Results 1 to 3 of 3

Thread: How to add a user to manage cups and printers

  1. #1
    Join Date
    Jun 2008
    Location
    South-West France
    Posts
    1,032

    Default How to add a user to manage cups and printers

    Hello I try to add a user for administrative cups task and not to use root user.

    I have create a system user "chief" with a password "chief" ( not really as simple )
    Without login shell ( /bin/false )
    with home /var/run/chief
    with default group "chief" ( system group created first )
    with additional group lp

    I have modify /etc/cups/cupsd.conf
    Code:
      # All administration operations require an administrator to authenticate...
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
        AuthType Default
        Require user @SYSTEM chief
        Order deny,allow
      </Limit>
    But I get a forbidden error.
    Any help is welcome
    Thanks for helping. JCD
    __________
    server leap 15.0 -- ASUS g75vw KDE leap 15.0 -- ASUS g750JZ Optimus KDE leap 15.1 -- acer aspire s13 win 10 home -- HP Omen win 10 home - scan EPSON V500 - Brother HL2250DN - Samsung CLP-325W

  2. #2
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,273
    Blog Entries
    2

    Default Re: How to add a user to manage cups and printers

    The CUPS Archwiki (https://wiki.archlinux.org/index.php/CUPS#Configuration)
    suggests that

    Not advisable but likely possible
    - You can add the User group or another existing group your User is a member of to your CUPS server configuration

    Better solution because you can more narrowly specify only certain Users to have access to Printer Administrative functions
    - You can create a new User Group, make your User a member of that group and add that group to your CUPS server configuration

    Nice try, but it sounds like you made the wrong modification is your your cups conf and you probably shouldn't make your new group have system permissions.

    HTH,
    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  3. #3
    Join Date
    Jun 2008
    Location
    South-West France
    Posts
    1,032

    Default Re: How to add a user to manage cups and printers

    Quote Originally Posted by tsu2 View Post
    The CUPS Archwiki (https://wiki.archlinux.org/index.php/CUPS#Configuration)
    suggests that

    Not advisable but likely possible
    - You can add the User group or another existing group your User is a member of to your CUPS server configuration

    Better solution because you can more narrowly specify only certain Users to have access to Printer Administrative functions
    - You can create a new User Group, make your User a member of that group and add that group to your CUPS server configuration

    Nice try, but it sounds like you made the wrong modification is your your cups conf and you probably shouldn't make your new group have system permissions.

    HTH,
    TSU
    Bad config.
    1°) Remove group "chief" from /etc/cups/cupsd.conf
    Code:
    # All administration operations require an administrator to authenticate...
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
      </Limit>
    2°) Add group "chief" in /etc/cups/cups-files.conf
    Code:
    # Administrator user group, used to match @SYSTEM in cupsd.conf policy rules...
    # This cannot contain the Group value for security reasons...
    SystemGroup  chief root
    Thank you for the link.
    Thanks for helping. JCD
    __________
    server leap 15.0 -- ASUS g75vw KDE leap 15.0 -- ASUS g750JZ Optimus KDE leap 15.1 -- acer aspire s13 win 10 home -- HP Omen win 10 home - scan EPSON V500 - Brother HL2250DN - Samsung CLP-325W

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •