Hi,

We are experiencing the following issues with enforcement of User ACL's:

I. On Windows
A. If I am logged into a workstation as a user NOT in the ACL for a
printer (eg testacct.cms.adm.ouc):
1. Install Printer prompts for username/password (as it should),
2. I enter the NON allowed account username/password and it installs ther
printer (as it should not, right?),
3. I then test print to the secure printer and the job prints, without
any additional authentication prompting.
Conclusion: secure printing is not secure from Windows

II. On Linux
(iPrint client installed, Novell Client for Linux NOT installed, NOT
authenticated to server (no CIFS connection))
A. Access Control Security = High, IPP Enable Secure Printing = On
1. Install Printer (using Web) requires authentication, as it should,
2. Use an account NOT in the User ACL, and it installs the printer, as it
should NOT,
3. Test print and the job spools locally, but does not print, msg is
"job-hold-until-specified", no authentication dialog occurs.
4. Remove printer with YAST, because neither iprntcmd -d nor Gnome
Printers|Remove works,
B. Access Control Security = High, IPP Enable Secure Printing = On
1. Install Printer (using iprntcmd -a) requires authentication,
2. Use an account that IS in the User ACL and it installs the printer,
3. Test print and the job spools locally, but it does NOT print, same msg
as before. This is broken.
Conclusion: secure printing is broken.

Version Information
0. iPrint/NDPS running on NetWare 6.5sp5 + all post-sp5 patches.
1. NDPSM.nlm : v3.01t, Feb 2006, /ENFORCEUSERACL
2. iPrint client (Win and Linux): v4.15
3. Linux : Suse 10.1
4. Windows: 2000sp4
5. NWClient32: 4.91sp2 + Pack B

Questions:
1. Is this a known problem, are others having these issues?
2. If this is a known problem, is Novell working on a fix and when is it
expected to be come available?
3. Have I gotten the iPrint setup incorrect in any way?

Thanks,

Ron Neilly
Network Service Coordinator
Okanagan College
Kelowna, BC, Canada
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/