Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #240885 > unrolled thread

Authentication in CUPS (IPP) and sane (eSCL)?

Back to article view | Back to linux.debian.user

Contents

  Authentication in CUPS (IPP) and sane (eSCL)? Charles Curley <charlescurley@charlescurley.com> - 2021-10-04 23:50 +0200
    Re: Authentication in CUPS (IPP) and sane (eSCL)? Brian <ad44@cityscape.co.uk> - 2021-10-05 15:20 +0200
      Re: Authentication in CUPS (IPP) and sane (eSCL)? Charles Curley <charlescurley@charlescurley.com> - 2021-10-05 18:50 +0200
        Re: Authentication in CUPS (IPP) and sane (eSCL)? Brian <ad44@cityscape.co.uk> - 2021-10-05 21:10 +0200
          Re: Authentication in CUPS (IPP) and sane (eSCL)? Charles Curley <charlescurley@charlescurley.com> - 2021-10-05 22:10 +0200
            Re: Authentication in CUPS (IPP) and sane (eSCL)? Brian <ad44@cityscape.co.uk> - 2021-10-06 14:00 +0200

#240885 — Authentication in CUPS (IPP) and sane (eSCL)?

I have just bought an HP LaserJet MFP M232-M237 - IPP Everywhere. It
will let me require authentication for IPP clients. This would be a
nice thing to have in a SOHO environment, and a requirement in any
large institution.

I can set the printer easily enough. What I haven't been able to do is
tell CUPS to authenticate itself. How do I do that?

Similarly for eSCL Authentication and sane?

Searching has been less than elucidating.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [next] | [standalone]

#240913

On Mon 04 Oct 2021 at 15:48:14 -0600, Charles Curley wrote:

> I have just bought an HP LaserJet MFP M232-M237 - IPP Everywhere. It
> will let me require authentication for IPP clients. This would be a
> nice thing to have in a SOHO environment, and a requirement in any
> large institution.
> 
> I can set the printer easily enough. What I haven't been able to do is
> tell CUPS to authenticate itself. How do I do that?
> 
> Similarly for eSCL Authentication and sane?
> 
> Searching has been less than elucidating.

In which manual section, or on which page, is access control described?

-- 
Brian.

[toc] | [prev] | [next] | [standalone]

#240931

On Tue, 5 Oct 2021 14:16:10 +0100
Brian <ad44@cityscape.co.uk> wrote:

> In which manual section, or on which page, is access control
> described?

I take it you mean for the printer, not CUPS. For the printer, it is on
the embedded web server.

https://hpm234ethernet.... -> Networking -> Advanced.

It isn't described, but the available options are to require IPP or
eSCL authentication, and if so to set a user name and password. Both
have the annotation,

    Users printing from mobile devices will be required to provide this
    Name/password combination. Username and Password can contain any
    printable characters except "()<>@,;:\/[]?={}"

I don't see anything in the User Guide.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#240939

On Tue 05 Oct 2021 at 10:17:06 -0600, Charles Curley wrote:

> On Tue, 5 Oct 2021 14:16:10 +0100
> Brian <ad44@cityscape.co.uk> wrote:
> 
> > In which manual section, or on which page, is access control
> > described?
> 
> I take it you mean for the printer, not CUPS. For the printer, it is on
> the embedded web server.
> 
> https://hpm234ethernet.... -> Networking -> Advanced.
> 
> It isn't described, but the available options are to require IPP or
> eSCL authentication, and if so to set a user name and password. Both
> have the annotation,
> 
>     Users printing from mobile devices will be required to provide this
>     Name/password combination. Username and Password can contain any
>     printable characters except "()<>@,;:\/[]?={}"

Thanks for the detail.

The emphasis is on mobile devices. I wonder why they are singled out?
Interesting.

I would set a Username and Password and see how you go on printing and
scanning using CUPS and SANE and your iPhone.
 
> I don't see anything in the User Guide.

Neither do I. Expecting explanations in a Guide is optimistic, but a
mentiom would not be out of place.

A single, unique Username/Password combination is all that is required.
What is the liklihood of its remaining unknwn in an orgaisation for very
long? Security doesn't appear to be enhanced.

-- 
Brian.

[toc] | [prev] | [next] | [standalone]

#240940

On Tue, 5 Oct 2021 20:01:16 +0100
Brian <ad44@cityscape.co.uk> wrote:

> The emphasis is on mobile devices. I wonder why they are singled out?
> Interesting.
> 
> I would set a Username and Password and see how you go on printing and
> scanning using CUPS and SANE and your iPhone.

Good idea. The app on the iPhone reports that eSCL is not supported.
Well, that was good for a laugh for the day. (At least I know that it
appears to work on the printer.)

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#240966

On Tue 05 Oct 2021 at 13:43:07 -0600, Charles Curley wrote:

> On Tue, 5 Oct 2021 20:01:16 +0100
> Brian <ad44@cityscape.co.uk> wrote:
> 
> > The emphasis is on mobile devices. I wonder why they are singled out?
> > Interesting.
> > 
> > I would set a Username and Password and see how you go on printing and
> > scanning using CUPS and SANE and your iPhone.
> 
> Good idea. The app on the iPhone reports that eSCL is not supported.
> Well, that was good for a laugh for the day. (At least I know that it
> appears to work on the printer.)

Even if CUPS could handle sending Username/Password (and I doubt it
can), the facilty is aimed a mobile devices.

BTW: why use HPLIP? This is an Everywhere printer and supported by
the printing system on buster and bullseye.

-- 
Brian.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web