[Casper] Allow Non-Admin Users to Add Printers in Leopard

[Martin van Diemen]

I'll give that a try.

Thank you!

Kind Regards,

Martin van Diemen

t +31(0) 205677744
__________________

G-Star International B.V.
www.g-star.com


________________________________
From: Miles Leacy <miles.leacy at themacadmin.com>
Date: Thu, 18 Dec 2008 17:02:30 +0100
To: Martin van Diemen <martin-van-diemen at g-star.com>
Cc: Casper List <casper at list.jamfsoftware.com>
Subject: Re: [Casper] Allow Non-Admin Users to Add Printers in Leopard

Here are the relevant lines from the script I mentioned:

# find the line containing "KEYSTRING" and replace that line with "REPLACEMENT LINE"
# and write the resulting modified file to a second file (file.tmp)

/usr/bin/sed -e "s/^KEYSTRING *=.*/REPLACEMENT LINE/" /path/to/original/file >/path/to/original/file.tmp

# move file.tmp to file

mv /path/to/original/file.tmp /path/to/original/file

I hope this helps.

Of course, if anyone can suggest a simpler find & replace method, I'm all ears.

----------
Miles A. Leacy IV

? Certified System Administrator 10.4
? Certified Technical Coordinator 10.5
? Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com <http://www.themacadmin.com>




On Thu, Dec 18, 2008 at 7:46 AM, Miles Leacy <miles.leacy at themacadmin.com> wrote:
Rather than follow the instructions at the given link, and deleting these lines, I would add another group to these limit statements.  You could use "staff" or if you need to keep certain people from messing with printers, you could create a new group for this purpose.

I wouldn't delete the statements because that's a sledgehammer approach to the problem.  Instead of giving out a key to the proverbial gate, deletion tears the gate from its hinges and allows anyone and everyone in.

You can find & replace text using sed.  I'm not great with sed, but I did develop a script through trial & error to perform this task on another config file.  I'll pass it on when I get to the office today.

----------
Miles A. Leacy IV

? Certified System Administrator 10.4
? Certified Technical Coordinator 10.5
? Certified Trainer
Certified Casper Administrator
----------
voice: 1-347-277-7321
miles.leacy at themacadmin.com
www.themacadmin.com <http://www.themacadmin.com>





On Thu, Dec 18, 2008 at 4:24 AM, Martin van Diemen <martin-van-diemen at g-star.com> wrote:
Hi,

I want users to be able to add printers without filling in the administrators password.

I did some research and found out that I just need to remove the following lines from the /etc/cups/cupsd.conf:

<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
</Limit>
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer$
    AuthType Default
    Require user @AUTHKEY(system.print.admin) @admin @lpadmin
    Order deny,allow
</Limit>

Source: http://mattson.edgemereroadrunners.com/?p=291

Does anyone know I can remove these lines with a bash script? I don't want to replace the file by making use of a package.

Thanks in advance!

Kind Regards,

Martin van Diemen

t +31(0) 205677744
__________________

G-Star International B.V.
www.g-star.com <http://www.g-star.com>
_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper