如何拒绝用户向 cups 添加/修改/删除打印机?
我使用的是 Mac OS X 10.6。我编写了一个程序,它将使用 libcups 在 CUPS 服务器上添加和删除打印机。它有效,但现在我正在考虑安全方面。该程序使用用户名和密码在 CUPS 服务器上进行身份验证。无论我使用什么用户名和密码,只要它在系统上有效,它就可以工作。如何限制仅特定用户的访问?
问候
艾伦
I am using Mac OS X 10.6. I wrote a program which will add and remove printers to a CUPS server using libcups. It works, but now I am considering the security aspects. This program takes a user name and password to authenticate on the CUPS server. Whatever user name and password I use, it works as long as it is valid on the system. How do I restrict access to only a specific user ?
Regards
Alan
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
检查特定组的成员资格。无论如何,这将是标准的 Unix 方式。让系统的身份验证框架确定谁是组的成员(可以是 /etc/group,可以是 LDAP 或 Active Directory,都没关系)。
Check for membership in a particular group. That would be the standard unix way to do it, anyway. Let the system's authentication framework figure out who's a member of a group (could be /etc/group, could be LDAP or Active Directory, doesn't matter).
在 Mac 上启动 Safari 并将其指向 http://localhost:631/help/ref -cupsd-conf.html
查找有关授权和策略、位置、限制、IPP 操作<的部分/em> 之类的。
基本上,您可以设置在 cupsd.conf 中定义的非常细粒度的“策略”,用于管理对 CUPS 服务器上任何 IPP 操作的访问和拒绝。
详细示例可以在
http://localhost:631/help/policies.html
上找到。Start Safari on your Mac and point it to http://localhost:631/help/ref-cupsd-conf.html
Look up the sections about authorization and Policy, Location, Limit, IPP OPerations and the like.
Basically, you can set up very fine-grained "Policies", defined in cupsd.conf, which regulate access and denial to any IPP operation on a CUPS server.
A detailed example is to be found on
http://localhost:631/help/policies.html
.