On Fri, Feb 27, 2004 at 07:54:08PM +0000, Clive Menzies wrote: > On (27/02/04 13:00), Wolfgang Pfeiffer wrote: > > On Wed, 2004-02-25 at 19:18, Clive Menzies wrote: > > > On (25/02/04 17:23), Alisdair wrote: <snip> > > Here's the URL for CUPS where the documentation for authentication > > stuff starts, IINM: > > > > <http://localhost:631/sam.html#AuthClass> > > > > And here's a > > /etc/cups/cupsd.conf > > that allows only users in group foo, on one machine with several users, > > to manage the CUPS printing system, and only after he or she provided > > their username/passwd ... > > > > [ /etc/groups file .... > > adduser <user-login-name> foo > > ... login ... logout .. IIRC ] > > > > I didn't test so far whether this also works on a network connected to > > some printer, but I'd believe it could work ... not being sure on that > > ..
As I understand, you can specify in cupsd.conf the network or hosts that are allowed to have admin privs. (The "Allow From" directive). > > > > At least here on > > http://localhost:631 > > on a single machine with several users: after some initial tests it > > seems to work: > > > > Here's the corresponding cupsd.conf: > > --------------------------- > > LogLevel debug > > Printcap /var/run/cups/printcap > > <Location /> > > Order Deny,Allow > > Deny From All > > Allow From 127.0.0.1 > > </Location> > > <Location /admin> > > AuthType Basic > > AuthClass Group > > AuthGroupName foo > > Order Deny,Allow > > Deny From All > > Allow From 127.0.0.1 Here is where you can control where admin privs are allowed from. > > </Location> > > ---------------------------------- > > > > So with this last cupsd.conf it seems you don't need to be root to > > change your CUPS settings and you can decide who of the users on a > > machine will be able to to change these settings ... > > > > I swear I love this crap, at least some times ..... :) <grin> Yeah. So many things are beautiful...when they are working right! </grin> > > > > PS: > > I'd > > cp -r /etc/cups/ /path/to/other/directory/cups.working > > before changing some printer settings ... :) > > > > HTH, too ... > > > > Best Regards > > > > Wolfgang > Hi Wolfgang > > Thanks for this although I was responding to the OP who was having > trouble setting up printing. Using the browser, as I understand it, > you are only configuring cups as the administrator if you login as root. No. As he says, any user in group "foo". > I wouldn't imagine that you could inadvertantly do anything really > dangerous from the browser except possibly screw up cups. Add/Change printers, classes, etc. Yes, this is only cups administration. (Maybe I don't understand "anything dangerous...except..cups"). > > However, I do find it a pain to login as root just for this and so I > will add this to my growing list of tasks to conquer ;) Yes, I /still/ just feel like I'm muddling through. Started using cups because I thought it would magically work better with the MS crap. Now I'm taking the plunge to Samba 3.x -- Chris Harris <[EMAIL PROTECTED]> ------------------------------------------- GNU/Linux --- The best things in life are free. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
