How to avoid print tunneling?

Cristian Virgili cristian.virgili at dimi.uniud.it
Fri Nov 9 02:47:40 PST 2007


Hello to all!
  I installed this system for my university for using the autentication.

[CUPS + SAMBA] + LDAP

The printers accept job only for CUPS's server (where the user can login).

The students discovered that they can use SSH print tunneling:
ssh -L 9100:printerIP:9110 login
so they can print without use the accounting system.

How can I avoid it?

My ideas:

1th:

CUPS 1/PYKOTA + SAMBA (PC 1 where the user can login )
|
|
CUPS 2 ( PC 2 user cannot login)
|
printer (Accept jobs only from PC 2)


2nd or (is it possible?) :

SAMBA (PC 1 where the user can login )
|
|
CUPS 2/PYKOTA ( PC 2 user cannot login)
|
printer (Accept jobs only from PC 2)

Someone can help me to configure the 1th or 2nd case?

Thank you!
Cristian




More information about the cups mailing list