On 2017-02-10 12:24, stakanov wrote:
Fast question, i hope a fast (and straightforward) answer.
For a user to add a CUPS printer at localhost:631 with add printer and that gets "Forbidden":
Is ist sufficient to join him to the "lp" group? Or when is asked to provide user and password to cups it is always intended "root and password root"?
Quick answer: I don't know.
However, cups has its own permissions.
cups-files.conf:
# Default user and group for filters/backends/helper programs; this cannot be
# any user or group that resolves to ID 0 for security reasons...
#User lp
#Group lp
# Administrator user group, used to match @SYSTEM in cupsd.conf policy rules...
SystemGroup root
cupsd.conf:
# Restrict access to the admin pages...