[MacTUG] OmniPrint - UW wireless printing tutorial

Mike Patterson mpatterson at uwaterloo.ca
Mon May 30 10:51:07 EDT 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well, secure to the VPN endpoint, anyway. :-)

On 2011/05/30 10:49 AM, Donald Duff-McCracken wrote:
> Thanks Mike, I will stop my frets ;-) I forgot that since it was SMB,
> folks were not going to be working off campus anyhow, unless they were
> VPNing in which case that would be secure anyhow.
> 
> don
> 
> 
> 
> On 11-05-30 10:05 AM, "Mike Patterson" <mpatterson at uwaterloo.ca> wrote:
> 
> I'm not sure it'll push the credentials, given the campus boundary
> blocks on SMB. It would need to establish a TCP connection first, which
> it can't, because SYN to all related destination ports is blocked.
> 
> While it's still a concern if credentials are potentially passed
> cleartext, it _shouldn't_ be a problem from off-campus.
> 
> (I'm not sure about the details of the rest of Don's question, "is it
> getting pushed each time," and I've been away so I'm not positive if
> it's been answered, email backlog...)
> 
> On 2011/05/26 9:51 AM, Donald Duff-McCracken wrote:
>>>> OK, so let me get this straight. A user sets up a printer on a secure
>>>> network and it is passing their password, which hopefully is not an
>>>> issue,
>>>> and hopefully no one is casually watching them type it in (in clear
>>>> text).
>>>>
>>>> A month later (or whatever), the user is sitting somewhere off campus
>>>> and
>>>> hits the print command, without thinking too much about password
>>>> security
>>>> -- despite having read Marlon's reasonably worded warning, way back when
>>>> they set up the printer. Are going to be passing that password each time
>>>> they print?
>>>>
>>>> Am I right that the password is being pushed every time you print, or
>>>> 'merely' when you make the printer connection initially? If it is
>>>> getting
>>>> pushed each time they print, my concerns over passwords being sent
>>>> unencrypted rises exponentially.
>>>>
>>>> don
>>>>
>>>> ------------------------------------
>>>> Donald Duff-McCracken
>>>> Technical Services Manager
>>>> Mapping, Analysis & Design
>>>> Faculty of Environment
>>>> University of Waterloo
>>>> (519) 888-4567 x32151
>>>> http://www.environment.uwaterloo.ca/computing/people/don.html
>>>> ------------
>>>> To request help from MAD please us Request Tracker. For info see:
>>>> http://www.environment.uwaterloo.ca/computing/faculty_staff/
>>>> <http://www.fes.uwaterloo.ca/computing/faculty_staff/>
>>>> ------------
>>>> This email communication is intended as a private communication for the
>>>> sole use of the primary addressee and those individuals listed for
>>>> copies
>>>> in the original message. The information contained in this email is
>>>> private and confidential and If you are not an intended recipient you
>>>> are
>>>> hereby notified that copying, forwarding or other dissemination or
>>>> distribution of this communication by any means is prohibited.  If you
>>>> are
>>>> not specifically authorized to receive this email and if you believe
>>>> that
>>>> you received it in error please notify the original sender immediately.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On 11-05-26 9:39 AM, "Ian Turner" <iturner at uwaterloo.ca> wrote:
>>>>
>>>>> yes - not available to undergrads
>>>>>
>>>>> On 2011/05/26 09:36 , Matthew Oliver wrote:
>>>>>> The campus VPN service/project won't be available to undergrads as I
>>>>>> understood?
>>>>>> Am I incorrect in that assumption?
>>>>>>
>>>>>>
>>>>>> On 2011-05-26, at 9:33 AM, Dani Roloson wrote:
>>>>>>
>>>>>>>> I'm guessing that using the SMB protocol here
>>>>>>>> would prevent any such off campus printing?
>>>>>>>
>>>>>>> Set up a VPN to use SMB from off-campus.
>>>>>>>
>>>>>>> http://ist.uwaterloo.ca/cs/vpn/index.html#toc-connecting-mac
>>>>>>>
>>>>>>> Dani
>>>>>>> _______________________________________________
>>>>>>> MacTUG mailing list
>>>>>>> MacTUG at lists.uwaterloo.ca
>>>>>>> https://lists.uwaterloo.ca/mailman/listinfo/mactug
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> MacTUG mailing list
>>>>>> MacTUG at lists.uwaterloo.ca
>>>>>> https://lists.uwaterloo.ca/mailman/listinfo/mactug
>>>>> _______________________________________________
>>>>> MacTUG mailing list
>>>>> MacTUG at lists.uwaterloo.ca
>>>>> https://lists.uwaterloo.ca/mailman/listinfo/mactug
>>>>
>>>>
>>>> _______________________________________________
>>>> MacTUG mailing list
>>>> MacTUG at lists.uwaterloo.ca
>>>> https://lists.uwaterloo.ca/mailman/listinfo/mactug
>>>>
> 
> 
_______________________________________________
MacTUG mailing list
MacTUG at lists.uwaterloo.ca
https://lists.uwaterloo.ca/mailman/listinfo/mactug

> _______________________________________________
> MacTUG mailing list
> MacTUG at lists.uwaterloo.ca
> https://lists.uwaterloo.ca/mailman/listinfo/mactug



- -- 
I've always taken the position that if you can't find anything bad
to say about a language or an operating system then you don't
understand it.  - Shmuel Metz, monk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk3jrtsACgkQrqw9H9F0mCTacACcDp/y4Hfww6DFm8QMmmjaU7AZ
atIAnR5NHActtowRJRxuLZVyvVmpYR66
=GNUu
-----END PGP SIGNATURE-----


More information about the MacTUG mailing list