CUPS Admin (was Re: [Fwd: Re: No printing at all!])
On Fri, Feb 27, 2004 at 07:54:08PM +0000, Clive Menzies wrote:
> On (27/02/04 13:00), Wolfgang Pfeiffer wrote:
> > On Wed, 2004-02-25 at 19:18, Clive Menzies wrote:
> > > On (25/02/04 17:23), Alisdair wrote:
<snip>
> > Here's the URL for CUPS where the documentation for authentication
> > stuff starts, IINM:
> >
> > <http://localhost:631/sam.html#AuthClass>
> >
> > And here's a
> > /etc/cups/cupsd.conf
> > that allows only users in group foo, on one machine with several users,
> > to manage the CUPS printing system, and only after he or she provided
> > their username/passwd ...
> >
> > [ /etc/groups file ....
> > adduser <user-login-name> foo
> > ... login ... logout .. IIRC ]
> >
> > I didn't test so far whether this also works on a network connected to
> > some printer, but I'd believe it could work ... not being sure on that
> > ..
As I understand, you can specify in cupsd.conf the network or hosts that
are allowed to have admin privs. (The "Allow From" directive).
> >
> > At least here on
> > http://localhost:631
> > on a single machine with several users: after some initial tests it
> > seems to work:
> >
> > Here's the corresponding cupsd.conf:
> > ---------------------------
> > LogLevel debug
> > Printcap /var/run/cups/printcap
> > <Location />
> > Order Deny,Allow
> > Deny From All
> > Allow From 127.0.0.1
> > </Location>
> > <Location /admin>
> > AuthType Basic
> > AuthClass Group
> > AuthGroupName foo
> > Order Deny,Allow
> > Deny From All
> > Allow From 127.0.0.1
Here is where you can control where admin privs are allowed from.
> > </Location>
> > ----------------------------------
> >
> > So with this last cupsd.conf it seems you don't need to be root to
> > change your CUPS settings and you can decide who of the users on a
> > machine will be able to to change these settings ...
> >
> > I swear I love this crap, at least some times ..... :)
<grin> Yeah. So many things are beautiful...when they are working
right! </grin>
> >
> > PS:
> > I'd
> > cp -r /etc/cups/ /path/to/other/directory/cups.working
> > before changing some printer settings ... :)
> >
> > HTH, too ...
> >
> > Best Regards
> >
> > Wolfgang
> Hi Wolfgang
>
> Thanks for this although I was responding to the OP who was having
> trouble setting up printing. Using the browser, as I understand it,
> you are only configuring cups as the administrator if you login as root.
No. As he says, any user in group "foo".
> I wouldn't imagine that you could inadvertantly do anything really
> dangerous from the browser except possibly screw up cups.
Add/Change printers, classes, etc. Yes, this is only cups
administration. (Maybe I don't understand "anything
dangerous...except..cups").
>
> However, I do find it a pain to login as root just for this and so I
> will add this to my growing list of tasks to conquer ;)
Yes, I /still/ just feel like I'm muddling through. Started using cups
because I thought it would magically work better with the MS crap. Now
I'm taking the plunge to Samba 3.x
--
Chris Harris <charris@rtcmarketing.com>
-------------------------------------------
GNU/Linux --- The best things in life are free.
Reply to: