The -U option in lp and lpr

[Opher Shachar]

> Opher Shachar wrote:
> >> Opher Shachar wrote:
> >>> Hello all,
> >>> CUPS 1.2.x adds a -U username option to lp and lpr. This allows any user on the local machine to submit a job as another user without authentication (by default). To disallow this I added
> >>>     AuthType Basic
> >>>     Require valid-user
> >>> under <Location /printers/MyPriner>. Now while user 'root' can submit jobs with lp without being required to enter a password, all other users submitting a job as themselfs (not using -U) are required for their password.
> >>> I'd like to set-up things such that users on the local machine can send jobs as themselfs - using lp - without being required for a password and, in all other cases be asked to authenticate.
> >> That isn't possible in 1.2; with 1.3, you will be able to use Kerberos
> >> for that...
> >
> > The documentation mentions that local users can authenticate with certificates. Is that only for user 'root'?
> > If not, how can I manage that for other users?
>
> Only for administrative users in one of the groups listed for the
> SystemGroup, and then they get authenticated as root...

Thanks,
Opher Shachar.