[cups.general] cups auth problem with ldap group

[Michael Sweet]

On Jan 12, 2011, at 12:17 PM, fernando zanini wrote:

> Im using cups 1.3 and authenticating/limiting users (with pam.d).
> 
> #case 1
> Require user localuser
> -works
> 
> #case 2
> Require user ldapuser
> -works
> 
> #case 3
> Require group localgroup
> -works (group members on ldap)
> 
> #case 4
> Require user ldapgroup
> -doesnt work
> 
> Any idea if its a cups limitation, wrong ldap config, or anything else?


For case 4, you need to either use "Require group ldapgroup" or "Require user @ldapgroup". That said, if there is a local group with the same name we'll probably only see the local group. There is a bug for this already however it is unlikely to be fixed in the near term since it incurs a huge performance hit…

http://www.cups.org/str.php?L2967

________________________________________________________________________
Michael Sweet, Senior Printing System Engineer, PWG Chair





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cups.org/pipermail/cups/attachments/20110112/e17c2647/attachment-0001.html>