[6524] in Release_7.7_team
Re: lprm for normal users doesn't work
daemon@ATHENA.MIT.EDU (Jonathan Reed)
Mon Nov 23 08:06:37 2009
Cc: ops@mit.edu, release-team@mit.edu, debathena@mit.edu
Message-Id: <9B0675F6-B547-4C6F-9DAB-1CE38E93E346@mit.edu>
From: Jonathan Reed <jdreed@MIT.EDU>
To: Geoffrey Thomas <geofft@mit.edu>
In-Reply-To: <alpine.DEB.1.10.0911230652280.948@dr-wily.mit.edu>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Mon, 23 Nov 2009 08:02:55 -0500
X-Spam-Flag: NO
X-Spam-Score: 0.00
I think we knew this already, and we decided in the short term to
update the lprm and lpq wrappers to DTRT.
However, needing to supply a job number is a feature change and should
be documented. I'll be sending mail to cfyi later today (I needed to
run it by some people first).
-Jon
On Nov 23, 2009, at 7:11 AM, Geoffrey Thomas wrote:
> OLC ticket #1081121 implied that lprm for users without special
> printer bits doesn't work. This appears to be basically correct: as
> starnine@linerva I printed a job onto ceres' queue, and found that
> it has id 6900.
>
> lprm -Pceres gives no output and doesn't remove the job.
>
> lprm -Pceres 6900 gives me ASCII character 0x01 back (and doesn't
> remove the job either).
>
> cups-lprm -Pceres says "No active jobs on ceres!", and cups-lprm -
> Pceres 6900 says "Job #6900 does not exist!"
>
> Adding -h printers.mit.edu gives the same result.
>
> Dereferencing the back-end server and trying cups-lprm -Pceres -h
> print-this.mit.edu gives "Forbidden".
>
> Finally cups-lprm -Pceres -h print-this.mit.edu 6900 succeeds. So
> while it's technically possible for an unprivileged user to remove
> his or her own jobs, it's not actually possible in practice. I don't
> know enough about CUPS to suggest how to fix this from the server
> side, and it might not even be possible. I can write up an emergency
> fix on the client side to do the various lookups; it would only
> apply to Debathena clients, but it might be good enough for now.
>
> --
> Geoffrey Thomas
> geofft@mit.edu
>
> (For bonus points, -h printers and -h print-this without the rest of
> the FQDN don't work, with "Error - unknown destination "ceres"!")
>
>
