[Bug 8125] Re: username for smb printer is not shown on printer properties
** Changed in: gnome-cups-manager (Ubuntu) Importance: Undecided => Low -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
I think as soon as the patched version of the gnome-cups-manager is in Edgy we can close this bug. Patching CUPS wouls not only expose sensible data but also make CUPS too much patched, so that incompatibilities with other tools can happen. So I reject it for CUPS and leave it open only for the gnome-cups- manager. ** Changed in: cupsys (Ubuntu) Status: Needs Info => Rejected ** Also affects: gnome-cups-manager (Ubuntu) Importance: Untriaged Status: Unconfirmed ** Changed in: gnome-cups-manager (Ubuntu) Assignee: (unassigned) => Ubuntu Printing Team Status: Unconfirmed => Confirmed -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: [Bug 8125] Re: username for smb printer is not shown on printer properties
On Tue, Aug 29, 2006 at 01:16:01AM -, Rocco Stanzione wrote: > This bug was reported almost two years ago. Is it still an issue? Yes, it is. For security reasons, CUPS doesn't include the username and password in the info it sends back to a client (in this case gnome-cups-manager). There are two solutions to the problem: 1. Change the GUI so that the user doesn't expect the info to be there. 2. Make CUPS just send the username (and still leave out the password) and just put gibberish in the password field. One of the patches attached to this bug makes CUPS send the username, so it's a pretty easy fix, but clearly no. 1 is the safer choice. However, as I've pointed out previously, there's a good chance we'll be ditching gnome-cups-manager in Edgy in favour of some other tool. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: [Bug 8125] Re: username for smb printer is not shown on printer properties
I believe this is still a problem. I have an entry in my printers.conf file which has: DeviceURI smb://[EMAIL PROTECTED]/hpcolorL but the printer property screen has a blank username and password (the host and printer fields are correct). -Hal -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
This bug was reported almost two years ago. Is it still an issue? -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
I guess 3. will be :) -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: [Bug 8125] Re: username for smb printer is not shown on printer properties
On Tue, Jun 27, 2006 at 09:02:08PM -, Kurt Pfeifle wrote: > The sanitization of the device URI (not showing username and/or password > in log files or other places where device URIs show up for mortal users > to see) is in fact a *feature* that was introduced some time ago (it was > different before), in order to increase security. I wasn't aware of the chronology of it, but it was quite clear that the removal was intentional. We have three options: 1. Change cups to send the username (not the password of course) 2. Change the UI so that it won't be as surprising that the fields are blank. (e.g. a text telling that it won't be shown but can be used for changing the info) 3. Ditch gnome-cups-manager and go with that new one which I don't remember the name of. As a result of the printing BoF's at the Ubuntu Developer Summit my money is on no. 3. :-) Cheers, Søren. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
The sanitization of the device URI (not showing username and/or password in log files or other places where device URIs show up for mortal users to see) is in fact a *feature* that was introduced some time ago (it was different before), in order to increase security. Chances are pretty low that you will get acceptance at CUPS.org to revert that again. Security is low in any case when printing to an smb://-connected printer that needs authentication, but there is not much CUPS can do about that. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
** Changed in: gnome-cups-manager (upstream) Status: Unconfirmed => Confirmed -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
Devoting the bug to the cups issue now (not sending the user name). This has to be discussed with upstream and is nothing for dapper. ** Changed in: gnome-cups-manager (Ubuntu) Sourcepackagename: gnome-cups-manager => cupsys Status: Confirmed => Needs Info ** Changed in: cupsys (Ubuntu) Assignee: Martin Pitt => Ubuntu Printing Team -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
I uploaded the bogus password fix, thanks Soren! gnome-cups-manager (0.31-1.1ubuntu11) dapper; urgency=low . * Cleaned up the 'foo.diff and foo.diff.patch' mess. * Add debian/patches/password_field_garbage.patch: - When editing SMB connection attributes, do not set the password input field to the value of 'resource' (which is 'smb'). We do not get the password in cleartext, so just leave the field blank. - Thanks to Soren Hansen for debugging this. - See LP#8125 (this bug is mentioned there as a side discussion). However, the cupsys change is more intrusive, and exposing samba user names is not something I'd like to introduce at this stage of the release. At least g-c-m works in a sensible way now, both username and password are empty, but can be used for changing the credentials. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
** Attachment added: "Expose username in DeviceURI" http://librarian.launchpad.net/2720762/expose-username-in-device-uri.patch -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
Soren, thanks for the patch. It indeed looks quite simple and mysterious, I'll check it. As for the cupsys patch, attaching it here will do just fine, since it's related to this bug. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
** Attachment added: "Remove the nonsense password" http://librarian.launchpad.net/2698834/remove_nonsense_from_password_field.patch -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
Soren, thanks for your work! Would you mind sharing your patch so that we can actually apply it? :) How much is it, two beer? :-P -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
Oh, and I've got a fix for the password thing too. :-) -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
I've located the problem. It stems from cups not sending back the full DeviceURI, but rather a sanitized version (read: with all the authentication stuff removed). I've got a patch on my system that makes cups only remove the password. We need to evaluate whether or not this poses a security risk in any way to send the auth username back to the client. Optimally, returning the username would depend on whether or not the user would be allowed to change it, ie. has some sort of administrative rights. I'll see what I can whip up and whether we consider it safe for inclusion in the release. -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 8125] Re: username for smb printer is not shown on printer properties
** Bug 42325 has been marked a duplicate of this bug -- username for smb printer is not shown on printer properties https://launchpad.net/bugs/8125 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
