[Samba] NSS and group enumeration in CUPS...

Marco Gaiarin gaio at sv.lnf.it
Wed Jun 13 12:27:36 UTC 2018


Mandi! L.P.H. van Belle via samba
  In chel di` si favelave...

> So the short version of above is...
> Give a AD user a UID/GID
> Map BUILTIN\Print Operators with SePrivileges

Just done.


> Add the user to lpadmin on the linux server.

Seems the only way.

I've also tried to use pam_group (eg, assign local group to a user based
on other infos), but also pam_group does not ''populate'' NSS group
data, eg 'getent group lpadmin' return empty, so nothing changed.

I think this can also be fired up as bugs agains cups... probably cups
enumerate users in admin group, then check against provided user, while
have to do the convers (enumerate the groups for the user, and check
against admin group).


Right?

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list