Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can access GUI admin interface without authentication, but Find New Printers requires an authenticated user. #6076

Open
Dominic-Mayers opened this issue Oct 31, 2022 · 0 comments

Comments

@Dominic-Mayers
Copy link

Dominic-Mayers commented Oct 31, 2022

I am using cups GUI admin interface on a fresh installation of Ubuntu 22.10. If I visit 127.0.0.1:631/admin I do not have to authenticate, but without authentication, if I click on Find New Printers, no printers are found. Yet I see a printer with avahi-browse -t _ipp._tcp and also directly in Settings->Printers. If I artificially force a login by clicking on Add Printer, but don't proceed ahead and instead go back to Administration and click on Find new Printers, then the printer is found. If I modify the configuration file cupsd.conf and replace

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
</Location>

with

# Restrict access to the admin pages...
<Location /admin>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

then I cannot reach the admin page without first seeing the login window that allows me to login and the problem is solved.

This is not at all a new issue. It was noticed five years ago here https://unix.stackexchange.com/questions/390934/cups-how-to-troubleshoot-no-printers-found-condition .

Dominic-Mayers added a commit to Dominic-Mayers/cups that referenced this issue Nov 2, 2022
With the current default configuration, someone can request to Find New
Printers without being authenticated and with no way to be authenticated.
Without authentication cups does not detects printers on the network.
The person might not realize that it's because authentication is missing.
It seems natural to always offer to authenticate when accessing the
administration page. See apple#6076 .
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant