I just had the problem that I need per user settings (username/password)
for a smb
printer. Unfortunately printconf does not support this. Hence I changed
/usr/share/printconf/smbprint to read in a user config file
(~/smbprint.conf) if available.
The only problem is that the user config file should have mode 600 since it
the windows user password. Hence I also need a little suid root c wrapper
in the config file (this wrapper must be executable by group lp only).
I will attatch the patch to smbprint and the src for the c wrapper to this
Created attachment 10820 [details]
Created attachment 10821 [details]
C src file
The wrapper must be stored as /usr/share/printconf/smbcat
[root@soliton /root]# ls -l /usr/share/printconf/smbcat
-rws--x--- 1 root lp 14655 Feb 23 19:58
Created attachment 10840 [details]
smbcat.c (more secure version)
This defect is considered MUST-FIX for Florence Release-Candidate #2
This capability, to have meaning, would require printconf to use LPRng's
authentication system. It does not. Since it does not, it is trivial to
lie about who you are to the printer. While this is the case, your patch
gains you no additional security.
While I would like printconf to gain the ability to configure LPRng's
authentication settings, this would require a good deal of additional
engineering, and will not happen by the next release.
Sorry, but I will keep this desire in mind.
I still would need this feature.