[6523] in Release_7.7_team
lprm for normal users doesn't work
daemon@ATHENA.MIT.EDU (Geoffrey Thomas)
Mon Nov 23 07:12:20 2009
Date: Mon, 23 Nov 2009 07:11:34 -0500 (EST)
From: Geoffrey Thomas <geofft@MIT.EDU>
To: ops@mit.edu, release-team@mit.edu
cc: debathena@mit.edu
Message-ID: <alpine.DEB.1.10.0911230652280.948@dr-wily.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
X-Spam-Flag: NO
X-Spam-Score: 0.00
OLC ticket #1081121 implied that lprm for users without special printer
bits doesn't work. This appears to be basically correct: as
starnine@linerva I printed a job onto ceres' queue, and found that it has
id 6900.
lprm -Pceres gives no output and doesn't remove the job.
lprm -Pceres 6900 gives me ASCII character 0x01 back (and doesn't
remove the job either).
cups-lprm -Pceres says "No active jobs on ceres!", and cups-lprm -Pceres
6900 says "Job #6900 does not exist!"
Adding -h printers.mit.edu gives the same result.
Dereferencing the back-end server and trying cups-lprm -Pceres -h
print-this.mit.edu gives "Forbidden".
Finally cups-lprm -Pceres -h print-this.mit.edu 6900 succeeds. So while
it's technically possible for an unprivileged user to remove his or her
own jobs, it's not actually possible in practice. I don't know enough
about CUPS to suggest how to fix this from the server side, and it might
not even be possible. I can write up an emergency fix on the client side
to do the various lookups; it would only apply to Debathena clients, but
it might be good enough for now.
--
Geoffrey Thomas
geofft@mit.edu
(For bonus points, -h printers and -h print-this without the rest of the
FQDN don't work, with "Error - unknown destination "ceres"!")
