--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cupsys: is severely broken with RunAsUser set to Yes in cupsd.conf
- From: Florent Rougon <flo@via.ecp.fr>
- Date: Wed, 09 Jul 2003 18:19:21 +0200
- Message-id: <20030709161921.D27C249EEB@florent.hn.org>
Package: cupsys
Version: 1.1.14-5
Severity: normal
CUPS is severely broken when using "RunAsUser Yes" in /etc/cups/cupsd.conf:
1 - Printing fails whereas it should work:
% ls -l /dev/lp0
crw-rw---- 1 root lp 6, 0 Nov 30 2000 /dev/lp0
and cupds.conf contains "User lp" and the lp user is a member of the lp
group:
% groups lp
lp : lp
Indeed, a :
# su lp -c "cat /tmp/crlf-text-file >/dev/lp0"
works flawlessly.
/var/log/cups/error_log shows:
I [09/Jul/2003:11:47:54 +0200] Job 2 queued on 'flo' by 'flo'.
I [09/Jul/2003:11:47:54 +0200] Started filter /usr/lib/cups/filter/pstops (PID 1295) for job 2.
I [09/Jul/2003:11:47:54 +0200] Started filter /usr/lib/cups/filter/pstoraster (PID 1296) for job 2.
I [09/Jul/2003:11:47:54 +0200] Started filter /usr/lib/cups/filter/rastertoprinter (PID 1297) for job 2.
I [09/Jul/2003:11:47:54 +0200] Started backend /usr/lib/cups/backend/parallel (PID 1298) for job 2.
E [09/Jul/2003:11:47:54 +0200] PID 1298 stopped with status 1!
E [09/Jul/2003:11:47:54 +0200] Unable to open parallel port device file "/dev/lp0": Permission denied
(sad that even debug2 level didn't show the uid and gid the backend
process was running was)
2 - Administration through the Web interface with a user belonging to the
lpadmin group is no longer possible: for instance, trying to cancel the
preceding (on hold) job consistently results in:
D [09/Jul/2003:12:02:11 +0200] ReadClient() 7 GET /admin/?op=cancel-job&job_id=2 HTTP/1.1
D [09/Jul/2003:12:02:11 +0200] SendError() 7 code=401
D [09/Jul/2003:12:02:22 +0200] mallinfo: arena = 308768, used = 154672, free = 154096
D [09/Jul/2003:12:02:24 +0200] ReadClient() 4 GET /admin/?op=cancel-job&job_id=2 HTTP/1.1
E [09/Jul/2003:12:02:27 +0200] IsAuthorized: pam_authenticate() returned 7 (Authentication failure)!
D [09/Jul/2003:12:02:27 +0200] SendError() 4 code=401
(the entered password is correct and the problem is not browser related since
all this works well as soon as I put back "RunAsUser No" in cupsd.conf)
I seem to recall the RunAsUser directive was not very well advertised in the
Debian default cupsd.conf. Perhaps this was done on purpose, because it seems
not to work correctly; in this case, it ought to be mentioned in the file
and/or in README.Debian.gz.
On a related subject, I noticed that upstream's ENCRYPTION.txt is not included
in any of the woody's cupsys packages with no mention in README.Debian.gz
either. I didn't investigate further because according to some messages in the
BTS, encryption support might be somewhat flaky, at least with woody's cupsys
version. Perhaps this should also be mentioned in README.Debian.gz.
That's all, thanks for your work on CUPS!
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux florent 2.4.18 #1 Tue Jul 1 22:49:09 CEST 2003 i686
Locale: LANG=C, LC_CTYPE=fr_FR@euro
Versions of packages cupsys depends on:
ii adduser 3.47 Add and remove users and groups
ii cupsys-pstoraster 1.1.14-5 Common UNIX Printing System(tm) -
ii debconf 1.0.32 Debian configuration management sy
ii libc6 2.2.5-11.5 GNU C Library: Shared libraries an
ii libcupsys2 1.1.14-5 Common UNIX Printing System(tm) -
ii libpam0g 0.72-35 Pluggable Authentication Modules l
ii libslp1 1.0.8a-2 OpenSLP libraries
ii libstdc++2.10-glibc2.2 1:2.95.4-11woody1 The GNU stdc++ library
ii zlib1g 1:1.1.4-1 compression library - runtime
--- End Message ---