[cups.general] getting the authenticated ipp username

[Michael R Sweet]

Christoph Litauer wrote:
> Christoph Litauer schrieb:
>> Michael R Sweet schrieb:
>>> Christoph Litauer wrote:
>>>> ...
>>>>>> Any solution for this problem? Thanks a lot in advance!
>>>>> No, the username you get will be the (possibly authenticated) user at
>>>>> print time.
>>>>>
>>>> Hmm, thanks Michael. What's with the ipp-job-attributes? No chance to
>>>> get the authenticated user there?
>>> If the request is authenticated, the job-originating-user-name
>>> attribute will contain the authenticated username, even if the
>>> request contains a different requesting-user-name value.
>>>
>> Ok, thank you very much. I will check that out.
>>
> 
> Well, I sent a job from a windows client, logged in as root. The ipp
> printer (test3) has been authenticated as user litauer. The job is
> spooled as user "remroot" (as exepected). Then I took the sample script
> showJobs.pl out of the perl package Net-IPP
> (http://search.cpan.org/src/BIGHIL/Net-IPP-0.1/sample/showJobs.pl). The
> script reports:
> 
> # lpq -Ptest3
> test3 is not ready
> Rank    Owner   Job     File(s)                         Total Size
> 1st     remroot 20360   test.txt - Notepad              19456 bytes
> 
> # ./showJobs.pl http://litauer:password@printhost:631/printers/test3
> ***NOT-COMPLETED Jobs for URI
> http://litauer:password@printhost:631/printers/test3***
> 
> JOB 20360: "test.txt - Notepad" from remroot
> state: JOBSTATE_PENDING
> reason: printer-stopped
> 
> 
> So maybe there's another ipp job attribute to lookup? Any further hints?

That sounds like you don't actually have authentication enabled on
the CUPS server - remroot is only used for unauthenticated requests
when the client sends a "root" username.

-- 
______________________________________________________________________
Michael R Sweet                        Senior Printing System Engineer