Re: Security from bills and ickets

faq
flatforty
contribute
subscribe
configure
search
rdf

main
parent
thread

Re: Security from bills and ickets
by Ambrose Bierce on Wednesday 02/Nov/2005, @10:24

You are restating my original argument - I cannot print useful items while on the move from a secured thin client. It is highly unlikely that you will come across a kiosk with the necessary features:
a) an NX client - this is solvable with the NX-applet, but does require a Java-enabled browser with the correct version at the kiosk.
b) an SMB/CUPS service running on the kiosk to include the local printer, which is then shared with the NX-server - which as described is fairly locked down.
c) SSH on the kiosk.

Related Links

·   Articles on Interviews
·   Also by Ambrose Bierce
·   Contact author

The Fine Print: The following comments are owned by whomever posted them.
( Reply )

Re: Security from bills and ickets
by cm on Wednesday 02/Nov/2005, @11:15

If I understand NX correctly there are quite a few points that you got wrong.

A Java-enabled browser, a kiosk setup that allows outgoing connections to port 22 and a printer that is accessible to the *local* machine should be enough.

a) The NX client applet opens an ssh-encrypted connection to the server.
b) The NX server forwards the printing request through that very connection to the client.
c) The NX *client* does the printing locally. No printer is "shared [directly] with the NX-server", no lockdown or firewall comes into play.

(To the people in-the-know: Please someone correct me if any of this is wrong.)

Of course, if the kiosk doesn't have any printer you're out of luck, but that would hardly be a problem specific to NX. :)

---
One potential issue: Are java applets allowed to print in a normal setup / has a regular user the right to allow that?

[ Reply To This | View ]

The Fine Print: The previous comments are owned by whomever posted them.
( Reply )


		"Ironically, we are working on that right now!" -- Kurt Granroth
KDE®, "K Desktop Environment", "KDE Dot News", "got the dot?" and the KDE Logo® are trademarks or registered trademarks of KDE e.V. in the European Union, the United States and other countries. All other trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the poster. The rest: Copyright © 2000-2008 KDE e.V. for The KDE Project. For further information or comments on this site, please contact the Webmaster.