Upgrade Feisty -> Gutsy: Privileged user not in "lpadmin" group any more

Bug #134503 reported by Óscar Rodríguez Ríos
12
Affects Status Importance Assigned to Milestone
cupsys (Ubuntu)
Fix Released
High
Martin Pitt

Bug Description

Binary package hint: cupsys

I've upgraded from Feisty to Gutsy, and the new system-config-printer doesn't allowed me to make any change or new configuration. I've tried with my username and no password, my username and my password, root... and I always get the same error when trying to apply any change: "Failed to set settings".

Searching in /var/log/cups/error_log I found this:

E [22/Aug/2007:14:10:21 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:21 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:21 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:21 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:22 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:32 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:33 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:33 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:33 +0200] CUPS-Set-Default: Unauthorized
E [22/Aug/2007:14:10:33 +0200] CUPS-Set-Default: Unauthorized

Somebody have any idea?
When starts system-config-printer doesn't require administrative password like many other admin. apps.

Best regards,
neuromancer

Revision history for this message
Óscar Rodríguez Ríos (ingorr01) wrote :

I've solved the issue. After upgrading to Gutsy, my user isn't in the lpadmin group, then I added my user to this group and all is OK now.

Best regards,
neuromancer

Changed in cupsys:
assignee: nobody → pitti
importance: Undecided → High
Revision history for this message
Martin Pitt (pitti) wrote :

I grepped the entire cupsys source for userdel and deluser, and cupsys never removes any group from any user. So I doubt that the cupsys upgrade itself is responsible for this.

  * Did the user lose any other groups? What does "id" say?
  * Do you use a nondefault authentication schema like LDAP or NIS?
  * Did you use the Gnome user&groups admin tool in between? (bug 26338)
  * What does "getent group lpadmin" say?

Changed in cupsys:
status: New → Incomplete
Revision history for this message
Óscar Rodríguez Ríos (ingorr01) wrote : Re: [Bug 134503] Re: Upgrade Feisty -> Gutsy: Privileged user not in "lpadmin" group any more

O Ven, 24-08-2007 ás 14:18 +0000, Martin Pitt escribiu:

> I grepped the entire cupsys source for userdel and deluser, and cupsys
> never removes any group from any user. So I doubt that the cupsys
> upgrade itself is responsible for this.
>
> * Did the user lose any other groups? What does "id" say?

I don't know if my user belong to this group before the upgrade to Gutsy
(in Feisty, is necessary belongs to lpadmin to admin printers?, this is
could be the problem.)

> * Do you use a nondefault authentication schema like LDAP or NIS?

No, I use PAM auth.

> * Did you use the Gnome user&groups admin tool in between? (bug 26338)

Before the upgrade do Gutsy I used gnome-cups-manager

> * What does "getent group lpadmin" say?

Now, when all ok, this is the output: "lpadmin:x:113:neuromancer"
I added this manually in users-admin

>
> ** Changed in: cupsys (Ubuntu)
> Status: New => Incomplete
> Target: ubuntu-7.10-beta => None
>

 If you have any questions, I´ll try to answer them.

Best regards,
neuromancer

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Thanks for your answers.

Yes, in Feisty users must be in the lpadmin group to be able to admin printers.

We do not nned to know which printer setup tool you have used before the upgrade. Instead we need to know whether you have changed something in the configuration of the users and groups (add/remove users or groups, put users into certain groups, ...) and if you have used the user/group admin tool of GNOME, as this tool suffers a long-standing bug (bug 26338).

Revision history for this message
Óscar Rodríguez Ríos (ingorr01) wrote :

O Ven, 24-08-2007 ás 15:07 +0000, Till Kamppeter escribiu:

> Thanks for your answers.
>
> Yes, in Feisty users must be in the lpadmin group to be able to admin
> printers.
>
> We do not nned to know which printer setup tool you have used before the
> upgrade. Instead we need to know whether you have changed something in
> the configuration of the users and groups (add/remove users or groups,
> put users into certain groups, ...) and if you have used the user/group
> admin tool of GNOME, as this tool suffers a long-standing bug (bug
> 26338).
>

In Feisty (gnome-cups-manager) works ok, I were able to manage/add
printers... Only upgrade to Gutsy (no user/group management) and
system-config-printer don't work, I manually added (before upgrade and
failed to admin printers) my user to the lpadmin group (with
users-admin) and now all works ok.

Best regards
neuromancer

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

So this means that simply the upgrade triggered your removal from the lpadmin group. On such an upgrade hundreds of packages are updated. So it is not necessarily cupsys which did this change.

Revision history for this message
mikko (mikko-) wrote :

I had same problem, I wasn't in the lpadmin group. Before gutsy update I was there. I have two sudo users in my machine, "admin" group was ok after update. But "lpadmin" not, only the other user was there, not me.

Revision history for this message
Gonzalo Porcel (gporcel) wrote :

I can also confirm this issue on Gutsy. All options in the printer dialog were disabled. I was able to fix things by doing the following:

  # adduser cupsys shadow

  # adduser gporcel lpadmin

  # /etc/init.d/cups restart

I am wondering if this issue could be due to the fact that I use "non-standard" user ids, in other words, not those supplied by Ubuntu. For instance, my user and group ids begin at 6000.

Revision history for this message
Gonzalo Porcel (gporcel) wrote :

I forgot to mention that I also performed an upgrade from Feisty to Gutsy, just to be clear on that issue.

Thanks,

Gonzalo

Revision history for this message
TRiSS (triss) wrote :

I can also confirm this problem. I upgraded from Feisty to gutsy beta, and wasn't able anymore to change anything in the print settings. It always asked me for a password, and supplying the correct password for the user didn't work. After adding myself to the lpadmin group, I could change the settings again.

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

This needs really to get fixed in Gutsy

Changed in cupsys:
milestone: none → ubuntu-7.10
Revision history for this message
Martin Pitt (pitti) wrote :

I cannot reproduce this by installing a clean feisty and upgrading to Gutsy.

Revision history for this message
Martin Pitt (pitti) wrote :

I uploaded a new cupsys which *might* be the cause of this. If it was, it would be very dubious how it happens, but it is a safe change anyway.

cupsys (1.3.2-1ubuntu7) gutsy; urgency=low

  * debian/cupsys.postinst: Drop ancient transitional code to remove root from
    group lpadmin. Under very odd circumstances ("root" has the same UID than
    the user) this could cause the user to be removed from group 'lpadmin'.
    Quite unlikely that this is the prime reason for LP #134503, but it's much
    cleaner in any case.

 -- Martin Pitt <email address hidden> Mon, 15 Oct 2007 12:32:16 +0200

Can you reproduce this from a clean Feisty installation?

Revision history for this message
vroetman (vroetman) wrote :

In a clean gutsy install, my normal user is not able to add a printer. I resorted to
% sudo /usr/share/system-config-printer/system-config-printer.py
in order to do it. It sure seems a problem to me in gutsy. BTW, this was adding a network (JetDirect) printer for what its worth.

Revision history for this message
Michael Vogt (mvo) wrote :

I inspected the update-manager code and I'm certain that this is not a something that u-m is causing. Has anyone experienced the problem after Martins upload of cupsys 1.3.2-1ubuntu7 ?

Revision history for this message
Martin Pitt (pitti) wrote :

Does anyone still experience this?

Revision history for this message
Tom Harris (tom-harris) wrote :
Revision history for this message
Martin Pitt (pitti) wrote :

No feedback for more than a month, so I close this. Thank you for your report, and please cry out if you still have problems, then I'll reopen this.

Changed in cupsys:
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.