** Description changed: local user [email protected] prints successfully AD user [email protected] fails with lp: Unauthorized debugged from logs: cupsdIsAuthorized: requesting-user-name="localtestuser" → successful-ok cupsdIsAuthorized: requesting-user-name="testuser@somedomain..." → 401 - The only workaround I've found so far is commenting out the Require user - line in here in /etc/cups/cupsd.conf (and restart cups) - - <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-J + The only workaround I've found so far is commenting out the Require user line in here in /etc/cups/cupsd.conf (and restart cups) + ``` + <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-J ob CUPS-Move-Job> ## Require user @OWNER @SYSTEM # <- commented-out - Order deny,allow - </Limit> + Order deny,allow + </Limit> + ``` + more debug info: + ``` + $ dpkg --list | grep 'cups .*Print' + ii cups 2.4.7-1.2ubuntu7.14 amd64 Common UNIX Printing System(tm) - PPD/driver support, web interface + $ lsb_release -a + No LSB modules are available. + Distributor ID: Ubuntu + Description: Ubuntu 24.04.4 LTS + Release: 24.04 + Codename: noble + ``` + Related issue on Github: - https://github.com/OpenPrinting/cups/issues/1001 + https://github.com/OpenPrinting/cups/issues/1001#issuecomment-5479543849
** Tags added: cups ** Tags added: ad noble sssd ** Description changed: - local user [email protected] prints successfully + local user named [email protected] (no, its not ad joined, its just created with this name to debug if the @ or . makes the trouble (no it does not)) prints successfully AD user [email protected] fails with lp: Unauthorized debugged from logs: cupsdIsAuthorized: requesting-user-name="localtestuser" → successful-ok cupsdIsAuthorized: requesting-user-name="testuser@somedomain..." → 401 The only workaround I've found so far is commenting out the Require user line in here in /etc/cups/cupsd.conf (and restart cups) ``` <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-J ob CUPS-Move-Job> ## Require user @OWNER @SYSTEM # <- commented-out Order deny,allow </Limit> ``` - more debug info: ``` $ dpkg --list | grep 'cups .*Print' ii cups 2.4.7-1.2ubuntu7.14 amd64 Common UNIX Printing System(tm) - PPD/driver support, web interface $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 24.04.4 LTS Release: 24.04 Codename: noble ``` Related issue on Github: https://github.com/OpenPrinting/cups/issues/1001#issuecomment-5479543849 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2165919 Title: AD/sssd users cannot print: CUPS strips @domain before @OWNER check (upstream #1001) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups/+bug/2165919/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
