  For most machines, various gyrations of this solved the issues and they have remained trouble free.  Once in a while I run into issues where my computer will not connect after waking up, but that is the exception.

We had some lingering issues with student MacBooks (which are different models – Late 2009) and sometimes entire classes would be put on hold because of the issues of this dropping wifi and the inability to log in.  It has finally reached a critical point because the MacBooks are just not getting used because they don’t work.  This was a critical problem because this was why we decided on Apple for our student computers, they were very low maintenance and reliable.  For the past two years, they have been and I have become quite the Apple snob.

Today, I sat during an entire period and discovered the login issues we had in one particular class were due to corrupted mobile accounts on the local computer.  That was a simple fix, delete the mobile account, have the student sign on again to re-create the account and we were back in business.  Certainly, this is not the best situation, but one with a simple fix. The computers stayed connected during the entire hour and we thought we had a solution.  I was pleased because I thought we had finally resolved it.

The next class period rolled around, and the wifi disconnected on most of the students before they could even log in.  What makes this more difficult is that the wifi would reconnect if I logged in with the local administrator account.  However, when you rely on a directory server to authenticate network users, that doesn’t do a whole lot of good.  Determined to figure out why Lion was doing this, I pulled out every one of the machines and tried to update them one last time just to make sure that we were on 10.7.2 and all new updates.  Long story short, I couldn’t even stay connected long enough to complete downloading updates.

After about 30 minutes of this, I made the decision to take them all back to Snow Leopard.  I imaged about five computers, tested them out, and no problems whatsoever.  I was not at all surprised, but I was extremely disappointed.  I feel like we are going backwards and I don’t know what other option we have.  Just limping along like this is not an option.  It doesn’t seem to affect anything and nothing has changed with our wifi infrastructure.  The common problem is Lion and there is just no way around it.  We have made a significant investment in technology and it all needs to work like it did before.  When a student grabs a notebook, they should open it up and log in.

Today I imaged the entire 30 machines in that cart back to Snow Leopard and we will make plans to do the same for the remaining 60-90 machines that have Lion.  I had already determined that our XServe would not be making the jump to Lion any time soon because the server version of Lion is not what I had hoped.  I had such high hopes for our student computers and the ability to use some of the features in Lion.  I remain a Lion fanatic on my work and home computers, but for our students, not so much.

Apple, if you read this, I am begging you to figure this out.  There is no explanation I can see, and the forums are full of this same type of complaint.  Nothing has changed with hardware or configuration and yet we see these problems.  I will be here waiting for a fix and be the first one to try it out.

Over the past two weeks, my team and I have had the opportunity to get some training using Apple’s professional development program.  We have one more two-day session next week.  This is an excellent resource and I cannot speak highly enough about Apple’s Professional Development program.  It’s not cheap, but it’s well worth the money. For us, we are wrapping up some spending of technology training dollars that was part of a grant I obtained.  Initially, I had wanted to include several teachers in this training to increase the amount of people to help build a training program.  However, I ran into the same problem I have had for most of the year: getting time to get teachers in a training environment is all but impossible.  I understand the difficulty in taking teachers out of the classroom.  For these two sessions, there simply weren’t enough substitutes to go around.  This time of year is busy with other training throughout the district.

My team and I have all of this valuable information, resources that would really help teachers in their classrooms.  All we would need is an hour here or there to be effective.  Besides money, time is the other scarce resource.  Earlier in the year, I provided some after hours training opportunities for our staff.  It was a total of 8 hours, two hours per evening and we provided recertification credit.  We did not have many takers, and the second round of classes, we only had one or two people enrolled.  I opted to take a different approach and create some video tutorials and post them in our district Moodle.  If a person went through all of the material I created, they would be able to get the same information as we covered in the class, possibly even more.

It occurred to me that these video tutorials were a very powerful medium.  I was able to obtain some video equipment so we can produce some high quality professional videos.  Now the hard part is getting people to find time to watch them.  It is especially difficult this time of year as the weather warms up.  When my day is done, all I want to do is work on my new blog, so I completely understand.  Lately, my interest in technology in my downtime has faded significantly.  I know it’s because it’s beginning to warm up, the days are longer, and my passion for growing food is renewed by the time of year.

It’s been a long time since I posted, but no shortage of things happening.  In both personal and business lives, it has been an insane few months.

Over the summer I received approximately 200 Macbooks in addition to the 100+ I already had.  We also purchased some carts so they can be mobile.  I tried to incorporate them into our existing network infrastructure.  The previous Macbooks had been integrated into the Active Directory domain.  Over the summer, the AD server decided to randomly change all of the mobile account user ids to a string of numbers that did not correlate to anything.  If users could log in, they had no permission to view anything.  So as if there wasn’t enough work, add this to the mix, fixing every machine.

I researched this extensively, and had no logical explanation.  At ISTE I listed to a session by the Maine IT people that are behind the MLTI and they take  a completely serverless approach.  So since I was having to touch every machine to fix Microsoft’s epic failure, I decided this is a good approach for our district.  The model fits to the way our users use, and things like a down server no longer take the entire workforce with it.

Add printers into this mix, with local print queues and it was a big project.  As school started and I saw the ratio of macs to PC labs in our district, it occurred to me that we were going about it backwards.  We have almost 3 times as many macs as PCs yet we’re trying to force the macs to work with the haphazard configuration of the PC network.  I made the decision to make the PCs work with the Macs instead.  This has caused some stress and lots of work, but in the end it will be worth it.

During this I also had the opportunity to participate in some professional development sessions sponsored by Apple and it has certainly encouraged me for the year.  I am proud of the work we’ve done and I know we will continue to do more.

So I have noticed this hatred toward the iPod Touch/iPhone/iPad for not supporting flash. I even see these commercials that whatever i don’t, Droid does. This seems, to me, to insinuate that since “I” products don’t do this, the Droid does. In fact, I fully expected it to do flash and to do it with a smile. But no.

There are a lot of things I really like about the Droid, my favorite being the screen resolution. It blows the iPod away in that department. If these two devices could produce a menu and I could custom build features from both, well we would have the device to rule them all.

In fact I am typing this blog post on my Droid. It is a great little device and I like it more all the time. But it’s not perfect and neither are the Apple devices. All of them are very close though. I only wonder who will get there first.

I am excited and nervous and annoyed at the complexity of it all, this whole grant thing.  I got a big one… a BIG one for our district.  A lot of it will be devoted to upgrading some equipment, providing training and a few other items.

I was invited to attend an event put on by Apple called Reaching All Learners.  Amazing, that’s the only word I can say.  I have thought about nothing since then – how to start this.   I also realized that I have way too much going on at the moment and need to step back and focus.  I’m trying to do too much, too soon.  I need to organize and prioritize what I’m working on so that it can receive the utmost attention.

Amazing, that’s all I have to say!  Not only did I get a lot of information from my call with our designated rep, but the support they described is amazing.  And, they are sending me a demo Macbook and iPod touch to demonstrate in my district.  Wow.  Way to go Apple!  I thought this type of customer service was a thing of the past.

Oh yeah, I have yet to hear from any of the other companies.  I would think in a market like this, the salespeople would be lining up to beg for business.  I am honestly surprised, I expected to have to beat slimy salespeople off with a stick.

So I have this strange situation in which I am asking for salespeople to call me.  It’s crazy, I know.  Part of my job is to do some research to bring back to a committee that will steer decisions in our district in our institution of a 1 to 1 student laptop program.  The exact details of the program are yet to be developed, but I’m gathering pricing, support and other information.

I put calls into several of the major laptop makers.  Some of them had information on their web site that purported their dedication to education and 21st century classrooms – all the right stuff.  As of Tuesday, not one company besides Apple has called me back.  I got a call the same day I left a message from Apple corporate, with the name and info of a representative assigned to our account.  As I was walking out the door today, that rep had called me to set up a time to discuss items.

I am impressed.