Re: Can I restrict printer access?

[bm29@cunixf.cc.columbia.edu (Bob Matsuoka)]

In article <1pb6rk$p91@slab.mtholyoke.edu> jbotz@mtholyoke.edu (Jurgen Botz) writes:
>In article <1993Mar30.143628.48648@kuhub.cc.ukans.edu> mcginnis@kuhub.cc.ukans.edu writes:
>>Is there a way to configure AppleTalk printing so that only designated
>>users can send jobs to a given printer?  Perhaps a configuration
>>through the print server?
>
>Yes and no.  You can create a setup whereby people can print to a
>Laserwriter via a Unix print server, and you can restric access to the
>queue to a limited set of users (if you're using CAP, for example, a
>user has to be attached to a file service before they can print as a
>means of authentication.)  BUT... you can't really do this securely for
>Appletalk printing.  You could hang the printer directly of a serial
>port on a Unix box and make it secure that way, but then you're limited
>to asynch comm speeds.  If you're printer is on an Appletalk the best you
>can do to limit access to it is the change the device "type" as which
>it advertises itself on the network, but this has problems and is still
>not really secure.
>
>>I know that this can be easily done through Novell NetWare when the
>>Macintosh NLM is providing print services, but is there a way to do
>>it with AppleShare?
>
>Nope.  Same arguments apply... and to Novell as well, btw., again unless
>you take the printer off the network and connect it directly to the server
>via its serial port.
>-- 
>Jurgen Botz, jbotz@mtholyoke.edu | Vending machines SHOULD respond to a [finger]
>South Hadley, MA, USA            | request with a list of all items currently
>--Unix is dead, long live Unix-- | available for purchase... -RFC1288

The Novell NW-Mac Appletalk Printing Services allows you to set up a queue 
in such a way as to restrict access to the queue except by those logged in
to the server the queue resides on, and then you can restric access to any
NW queue by user.  There is also the option to change the NBP type of the
printer, as Jurgen mentioned, any while this will prevent any casual user
from accessing the printer, it will not stop someone determined.  You
could set a program sound an alarm if such a printer's NBP type is changed,
and in fact NW-Mac will sent a console alert if a printer unexpectedly
becomes unhidden.

--B
--------------------------------------------------------------------------
Bob Matsuoka, Network Manager		           bm29@cunixf.colmbia.edu
New Lab for Teaching and Learning                  ph. (212) 722-5160 x152
The Dalton School                                  fax (212) 348-5885