smb backend: password disclosure ?
Andriy Gapon
avg at icyb.net.ua
Wed Oct 18 04:53:29 PDT 2006
> Andriy Gapon wrote:
> > Or am I doing something wrong ?
>
> If you use a proper URI, CUPS will sanitize the URI that is disclosed
> to not have any username and password information. That means putting
> the username and password at the front of the URI, e.g.:
>
> smb://username:password@workgroup/server/share
Michael, thanks a lot!
For some, maybe historical, reason I had an URI of a strange form:
smb://workgroup/username:password@server/share
It worked, but username and password were not cleaned up.
Thank you again.
More information about the cups
mailing list