How to add a user to manage cups and printers

Hello I try to add a user for administrative cups task and not to use root user.

I have create a system user “chief” with a password “chief” ( not really as simple :wink: )
Without login shell ( /bin/false )
with home /var/run/chief
with default group “chief” ( system group created first )
with additional group lp

I have modify /etc/cups/cupsd.conf

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM **chief**
    Order deny,allow
  </Limit>

But I get a forbidden error.
Any help is welcome

The CUPS Archwiki (https://wiki.archlinux.org/index.php/CUPS#Configuration)
suggests that

Not advisable but likely possible

  • You can add the User group or another existing group your User is a member of to your CUPS server configuration

Better solution because you can more narrowly specify only certain Users to have access to Printer Administrative functions

  • You can create a new User Group, make your User a member of that group and add that group to your CUPS server configuration

Nice try, but it sounds like you made the wrong modification is your your cups conf and you probably shouldn’t make your new group have system permissions.

HTH,
TSU

Bad config.
1°) Remove group “chief” from /etc/cups/cupsd.conf

# All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

2°) Add group “chief” in /etc/cups/cups-files.conf

# Administrator user group, used to match @SYSTEM in cupsd.conf policy rules...
# This cannot contain the Group value for security reasons...
SystemGroup  chief root

Thank you for the link.