smb backend: password disclosure ?

Andriy Gapon avg at icyb.net.ua
Wed Oct 18 04:53:29 PDT 2006


> Andriy Gapon wrote:
> > Or am I doing something wrong ?
>
> If you use a proper URI, CUPS will sanitize the URI that is disclosed
> to not have any username and password information.  That means putting
> the username and password at the front of the URI, e.g.:
>
>      smb://username:password@workgroup/server/share

Michael, thanks a lot!

For some, maybe historical, reason I had an URI of a strange form:
       smb://workgroup/username:password@server/share
It worked, but username and password were not cleaned up.

Thank you again.





More information about the cups mailing list