[cups.bugs] IPP Backend...

[Andres Adjimann]

    I have a cups server (myprintserver) that asks for basic 
authentication to print a file.
    I'm configuring a cups daemon in a client machine to print in the 
server but i want to print without typing the password every time, so i 
configure an ipp printer and put this url: 
ipp://adji:secret_password@myprintserver:631/printers/theprinter.
    I realize that there are several security issues related with this 
usage. One is that my password is in /etc/cups/printer.conf (only root 
can read it), other is when the scheduler calls the ipp backend it 
passes the device_uri as argv[0]. One question is way, the ipp backend 
can use the enviroment variable DEVICE_URI. There is a problem with 
another backend, it is for backward compatibility ???
    Another  questions are : There is another way to solve my problem 
??? There is others security issues ???
   
                Thanks in advance and sorry by my uggly english 
adji at df.uba.ar