[cups.bugs] IPP Backend...
Andres Adjimann
adji at df.uba.ar
Tue Aug 3 15:38:12 PDT 2004
I have a cups server (myprintserver) that asks for basic
authentication to print a file.
I'm configuring a cups daemon in a client machine to print in the
server but i want to print without typing the password every time, so i
configure an ipp printer and put this url:
ipp://adji:secret_password@myprintserver:631/printers/theprinter.
I realize that there are several security issues related with this
usage. One is that my password is in /etc/cups/printer.conf (only root
can read it), other is when the scheduler calls the ipp backend it
passes the device_uri as argv[0]. One question is way, the ipp backend
can use the enviroment variable DEVICE_URI. There is a problem with
another backend, it is for backward compatibility ???
Another questions are : There is another way to solve my problem
??? There is others security issues ???
Thanks in advance and sorry by my uggly english
adji at df.uba.ar
More information about the cups
mailing list