Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CUPS authentication problem

On Mon, 26 Jul 2004 16:50:45 -0600
Michael Bartosh <email@hidden> wrote:

> this advice shouldn't be given without big red flags:
>
> -give the user a shell of /bin/false
yes, we've done that

> -don't give any non admin users ssh access to the server
sure

> -make the password 8 chars long, choose a combination of letters,
> numbers and special characters
hmmm. In this case I was going to make the password very easy. If I fix the group, then all the user will be able to do is delete print jobs (given that it will have no shell, no home directory, no ssh access)

[...]
> And actually, yeah, I'd say that not requiring authentication is
> preferable to putting an easy-to-crack password into an admin user
> record. Unless we're talking really expensive consumables here, and in
> that case you really need a more sophisticated authentication platform.

Unfortunately, without authentication, people can't cancel jobs at all using the CUPS web interface. That's what started this whole thing. According to http://bostoncoop.net/adam/linux, you need to patch CUPS to be able to cancel jobs as an anonymous user, and I wasn't prepared to do that.

I could upgrade to a pam-aware CUPS, but you've seen what my Mac OS X knowledge is like, misapplied Linux, so until Apple upgrades for me maybe I should wait :)

Regards,
Tom
_______________________________________________
macos-x-server mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/macos-x-server
Do not post admin requests to the list. They will be ignored.
When responding to messages, please keep your quotes short.
References: 
 >Re: CUPS authentication problem (From: Axel Luttgens <email@hidden>)
 >Re: CUPS authentication problem (From: Michael Bartosh <email@hidden>)
 >Re: CUPS authentication problem (From: Axel Luttgens <email@hidden>)
 >Re: CUPS authentication problem (From: Michael Bartosh <email@hidden>)
 >Re: CUPS authentication problem (From: Michael Bartosh <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.