[Casper] non-admin printer access..

Fri Apr 3 09:04:07 PDT 2009

Yep. Like I mentioned to John just a second ago off-list, users still can't add printers via System Prefs, but they can add it from the print dialogue of any app.

On 4/3/09 9:01 AM, "Steve Wood" <swood at integerdallas.com> wrote:

I just tested this out on a 10.5.6 machine and it worked fine.  I edited the cupsd.conf file and commented out and added to the administrator section like this:

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    #AuthType Default
    #Require user @SYSTEM
    #Order deny,allow
        Allow all
        Order allow,deny
  </Limit>

I then restarted cupsd (killall cupsd) and tried adding a printer as a non-admin user.  Now, I  was unable to add/remove via the System Preferences pane, however I went to the print dialog of Safari and was able to add a printer thru there.

Just to test, I went back in and set everything back to the way it was, restarted cups again, and again went into Safari.  This time, as expected, I was unable to add the printer.

My two cents.

Steve Wood
Director of IT
swood at integerdallas.com

The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201
T 214.758.6813 | F 214.758.6901 | C 940.312.2475

On Fri, Apr 3, 2009 at 10:37 AM, Jeff Strauss <jstrauss at loyolahs.edu> wrote:
AFAIK, yes. This was deployed when most of the clients were 10.5.5 and were subsequently updated, and it still held. I can't remember if I've deployed this package or if it was installed newly on a 10.5.6 client, but I just looked at my cupsd.conf file (unmodified) and the changes can still be made to that section.

On 4/3/09 8:36 AM, "John McLaughlin" <John_McLaughlin at newton.k12.ma.us <http://John_McLaughlin@newton.k12.ma.us> > wrote:

Jeff,
        Does this work on 10.5.6 clients?

John McLaughlin
Technical Support Specialist
Newton Public Schools

Jeff Strauss <jstrauss at loyolahs.edu <http://jstrauss@loyolahs.edu> > writes:
I've modified cupsd.conf the following way:

In the section #All administration operations require an administrator to authenticate... Change

AuthType Default
Require user @SYSTEM
Order deny,allow

To

Allow all
Order allow,deny

I deploy the modified cupsd.conf file to faculty and staff computers via Self Service.

On 4/3/09 5:57 AM, "Kathie Iorizzo" <kiorizzo at latinschool.org <http://kiorizzo@latinschool.org>  <fcp://@newton.k12.ma.us <http:///@newton.k12.ma.us> ,%231001922/Mailbox/kiorizzo at latinschool.org <http://%231001922/Mailbox/kiorizzo@latinschool.org> > > wrote:

Let me know..  as we are trying to resolve the same issue!  Thanks!

___________
Kathie Iorizzo
Lower School Technician
The Latin School of Chicago
kiorizzo at latinschool.org <http://kiorizzo@latinschool.org> <fcp://@newton.k12.ma.us <http:///@newton.k12.ma.us> ,%231001922/Mailbox/kiorizzo at latinschool.org <http://%231001922/Mailbox/kiorizzo@latinschool.org> >
312.582.6136

On Apr 3, 2009, at 7:56 AM, John McLaughlin wrote:

I tried that the other night.  It was no good.  At least on my 10.5.6 image.  I'm going to try and install just the OS to make sure there's no conflict preventing this.

John McLaughlin
Technical Support Specialist
Newton Public Schools

Kathie Iorizzo <kiorizzo at latinschool.org <http://kiorizzo@latinschool.org> <fcp://@newton.k12.ma.us <http:///@newton.k12.ma.us> ,%231001922/Mailbox/kiorizzo at latinschool.org <http://%231001922/Mailbox/kiorizzo@latinschool.org> > > writes:
http://www.macosxhints.com/article.php?story=20081107092520601 <http://www.macosxhints.com/article.php?story=20081107092520601>

Jeffrey A. Strauss
Department of Educational Technology
Systems Administrator
Loyola High School of Los Angeles
1901 Venice Blvd.
Los Angeles, Ca 90006
(213) 381-5121 x265

 Apple Certified Support Professional
 Apple Certified Technical Coordinator

Please consider the environment before printing this e-mail.

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com <http://Casper@list.jamfsoftware.com>
http://list.jamfsoftware.com/mailman/listinfo/casper

Jeffrey A. Strauss
Department of Educational Technology
Systems Administrator
Loyola High School of Los Angeles
1901 Venice Blvd.
Los Angeles, Ca 90006
(213) 381-5121 x265

? Apple Certified Support Professional
? Apple Certified Technical Coordinator

Please consider the environment before printing this e-mail.

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper

Jeffrey A. Strauss
Department of Educational Technology
Systems Administrator
Loyola High School of Los Angeles
1901 Venice Blvd.
Los Angeles, Ca 90006
(213) 381-5121 x265

? Apple Certified Support Professional
? Apple Certified Technical Coordinator

Please consider the environment before printing this e-mail.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090403/0e6643ee/attachment.html 