Comment 3 for bug 152061

Revision history for this message
James Bardin (jbardin-deactivatedaccount) wrote : Re: [Bug 152061] Re: cups denied access to /etc/shadow

Till Kamppeter wrote:
> The user account created as the first one on the system (or accounts
> created as privileged accounts) are in the group "lpadmin" (see
> /etc/group). They can do CUPS administration without password. They can
> call commands like system-config-printer or lpadmin without sudo. Check
> whether the desired accounts are in the lpadmin group. In the web
> interface of CUPS (http://localhost:631/) these users use their own user
> names and passwords.
>
Thanks.
That's it. I didn't realize that cups was using the lpadmin group. I
also assumed that the user tool added the user to the correct groups.

Maybe there should be another bug report
"users-admin fails to add new admin user to lpadmin group"

I think "Administer the system" should include membership in lpadmin.

-jim