Yes it is important that the users not be able to see the other printers because there are about 20 printers in the school and  that just confuses them.

I cannot restrict printer access by user ID because students and staff will move between their class rooms and the computer lab, and staff will also want to print from the terminal in the staff room.

I think the MAC address of the terminal is the key. I can have each MAC address set in the dhcpd.conf to set the system name to identify the room it is in like rm16t1 rm16t2 and so on. Then when a user tries to print I can have some CUPS-backend that runs a simple bash script to take the $DISPLAY to find the terminal it is connected to then use that to find the MAC address, then the room and finally return the information about what printer should be usable to the CUPS server.

I think you hit on one key issue, CUPS may not be able to hide the other printers. For that mater I don't even know if CUPS is able to set a different default printer for each user. At some point a running app that want to print makes some sort of query to find out what printers are available. If it asks CUPS for that list then I should be able to make another CUPS-backend that alters the selection but if the app just gets a list of printers by looking in the /etc/printcap.cups I don't think I will be able to hide any thing.

On Thu, 2006-08-31 at 10:00 -0500, Scott Balneaves wrote:
On Thu, Aug 31, 2006 at 08:35:43AM -0600, Roy Souther wrote:
> I want to make it so that only the people in that class room can see
> that printer. So basically if you are using a terminal in a zone you
> have a restricted view of what printers are available.

Only people in that classroom can SEE the printer, or print to the
printer?  If it's print, then that's easy: cups allows you to assign
permissions based on userid, so for each class, just add the people in
the class.

If it's SEE, then that's going to require patches to CUPS, as all
printers as visible by default.  You'll also have to do it based on
$DISPLAY, rather than MAC address, because the print requests are coming
from the server anyway, so the terminal's mac address isn't going to
come into it, because it's not visible at that point.  The $DISPLAY
variable is, however.

Scott

Royce Souther
www.SiliconTao.com
Let Open Source help your business move beyond.

For security this message is digitally authenticated by GnuPG.



Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to