[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cups
Subject:    Re: [cups.general] disable lp/lpr -U option
From:       Johannes Meixner <jsmeix () suse ! de>
Date:       2012-05-22 12:58:34
Message-ID: alpine.LNX.2.00.1205221449580.4212 () nelson ! suse ! de
[Download RAW message or body]


Hello,

On May 22 05:26 Bjoern wrote (excerpt):
> we are using Cups/Pykota for printaccounting.
> Is it possible to disable the -U option, that users can not print
> from another user account?

No - because it would not really help.

Reason:
As long as the IPP communication with the cupsd happens without
authentication of the user name, any user can set an arbitrary
user name for the IPP communication.

See "man cancel":
-----------------------------------------------------------------------
        -u username
             Cancels jobs owned by username.

NOTES
        Administrators wishing to prevent unauthorized cancellation
        of jobs via the -u option should require authentication
        for Cancel-Jobs operations in cupsd.conf(5).
-----------------------------------------------------------------------

But if the IPP communication with the cupsd requires authentication,
any user must authenticate first of all which is less user-friendly
but that is the only way if you cannot trust your users.


Regarding printer accounting in general you may have a look at
http://en.opensuse.org/SDB:Printer_Accounting


Kind Regards
Johannes Meixner
-- 
SUSE LINUX Products GmbH -- Maxfeldstrasse 5 -- 90409 Nuernberg -- Germany
HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer

_______________________________________________
cups mailing list
cups@easysw.com
http://lists.easysw.com/mailman/listinfo/cups
[prev in list] [next in list] [prev in thread] [next in thread]