Host-Based Printer Subsystem Authentication

Host-Based Printer Subsystem Authentication adds user authentication and authority control to telnet printer sessions for IBM i 7.6, 7.5, 7.4 and 7.3.

To be clear, if a user does not provide authentication, that user will no longer be able to use telnet print sessions.

Users of Telnet printer sessions are now required to authenticate via username/password or Kerberos authentication. Telnet print session requests for users who are not authorized to access the system (i.e. invalid username/password), or do not provide their credentials, are rejected. Additionally, users are allowed to print only from devices and output queues for which they have authorization. The specific authority requirements are described in the Memo to Users.  Attempts to establish sessions to unauthorized devices are rejected.

Telnet display sessions are not affected by this change.

Corresponding updates were made to ACS (Access Client Solutions) also.

– There are multiple topics in the IBM i Memo to Users:

• Telnet printer sessions require authentication
• QIBM_QTG_DEVINIT exit program behavior changes for Telnet printer sessions
• Authority changes for Telnet printer sessions
• User credentials are now required for Telnet printer sessions
• See these links for each release:
  • – IBM i 7.6 Memo to Users  
  • – IBM i 7.5 Memo to Users 
  • – IBM i 7.4 Memo to Users 
  • – IBM i 7.3 Memo to Users