From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 01 May 2023 03:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198@debbugs.gnu.org X-Debbugs-Original-To: bug-guix Received: via spool by submit@debbugs.gnu.org id=B.16829105041719 (code B ref -1); Mon, 01 May 2023 03:09:01 +0000 Received: (at submit) by debbugs.gnu.org; 1 May 2023 03:08:24 +0000 Received: from localhost ([127.0.0.1]:38659 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ptJto-0000Rf-DU for submit@debbugs.gnu.org; Sun, 30 Apr 2023 23:08:24 -0400 Received: from lists.gnu.org ([209.51.188.17]:36142) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ptJtj-0000RS-9j for submit@debbugs.gnu.org; Sun, 30 Apr 2023 23:08:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ptJti-0007Zn-WD for bug-guix@gnu.org; Sun, 30 Apr 2023 23:08:19 -0400 Received: from mail-qk1-x732.google.com ([2607:f8b0:4864:20::732]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ptJth-0000TX-BE for bug-guix@gnu.org; Sun, 30 Apr 2023 23:08:18 -0400 Received: by mail-qk1-x732.google.com with SMTP id af79cd13be357-74df41e2e61so91362685a.3 for ; Sun, 30 Apr 2023 20:08:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682910496; x=1685502496; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=cZOVCbCUsSf64t53aUhZXPvdUjFQzz4Epsbb6DeIXzs=; b=NLpxnKUO5qgtGnHISpkvzC7wQMJe8x/MJCQVx72zmBeFjeVnjx2ihZcHkyK+KW4uDn GRwWyExGKClj3beGuIU3ILyIYm3visUx77ybDeG67vvu9xKBwawEQ+u1QReTbMuBoGDR Pw8bx18Spsw4HwKX2zmDxNIxHNlbMkvZ6Q2vmEfDCbwEo5it0kZjfYU6JzjYJEGMxxWV 0FGBKIRekm4RK2/D0bPVYXlTEUVZkLlO1rFvhBrQSDCLU5SRdK0tf6pxrfhTcSlI7hDU 96PB64RDmMVBlwDrCaUs7WlINmrpdd06EzSMFZwyByRho0Sr5T7mOxt5lspNl4+GrPb8 aFsg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682910496; x=1685502496; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=cZOVCbCUsSf64t53aUhZXPvdUjFQzz4Epsbb6DeIXzs=; b=dQysmrqmPZdrrwvlAD1zD1ZEdnOyZch0rdbfeWfkUxN8aHG7RE8CquinMZ2KTKca1w 82D2IkYdErUHlOnfG53lkpTV0oW7WiYp3kmguvOdRQROkOVG+NKrMjzvpPOY+KGBoJSW FVBI//x0z1ioVeqIwW94wZ8oE149NeE/79QLla6jjp1HYG3+SXRnpxYnPRQInsk/DOK6 pS40SDV2LPn0QRhESifQzNpR9dhWPbkArz3EwTO4PaknQnIhoXuIZ/u+002w2dxM49Nq TjaAmEavB1rRZGhDeTVULy+IZChL4FCNu9zZqimpUgZvv0F6mBELIgcOq0+TyHs8Ypk8 OoWQ== X-Gm-Message-State: AC+VfDwHuvav9vw++2fIL6QOYuizlbVw7P+3tGVB8Pzsum5Kqk+iN3OS xClJPiYRuBRH4zkU/Y6CHnMczvzcmoA= X-Google-Smtp-Source: ACHHUZ56nvb7dOTWBhCFWd70CPDRtmxovoReV4mC496s1RtlXaxMOeeuSEVdd/l03vE+JbnSB/EvZg== X-Received: by 2002:a05:622a:46:b0:3ef:2db1:6e75 with SMTP id y6-20020a05622a004600b003ef2db16e75mr21591367qtw.24.1682910495739; Sun, 30 Apr 2023 20:08:15 -0700 (PDT) Received: from hurd (dsl-155-245.b2b2c.ca. [66.158.155.245]) by smtp.gmail.com with ESMTPSA id g3-20020ac85803000000b003b63b8df24asm5751953qtg.36.2023.04.30.20.08.14 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 30 Apr 2023 20:08:15 -0700 (PDT) From: Maxim Cournoyer Date: Sun, 30 Apr 2023 23:08:13 -0400 Message-ID: <87wn1s695u.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::732; envelope-from=maxim.cournoyer@gmail.com; helo=mail-qk1-x732.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hi, Today I encountered an issue where after re-installing a Guix System, I couldn't add a new printer anymore. Any CUPS client (including the trusty localhost:631 HTTP page) would loop on authenticating my user. After consulting the logs and finding this kind of line: --8<---------------cut here---------------start------------->8--- pam_authenticate() returned 7 (Authentication failure) --8<---------------cut here---------------end--------------->8--- I started looking at our PAM configuration for CUPS, but we currently have none, which is probably the issue. Using 'cups-minimal' instead of cups (which is built with linux-pam) solves the issue, as the 'cups' value provided to the record. We should probably make cups-minimal the default, or extend our pam-service-type with the relevant PAM entries. Thoughts/takers? -- Thanks, Maxim From unknown Sun Jun 22 04:31:15 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Maxim Cournoyer Subject: bug#63198: closed (Re: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication) Message-ID: References: <87o7n1zip5.fsf@gmail.com> <87wn1s695u.fsf@gmail.com> X-Gnu-PR-Message: they-closed 63198 X-Gnu-PR-Package: guix Reply-To: 63198@debbugs.gnu.org Date: Wed, 03 May 2023 12:47:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1683118022-9666-1" This is a multi-part message in MIME format... ------------=_1683118022-9666-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #63198: cups-service-type uses PAM-enabled 'cups' by default which prevents= authentication which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 63198@debbugs.gnu.org. --=20 63198: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D63198 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1683118022-9666-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 63198-done) by debbugs.gnu.org; 3 May 2023 12:46:27 +0000 Received: from localhost ([127.0.0.1]:45880 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1puBsJ-0002V0-1s for submit@debbugs.gnu.org; Wed, 03 May 2023 08:46:27 -0400 Received: from mail-qt1-f169.google.com ([209.85.160.169]:44105) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1puBsE-0002Ui-Cq for 63198-done@debbugs.gnu.org; Wed, 03 May 2023 08:46:25 -0400 Received: by mail-qt1-f169.google.com with SMTP id d75a77b69052e-3ef3887e3c0so22460381cf.0 for <63198-done@debbugs.gnu.org>; Wed, 03 May 2023 05:46:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1683117976; x=1685709976; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:to:from:from:to:cc:subject:date:message-id:reply-to; bh=EhD3dfFWs48bQosPTOsh+30HldmYY1HrIg2Vl48lW48=; b=CxwT9vAVUlpZtW2TovLBZA/CkaKdLWZuwPrBI+VkbL/wwe8NtRKTNT736TH0B28eOq qZcc2/HMhjuuHeoRsJHK05eAwYmcfD2b7v1m/fFvEK6kpWkBVMGdPrx2jf8wF0i1ZH5c i2fl3XU9belr1UvkzQLyKlO5UYGYmj0KrfeK5b+PWOxMlAlCA44VOsLeeLR6sChMbSdq fS2vld+jTuR2p8HwpEfuvHQ6ffP+QLMPcUuaqMox0vLGh1LXPmuUS7vfDp5vKPijxcBm 0zXEwBTIv+16LCygmfN8i4/9U7YeJ1gvmpdOTD3uYWXO7lLcjm3RvX5ooibnWsOzMW36 hrrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1683117976; x=1685709976; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=EhD3dfFWs48bQosPTOsh+30HldmYY1HrIg2Vl48lW48=; b=eF9GgH1b9kjIzZfpMfnCDLKjiLh/bQOan/dES8Px7wWnj5sScrKczjCmmw8yjJDfM5 f9VkS3MknSXAe060lb40r5wg/MEnsRn5UE4aapE3Kvq4qlX2GcpDaBtu/Gv3fvAXDusN y+AePskY8huBgR6jWi36HYKkAzKyLE77O6pPtLTQo7V8OuDnQZ91Wvl6ZeZ1Fyxs25gi AElnTI5uiAG2RpNotmkUElThH0u23tMldScQgcgC/yXU/V4ynZ9U2REnVI+xXypcl4I9 Il07FB755knGcCjK73kWzqokF7nyQW7SLVe5z9m0kUiDv9CcMbQtrlj8Dbfn8U5hl/TV ikTg== X-Gm-Message-State: AC+VfDyr+jympReMqjySvCoV6H+iHNl75Ayrg7MB5/iMHE3iKzO6hVUG H8VNAIwHw7jiSGfuUJcm0sJSe6F6gRmeMQ== X-Google-Smtp-Source: ACHHUZ6Cf4DOJ/uKCMQnFzhVF2XJRLrrDTuM5ebEOVtby3C/S6NLkq/HV+IS3iK6PrUtE/BEXScwzA== X-Received: by 2002:a05:622a:110:b0:3f1:f8fa:11c7 with SMTP id u16-20020a05622a011000b003f1f8fa11c7mr30498400qtw.34.1683117976378; Wed, 03 May 2023 05:46:16 -0700 (PDT) Received: from hurd (dsl-151-193.b2b2c.ca. [66.158.151.193]) by smtp.gmail.com with ESMTPSA id dz20-20020a05620a2b9400b0074dd97b28b3sm10535624qkb.113.2023.05.03.05.46.15 for <63198-done@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 03 May 2023 05:46:15 -0700 (PDT) From: Maxim Cournoyer To: 63198-done@debbugs.gnu.org Subject: Re: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication References: <87wn1s695u.fsf@gmail.com> Date: Wed, 03 May 2023 08:46:14 -0400 In-Reply-To: <87wn1s695u.fsf@gmail.com> (Maxim Cournoyer's message of "Sun, 30 Apr 2023 23:08:13 -0400") Message-ID: <87o7n1zip5.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 63198-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Maxim Cournoyer writes: > Hi, > > Today I encountered an issue where after re-installing a Guix System, I > couldn't add a new printer anymore. Any CUPS client (including the > trusty localhost:631 HTTP page) would loop on authenticating my user. > > After consulting the logs and finding this kind of line: > > pam_authenticate() returned 7 (Authentication failure) > > I started looking at our PAM configuration for CUPS, but we currently > have none, which is probably the issue. Using 'cups-minimal' instead of > cups (which is built with linux-pam) solves the issue, as the 'cups' > value provided to the record. Fixed using the above strategy in 6bc3e3f ("services: cups: Use cups-minimal to avoid PAM authentication.") -- Thanks, Maxim ------------=_1683118022-9666-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 1 May 2023 03:08:24 +0000 Received: from localhost ([127.0.0.1]:38659 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ptJto-0000Rf-DU for submit@debbugs.gnu.org; Sun, 30 Apr 2023 23:08:24 -0400 Received: from lists.gnu.org ([209.51.188.17]:36142) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ptJtj-0000RS-9j for submit@debbugs.gnu.org; Sun, 30 Apr 2023 23:08:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ptJti-0007Zn-WD for bug-guix@gnu.org; Sun, 30 Apr 2023 23:08:19 -0400 Received: from mail-qk1-x732.google.com ([2607:f8b0:4864:20::732]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ptJth-0000TX-BE for bug-guix@gnu.org; Sun, 30 Apr 2023 23:08:18 -0400 Received: by mail-qk1-x732.google.com with SMTP id af79cd13be357-74df41e2e61so91362685a.3 for ; Sun, 30 Apr 2023 20:08:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682910496; x=1685502496; h=mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=cZOVCbCUsSf64t53aUhZXPvdUjFQzz4Epsbb6DeIXzs=; b=NLpxnKUO5qgtGnHISpkvzC7wQMJe8x/MJCQVx72zmBeFjeVnjx2ihZcHkyK+KW4uDn GRwWyExGKClj3beGuIU3ILyIYm3visUx77ybDeG67vvu9xKBwawEQ+u1QReTbMuBoGDR Pw8bx18Spsw4HwKX2zmDxNIxHNlbMkvZ6Q2vmEfDCbwEo5it0kZjfYU6JzjYJEGMxxWV 0FGBKIRekm4RK2/D0bPVYXlTEUVZkLlO1rFvhBrQSDCLU5SRdK0tf6pxrfhTcSlI7hDU 96PB64RDmMVBlwDrCaUs7WlINmrpdd06EzSMFZwyByRho0Sr5T7mOxt5lspNl4+GrPb8 aFsg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682910496; x=1685502496; h=mime-version:message-id:date:subject:to:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=cZOVCbCUsSf64t53aUhZXPvdUjFQzz4Epsbb6DeIXzs=; b=dQysmrqmPZdrrwvlAD1zD1ZEdnOyZch0rdbfeWfkUxN8aHG7RE8CquinMZ2KTKca1w 82D2IkYdErUHlOnfG53lkpTV0oW7WiYp3kmguvOdRQROkOVG+NKrMjzvpPOY+KGBoJSW FVBI//x0z1ioVeqIwW94wZ8oE149NeE/79QLla6jjp1HYG3+SXRnpxYnPRQInsk/DOK6 pS40SDV2LPn0QRhESifQzNpR9dhWPbkArz3EwTO4PaknQnIhoXuIZ/u+002w2dxM49Nq TjaAmEavB1rRZGhDeTVULy+IZChL4FCNu9zZqimpUgZvv0F6mBELIgcOq0+TyHs8Ypk8 OoWQ== X-Gm-Message-State: AC+VfDwHuvav9vw++2fIL6QOYuizlbVw7P+3tGVB8Pzsum5Kqk+iN3OS xClJPiYRuBRH4zkU/Y6CHnMczvzcmoA= X-Google-Smtp-Source: ACHHUZ56nvb7dOTWBhCFWd70CPDRtmxovoReV4mC496s1RtlXaxMOeeuSEVdd/l03vE+JbnSB/EvZg== X-Received: by 2002:a05:622a:46:b0:3ef:2db1:6e75 with SMTP id y6-20020a05622a004600b003ef2db16e75mr21591367qtw.24.1682910495739; Sun, 30 Apr 2023 20:08:15 -0700 (PDT) Received: from hurd (dsl-155-245.b2b2c.ca. [66.158.155.245]) by smtp.gmail.com with ESMTPSA id g3-20020ac85803000000b003b63b8df24asm5751953qtg.36.2023.04.30.20.08.14 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 30 Apr 2023 20:08:15 -0700 (PDT) From: Maxim Cournoyer To: bug-guix Subject: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Date: Sun, 30 Apr 2023 23:08:13 -0400 Message-ID: <87wn1s695u.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::732; envelope-from=maxim.cournoyer@gmail.com; helo=mail-qk1-x732.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hi, Today I encountered an issue where after re-installing a Guix System, I couldn't add a new printer anymore. Any CUPS client (including the trusty localhost:631 HTTP page) would loop on authenticating my user. After consulting the logs and finding this kind of line: --8<---------------cut here---------------start------------->8--- pam_authenticate() returned 7 (Authentication failure) --8<---------------cut here---------------end--------------->8--- I started looking at our PAM configuration for CUPS, but we currently have none, which is probably the issue. Using 'cups-minimal' instead of cups (which is built with linux-pam) solves the issue, as the 'cups' value provided to the record. We should probably make cups-minimal the default, or extend our pam-service-type with the relevant PAM entries. Thoughts/takers? -- Thanks, Maxim ------------=_1683118022-9666-1-- From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication References: <87wn1s695u.fsf@gmail.com> In-Reply-To: <87wn1s695u.fsf@gmail.com> Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 13 May 2023 13:48:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168398562415639 (code B ref 63198); Sat, 13 May 2023 13:48:01 +0000 Received: (at 63198) by debbugs.gnu.org; 13 May 2023 13:47:04 +0000 Received: from localhost ([127.0.0.1]:36255 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxpaR-00044B-Qc for submit@debbugs.gnu.org; Sat, 13 May 2023 09:47:04 -0400 Received: from nomad-cl1.staging.muradm.net ([139.162.159.157]:42546 helo=nomad-cl1.muradm.net) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxpaP-00043i-JV for 63198@debbugs.gnu.org; Sat, 13 May 2023 09:47:02 -0400 Received: from localhost ([127.0.0.1]:43572) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1pxpaC-0007F1-0r for 63198@debbugs.gnu.org; Sat, 13 May 2023 13:46:48 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:Sender: Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=lVDiJqeZ3D06up+Lnjf1IRsf0lYY+/pS863XQQEsl94=; b=oqz/81RyI/3K5mEKemL8uHF1uq VxwvWIVN8jX4rDg+e6UkVMY9Pf95gq745nkXh7sJYjZIrnuqu5E+v52RyFxfMxYHn+aUd2GtmXQgm szk31zMhnv+Y1KaAZEBZ8TiBb+6FKELqKAmUqfm2tnGC/CG/7VlBgwM0qEeTqcjzWPPd2CZVTI7zw Wo0SmDDqhmuygsSzXe2QR2PRdi7uje89aFtXmC+sGjN/G7FG/cXoZL+JZ/k/Ry5drMRBU8cAU27gP nqWbLAC8FLY1Cjr7euGX+N65L7OU1yShUGGjmsOkaCloZhxT7omnV7Bht8bviOxcGW9q3+YK7Os4s bnxtMicyZpktis1jdw+zp4cDXIBjZMnYQNPvuZ/kAuZyqSs/19eTy8M/neBYB5MLQ5OCxV+Ftmim2 9Wawz4ISTLPxsTBfxzogb9bgXiXUBTaEHFa8TVb79FGV/nII5r6jOe7E57MFyz7Q6oCaOFzX62Bqp 0T+vUBnErwJy2jA3puybNkO4; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1pxpaI-0005uu-28 for 63198@debbugs.gnu.org; Sat, 13 May 2023 16:46:54 +0300 User-agent: mu4e 1.10.2; emacs 30.0.50 From: muradm Date: Sat, 13 May 2023 16:43:40 +0300 Message-ID: <87jzxcjqcx.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; format=flowed Could you please elaborate more on "loop on authenticating my user" from above and "prevents users from authenticating" from commit message? Does it mean that you could not authenticate as your user at all, or does it relates to authentication at http://localhost:631 for managing printers? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmRflM4ACgkQ6M7O0mLO BeKo0hAAxnSTKDlare2nq5OKQwYe+X5jFwHPc5Rw1MnrfkY3bK+CmT1OMu8kMgxe G95OdNh9Bsr4HogP3Ufp6KZtxYheQc6MZQnToNv02fJapnVwiPIHrp0Q8im6BQSi T8haZgdH2XrNkQ4N1Dtk7I55JSYb50G6yn/65jFnSxXpdNImrEtpGXuMEBPhhmv2 k6dcjOdMLMWvJQOqodcrU7u/qWm052jDQXuztdamNJ7Cm6F+oUwSWWJabRU203Ac U/aNHfapOy5oX/XUndl8g9VrElMVD9NEv6xH4bYpbHd4EvZdhEJRaeYHsSMx9Uhy YFqE9Rn/wvgACqSlgBOEvusmnI4UuxfCtqAqp9ZwiTqN9QYjYov5zlEwR2MWzIAb 2HMvf30kP+xbZPSnN5H1JmNUkdKfQe22NO3dwDKBEs52SjhUQ7tVy1TyJ0t6g3Pv yIadlUFklH4COjiBrpCt4vPYHZH/cpAqeT4D0Bpv35YLRNZP0LpbYi8jfqmf3ts2 8gNqCpMhl4YvYSEdz1NEcuRAtolsrQMHhPmgDkxrecl2lJci7vr9KTeEp5QIb2S6 Kr1XRDU9vNpqsTVIK0/SJziF6VxOMpaU0FnJoe2jFz1ZXO76fUIovTVzJPict9gs UvJabDPx72GNcSm5Kj6xj5ajpNtqrKosV2Sl9koY3lzu2wZxA/E= =1UTz -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 13 May 2023 13:55:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168398608116960 (code B ref 63198); Sat, 13 May 2023 13:55:02 +0000 Received: (at 63198) by debbugs.gnu.org; 13 May 2023 13:54:41 +0000 Received: from localhost ([127.0.0.1]:36284 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxpho-0004PS-K1 for submit@debbugs.gnu.org; Sat, 13 May 2023 09:54:40 -0400 Received: from nomad-cl1.staging.muradm.net ([139.162.159.157]:47800 helo=nomad-cl1.muradm.net) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxphn-0004Oq-DI for 63198@debbugs.gnu.org; Sat, 13 May 2023 09:54:39 -0400 Received: from localhost ([127.0.0.1]:49636) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1pxpha-0007F5-0p for 63198@debbugs.gnu.org; Sat, 13 May 2023 13:54:26 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:To: From:References:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=0Ew2NJcEO852G2ZlB/zmnvFx/XPTxLMXMZS5WpAQppE=; b=hMedPyc4MJ3MgsnJUtGU+z+Kan nWwtdan/Kn3e5OvqiqjbE22GOwKFlHtaevKbqX/y5vz6KrPtUjnyFPQysz9dDsK+g4ab3GhbqadZ+ A8Wy9AuBfZaCj4P2SuVK56+WimBo4r2gXRhdhYpeNVo0B261obhrrgH/+nzIYvas3D14nX6EYjnQW yTi9vdVXmiTLCAHCQ+Ebqzuge04DBbtoxaw3wFqjQpMDZoB4+wCkANT5zlWFcyvtdM4T9aJM7xJ8I IevEuKGIiUjIie0a20Hb2kQDSbTuYTbsBRanQKIjoZh3PQpoU3A5Ck1isQ6MNbwI2mVFHyyaENV7A bQkBqUjGq8GVGq1S6G1zRzrCxpAiqgM7l5FTt2UYp+oBge47tUEFiAcQ5Iu1NRkYgfFthlF3L/OLs prWCcaL/9/rSpU2fFUYrIBULdDCLlwhRZDwODF6tlSF7sT+tp/0UHwvydG7kdN/in7g+lNBxBNktn tY8//mHPVlSaJBX6t4cl2D2W; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1pxphh-00063v-0O for 63198@debbugs.gnu.org; Sat, 13 May 2023 16:54:33 +0300 References: <87jzxcjqcx.fsf@muradm.net> User-agent: mu4e 1.10.2; emacs 30.0.50 From: muradm Date: Sat, 13 May 2023 16:48:34 +0300 In-reply-to: <87jzxcjqcx.fsf@muradm.net> Message-ID: <87fs80jq07.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; format=flowed This change broke cups for me like this: --8<---------------cut here---------------start------------->8--- I [13/May/2023:16:14:27 +0300] [Client 16] Started "/gnu/store/9kdm8k84j2xqlax4zaarchw00cfs62zz-cups-server-bin/lib/cups/daemon/cups-deviced" (pid=21409, file=14) E [13/May/2023:16:14:27 +0300] [CGI] cups-brf must be called as root E [13/May/2023:16:14:27 +0300] [cups-deviced] PID 21419 (cups-brf) stopped with status 1! E [13/May/2023:16:14:27 +0300] [CGI] Unable to execute ippfind utility: No such file or directory E [13/May/2023:16:14:27 +0300] [cups-deviced] PID 21421 (driverless-fax) stopped with status 127! --8<---------------cut here---------------end--------------->8--- cups-minimal does not include ippfind utility. Normally, user whishing to use cups, should be in lp group, isn't it? Maybe that was your original issue? muradm writes: > [[PGP Signed Part:Undecided]] > > Could you please elaborate more on "loop on authenticating my > user" > from above and "prevents users from authenticating" from commit > message? Does it mean that you could not authenticate as your > user > at all, or does it relates to authentication at > http://localhost:631 > for managing printers? > > [[End of PGP Signed Part]] --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmRflpgACgkQ6M7O0mLO BeJDCA//cnLO5EBNh+a+0yhDEgC44x5LMiPwSNWsEfkRaoprElhFIb3nRHS9joqS eAozILMrGO74hL+28V4UApEw3IKJ6ks3I3PZ+Ej/jugDovdSP7V6Ka/33r4HLaev i6paw+61eIkKQyj6L5CO6VPkGxx614x+gE44XR8v0sVM5hYTSSEiKSnIxuC2Rbe2 CReX0Msw2SWhqc9xhwrYXbdRgD9JyynjfPW4Ti8DTBokIK5MkF3y6tdbxepVKCBx rI8DKG2himnbuEZODPrpXoR0G+/nsTEbkn37Xphh95bwIiH8A4Ffh34Ny2elHrbm r0PAenJh11hDT8O2HRkPcizluh2BOUu77dZQyRlNHtP3Bgaf0n5UXN9FChUKL09U h0l9rkmA30M0h1VZcd1lix+Z74WiZWgbW/3F94W6cgVT8KrYIxX7hhe+wy7+z0ps djIhgOld7SeSYVs2rVjarPKhi6ONQ/RpgOFhcbzNlxCsMgydGNi7+lJtaECbF6F7 WthAJFieHS4+38SAXJ0KEDwqg0eqfh0s6roIeUCnIYL1W3EsMNGq9/LWeymMMCuj jsXt75SQ50BQUKbYvrepj81NR1sAjehaSO68U/YJnqfYC8+C4X+wIXfKX5fA+MGl vAKL+J1Z2WfsyHfoT1KMWjMv779BDRPztrFNdd412R3hSFSuNtY= =8vf2 -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: [PATCH] services: cups: Add cups PAM service. Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 13 May 2023 18:39:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198@debbugs.gnu.org, maxim.cournoyer@gmail.com Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168400309027935 (code B ref 63198); Sat, 13 May 2023 18:39:01 +0000 Received: (at 63198) by debbugs.gnu.org; 13 May 2023 18:38:10 +0000 Received: from localhost ([127.0.0.1]:39595 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxu89-0007GU-JW for submit@debbugs.gnu.org; Sat, 13 May 2023 14:38:10 -0400 Received: from nomad-cl1.muradm.net ([139.162.159.157]:45828) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pxu87-0007G5-3P for 63198@debbugs.gnu.org; Sat, 13 May 2023 14:38:07 -0400 Received: from localhost ([127.0.0.1]:47144) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1pxu80-00005r-11; Sat, 13 May 2023 18:38:00 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References: In-Reply-To:Message-Id:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=WxXHY5YJG11Bqp2nGjUVlZNz9n4vzG7EyIlTaJjsUUk=; b=MGeidRMIrYwahtAZesTCimH8vY tPnKIf22mpcGVP1tDoQ8GoUgeQ6/8qswKBgR4Baynp7izo/XX9I6TCeCiofMbpt5GqZlLhEf2wzMU 5DibJx5W8MsXW9DwV1LbqG2fa2LlRMB+FvlnL/ci/u3mNqDV+AyhfoUENtsgmg5sFevV9sYWwjNJa BTbHeJTtpftQJdA9Ac+fGnLfYaKehXFLbRtiNfa+E/LPQ4N8plASw3Y0oVCy9KNSpGmYQNGi+tX3y RXBYmDYl4i50nqtWhZdNEUjPmDiHyiAOO4+ncLHdVVSr6j0pPcg3zIIdL17nVMPVs4VTc1zoH9m+z DP3KMT9Ppq2lKmgL5JwBr/JWNpESCBak0HBhfMetZ3HvwQnos7oRdZOjY3MRZZkZJmPXXZdr6pClm Sm5jYHIGrhcRIzV6C2WG7DBqLQwrsJenUzptecB1Tof33HlKtcyMg18LyHCSaje1vd/OF3nXnmJ9C Z+d37ZA81TOTCgk0E9St3GRm; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1pxu80-0001yn-2p; Sat, 13 May 2023 21:38:00 +0300 From: muradm Date: Sat, 13 May 2023 21:38:00 +0300 Message-Id: <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> X-Mailer: git-send-email 2.40.1 In-Reply-To: <87wn1s695u.fsf@gmail.com> References: <87wn1s695u.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Fixes . Makes CUPS service to extend pam-root-service-type providing minimal configuration to authenticate users. Since PAM authentication is provided, cups package can be used as default. * gnu/services/cups.scm (cups-configuration) [cups]: Use cups. [allow-empty-password?]: PAM service configuration permitting empty passwords. (opaque-cups-configuration): Likewise. (cups-pam-service): cups PAM service. (cups-service-type): Extend pam-root-service-type with cups-pam-service. --- gnu/services/cups.scm | 22 ++++++++++++++++++++-- 1 file changed, 20 insertions(+), 2 deletions(-) diff --git a/gnu/services/cups.scm b/gnu/services/cups.scm index c6099d77e7..d95c38b4d9 100644 --- a/gnu/services/cups.scm +++ b/gnu/services/cups.scm @@ -5,6 +5,7 @@ ;;; Copyright © 2019 Alex Griffin ;;; Copyright © 2019 Tobias Geerinckx-Rice ;;; Copyright © 2021 Maxime Devos +;;; Copyright © 2023 muradm ;;; ;;; This file is part of GNU Guix. ;;; @@ -25,6 +26,7 @@ (define-module (gnu services cups) #:use-module (gnu services) #:use-module (gnu services shepherd) #:use-module (gnu services configuration) + #:use-module (gnu system pam) #:use-module (gnu system shadow) #:use-module (gnu packages admin) #:use-module (gnu packages cups) @@ -500,8 +502,11 @@ (define (serialize-package-list field-name val) (define-configuration cups-configuration (cups - (file-like cups-minimal) + (file-like cups) "The CUPS package.") + (allow-empty-password? + (boolean #f) + "Specifies whether empty passwords will be allowed when authenticating via PAM.") (extensions (package-list (list brlaser cups-filters epson-inkjet-printer-escpr foomatic-filters hplip-minimal splix)) @@ -841,8 +846,11 @@ (define-configuration cups-configuration (define-configuration opaque-cups-configuration (cups - (package cups-minimal) + (package cups) "The CUPS package.") + (allow-empty-password? + (boolean #f) + "Specifies whether empty passwords will be allowed when authenticating via PAM.") (extensions (package-list '()) "Drivers and other extensions to the CUPS package.") @@ -1006,6 +1014,14 @@ (define (cups-shepherd-service config) "-f" "-c" #$cupsd.conf "-s" #$cups-files.conf))) (stop #~(make-kill-destructor)))))) +(define (cups-pam-service config) + (let ((allow-empty-password? + (if (opaque-cups-configuration? config) + (opaque-cups-configuration-allow-empty-password? config) + (cups-configuration-allow-empty-password? config)))) + (list (unix-pam-service "cups" + #:allow-empty-passwords? allow-empty-password?)))) + (define cups-service-type (service-type (name 'cups) (extensions @@ -1013,6 +1029,8 @@ (define cups-service-type cups-shepherd-service) (service-extension activation-service-type (const %cups-activation)) + (service-extension pam-root-service-type + cups-pam-service) (service-extension account-service-type (const %cups-accounts)))) base-commit: ed1e7920393c9ae5b2ae31fc46bae88136239b13 -- 2.40.1 From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 15 May 2023 15:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: muradm Cc: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.16841635699795 (code B ref 63198); Mon, 15 May 2023 15:13:01 +0000 Received: (at 63198) by debbugs.gnu.org; 15 May 2023 15:12:49 +0000 Received: from localhost ([127.0.0.1]:44156 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pyZsX-0002Xu-4S for submit@debbugs.gnu.org; Mon, 15 May 2023 11:12:49 -0400 Received: from mail-qv1-f47.google.com ([209.85.219.47]:44253) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pyZsS-0002Xc-Su for 63198@debbugs.gnu.org; Mon, 15 May 2023 11:12:48 -0400 Received: by mail-qv1-f47.google.com with SMTP id 6a1803df08f44-61946c27e58so59813576d6.0 for <63198@debbugs.gnu.org>; Mon, 15 May 2023 08:12:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684163559; x=1686755559; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=MqZ83m2P9WhSRJLnM339N7PxVAWzapDieHD0Bla+5Rc=; b=dqO8Mz95hmHKAmYAI0/lrwyhdBQoUkEUcfsuY+DUPFg3tQUAnjr/FfhgRNoo0KcMP8 qQon+2aI1c//qV6aDyt8WFhlXIdpEKQNv0B1Ct2OwKHRb2qD3do+YuZtMLV+Qh1pP1Ni HGuTvZndKzmZHITMmLTtSBBySs+abGNR3gshPGJ4VqnYxwMY8gXMuqZrdtniqHCiT8BV kqKSyRIOPmXXaUW8/wfvCbpig78q3KkE2P1k9D5TG84NxgkJ/YLTOa4xkyfsBLSMgz3t Yv0k71EDrXYveTXlaJ8sVienX/4SDlHBkC8nMYqV8S+yg+n8Wm3LVLzHCJLgV072xXQN 63/w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684163559; x=1686755559; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=MqZ83m2P9WhSRJLnM339N7PxVAWzapDieHD0Bla+5Rc=; b=M34k/lIt/ewuvw1ZZuqSkt8ogIStZclNxVn3OYWGBImml4Dl8w5cXN12n6za4xx2aJ 9lVaw1YoUstvWwoZ7eXWOOAfo83dtDCmLYlXroMznWOcqv/INLenAX538b9AB2owHDev pIFJk72m8s5wFmOsNX8z6GiJhEhkVLNW1EejEaZOr1cAGJnGqWesG7vRuqvXiGUuvUVA 54g3JWR5oSB0avcX48PDEJH7gzPVuETDV8CEUjPuhxPIGmyJjVdv6cxmG/MIQboJJBrf sWhSMyHaHeFwcNxooEcmLR5sNKmsblL7yKybTLfiTrN9lDNrUySoPMoRmsYzT4yk0esQ oRPA== X-Gm-Message-State: AC+VfDwNpe51YDY/SU9JuUpOERbNqlPcrZo7i7FweuW9f+/YLWj8IRsm c7WAxLjUbR87amOXWeSbqRxPRAAQp60VOQ== X-Google-Smtp-Source: ACHHUZ57J2KMABvkrljK/zPUDZaYCZrnpm2ckA5Cz8nCuFMlDR9ETDbZfRIBq4ElD7mcVxo3AZBg7g== X-Received: by 2002:a05:6214:1cc4:b0:5c7:d03c:f2b2 with SMTP id g4-20020a0562141cc400b005c7d03cf2b2mr47753208qvd.28.1684163559056; Mon, 15 May 2023 08:12:39 -0700 (PDT) Received: from hurd (dsl-205-236-230-106.b2b2c.ca. [205.236.230.106]) by smtp.gmail.com with ESMTPSA id k15-20020a0cf28f000000b0061af68f2eb0sm4996349qvl.14.2023.05.15.08.12.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 15 May 2023 08:12:38 -0700 (PDT) From: Maxim Cournoyer References: <87wn1s695u.fsf@gmail.com> <87jzxcjqcx.fsf@muradm.net> Date: Mon, 15 May 2023 11:12:37 -0400 In-Reply-To: <87jzxcjqcx.fsf@muradm.net> (muradm's message of "Sat, 13 May 2023 16:43:40 +0300") Message-ID: <87fs7xvday.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, muradm writes: > Could you please elaborate more on "loop on authenticating my user" > from above and "prevents users from authenticating" from commit > message? Does it mean that you could not authenticate as your user > at all, or does it relates to authentication at http://localhost:631 > for managing printers? The later (could not authenticate with CUPS for say, adding a printer). -- Thanks, Maxim From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 15 May 2023 15:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: muradm Cc: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.16841636079883 (code B ref 63198); Mon, 15 May 2023 15:14:02 +0000 Received: (at 63198) by debbugs.gnu.org; 15 May 2023 15:13:27 +0000 Received: from localhost ([127.0.0.1]:44160 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pyZt9-0002ZJ-HG for submit@debbugs.gnu.org; Mon, 15 May 2023 11:13:27 -0400 Received: from mail-qv1-f50.google.com ([209.85.219.50]:58630) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pyZt7-0002Z5-ML for 63198@debbugs.gnu.org; Mon, 15 May 2023 11:13:26 -0400 Received: by mail-qv1-f50.google.com with SMTP id 6a1803df08f44-61b79b97ed8so58863246d6.1 for <63198@debbugs.gnu.org>; Mon, 15 May 2023 08:13:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684163600; x=1686755600; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=E5hpdViry31TgzFtX/5UQz/RLcnMaSvo8GK31uZsaq0=; b=sXa2w8svE2c54JPyQgezeQIrn4ydzUW3QX7n78pCAhioBYGaXihbbTKpYQIN4S26TO pUy5wKOYzP3PytKEUyh+msN0q2EYvUmpSuJpdPeLUJHarcJ88j6h1QmUGYjQWwoOiLGY 4RncddolDNPX6josZUtzhtuDRxqgHUDE67STq0LlQYvhhZsrKZhN/+z3tef4EuklSA7O 1l6AGXEgIkNS5BTX04Tc4rT2OreYrM8CxzrW6nGpjU8R9VesGv3zHdgsmcky2+c9RbfD UdTeXwZBXB1S/SMC9iAzTBigRDyylwyLlSUwYpTPFOaMX0XBdYsA5Yy6EuTmvpWDXdCb DbDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684163600; x=1686755600; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=E5hpdViry31TgzFtX/5UQz/RLcnMaSvo8GK31uZsaq0=; b=GUlqHEdPoBtXTwkow1VfiuV84kDbEBsdPiRrjfiUpRVltcs4yCYLUvrL+5qxN6eRJi 7Omfoi3u1Xbrypn/uI/9fCof+RZe/SEeH96F/dif3VyOpCOVXPHy9mXXYb+Ua3ztugTL NYgG6mAUXh0Crbh4OnZjcZoIHJprQ3rRpjHZQHVqaYBhV+mf7cu3kOURTB2/7uGTpk6H vG9r+s+jv+cchYJu6NY+ALHSWLxX/bfohbdVCJQH1Cv3kLB+XPzbhGQ48VNNrnPamrlG 2tUMqOZ/DrQBBfnzUDxnVc+jgB+uHRqeov5LWYzPwdMUeNJFKh5kwdeijUidN8+7Q/KD LNwA== X-Gm-Message-State: AC+VfDzTeBx1TQthSUl8lti9t4B6TFJEkRYS1qbAYn/fgR/9DKwvV9fR 2hDd5xFRJJgB4QVib58s10od8HjRV1yjPw== X-Google-Smtp-Source: ACHHUZ7i++2Vs4XJESLrqRx5r6hxSPopETSeRViaSH79GD7Clap7fUoAVLztU0B9crYghHqh+ai4hw== X-Received: by 2002:a05:6214:519d:b0:615:a787:6d2a with SMTP id kl29-20020a056214519d00b00615a7876d2amr53514784qvb.3.1684163600029; Mon, 15 May 2023 08:13:20 -0700 (PDT) Received: from hurd (dsl-205-236-230-106.b2b2c.ca. [205.236.230.106]) by smtp.gmail.com with ESMTPSA id 6-20020a05620a078600b007578622c861sm5172891qka.108.2023.05.15.08.13.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 15 May 2023 08:13:19 -0700 (PDT) From: Maxim Cournoyer References: <87jzxcjqcx.fsf@muradm.net> <87fs80jq07.fsf@muradm.net> Date: Mon, 15 May 2023 11:13:18 -0400 In-Reply-To: <87fs80jq07.fsf@muradm.net> (muradm's message of "Sat, 13 May 2023 16:48:34 +0300") Message-ID: <87bkilvd9t.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, muradm writes: > This change broke cups for me like this: > > I [13/May/2023:16:14:27 +0300] [Client 16] Started > "/gnu/store/9kdm8k84j2xqlax4zaarchw00cfs62zz-cups-server-bin/lib/cups/daemon/cups-deviced" > (pid=21409, file=14) > E [13/May/2023:16:14:27 +0300] [CGI] cups-brf must be called as > root > E [13/May/2023:16:14:27 +0300] [cups-deviced] PID 21419 (cups-brf) > stopped with status 1! > E [13/May/2023:16:14:27 +0300] [CGI] Unable to execute ippfind > utility: No such file or directory > E [13/May/2023:16:14:27 +0300] [cups-deviced] PID 21421 > (driverless-fax) stopped with status 127! > > cups-minimal does not include ippfind utility. > > Normally, user whishing to use cups, should be in lp group, isn't > it? > Maybe that was your original issue? No, as I tested adding my user to the lpr group without success. -- Thanks, Maxim From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 15 May 2023 15:25:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: muradm Cc: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168416427211128 (code B ref 63198); Mon, 15 May 2023 15:25:02 +0000 Received: (at 63198) by debbugs.gnu.org; 15 May 2023 15:24:32 +0000 Received: from localhost ([127.0.0.1]:44167 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pya3r-0002tQ-NI for submit@debbugs.gnu.org; Mon, 15 May 2023 11:24:32 -0400 Received: from mail-qv1-f51.google.com ([209.85.219.51]:55625) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pya3n-0002t6-9G for 63198@debbugs.gnu.org; Mon, 15 May 2023 11:24:29 -0400 Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-61b5a6865dfso99824416d6.3 for <63198@debbugs.gnu.org>; Mon, 15 May 2023 08:24:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684164261; x=1686756261; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=ri2OwIOvlNH3WSRLvAthtbsuJ0o1JcDAA48KmQ7pz2E=; b=nOgH3ybA3R3CvAuPbU4MFm71E/BKaoK+k5AJcXC9AsUCGIQzdozdGpsaGU3xNN7WCV rvM7h7SocnnIj9Dds/l6ufcDinrm34bwIErvcsiNkcAgkJJupoCrltrj2ma+In4oosut C1i3aAWpR7+Eb1xsOATlyR9mIqz4JELL4Lc7ba66O5qUUezjNO/gjgAX9Vm1ZZldOJYA zbJJDv/bUpB9h/xCxMMChpQQ++bpgIma7SWcRkoYX9tfp8sBf2Q2k30Rbz7/O83OWdEQ Y8RupCUfCXN4csJBCpHzY2tfjYLYAKnWRbquFkebDWX6ip7z5OgLp8WQskb+3qGPEFTQ w10A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684164261; x=1686756261; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=ri2OwIOvlNH3WSRLvAthtbsuJ0o1JcDAA48KmQ7pz2E=; b=T91k282nalHsS+MJnCDw/7qniFB9OrlitKWSfMPdSz9SATDMI4vniKXX24b4ywJaEw gRjfGp/afna0+hjnZjQ9Xy+cdnOU+BvkXtTtajf8jYNI4uRv2HnmdaKU5b+ool9LN5Gv Flm+T5IZoJNcGHBfHl8NOk+m58oBFSkQpwmxJ71VYIpdGbfZy1oYsJPoInUto+P84mlO h9Aac1vQElOWB98PW7U9e7WMmUqULFf+ms9Vu7umZ8alhzrPlYsAmB9tlatbDceqeSdW eSolmN2NXCX2BRiYPUEY9gIOwEkcna9kuuVJ776qhdQnFRz7Z9m2zLZh/A58hLNL63V9 v7iQ== X-Gm-Message-State: AC+VfDxtmY0GPR5c7b4zrnKD9RTZAJRjRPQXvuckWGX8SVMA5cMNE3ae J8bJE2g3AaApLLM1WMxtbBwHg+nKjwyXBw== X-Google-Smtp-Source: ACHHUZ4/Rixy/RfyXtGKHQ65f1EOzXBTi8JiDyCLTQr12nUBxkvp6y1ZAZcJSH4+g4FgmPGWs3BZYg== X-Received: by 2002:ad4:574a:0:b0:621:562c:4e22 with SMTP id q10-20020ad4574a000000b00621562c4e22mr38559413qvx.47.1684164261320; Mon, 15 May 2023 08:24:21 -0700 (PDT) Received: from hurd (dsl-205-236-230-106.b2b2c.ca. [205.236.230.106]) by smtp.gmail.com with ESMTPSA id mk6-20020a056214580600b006212a3d8cc1sm5042934qvb.32.2023.05.15.08.24.20 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 15 May 2023 08:24:20 -0700 (PDT) From: Maxim Cournoyer References: <87wn1s695u.fsf@gmail.com> <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> Date: Mon, 15 May 2023 11:24:19 -0400 In-Reply-To: <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> (muradm's message of "Sat, 13 May 2023 21:38:00 +0300") Message-ID: <877ct9vcrg.fsf_-_@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, muradm writes: > Fixes . > > Makes CUPS service to extend pam-root-service-type providing minimal > configuration to authenticate users. Since PAM authentication is > provided, cups package can be used as default. > > * gnu/services/cups.scm (cups-configuration) [cups]: Use cups. I'd write 'Replace cups-minimal with cups'. > [allow-empty-password?]: PAM service configuration permitting empty passwords. I'd write 'New field', but I think we'd want to add proper PAM support here not a 'bypass PAM authentication' hack. It should also be enabled out of the box, otherwise users won't be able to authenticate until they figure out they need to set that switch to #t. > (opaque-cups-configuration): Likewise. > (cups-pam-service): cups PAM service. Not descriptive :-) What is the change here? Could you look into adding "regular" login PAM support instead of a bypass disabled by default? The user should still be prompted for its password, and it should go through the PAM auth module. I'm not very PAM-aware, but I believe there are examples spread in the code base. -- Thanks, Maxim From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 16 May 2023 05:35:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: 63198@debbugs.gnu.org Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168421525017821 (code B ref 63198); Tue, 16 May 2023 05:35:01 +0000 Received: (at 63198) by debbugs.gnu.org; 16 May 2023 05:34:10 +0000 Received: from localhost ([127.0.0.1]:44949 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pynK5-0004dM-PY for submit@debbugs.gnu.org; Tue, 16 May 2023 01:34:10 -0400 Received: from nomad-cl1.muradm.net ([139.162.159.157]:44694) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pynK3-0004cy-Sc for 63198@debbugs.gnu.org; Tue, 16 May 2023 01:34:08 -0400 Received: from localhost ([127.0.0.1]:42946) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1pynJw-00019n-00; Tue, 16 May 2023 05:34:00 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:Cc:To :From:References:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=2lfly5n1P/xgVzLm4muD28VcBHkdX9DHWMWeKJ1mTlM=; b=AoyKgsRX7s+4obOiiZprxA9Xpd gNoOL0ZqRxykjc+PFFUoE4JWaT0G+gvGva0vvN9o18eHSDpxNt7/zjQXzoYwvDYkR1tsjbWNv42AG tAxzBZL2DLrt+CcVkxW2oZ+m4fVjQQXrb+iRvDR+ZZLfUdqawNZCitGsMLP9VauYxAs5lSBt8ODjc V2saf9JmmkGr9K7z89KTV5Du6e5Cg+dpZiqt4tQfq8qXAvIhjucTWlvlVTfFqW6F3zTJhCPV/1ti1 mqdtfeDhC8CwiUYDlSvALxELcgDzyvl6R6q4rQuGuqUmV+4QFlzWQ6eazTzOJQyBvew80BDW72t5g uhVKUUxlZwfQrQ+e4aJLFIfJkkpyMd/R1oYQf43+Q+GEmocsYMdRCCDh0q+CMA4OQFHgdcj7q9FJW asll0d5cQlIYR6NmG4DHcgyj+HVMhX7CtDE05u8qQ3zyQnNpaIsEvxLQSJS5mFljiUam/oqOO9Quy m7QWL1aCYzk6ENbgL1VPTPZS; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1pynJx-0004Z1-1A; Tue, 16 May 2023 08:34:01 +0300 References: <87wn1s695u.fsf@gmail.com> <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> <877ct9vcrg.fsf_-_@gmail.com> User-agent: mu4e 1.10.2; emacs 30.0.50 From: muradm Date: Tue, 16 May 2023 08:17:56 +0300 In-reply-to: <877ct9vcrg.fsf_-_@gmail.com> Message-ID: <87edngon5j.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; format=flowed Hello, Maxim Cournoyer writes: > Hi, > > muradm writes: > >> Fixes . >> >> Makes CUPS service to extend pam-root-service-type providing >> minimal >> configuration to authenticate users. Since PAM authentication >> is >> provided, cups package can be used as default. >> >> * gnu/services/cups.scm (cups-configuration) [cups]: Use cups. > > I'd write 'Replace cups-minimal with cups'. > Sure you may change this. >> [allow-empty-password?]: PAM service configuration permitting >> empty passwords. > > I'd write 'New field', but I think we'd want to add proper PAM > support > here not a 'bypass PAM authentication' hack. It should also be > enabled > out of the box, otherwise users won't be able to authenticate > until they > figure out they need to set that switch to #t. > Who ever touches PAM configuration knows that by default PAM does not allow to authenticate users with empty passwords. This flag allows such users. Just grep guix for allow-empty-password?, you will see that it is all over the places. >> (opaque-cups-configuration): Likewise. >> (cups-pam-service): cups PAM service. > > Not descriptive :-) What is the change here? > I used simlilar strategy as in your commit 6bc3e3f9ba :-) You are free to reword as you wish. > Could you look into adding "regular" login PAM support instead > of a > bypass disabled by default? The user should still be prompted > for its > password, and it should go through the PAM auth module. > > I'm not very PAM-aware, but I believe there are examples spread > in the > code base. This patch provides necessary configuration for proper PAM support. I decided to take screen-locker-service-type's configuration as basis, since it is was most simpliest and adequate enough for this case. This patch does not disables, baypasses or cheats PAM in any way. User may navigate to CUPS portal. In the event of administrative actions taken by user, CUPS portal asks user to authenticate. With this configuration, it will attempt to authenticate as local system user. In the event of proper system user/password supplied and positively authenticated against PAM using "cups" service name, user allowed to take administrative action. In the event of invalid system user/password supplied, CUPS portal will keep looping begging for password (just as in your original case). If user decides to Cancel the authentication dialog, CUPS portal is navigated to Unauthorized access informing page. Why would I submit something that it is not working? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmRjFcgACgkQ6M7O0mLO BeKWRxAAiih7ujGaYvEDUB3Ulif+8nXHvirkoZXhZ/+7nGOj67Wpjt7fkSF1AY52 3DVxSFk4ec8UWPuOk38Z9wqnnQC6QdqoLvKeX7Ohc/SkdiUBlQkCPWe+KO3v7Ip/ WBGKEKcjG14pGWCScVueu6cFTQDjj4zlhvNpJWGu9mawFYBrxL+FQg2KOHpuGyaA gZyq0bFgnZPzXCfOB/kjpfjkfrEiYFX6Gw3sMhOekFWgwMQLZH34HL9cy6PUzEOx rMVxYx9Fq+jFFbOpqlBv2y+GoXIrk736LVYGOMif8Gnz4Ve5262TMxwHXOfyNJzy L19Gr2cEneVMUnLIp2Kxz3OlW+Kga1NoarsegWXkd4ZoxBlrri2NHdTggrq9hbhN 40j04q9rpLrSnrz2mt0sIR4KMW0YEApJrN5Bs0HbO05korqRqe+BSEwz7Mb/6H0O WmVN0RFpmcEGSQY22tvvJh5cd9YRy2xuDMqldgAVdHmfGlq2q9YB0ugHjwKd/xnY R3jXDTdJEbfXIAef5PeRLowdAOqX6lfHzDX8ojhJ5NpUlmOL02Wip0DlTrrfI7uv jMR7MPVvgbwgS1Dg2RVzbQ1BLq/uhhTzqkKW2GWyX9n273JsnfORGdxU/3xjvcr1 df3As2LTgIYeAOBwK/4qWxdb9BckYYCA0f6gLYCME+JrSvvK6+c= =4sgf -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication References: <87wn1s695u.fsf@gmail.com> In-Reply-To: <87wn1s695u.fsf@gmail.com> Resent-From: Ricardo Wurmus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 23 May 2023 22:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198@debbugs.gnu.org, muradm , Maxim Cournoyer Received: via spool by 63198-submit@debbugs.gnu.org id=B63198.168488033618199 (code B ref 63198); Tue, 23 May 2023 22:19:02 +0000 Received: (at 63198) by debbugs.gnu.org; 23 May 2023 22:18:56 +0000 Received: from localhost ([127.0.0.1]:40574 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1aLI-0004jT-1o for submit@debbugs.gnu.org; Tue, 23 May 2023 18:18:56 -0400 Received: from sender4-of-o50.zoho.com ([136.143.188.50]:21023) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1aLE-0004jJ-QH for 63198@debbugs.gnu.org; Tue, 23 May 2023 18:18:54 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1684880331; cv=none; d=zohomail.com; s=zohoarc; b=EycpvGixtQ3evqHLHiCN1icrMR90Y5KC1RwcqOXX+4GcRvNYC4K58CtPW5CegJIrkMV97H832EM4FhOFN48GLt476wIzaqaGaEquujRuqLaff9i0f6lFM8vHxS9UofUYahOKzlGmNeIqn/4Oen93EREamqyb/PWIOMDh62XWovA= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1684880331; h=Content-Type:Content-Transfer-Encoding:Date:From:MIME-Version:Message-ID:Subject:To; bh=z62KNA6MOPV2NttaadT6Js8QDj+LSXj/smpGNFNHrqM=; b=WuOnvy3MNX7oFbh6x7+mMspS5mr0RSJU9lEUzuKX/H/iQC3TfjBLBZNJB4y+ZvBFQeK9Auh3ZZnxuP6JvIRCrDb1MdbTBeIllUYTPMKABWmVo5hkxyNhBxS0iCpnWXcFHo2dyGj6mWYvjG+Ei8L7Iu2cOfixChYUgJT3p3n6nNw= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@elephly.net; dmarc=pass header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1684880331; s=zoho; d=elephly.net; i=rekado@elephly.net; h=From:From:To:To:Subject:Subject:Date:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-Id:Reply-To:Cc; bh=z62KNA6MOPV2NttaadT6Js8QDj+LSXj/smpGNFNHrqM=; b=UYqbckJMaazyjFc/BD/sj3KbpdMVwE386KXvnQe0uRs+SfTnArGydwce07m+US8l i23tLnbhc7vlqfv62xgk5Rs+We4ZHoo9xFKGeQkPXl36h1kVp2kZFhoTllQ2s5rtc20 xx4Uj1FNU+BeDAyA2X3b5x98H7uHqcfYL2b98lB4= Received: from localhost (8-108-142-46.pool.kielnet.net [46.142.108.8]) by mx.zohomail.com with SMTPS id 1684880329090821.9370993033654; Tue, 23 May 2023 15:18:49 -0700 (PDT) User-agent: mu4e 1.10.2; emacs 28.2 From: Ricardo Wurmus Date: Wed, 24 May 2023 00:14:18 +0200 Message-ID: <87v8giitdp.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) I=E2=80=99ll second muradm: these changes broke my printing setup: * my printer is no longer found because cups-minimal has minimal features and does not include dnssd * I cannot add a new printer with ipp://192.168.x.x manually because of authentication problems. The logs tell me that cups-brf needs to run as root. As a bonus problem I cannot restart Cups with the =E2=80=9Ccups=E2=80=9D pa= ckage because it cannot be killed. I disabled the =E2=80=9Ccups=E2=80=9D service and sto= pped it, but cups still runs; killing it is of no use because it=E2=80=99s respawned immediately. Shepherd says it didn=E2=80=99t do it. I also tried deleting= the cups socket file, but that also didn=E2=80=99t help. --=20 Ricardo From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 24 May 2023 00:48:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: muradm Cc: Ricardo Wurmus , 63198-done@debbugs.gnu.org Received: via spool by 63198-done@debbugs.gnu.org id=D63198.16848892221072 (code D ref 63198); Wed, 24 May 2023 00:48:01 +0000 Received: (at 63198-done) by debbugs.gnu.org; 24 May 2023 00:47:02 +0000 Received: from localhost ([127.0.0.1]:40672 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1cec-0000HE-HS for submit@debbugs.gnu.org; Tue, 23 May 2023 20:47:02 -0400 Received: from mail-qk1-f174.google.com ([209.85.222.174]:49623) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1cea-0000Gj-Am for 63198-done@debbugs.gnu.org; Tue, 23 May 2023 20:47:02 -0400 Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-75afed17e0cso49498385a.3 for <63198-done@debbugs.gnu.org>; Tue, 23 May 2023 17:47:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684889214; x=1687481214; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=8QCibPu9c1cvpRxNTxc/XiDlEUHiPX+Mv8IKhBqfs4s=; b=Atn7RPr59NS0JZK4PxAvRjUh6xDiBKxVaPcbTTCs3gM4aBYUYXoD4Z1lcuqdFzNodv Nl1OYum6jXHBQKz3XaI+KZGqSAtKq54J+vVhFtxEu6PkPitSbc8TLVNSJ21TcoLGNf1M 9hTCDicZXrEJPhTnexXHF3ALgUsZZOFFUZCAFvmp4mK3A37FkdVJct45hzcZ8TVdOmwT GH7RiQm/7WKQzy6X6gQ/1AHXGWYOR5h0M0mF6i/sZeczJCOJD3JHV9I2Xg/aBUTEWBr6 xbzRGmCbr4gViUbER93e7HTPxC1y8JWw6ZfLTp4ciLs/t2HBYLTa8+tJwymONZV9zeFT WLfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684889214; x=1687481214; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=8QCibPu9c1cvpRxNTxc/XiDlEUHiPX+Mv8IKhBqfs4s=; b=jmCuMYaIHoYR6kYVuHlyyoeG33Hi6iqckKUcny1R6u0fI8XYpNFrqcMcMUG/e245g7 uqhu7bEdq4GgcrCoCUdY5lrk/GUpshq7JRNSOmQZFQh0Y2mcnPE6sYcWp48COphToQfR uuUB3rb8eq1By/yKj0ncJF7Y7y+KrBKHfeH1DV6SPg8UXdQIQvrjpX/WFWvbVbNAxRGw mkGUFAnfIuvcMM87JgYoExVHL9EJnnIZMjjg65ihchdzzKVJrDx4Fl5ewaAqqCJTwGF0 nTbeCv/yior048yqaxKrsypxC2bz0Bs+xKYAb2F7lIgz/q3QCPbFFP6tlt0nGWCVaYvv L1sw== X-Gm-Message-State: AC+VfDwVvdRrbPIjlsCwvBAcKPrhYf7+0cebtcwM2TD8O4UjCF+F232j FSJCgxml/UXmOYqgvtntEdRXQkbL+tZH/A== X-Google-Smtp-Source: ACHHUZ7rOyB+kNY8VCFb0vXwiaLOi2b8wmKowuDjkv2spA97Sgp/yfXRey5GX4jj9Ow72slO9ukHug== X-Received: by 2002:a05:6214:19c8:b0:625:aa48:df01 with SMTP id j8-20020a05621419c800b00625aa48df01mr208361qvc.65.1684889214597; Tue, 23 May 2023 17:46:54 -0700 (PDT) Received: from hurd (dsl-10-133-118.b2b2c.ca. [72.10.133.118]) by smtp.gmail.com with ESMTPSA id ec13-20020ad44e6d000000b00605f796d30esm3203140qvb.51.2023.05.23.17.46.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 23 May 2023 17:46:54 -0700 (PDT) From: Maxim Cournoyer References: <87wn1s695u.fsf@gmail.com> <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> <877ct9vcrg.fsf_-_@gmail.com> <87edngon5j.fsf@muradm.net> Date: Tue, 23 May 2023 20:46:52 -0400 In-Reply-To: <87edngon5j.fsf@muradm.net> (muradm's message of "Tue, 16 May 2023 08:17:56 +0300") Message-ID: <87353mimir.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi muradm, muradm writes: [...] >> Could you look into adding "regular" login PAM support instead of a >> bypass disabled by default? The user should still be prompted for >> its >> password, and it should go through the PAM auth module. >> >> I'm not very PAM-aware, but I believe there are examples spread in >> the >> code base. > > This patch provides necessary configuration for proper PAM support. > I decided to take screen-locker-service-type's configuration as > basis, since it is was most simpliest and adequate enough for this > case. > This patch does not disables, baypasses or cheats PAM in any way. > User may navigate to CUPS portal. In the event of administrative > actions taken by user, CUPS portal asks user to authenticate. > With this configuration, it will attempt to authenticate as local > system user. In the event of proper system user/password supplied > and positively authenticated against PAM using "cups" service name, > user allowed to take administrative action. In the event of invalid > system user/password supplied, CUPS portal will keep looping > begging for password (just as in your original case). If user decides > to Cancel the authentication dialog, CUPS portal is navigated to > Unauthorized access informing page. > > Why would I submit something that it is not working? I didn't mean to imply that it didn't work; I just thought that it was somehow bypassing PAM (and the original problem it caused in the first place). As I wrote earlier, I know next to nothing about PAM, and misread your patch. I've now installed the change. Thanks for the fix, and thanks to Ricardo for the reminder. -- Maxim From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: End-to-end tests Was: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Csepp Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 24 May 2023 11:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ricardo Wurmus Cc: 63198@debbugs.gnu.org, mail@muradm.net, maxim.cournoyer@gmail.com X-Debbugs-Original-Cc: 63198@debbugs.gnu.org, muradm , bug-guix@gnu.org, Maxim Cournoyer Received: via spool by submit@debbugs.gnu.org id=B.168492677827086 (code B ref -1); Wed, 24 May 2023 11:13:01 +0000 Received: (at submit) by debbugs.gnu.org; 24 May 2023 11:12:58 +0000 Received: from localhost ([127.0.0.1]:42105 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1mQM-00072n-IZ for submit@debbugs.gnu.org; Wed, 24 May 2023 07:12:58 -0400 Received: from lists.gnu.org ([209.51.188.17]:56914) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1mQK-00072a-6n for submit@debbugs.gnu.org; Wed, 24 May 2023 07:12:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1q1mQJ-0004PP-QX for bug-guix@gnu.org; Wed, 24 May 2023 07:12:56 -0400 Received: from mx0.riseup.net ([198.252.153.6]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1q1mQI-0003cs-AG for bug-guix@gnu.org; Wed, 24 May 2023 07:12:55 -0400 Received: from fews01-sea.riseup.net (fews01-sea-pn.riseup.net [10.0.1.109]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.riseup.net", Issuer "R3" (not verified)) by mx0.riseup.net (Postfix) with ESMTPS id 4QR7nw22M0z9t3K; Wed, 24 May 2023 11:12:52 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1684926772; bh=Vo1XQmRckPWDqKb5iamd09KyK3CgB8HZMxdsEAu7GdQ=; h=References:From:To:Cc:Subject:Date:In-reply-to:From; b=aprLFlFAUPgeptc3GTAj41WoxRzibTxf5oK9MtXMt3wq58EdRYQP0QGGMrBtJDRwu d6lnhDgxXHX3xv12MlfDPyMN+pPsueymufksSbzyW2Z+LBx0EmRjqx6eXPwo11kDu+ 13aEJ6AUw0FpgmeJ74RwR2aGTwmASEk2PbH0LoSo= X-Riseup-User-ID: 7E620BA00E4E273679F1EEE81BA518865E20F3C7970F8C975DC3816B4BC4541B Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews01-sea.riseup.net (Postfix) with ESMTPSA id 4QR7nv2rsLzJp9S; Wed, 24 May 2023 11:12:51 +0000 (UTC) References: <87wn1s695u.fsf@gmail.com> <87v8giitdp.fsf@elephly.net> From: Csepp Date: Wed, 24 May 2023 13:07:41 +0200 In-reply-to: <87v8giitdp.fsf@elephly.net> Message-ID: <87wn0youe0.fsf@riseup.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=198.252.153.6; envelope-from=raingloom@riseup.net; helo=mx0.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Ricardo Wurmus writes: > I=E2=80=99ll second muradm: these changes broke my printing setup: > > * my printer is no longer found because cups-minimal has minimal > features and does not include dnssd > * I cannot add a new printer with ipp://192.168.x.x manually because of > authentication problems. The logs tell me that cups-brf needs to run > as root. > > As a bonus problem I cannot restart Cups with the =E2=80=9Ccups=E2=80=9D = package because > it cannot be killed. I disabled the =E2=80=9Ccups=E2=80=9D service and s= topped it, but > cups still runs; killing it is of no use because it=E2=80=99s respawned > immediately. Shepherd says it didn=E2=80=99t do it. I also tried deleti= ng the > cups socket file, but that also didn=E2=80=99t help. It might be a good idea to have more end-to-end tests in Guix that would check if common operations like "finding a printer" work. It's quite a bit of up-front effort, but it's better than relying on manual testing and could make things smoother in the long run. SUSE has a cool testing framework based on screen captures, maybe it could be adapted to Guix? From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: End-to-end tests Was: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 24 May 2023 11:38:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Csepp Cc: rekado@elephly.net, 63198@debbugs.gnu.org, maxim.cournoyer@gmail.com X-Debbugs-Original-Cc: Ricardo Wurmus , 63198@debbugs.gnu.org, bug-guix@gnu.org, Maxim Cournoyer Received: via spool by submit@debbugs.gnu.org id=B.16849282566418 (code B ref -1); Wed, 24 May 2023 11:38:01 +0000 Received: (at submit) by debbugs.gnu.org; 24 May 2023 11:37:36 +0000 Received: from localhost ([127.0.0.1]:42306 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1moB-0001fS-Qy for submit@debbugs.gnu.org; Wed, 24 May 2023 07:37:36 -0400 Received: from lists.gnu.org ([209.51.188.17]:46046) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1mo7-0001fH-0c for submit@debbugs.gnu.org; Wed, 24 May 2023 07:37:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1q1mo6-0002V7-Nr for bug-guix@gnu.org; Wed, 24 May 2023 07:37:30 -0400 Received: from nomad-cl1.muradm.net ([139.162.159.157]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1q1mo4-0003fF-Jd for bug-guix@gnu.org; Wed, 24 May 2023 07:37:30 -0400 Received: from localhost ([127.0.0.1]:37126) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1q1mnn-0004BX-1T; Wed, 24 May 2023 11:37:11 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:Cc:To :From:References:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=QhSk6OuPnm1+NClEHQ456x8g13m5elBXNVP5cWJ3nuQ=; b=pGFk8M+KYWyshbuTD5xN5YeZGR 5owkw3d5vU4RoJapy9oYsHf2/a8HAQNpXvyWUyyjAD/tVIbJ77B6UVx4bDdDgXDje5CkGVoqlcjCM EwsQxaS+co42yOdpHwUHsc/EyA91AW5l4tTERJMldpVcBdLbBsNaF63u12qfV0/GUxFZbyZzX+Tm9 QT/9Z/ZbTA0fxNBF03lZwX0DEPQnovC+ZjM1l81wik92DwKygcHluzn7ArUmIfrnWYYXLXl3jkRQ7 i2H68WLoLY3UMTphjnCaISzGRQVa/+8PluOubQqFTpoFT1aC0YrZiFtr34CRloGLaPWh26oH9ELtX wibMdgWH+obxU7Q44uUYoFkFzC/amWNFFRhmTznLCTffYejCVk6x6w/JT2hv28iYAlP+KO2mxZnuu f5QObnA2uPAb3SOQnrHWl4hfA0rCLavT9QbCAy5rMkoWg2VZ4QMMCU96I1u+y1H7ic3q0iUQ/VBar vrNPbil2lG2wciouzA7VPsea; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1q1mnr-0007Tx-2R; Wed, 24 May 2023 14:37:15 +0300 References: <87wn1s695u.fsf@gmail.com> <87v8giitdp.fsf@elephly.net> <87wn0youe0.fsf@riseup.net> User-agent: mu4e 1.10.2; emacs 30.0.50 From: muradm Date: Wed, 24 May 2023 14:28:26 +0300 In-reply-to: <87wn0youe0.fsf@riseup.net> Message-ID: <87edn67yfo.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: pass client-ip=139.162.159.157; envelope-from=mail@muradm.net; helo=nomad-cl1.muradm.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain; format=flowed Csepp writes: > Ricardo Wurmus writes: > > It might be a good idea to have more end-to-end tests in Guix > that would > check if common operations like "finding a printer" work. It's > quite a > bit of up-front effort, but it's better than relying on manual > testing > and could make things smoother in the long run. > SUSE has a cool testing framework based on screen captures, > maybe it > could be adapted to Guix? There is already test framework within Guix. You may find information at: https://guix.gnu.org/manual/en/guix.html#Running-the-Test-Suite In short, there are unit tests and system tests which can be found at gnu/tests/*.scm for inspiration. It is just a matter of time/resource availability to write tests. For cups specifically, you may not need screen capture processing or similar. It should be enough to use CLI tools available out of the box. muradm --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmRt9usACgkQ6M7O0mLO BeKndhAAhZG9N0uvImwQSfSak5TGeuwQLLy7sKX/VpK18RoP/rCk3AwYv+69WSyE fBvDaIqAYMmVy+hYl3S3JEtzTjOkUIfo0cIMN7NfhlLzYbRhVwHMY+HEnEGdR9qx 0sP6CDE8VFuvdhE2iDub0nEIxy3tmX0DK2E+MRjXPFAsUPlifli0t3dLnAsroJ5x C4dW4YzvDFfb5RRNVN9gZxSFlJfIRHgoixxJTCCrvadOkLUSuzTRn47TPw+IAIJP 0hhteVLl4e2YYtYuA5hGciTBmx5Kwp32BYKjVJezmmNs2SIBVRD06RZkkwvAfhES 3QEjMqu6U0iWsgu3cYrHDmyz69V11yE0ugA71dUvg34qDUMeKkTsXDFVxI2vS8i+ I7ExcJHLZrpq8pMs89USaPaz8n4+p8AKWxRd4CTF8g93d0AnjRkUsCc0vBzHYCRr 7BXZE7e2TJF1yOFw5iZgatZU7RxvdW4tAUp9QYnNa4yJgaZaWkJlQQmQlOPODTNS rPpjaoezCyF+ydSDcrCNTfV28OrbvT55jcdB12p3/DwxY/F6UXbZOVZWO8nwppwi 9FhLz1MV15BQrforNmRB0Jx7peJJRIbX7F5Zv+mmYWTKTZ2qOZQE42fDrNskMwZK KivYsHrMFD4QQR0yyIZ3/NgAYU/RXDG0kojg877lvjgpOH4QPVw= =s29/ -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 22 04:31:15 2025 X-Loop: help-debbugs@gnu.org Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 24 May 2023 11:39:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: Ricardo Wurmus , 63198-done@debbugs.gnu.org Received: via spool by 63198-done@debbugs.gnu.org id=D63198.16849283106518 (code D ref 63198); Wed, 24 May 2023 11:39:01 +0000 Received: (at 63198-done) by debbugs.gnu.org; 24 May 2023 11:38:30 +0000 Received: from localhost ([127.0.0.1]:42346 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1mp4-0001h4-98 for submit@debbugs.gnu.org; Wed, 24 May 2023 07:38:30 -0400 Received: from nomad-cl1.muradm.net ([139.162.159.157]:53462) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1q1mp2-0001gq-A4 for 63198-done@debbugs.gnu.org; Wed, 24 May 2023 07:38:28 -0400 Received: from localhost ([127.0.0.1]:51910) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1q1mor-0004Bm-2I; Wed, 24 May 2023 11:38:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:Cc:To :From:References:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=MTuG/GVoo+eENSfpE1s2GVJKrtt6lh81nUnLQDEOPJo=; b=gAjck73Ayelt3hXbMGLB6nsPnc ZYYf0ZI4sM59FrJhpsBVslS/AHTra5XJQPzcVf30/4qlNoFO46kqcGXEAuaf107WwJvj91uxXvZ8a l4VukNJtDDiNjgR0VfBGQZKPhT668ohfyeUC7zKFkpUkWJUGTldSOmB58vB7iQMbTt3Sy+QWiuy3L 2+QMUAAxIFTYw7hrj0s6ettIGYALpy3NfoCCdTN46f5292SivZBj+mVhzlvggrGh5UjURuQUZG7Iu VbUdIvSJwB8gS1RR2O09hEG147dJi02yGrOMMjIlI7muuWRJTq8aDnn+AjB4qZoOfM7WM/7uyHU+s 67Sqh+dAjX/xBbkX1Vt+FGNVXNcWz7q785D7l98Pey46jqW+MbYcoLoPwU+DhlbNPF5KrsWLaQgXK nMPMZuZx4JSuV5Upk+7wya752T+BQ+XABYW3LK8/JdvuK+ddJbokttJNbhIeGLJiSuc+DvH4MlqUQ Vdw1GeFZ3FijPwMxS37SCsLr; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1q1mow-0007UR-1k; Wed, 24 May 2023 14:38:22 +0300 References: <87wn1s695u.fsf@gmail.com> <0c6858607cfd59a8da92f0a0780d8b45dc4b3afd.1684003079.git.mail@muradm.net> <877ct9vcrg.fsf_-_@gmail.com> <87edngon5j.fsf@muradm.net> <87353mimir.fsf@gmail.com> User-agent: mu4e 1.10.2; emacs 30.0.50 From: muradm Date: Wed, 24 May 2023 14:37:47 +0300 In-reply-to: <87353mimir.fsf@gmail.com> Message-ID: <87a5xu7ydt.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; format=flowed Hi Maxim, Maxim Cournoyer writes: > Hi muradm, > > muradm writes: > > [...] > >>> Could you look into adding "regular" login PAM support instead >>> of a >>> bypass disabled by default? The user should still be prompted >>> for >>> its >>> password, and it should go through the PAM auth module. >>> >>> I'm not very PAM-aware, but I believe there are examples >>> spread in >>> the >>> code base. >> >> This patch provides necessary configuration for proper PAM >> support. >> I decided to take screen-locker-service-type's configuration as >> basis, since it is was most simpliest and adequate enough for >> this >> case. >> This patch does not disables, baypasses or cheats PAM in any >> way. >> User may navigate to CUPS portal. In the event of >> administrative >> actions taken by user, CUPS portal asks user to authenticate. >> With this configuration, it will attempt to authenticate as >> local >> system user. In the event of proper system user/password >> supplied >> and positively authenticated against PAM using "cups" service >> name, >> user allowed to take administrative action. In the event of >> invalid >> system user/password supplied, CUPS portal will keep looping >> begging for password (just as in your original case). If user >> decides >> to Cancel the authentication dialog, CUPS portal is navigated >> to >> Unauthorized access informing page. >> >> Why would I submit something that it is not working? > > I didn't mean to imply that it didn't work; I just thought that > it was > somehow bypassing PAM (and the original problem it caused in the > first > place). As I wrote earlier, I know next to nothing about PAM, > and > misread your patch. > > I've now installed the change. Thanks for the fix, and thanks > to > Ricardo for the reminder. Cool, thanks! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmRt9y4ACgkQ6M7O0mLO BeJz/A//Xjl0ZARaYu/1jVIIKuyMu0F2oYoOaG7gO43NlNNnV8seCn8+SJ0zoE+0 ZRQZLIoHz3Af3v7eGsS8wOXrh95thMjJyRUh+FKf9F7LrZPG1sMakga9Y1h0/bRD +kImsZKXYHVVtbT2mG1ejJjpztx63Ixpq37GiiEx3tPvZ34WGwar66TutUfJoNjy 84gw6o85tn7JzTmMZEoapHezoDwJXeccIuBQfOmLNULi1SBL/uOUqKTEyAmAUCen Sj+2uuc7viyt9eHBp9/87lkqOw8Nu4jDnsZUiW1+WCcuGtBlYLxl9MeYvTfpV1UT T6BwAcZ1Rtuh6wXKBMh5H3zu002GuUUFc6YN7HGmUHTbzN4U7TwVFJLq4ofvFi1k LKJLuU6YpIopm25w3EP+RZqdSVdZddxx1ZPBp+hrimAosdoQ0FQomGNPNfibQLPQ VPm2EzUzNcyhGASYxoMEpSZc6uVJUCHr2G8ghw7by000pIYHV4gQXLuQ/rcOd1+9 pzBAEuA0FinOZ+oFgSBC9jAU0dF6Ywd9bpNvNCb3C7ie1m8j8eAhu/XN0OJhD9Un 5121mRZ4w/Nlv3fC2N5w6fi+q03TnHydmBvJbSAaaVkT6ptVci1PAXsb13J8BVvW Lq9ejmH0fkR6fDOvdV0gVqwmgs+G4haVXUYRL5zhYF+ew7BwnGI= =tbdX -----END PGP SIGNATURE----- --=-=-=--