Bug#711848: cups-client: lp and lpr print the document on a wrong printer
On 2013-06-10 11:50:52 +0200, Didier 'OdyX' Raboud wrote:
> > But when I print a document with "lpr file.pdf", I get nothing on
> > this printer. Then I tried: "lp file.pdf", and I get nothing either
> > on this printer, but the following line was output in the terminal:
>
> When trying here with either lpr or lp, I get the file printed on
> the correct new-default-printer (which is obviously not the same
> printer as the system's default printer) as defined above, so I
> can't reproduce your problem here.
Well, this may be server dependent. I suspect a bug related to the
authentication mechanism. When I do "lpq", authentication is not
required, so that its output is OK. However some printers need
authentication (the user's password). Perhaps lp and lpr ignore the
default printer when it requires authentication, or something like
that? The printer to which the files had been sent doesn't require
a password.
Note that the -P lpr option works as expected (and the password must
be typed).
> What are the access rights and contents of /etc/cups/lpoptions and
> .cups/lpoptions ?
ypig:~> cat /etc/cups/lpoptions
cat: /etc/cups/lpoptions: No such file or directory
ypig:~> cat .cups/lpoptions
Dest lip-multi-3 ColorModel=Gray Resolution=1200dpi
Default lipucb-mono-1
> > CUPS 1.5.x didn't have such a problem.
> >
> > This is a big security problem when one wants to print documents
> > with confidential information...
>
> Granted, that's a bug, but it doesn't fit my reading of "serious" [0],
> it's at most important, hereby downgrading.
[...]
> [0] http://www.debian.org/Bugs/Developer.en.html#severities
I disagree. I see [0] as giving a non-exhaustive list of grave/critical
problems. For instance, a bug that would make a mail server an open
relay by default should also be seen as a grave/critical bug, even
though such a problem isn't listed in [0]. It should include problems
like private data disclosure.
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <http://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Reply to: