iPrint Access Control is not working

Paul Segal wrote:

> G'day
>
> I have created a new iPrint system in an existing tree.
>
> The printers are installed into a container for print objects only.
>
> The iPrint server is OES2 Linux, eDir 8.8, some older NetWare servers
> are 8.7.3
>
> My problem is any user can print to any printer, the User Role is only
> occupied by the tree admin and the print object container. Currently
> the Operator and Manager roles are still only the Tree admin.
>
> I discovered this problem also seems to have existed with NDPS but was
> not an issue as printer installation was not as simple as the web
> based install in iPrint, which is how we want to do it, rather than
> use iCM.
>
> I have updated iManager and OES2, deleted the printers and tried
> again, users without access can still print.
>
> Is it possible this could be a schema extension issue?
>
> Thanks, Paul.

I'm still stumped.
I wondered if they (the NDPS printers) had become Public Access
Printers - because the issue was there with NDPS, there are no Public
Access Printers according to NWAdmin.

I've tested for Inherited access via rights equivalency, this does not
appear to be the issue.

I also checked the same possibility by making a Test user in a
different context, in iManager I replaced the Admin user as the Print
Manager user (in the new iPrint system) with the new Test user, and
made it the only Printer user. Still anyone can print to that printer
via the new iPrint system.

There seems to be something fundamental wrong here, affecting both
iPrint and NDPS. Both the iPrintPrinterUserRole attribute of the
iPrintPrinter object and the NDPS User Role attribute of the NDPS
Printer object are not doing what they are supposed to do.

I'm not sure where to look.

Paul.

--