Any Password == LoginFailure

[jsayles]

I'm trying to lock down my printer and not have the default blank admin password. Seems like any password entered results in a LoginFailure.

[dade80vr]

@jsayles try to login with username "supervisor" and blank password. This user can only reset admin password via web interface or panel. Pay attention to don't change and lost the supervisor password because you need a main board replacement.

[credomane]

Work recently got a 'Aficio MP C4500' (it works, add to 'it works' list?) with a password set and I ran into this issue. I think this might be a ricoh firmware bug. Having a blank password on the copier then putting a bad password into the script will 100% succeed! BUT if you have a password set on the copier then this script will always fail with authentication failure from the copier using the right password or a wrong one.

I've just set the ricoh copier password to blank and hope for the best. *hides*

[edit]
If you consider the stock password is blank, I bet the ricoh firmware guys tested the soap interface with the default blank password but never made sure it actually worked when a non-default password was set.

[tvalreq]

Same problem in a RICOH MP 5055. Without password, it works fine.

[jstrong013]

I'm a PowerShell guy so just started diving into Python script since I want to use this for the Ricoh Copiers I manage.
Anyways, to get this to work (if you have a password set) then you just need to remove the value after Encoding=
So, for example, stringIn = "SCHEME=QkFTSUM=;UID:UserName={};PWD:Password={};PES:Encoding=".format(username, password)

This should allow you to authenticate to your copier if you have a password set (and are using basic auth). At least it did for me on a Ricoh MP C3503

Hope that helps.

[tvalreq]

I have deleted the "Encoding" and it works in my Ricoh MP5055. My life is easier now.
Thanks @jstrong013

[credomane]

@jstrong013 You mind explaining how you figured out the encoding was the issue? I tried looking at Ricoh's docs and I can't make heads or tails of them.

[jstrong013]

Hey @credomane, I saw this page. This provided the authentication string which didn't match what was there before @tvalreq's commit referenced above.

I'm not aware of any Ricoh's docs available? The available information from that repository and the work done by Alexander Krause is what I used.

Cheers