Password leaks , printing from Linux client to windows based print server
When authenticating Linux users for using a windows share printer on their machine, the windows domain user-name and password of the user has to be entered in the add new printer wizard.
While troubleshooting a printing issue for a user , I came to know that these credentials are stored as plain text on the Linux client in printer configuration file.
Although this file , and the data in it , is user specific , but it is readable by root. Is it a good practice that the root is seeing all the windows domain credentials of all the users who authenticate to windows print server from their Linux client through their windows account? ( the user-name and password is clearly in plain text ( if there are no special characters in it) in that printer configuration file (
/etc/cups/printers.conf), in my case , the Linux client is centos6)
And what if the users are using those same credentials for logging in into some other services , such as facebook , gmail , etc