NetWare Enhanced Security Print Architecture
This chapter contains supplementary NetWare® Enhanced Security information for Print Services.
Printing in a NetWare Enhanced Security environment is distributed among clients, NetWare Queue Management Services (QMS) running on each NetWare server, print servers (PSERVER.NLM) running on configured servers, and printer port drivers (NPRINTER.NLM) running on other configured servers.
Figure 2
NetWare Enhanced Security Print Architecture
The printing architecture permits, for example, a client program to send a print job to a queue on Server 1, the queue to be serviced by a PSERVER on Server 2, and the print output to be directed through the NPRINTER.NLM on Server 2.
NetWare Enhanced Security printing is Novell® Directory ServicesTM-based. That is, the configurations for queues, print servers, and printers are defined as 4TM object properties for the corresponding NDS objects that represent the physical resources. NetWare 3.x printing is not supported in NetWare Enhanced Security environments.
The evaluated server described in this manual does not include workstation-based print servers or port drivers or network print servers or port drivers. Rather it includes only print servers running a NetWare servers (PSERVER.NLM) and port driver running on NetWare servers (NPRINTER.NLM).
The NetWare Enhanced Security distributed print architecture involves the following security mechanisms, which must be configured properly in order to protect print jobs and the network.
Print Server login |
PSERVER.NLM may be configured to service print queues on different servers. In order for PSERVER to access a queue on a remote server, PSERVER must first log in to the remote server that holds the queue. Thus, the Print Server NDS object must be configured with a login password and PSERVER must be run with the password in order to log in to the remote server. |
IPX address restrictions |
When a printer port driver (NPRINTER) attaches to a print server, PSERVER checks the IPXTM network address associated with the connection request and does not permit the connection if the printer's IPX address does not match the list of valid IPX addresses for known printers. |
WARNING: Print Services describes print configurations for DOS, OS/2*, Windows*, and UNIX* clients. Evaluated versions of these clients may or may not exist for NetWare Enhanced Security. You must use only evaluated client tools to administer the NetWare print system. Such tools may include NetWare Administrator and/or PCONSOLE.
For instructions on which print administration tools are included in the NetWare Enhanced Security configuration, see your client workstation's trusted facility manual.