Understanding Security

The Linux iPrint Client is packaged in two different, specialized installations that control access to the workstation's print system. The following table explains the differences between the two clients.

Client Filename Workstation Access Description

novell-iprint-xclient-sh-release_date.i586.rpm

Security high. Limited access to the print system.

Requires workstation users to be defined with lppasswd to install, delete, or administer printers on the workstation. When performing any of these print operations, the user is challenged for a password. By default, the iPrint Printer List Web page installs this RPM file.

novell-iprint-xclient-sl-release_date.i586.rpm

Security low. Unlimited access to the print system.

Allows all users of the workstation to install, delete, or administer printers and print jobs on the workstation, including printers and print jobs of other users.

The above clients do not affect installation of the iPrint Client, just access to the workstation print system. Also, these clients do not limit printing capabilities.

IMPORTANT:  To install the iPrint Client you need root permissions. To upload drivers you from the system, you need to be defined with lppasswd; otherwise, when you attempt to add drivers from the system, the driver list is blank. To define a user to be part of lppasswd, you can use the following command:

lppasswd -a linux_user_account -g sys

During the installation of NLD Support Pack 2 or while using YaST to install the iPrint Client later, you select which client to install. For more information on the client installed on your NLD workstation, consult with your network administrator.


Printing to Secure printers

When installing a secure iPrint printer, you might be prompted twice for your username and password. First you are prompted to provide your network credentials to verify that you have access to the printer (it would be no use installing a printer that would not allow you to print). The second prompt is for CUPS to ensure you have rights to install printers on the client machine. Each time you perform a print operation with a secure printer, you are prompted for your username and password.

If you installed CASA (Common Authentication Services Adapter), your credentials are cached.

Printing to secure printers is supported only when you are logged in to the desktop. If for any reason the CUPS iPrint backend cannot deliver the job to a secure printer, the job is requeued on the client with a hold. You can then see the held job and release it after you log in to the desktop.