From: epeisach@Athena.MIT.EDU
Date: Fri, 4 Jun 93 19:32:56 -0400
Message-Id: <9306042332.AA19052@paris>
To: macdev@Athena.MIT.EDU
Subject: FYI - uam and authman


>From senator-bedfellow.mit.edu!enterpoop.mit.edu!gatech!news.ans.net!europa.eng.gtefsd.com!fs7.ece.cmu.edu!news.sei.cmu.edu!bb3.andrew.cmu.edu!andrew.cmu.edu!dm3e+ Fri Jun  4 19:30:32 EDT 1993

Excerpts from netnews.comp.protocols.appletalk: 3-Jun-93 Re: Writing a
UAM Wesley Craig@terminator. (636)

> Can I ask what you want kind of UAM you're working on?

We're looking in to creating a UAM that would be used to access kerberos
ticket information from an Authman application, when a print request is
made to a spooler. This is one method we are exploring towards the goal
of authenticated printing. If it works, the process would be something
like:

1) User make a prints a document.
2) The Macintosh print driver sends "%%?BeginQuery: rUaSpooler"
3) The spooler/server sends back "%%?EndQuery: true"
4) The Macintosh then sends "%%?BeginUAMethodsQuery"
5) The spooler/server sends back "%%?EndUAMethodsQuery: OurLocalUAM *"
6) The Macintosh then accesses uses OurLocalUAM and accesses Authman and
asks for a printing ticket.
7) The Macintosh sends back "%%Login: <ticket info>
8) The spooler/server replies with "LoginOK" or "InvalidUser" after
checking the ticket for validity.
9) The print job continues if the result of #8 was "LoginOK"

If anybody else has dealt with this interface, or has any suggestions,
please let me know. If I've misread what is described in the manuals,
please let me know as well. At this stage, we're simply exploring the
possibilities. This seems like a possible, clean way of doing things.
Except for Authman, there will be no user-visible changes on the Mac
side of things.

Thanks,

++David

David Markley
Computing Services
markley+@cmu.edu
(412) 268-7816 (voice)
(412) 268-4987 (fax)
N3NZV