Re: [Netatalk-admins] netatalk 1.6.4 and Tiger

[Thomas K. <Tho...@ph...>]

David Schlenk wrote:

> May 24 11:38:20 marissa afpd[32727]: [afp_config.c:311]: I:AFPDaemon:
> ASIP started on 140.88.32.98:548(2) (1.6.4a)

Your system listens on 140.88.32.98:548 for AFP connections. Double check
with asip-status.pl (included in recent Netatalk distributions).

> May 24 11:38:20 marissa afpd[32727]: [auth.c:560]: I:AFPDaemon: uam:
> uams_pam.so loaded
> May 24 11:38:20 marissa afpd[32727]: [auth.c:127]: I:AFPDaemon: uam:
> "Cleartxt Passwrd" available

You use Netatalk 1.6.4 and Cleartxt Passwrd? So I suggest your most
up-to-date mac clients are running system 6, right?

> On another note: I used to have authprintdir specified, but the
> documentation says that's only an option for AFP over AppleTalk.. does
> AFP over IP handle it differently, but still provide authenticated
> printing?

As outlined in the docs (use 2.0.x! There are many reasons to upgrade. Have
a look at the netatalk homepage) the authprintdir 'authentication' uses AFP
logon credentials and compares for incoming PAP connections whether the
AppleTalk address the printjob is originating from is also already 'known'
via AFP to check the logon credentials. If clients use AFP over IP (which
should always be the case even if systems running MacOS 7.5.3 are in
productive use) then this comparison can not be done due to the different
client address schemes.

For older Macs use PSSP authentication. For more recent that run MacOS X use
at least 10.4.1 and IPP/CUPS instead. BTW: Netatalk's papd can interconnect
directly with CUPS in supported versions (2.0 or above!). For details have a
look at the docs.

Regards,

Thomas