The -U option in lp and lpr

[Michael Sweet]

Opher Shachar wrote:
>> Opher Shachar wrote:
>>> Hello all,
>>> CUPS 1.2.x adds a -U username option to lp and lpr. This allows any user on the local machine to submit a job as another user without authentication (by default). To disallow this I added
>>>     AuthType Basic
>>>     Require valid-user
>>> under <Location /printers/MyPriner>. Now while user 'root' can submit jobs with lp without being required to enter a password, all other users submitting a job as themselfs (not using -U) are required for their password.
>>> I'd like to set-up things such that users on the local machine can send jobs as themselfs - using lp - without being required for a password and, in all other cases be asked to authenticate.
>> That isn't possible in 1.2; with 1.3, you will be able to use Kerberos
>> for that...
> 
> The documentation mentions that local users can authenticate with certificates. Is that only for user 'root'?
> If not, how can I manage that for other users?

Only for administrative users in one of the groups listed for the
SystemGroup, and then they get authenticated as root...

-- 
______________________________________________________________________
Michael Sweet, Easy Software Products           mike at easysw dot com
Internet Printing and Document Software          http://www.easysw.com