cups-1.1.22, scheduler/job.c, line 2021. A sanitized URL is being passed to the backend. This doesn't work for smb. If an smb url includes a password, it has to be passed to smbspool.