On Fri, 12 Jan 2001, Carlos Carvalho wrote:
> We have many printers scattered in several buildings. Users log in a
> few central servers from xterms, and from these servers they send
> print jobs to the micro-computers attached to the printers. We need to
> control who can print in which printer.
>
> Presently I have coded directly the usernames or groups in the
> lpd.perms file of the micro-computer, but this is not scalable. We
> need lpd to consult ldap servers to check if a given user can print in
> that printer. This could be done via PAM and the libpam-ldap module,
> or directly with ldap.
>
> Another alternative is that lpr itself check the user/printer
> association via PAM or LDAP. Presently this is not doable because the
> only program that looks at lpd.perms is lpd.
>
> How can this be done? If not possible, how can one solve this control
> problem?
You could use LPRng's printer accounting features. Just have the
accounting script do a lookup in LDAP, then abort the job or allow it
through.
Andy
-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
