RE: Clarification of RE: JetDirect names change: Mac printing


"McCaffrey
Thu, 20 May 1999 15:36:40 -0500


WinMac Digest #317 - Thursday, May 20, 1999

  Re: [WinMac] Clarification of JetDirect names change: Mac printing
          by <CHoogendyk@aol.com>
  Re: unix/ nt security diffs?
          by "Daniel L. Schwartz" <expresso@snip.net>
  RE: [WinMac] AppleShare IP for Windows NT
          by "Andreas von Keitz" <andreas.von.keitz@experteach.de>
  NT sp5?
          by "Tom Roth" <tomroth@wfubmc.edu>
  Re: [WinMac] Bridged Printer & NT | Configure a NT printer?
          by "Tom Roth" <tomroth@wfubmc.edu>
  A Mac Alone
          by "Phil Sutton" <phils@sbinet.com>
  LaserJet 8000N & ASIP
          by "Frankenstein, Paul" <Frankens@wnet.org>
  Re: [WinMac] unix/ nt security diffs?
          by "Deb Baddorf" <baddorf@fnal.gov>
  Apple LW360 fax - WIN driver?
          by "Parker, Douglas" <douglas.parker@lmco.com>
  Re: [WinMac] unix/ nt security diffs?
          by "Darryl Lee" <lee@darryl.com>
  Re: A Mac Alone
          by "Robert James, Jr." <rjames@chi1.uncfsu.edu>
  Comments on MS Zero Admin Toolkit
          by "R Berntson" <berntson.ron@sbe.saskatoon.sk.ca>
  Re: [WinMac] Apple LW360 fax - WIN driver?
          by "Darron Spohn" <dspohn@clicknet.com>
  Re: [WinMac] unix/ nt security diffs?
          by "Bruce Johnson" <johnson@Pharmacy.Arizona.EDU>
  RE: Clarification of RE: JetDirect names change: Mac printing
          by "McCaffrey, Steven J " <Steven.J.McCaffrey@USAHQ.UnitedSpaceA

Subject: Re: [WinMac] Clarification of JetDirect names change: Mac printing
From: CHoogendyk@aol.com
Date: Wed, 19 May 1999 22:51:23 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"

In a message dated 5/19/99 9:34:02 AM, PetersJB@nswccd.navy.mil writes:

>When we have several dozen HP LaserJet 4000s scattered over 20+ buildings,
>sending and retrieving test pages is a non-trivial task.

I deleted a response to this before I couuld respond to the response. 8-)

Anyway, you don't always have control over the renaming of newly installed
printers. In a predominantly windows environment, they might not even be
aware that their printers are serving AppleTalk. You tell them that you are
looking at their printer from a Mac, and they just say, "huh?"

You also have situations where NT folks who know nothing of Macs
inadvertantly capture your printer and remove it from the network.

It can end up being a pretty chore to straighten things out and keep them
straight.

I have been trying to lock down all our printers as well. A couple of months
ago we had the weirdest hacking of our network. Someone got on the network
and changed the IP addresses of a bunch of printers to be identical to the IP
address of one of our Sun servers. Suddenly we can't access the server, and a
bunch of departments have lost their ability to print. That one was really
hard to track down. I eventually had to go to the ARP tables of the buildings
border router and find the hardware addresses that were claiming that IP
address. Then I had to go to the DNS database and get the names of the
printers that corresponded with those hardware addresses and their correct IP
addresses. Then I had to use JetDirect to locate the printers by hardware
address, fix the IP, put a password on them, and lock down their control
panels.

After I figured this one out, I discovered that I could do all the
troubleshooting from my Mac using OTTool from Neon Software. Great little
piece of software. I love it.

Anyway, that was a fine mess.

Chris Hoogendyk
Network Specialist
UMass Library, Amherst

Subject: Re: unix/ nt security diffs?
From: "Daniel L. Schwartz" <expresso@snip.net>
Date: Wed, 19 May 1999 22:51:25 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"

        Dear Chris,

        I went ahead and posted this back to the WinMac list, because
my advice is
the same I had in my column on PRODIGY a few years ago...

        Basically, you let the users know that you leave the system
(relatively)
unprotected so that they can enjoy the computer without impairment. You put
them on the Honor System not to hack, and they won't. No challenge = no
hacking - You'll be *surprised* how effective this strategy can be. This is
sort of like a prison trusty. (!)

        The only downside with reduced security is that the users
could accidently
download a virus or other rogue Java applet or macro virus, so you'll need
to carefully evaluate the measures you have in place.

        Cheers!
        Dan

At 09:57 PM 5/19/99 EDT, you wrote:
>
>In a message dated 5/19/99 8:32:04 AM, expresso@snip.net writes:
>
>> 2) When Chris talked about "being hacked into" does this mean that the
>>"hacking" was malicious or just plain stupidity? :)
>
>we're talking malicious hacking. a decent sized state university with enough
>bright but low class kids who seem to get a kick out proving that they can
>get around your security. some of them have been hacking since Jr. High and
>are now computer science majors or engineering majors.
>
>Chris Hoogendyk
>
>

  -----------------------------------------------------------------

        <mailto:expresso@snip.net>

        ALTERNATE: <mailto:expresso@workmail.com>

  -----------------------------------------------------------------

Subject: RE: [WinMac] AppleShare IP for Windows NT
From: "Andreas von Keitz" <andreas.von.keitz@experteach.de>
Date: Thu, 20 May 1999 07:30:46 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"

We've testet MacServer IP 6.x but there is no integration in the MS
Password System (password encryption).

So, at the moment we've decided not to buy the software!

Andreas von Keitz
Manager IT
ExperTeach GmbH
Germany

Subject: NT sp5?
From: Tom Roth <tomroth@wfubmc.edu>
Date: Thu, 20 May 1999 13:24:49 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"

 From the talk on the list it sounds like service pack 5 is now available
for WinNT but last week when I went to Microsoft's website to find it
the latest I could find was service pack 4. Does anyone know...

...what's it suppose to fix or do for me?
...if there are any bugs that I should be aware of?
...where I can get it?

  
TIA,

  ______________________________________________________________________
  Tom Roth Wake Forest University School of Medicine
  tomroth@wfubmc.edu Dept of Biomedical Communications
  http://www.wfubmc.edu/biomed/ Medical Center Blvd
  Tel 336.716.4493 Winston-Salem, NC 27157-1011
  ______________________________________________________________________

Subject: Re: [WinMac] Bridged Printer & NT | Configure a NT printer?
From: Tom Roth <tomroth@wfubmc.edu>
Date: Thu, 20 May 1999 13:24:52 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii" ; format="flowed"

"Antony N. Lord" wrote:
>
> Background
>
> Apple Personal Laserwriter NT
> Equipped only with a local talk port and a serial port (a D25 from memory)
> [yes, it is a serial port, not a parallel or SCSI, I've got the manual]
>
> Need to get it networked so it can be printed to from PCs via a network :

Get an AsantePrint made by (who else?) Asante. It's an ethernet to
LocalTalk converter. You plug the printer's serial cable into it and
out the other end an RJ45. Kind of like a JetDirect card for Apple
printers. We're using one now on a LaserWriter 4/600 that doesn't come
with a built-in network card like our LaserWriter 16/600, or Pro 630, etc.

There used to be a number of other companies that made a similar
product. You can see this product at Asante's website
http://www.asante.com/products/p_ad6.html

-- 
 
  ______________________________________________________________________
  Tom Roth                     Wake Forest University School of Medicine
  tomroth@wfubmc.edu                   Dept of Biomedical Communications
  http://www.wfubmc.edu/biomed/                      Medical Center Blvd
  Tel 336.716.4493                          Winston-Salem, NC 27157-1011
  ______________________________________________________________________

Subject: A Mac Alone From: "Phil Sutton" <phils@sbinet.com> Date: Thu, 20 May 1999 13:25:19 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

I have thoroughly enjoyed the comment about the various systems. I am not a system programmer. I am not a computer expert but a user. My job is turn out materials that aid in the education of adults. For 13 years I have accomplished this rather efficiently with a Macintosh.

However:

I recently moved to a new job (one year) where they run Unix. I quickly realized that the capability of their machines running WordPerfect and Lotus ( I never did get Lotus to work) did not come close to what I had previously on a Macintosh system. I quickly brought my old si into work to do what I thought was more productive design of my operation.I convinced my supervisor that I needed a more powerful Mac and became the proud owner of a G3 350 mhz in January. I also convinced them to quickly convert our system to IMAP so I could finally get mail through the UNIX server.

I also discovered that Fetch allows me to get files from my secretary as well as others in the office. Transfer back to them is not possible however except through mail. Most things are best finished on the Mac anyway.

Now in April it is decided by the powers of the university that we will slowly convert everything over to Windows NT( a move long overdue). System management has and will be done remotely from campusas it has with the UNIX system

However, I can look forward to no support for the Mac. That is okay but I want my secretary to also have a Mac and my boss is shaky about what would happen if I leave.

I told him that Microsoft Office support should be similar if the dukes of the kingdom will just help rather than complain it is being run on a Mac. I am also trying to get the powers at the university to consider FilemakerPro instead of Access for the database.

There are three county offices out of 92 that are Mac oriented at this time going against the Unix grain and being productive where others are struggling.

Please tell me some of the pitfalls I should watch for in the coming years or if you think I should give up the fight to keep a Mac in the system. Your opinions will be greatly appreciated.

Sermon warning:

It is my observation that this remoteness has produced a situation that no system administrator has ever observed what job needs to be done and designed the system to help. What has been done is the system is more important than the people who use it.

My secretary stores mailing lists on the label templates not in a database file. Argh! None in the office has ever successfully merged a document in WordPerfect on UNIX! this takes me back to the days I watched DOS users slowly try to do what I had done for years on a Mac. ( I know the new Office for Windows is quite exceptional)

The SA group wrote their own database program years ago and tell me it is quite powerful. I have yet to export a usable text file that I can integrate with another program. I has no flex and is basically cumbersome to use.

Probably the most idiotic symptom of this system was the inadequate ability to use attached files from the university (Windows and Mac generated). My success rate on the Unix machine was about 20%.

I have always said machines are cheaper than people and that hiring someone that has years of experience on a Mac should also involve buying them a Mac to stay productive. But, a funny thing happens, people who have never used a Mac do not realize that it is not a troublesome machine. It is in many ways easy to back out of a problem on a Mac; this is contrary to what I have observed on Windows. I am very in favor of integrating a system if the experience of the users warrants it.

It sort of boils down to whose job should be easier, the system administrators or the production people.

Subject: LaserJet 8000N & ASIP From: "Frankenstein, Paul" <Frankens@wnet.org> Date: Thu, 20 May 1999 13:25:20 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

I'm trying to use ASIP 6.0 to capture a LaserJet 8000N, and, quite frankly, it's not working. The queue keeps reporting that there's a printer error (something along the lines of "protocol not available") and printing to that queue just doesn't work at all (the files stack up in the queue and just sit there).

Conversely, printing directly to the printer (from Macs, at least) works just fine.

I also believe that this printer is attached to an NT Print Server, if that makes any difference.

Thanks,

paul

Subject: Re: [WinMac] unix/ nt security diffs? From: Deb Baddorf <baddorf@fnal.gov> Date: Thu, 20 May 1999 13:25:23 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

>Chris Hoogendyk said (i think he's the source - sorry if not): >One hassle for an administrator is in a sense the GUI. I don't know of >any way to list the files in a directory with their permissions. You >have to right click on the file, select properties, click on the tab for >security, click on the button for permissions, click add or remove, >click more buttons, click ok or cancel out through several levels. . . I >mean, man, I gotta do that for every one? groan.

Look on the net for SOMARSOFT company's DUMPACL.exe. It has a modest price -- and will list out all the files and protections. Or, it will list only those files where the protection differs from the parent directory's protection. Very useful. But you still have to *set* the protections one by one, as far as I know.

>The inherent programmability of the Unix shell together with the listing >of permissions when you do an "ls -l" makes it far easier to manage.

Even with the above code, this is still true. I miss my DEC VAXes ....

Deb Baddorf ___________________________________________ <IXOYE>< Deb Baddorf baddorf@fnal.gov x2289

Subject: Apple LW360 fax - WIN driver? From: "Parker, Douglas" <douglas.parker@lmco.com> Date: Thu, 20 May 1999 14:22:22 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

I have a LW360 with fax unit installed, but I can only find a Mac driver for it--it's the 360 driver with the fax options available.

I've scanned Apple's software archive, but can't find a Windows version of the driver for '95 or 'NT.

Where can I find its WIN driver or a compatible driver for it?

Thanks

Doug

Subject: Re: [WinMac] unix/ nt security diffs? From: "Darryl Lee" <lee@darryl.com> Date: Thu, 20 May 1999 14:22:24 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

> But you still have to *set* the protections one by one, as > far as I know. > > >The inherent programmability of the Unix shell together with the listing > >of permissions when you do an "ls -l" makes it far easier to manage. > > Even with the above code, this is still true. I miss my DEC VAXes ....

No no *no*. Buy O'Reilly's "Windows NT System Administration" by AEleen Frisch.

Page 179: The Windows NT CACLS utility may be used to display and modify ACLs. It has the following syntax:

cacls file(s) [options]

Try cacls /? for options.

Better still, are the NT Command Line Security Utilities from http://www.pedestalsoftware.com/ntsec/

(AEleen Frisch also wrote "Essential System Administration," so she's basically a long-time Unix admin who also ended up doing NT admin. So she's not going to stand for doing everything with the GUI when there are command-line tools available. :)

Another good book in the series: Windows NT User Administration. Again, it's reads like a couple of Unix sysadmins who got stuck doing NT. :}

They delve into the realm of user management, and talk a *lot* about using Perl to facilitate this important (but not often written-about) topic.

-- 
Darryl Lee <lee@darryl.com> | Geek? Who me? <http://www.darryl.com>

Subject: Re: A Mac Alone From: "Robert James, Jr." <rjames@chi1.uncfsu.edu> Date: Thu, 20 May 1999 14:22:26 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

Hi Phil,

I don't have an answer to your query, but I do have an unrelated query of my own. Where'd you get the idea for the subject header of your email? When I saw it, I immediately thought of an episode of _Star Trek: Deep Space Nine_ entitled "A Man Alone". Since quite a few computer people are into Trek, I figured you might've gotten the idea from there. However, Trek has always had a Shakespearean bent to it, so that may be where it initially came from.

I was just wondering. Good luck with your endeavor.

Bob

--------<<<<<<<<@@@@@@@@ @@@@@@@@>>>>>>>>-------- Robert James, Jr., Coordinator Fine Arts Resource Center Dept. of the Performing & Fine Arts <http://www.uncfsu.edu/w4/dpt/fah/index.htm> Fayetteville State University <http://www.uncfsu.edu> Fayetteville, NC 28301-4298 Email: rjames@chi1.uncfsu.edu Phone: (910) 486-1439 Fax: (910) 486-1572 | | | | | | | | | | | | | | | | | | | | | | | | | | |

Subject: Comments on MS Zero Admin Toolkit From: R Berntson <berntson.ron@sbe.saskatoon.sk.ca> Date: Thu, 20 May 1999 14:22:28 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

On my mixed WinNT/Macintosh 6/7 network with a Novell 4.11 server, I've been very happy with Assimilator / Foolproof combination for desktop security and software distribution. I now would like to do desktop security and file distribution with my WinNT machines. There are a lot of options, but the one that comes first to mind is the Microsoft Zero Administration Kit - if you can avoid buying WinNT server 4.0, it also seems to be inexpensive. Does anyone have any experience with ZAK positive or negative?

Ron B.

Subject: Re: [WinMac] Apple LW360 fax - WIN driver? From: "Darron Spohn" <dspohn@clicknet.com> Date: Thu, 20 May 1999 15:35:25 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

There is no fax driver software available for 95 or NT. Adobe dropped support for for the Postscript fax driver at Windows 3.1. This one is not Apple's fault. Adobe controls Postscript and they made the decision to stop developing the fax driver.

--
Darron Spohn
Publications Manager
ClickNet Software Corporation
http://www.clicknet.com
408.576.5952

"Ninety percent of everything is crap." Theodore Sturgeon

----------

Subject: Re: [WinMac] unix/ nt security diffs? From: Bruce Johnson <johnson@Pharmacy.Arizona.EDU> Date: Thu, 20 May 1999 15:35:30 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

Darryl Lee wrote: > > They delve into the realm of user management, and talk a *lot* about > using Perl to facilitate this important (but not often written-about) > topic.

Hmmm...maybe they have a different compiler than I do...I can stand around all day shouting perl scripts at my users and not manage them a bit! ;-)

Seriously, I'd like to add my BIG thumbs up on AEleen's book!

-- 
Bruce Johnson
University of Arizona
College of Pharmacy
Information Technology Group

Subject: RE: Clarification of RE: JetDirect names change: Mac printing From: "McCaffrey, Steven J" <Steven.J.McCaffrey@USAHQ.UnitedSpaceAlliance.com> Date: Thu, 20 May 1999 15:36:40 -0500 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" ; format="flowed"

You could also use the HP LaserJet Utility 3.4 via your Mac to change the display message on each printer's LED panel. The default is probably "READY"; just change it to a unique value such as "Printer 1", "Printer 2", "Be Happy", or any other silly phrase. Then physically visit each printer and take notes as to what it should be named. Go back to the HP LaserJet Utility 3.4 and plug in the names. The display message will remain until the printer's power is interrupted, but of course the printer's name will persist through a power cycle.

Steven J. McCaffrey Network Systems Engineer United Space Alliance steven.j.mccaffrey@usahq.unitedspacealliance.com (281)280-2062 - voice (281)280-7327 - fax

* Windows-MacOS Cooperation List *



This archive was generated by hypermail 2.0b2 on Thu May 20 1999 - 17:04:34 PDT