system-config-printer not authenticating properly
Hi, I am trying to get system-config-printer to authenticate as a sudo user (one that is a part of the wheel group) instead of the root user when trying to add or modify a printer in fedora 10. I have been unsuccessful in finding any help on this topic anywhere on the internet. In previous versions the authentication used was consolehelper but this does not seem to be the case in FC10. It also seems that it does not use PolicyKit either which other system-config type programs are now doing. Does anyone have any suggestions as to how I can go about making this change? Jonathan Hooker Desktop Support - Engineering - Linux Garmin International jonathan.hoo...@garmin.com This e-mail and any attachments may contain confidential material for the sole use of the intended recipient. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of this e-mail or any attachment is prohibited. If you have received this e-mail in error, please contact the sender and delete all copies. Thank you for your cooperation. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: system-config-printer not authenticating properly
On Thu, Aug 13, 2009 at 3:24 PM, Hooker, Jonathan wrote: > Hi, > > > > I am trying to get system-config-printer to authenticate as a sudo user (one > that is a part of the wheel group) instead of the root user when trying to > add or modify a printer in fedora 10. I have been unsuccessful in finding > any help on this topic anywhere on the internet. In previous versions the > authentication used was consolehelper but this does not seem to be the case > in FC10. It also seems that it does not use PolicyKit either which other > system-config type programs are now doing. Does anyone have any suggestions > as to how I can go about making this change? I'll speak from memory here. I believe in /etc/security/console.apps or somewhere in /etc/pam.d there should be a system-config-printers pam config file. There should be lines in there that enforce su/sudo for applications that have a pam config file in one of the aforementioned directories. If you don't have the file, then just copy one other and name it system-config-printers; the file name is important, for it has to match the name of the system-config-* executable. HTH, ~af -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: system-config-printer not authenticating properly
On Thu, 2009-08-13 at 17:24 -0500, Hooker, Jonathan wrote: > I am trying to get system-config-printer to authenticate as a sudo > user (one that is a part of the wheel group) instead of the root user > when trying to add or modify a printer in fedora 10. I have been > unsuccessful in finding any help on this topic anywhere on the > internet. What you need to do is adjust your CUPS policy so that it counts your special user as a 'system' user. In /etc/cups/cupsd.conf you'll see a section that starts: In that section are sub-sections like this: Require user @SYSTEM Order deny,allow Here, '@SYSTEM' means 'in one of the system groups', and the default CUPS system groups are sys, root, and system. In order to make 'wheel' one of the system groups, add a line near the top (not in any section) like this: SystemGroup sys root system wheel Hmm, perhaps 'wheel' should be one of the default groups... > In previous versions the authentication used was consolehelper but > this does not seem to be the case in FC10. The last release where that was the case was Fedora Core 5. :-) > It also seems that it does not use PolicyKit either which other > system-config type programs are now doing. Not in Fedora 10 -- that was added in Fedora 11. I wrote about it a few days ago here: http://cyberelk.net/tim/2009/08/11/policykit-and-printing/ Tim. */ signature.asc Description: This is a digitally signed message part -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
