[Casper] non-admin printer access..

[Steve Wood]

I just tested this out on a 10.5.6 machine and it worked fine.  I edited the
cupsd.conf file and commented out and added to the administrator section
like this:
  # All administration operations require an administrator to
authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class
CUPS-Delete-Class CUPS-Set-Default>
    #AuthType Default
    #Require user @SYSTEM
    #Order deny,allow
        Allow all
        Order allow,deny
  </Limit>


I then restarted cupsd (killall cupsd) and tried adding a printer as a
non-admin user.  Now, I  was unable to add/remove via the System Preferences
pane, however I went to the print dialog of Safari and was able to add a
printer thru there.

Just to test, I went back in and set everything back to the way it was,
restarted cups again, and again went into Safari.  This time, as expected, I
was unable to add the printer.

My two cents.


Steve Wood
Director of IT
swood at integerdallas.com

The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201
T 214.758.6813 | F 214.758.6901 | C 940.312.2475


On Fri, Apr 3, 2009 at 10:37 AM, Jeff Strauss <jstrauss at loyolahs.edu> wrote:

>  AFAIK, yes. This was deployed when most of the clients were 10.5.5 and
> were subsequently updated, and it still held. I can’t remember if I’ve
> deployed this package or if it was installed newly on a 10.5.6 client, but I
> just looked at my cupsd.conf file (unmodified) and the changes can still be
> made to that section.
>
>
>
>
> On 4/3/09 8:36 AM, "John McLaughlin" <John_McLaughlin at newton.k12.ma.us>
> wrote:
>
> Jeff,
>         Does this work on 10.5.6 clients?
>
> John McLaughlin
> Technical Support Specialist
> Newton Public Schools
>
>
> *Jeff Strauss <jstrauss at loyolahs.edu> writes:
> *
> I’ve modified cupsd.conf the following way:
>
> In the section *#All administration operations require an administrator to
> authenticate...* Change
>
> AuthType Default
> Require user @SYSTEM
> Order deny,allow
>
> To
>
> Allow all
> Order allow,deny
>
> I deploy the modified cupsd.conf file to faculty and staff computers via
> Self Service.
>
>
> On 4/3/09 5:57 AM, "Kathie Iorizzo" <kiorizzo at latinschool.org <fcp:
> //@newton.k12.ma.us <http:///@newton.k12.ma.us>,
> %231001922/Mailbox/kiorizzo at latinschool.org> > wrote:
>
>
>
> Let me know..  as we are trying to resolve the same issue!  Thanks!
>
> ___________
> *Kathie Iorizzo
> *Lower School Technician
> The Latin School of Chicago
> kiorizzo at latinschool.org <fcp://@newton.k12.ma.us<http:///@newton.k12.ma.us>
> ,%231001922/Mailbox/kiorizzo at latinschool.org>
> 312.582.6136
>
>
>
>
>
>
> On Apr 3, 2009, at 7:56 AM, John McLaughlin wrote:
>
>
>
> I tried that the other night.  It was no good.  At least on my 10.5.6
> image.  I'm going to try and install just the OS to make sure there's no
> conflict preventing this.
>
> John McLaughlin
> Technical Support Specialist
> Newton Public Schools
>
>
> *Kathie Iorizzo <kiorizzo at latinschool.org* <fcp://@newton.k12.ma.us<http:///@newton.k12.ma.us>
> ,%231001922/Mailbox/kiorizzo at latinschool.org> *> writes:
> *http://www.macosxhints.com/article.php?story=20081107092520601 <
> http://www.macosxhints.com/article.php?story=20081107092520601>
>
>
>
>
>
>
>
>
> *Jeffrey A. Strauss
> *Department of Educational Technology
> *Systems Administrator
> *Loyola High School of Los Angeles
> 1901 Venice Blvd.
> Los Angeles, Ca 90006
> (213) 381-5121 x265
>
> Apple Certified Support Professional
> Apple Certified Technical Coordinator
>
> Please consider the environment before printing this e-mail.
>
>  _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
>
>
>
> *
> Jeffrey A. Strauss
> *Department of Educational Technology
> *Systems Administrator
> *Loyola High School of Los Angeles
> 1901 Venice Blvd.
> Los Angeles, Ca 90006
> (213) 381-5121 x265
>
>  Apple Certified Support Professional
>  Apple Certified Technical Coordinator
>
> Please consider the environment before printing this e-mail.
>
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090403/f63a15c3/attachment.htm