The -U option in lp and lpr

[Opher Shachar]

> Opher Shachar wrote:
> > Hello all,
> > CUPS 1.2.x adds a -U username option to lp and lpr. This allows any user on the local machine to submit a job as another user without authentication (by default). To disallow this I added
> >     AuthType Basic
> >     Require valid-user
> > under <Location /printers/MyPriner>. Now while user 'root' can submit jobs with lp without being required to enter a password, all other users submitting a job as themselfs (not using -U) are required for their password.
> > I'd like to set-up things such that users on the local machine can send jobs as themselfs - using lp - without being required for a password and, in all other cases be asked to authenticate.
>
> That isn't possible in 1.2; with 1.3, you will be able to use Kerberos
> for that...

The documentation mentions that local users can authenticate with certificates. Is that only for user 'root'?
If not, how can I manage that for other users?

Thanks,
Opher Shachar.