cups user authentication for remote users: make it ask for a password!

[Paul Johnson]

On Thu, Feb 4, 2010 at 1:09 PM, NoOp <glgxg at sbcglobal.net> wrote:
> On 02/03/2010 11:02 AM, Paul Johnson wrote:
>> I can't understand cups configuration for a network server.  I want to
>> print from my laptop to my desktop, and it works fine to enable
>> sharing in cups.
>>
>> However, that makes my desktop printer available to everybody on the
>> subnet.  There does not appear to be a way to specify "all users on my
>> desktop computer" plus "paul on a remote system when he gives a
>> password". The cups user control thing seems to have no password
>> authentication framework.
>
> I think you are mixing references to 'network server' vs desktop
> attached printer?
>

Well, I don't think I'm confusing the two. I think they are ACTUALLY
the same.  My desktop computer is running CUPS and is acting as a
print server.

Observe the doc you refer me to

https://help.ubuntu.com/community/NetworkPrintingWithUbuntu

Ubuntu Print Server  (running on my desktop) makes the printer
available on the subnet. I need that so I can print from my laptop.

It does not provide a way for me to keep out other users on the subnet.

Anybody who has a print client that can scan the subnet will see my
printer and can send jobs to it.

I agree with you that the user identity option in Ubuntu's
system-config-printer is intended for local users on the desktop
"server" system itself. And that's my point. There is no way to keep
out other users on the subnet.

Am I just reading all this wrong?  If so, tell me how to secure my
desktop "print server" to stop neighbors on the network from sending
jobs to me.  For the life of me, I can't see how to do it.

I see where I could use iptables to block some IP addresses, but since
my PC is on DHCP, and it could get any different number, that's
impractical.

pj


> In System|Printer|Properties|Access Control you can 'Deny printing for
> everyone except these users'. Alternately, you can simply turn off
> shareing and use the Internet Printing Protocol (IPP) to access the
> printer remotely. IPP supports encryption & compression[1].
>
> Note you may have to specify
>
> These might help:
> http://www.cups.org/
>  http://www.cups.org/documentation.php
>  http://www.cups.org/documentation.php/network.html
>   [Internet Printing Protocol (IPP)]
> https://help.ubuntu.com/9.10/serverguide/C/cups.html
> https://help.ubuntu.com/community/NetworkPrintingWithUbuntu
>
> [1] http://www.cups.org/documentation.php/doc-1.4/security.html
> Encryption Issues
>
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>



-- 
Paul E. Johnson
Professor, Political Science
1541 Lilac Lane, Room 504
University of Kansas