[cups.bugs] Re: [LOW] STR #1560: admin web interface does not ask for authentication any more

[Martin Pitt]

Hi Michael,

Michael Sweet [2006-04-13  8:28 -0400]:
> [STR Closed w/Resolution]
> 
> This is as designed - the user is only asked for a password as needed.

Yes, that's how I would like it to work. The point is that any user
can do administrative stuff (like adding or removing printers, etc.)
without ever being asked for a password.

> You can alter the default configuration to require authentication on
> /admin for your own distro, however the intent is to only challenge the
> user when they actually do something that requires authentication, not
> just authenticate all of the time by default.

Sure, that makes sense. I didn't alter the default configuration for
that, which says:

  # All administration operations require an adminstrator to authenticate...
  <Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
    AuthType Basic
    Require user @SYSTEM
    Order deny,allow
  </Limit>

which, to my understanding, should ask for the credentials of an user
which is in @SYSTEM (i. e. 'lpadmin' group members by default). But it
doesn't.

Can you please reopen this STR? If it works for you, then it's maybe
something specific to Debian/Ubuntu, but I have no idea where to start
looking for the cause.

Thanks,

Martin

-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: Digital signature
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20060413/3ab1818c/attachment.sig>