[Pkg-samba-maint] Bug#459243: Bug#459243: samba: cupsaddsmb doesn't work as non-root

[Steve Langasek]

On Fri, Jan 04, 2008 at 11:50:10PM +0100, Luca Capello wrote:
> since /var/lib/samba/printers is owned by root:root and it's 755, thus
> cupsaddsmb fails to work as a non-root user.  In the example below

> - user luca belongs to the lpadmin group

> - /etc/samba/smb.conf is a plain etch one with

>     ########## Printing ##########
>     printer admin = @lpadmin
> 
>     [print$]
>         write list = @lpadmin

[...]

> I thought this was a wishlist, but then I came to the conclusion that
> this is a real bug, since a default smb.conf has "invalid users = root"
> and clearly states that even other non-root users can manage printers
> (drivers and properties).

Well, no, it states that you must make a change to the smb.conf to allow
non-root users to manage printers.  It happens that you must /also/ make a
change to the permissions on the directory.  I think this is the reasonable
default behavior, so the only change I see that could be made here would be
to fix the documentation in the default smb.conf to mention this.

> I used the lpadmin group because it's created on postinst by cupsys (and
> cupsys-client) and thus it sounds the best group to me.

We can discuss giving lpadmin access to this directory and share by default,
but it's not yet clear to me that this is a correct default.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org