bug#63198: closed (cups-service-type uses PAM-enabled 'cups' by default which prevents authentication)

[GNU bug Tracking System]

Your message dated Wed, 03 May 2023 08:46:14 -0400
with message-id <87o7n1zip5.fsf@gmail.com>
and subject line Re: bug#63198: cups-service-type uses PAM-enabled 'cups' by 
default which prevents authentication
has caused the debbugs.gnu.org bug report #63198,
regarding cups-service-type uses PAM-enabled 'cups' by default which prevents 
authentication
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@gnu.org.)


-- 
63198: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=63198
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> cups-service-type uses PAM-enabled 'cups' by default which prevents authentication
>
>
>
>
> Date: 
>
> Sun, 30 Apr 2023 23:08:13 -0400
>
>
>
>
> Hi,
>
> Today I encountered an issue where after re-installing a Guix System, I
> couldn't add a new printer anymore.  Any CUPS client (including the
> trusty localhost:631 HTTP page) would loop on authenticating my user.
>
> After consulting the logs and finding this kind of line:
>
> --8<---------------cut here---------------start------------->8---
> pam_authenticate() returned 7 (Authentication failure)
> --8<---------------cut here---------------end--------------->8---
>
> I started looking at our PAM configuration for CUPS, but we currently
> have none, which is probably the issue.  Using 'cups-minimal' instead of
> cups (which is built with linux-pam) solves the issue, as the 'cups'
> value provided to the <cups-configuration> record.
>
> We should probably make cups-minimal the default, or extend our
> pam-service-type with the relevant PAM entries.
>
> Thoughts/takers?
>
> -- 
> Thanks,
> Maxim
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Re: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication
>
>
>
>
> Date: 
>
> Wed, 03 May 2023 08:46:14 -0400
>
>
>
>
> User-agent: 
>
> Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
>
>
>
>
> Hi,
>
> Maxim Cournoyer <maxim.cournoyer@gmail.com> writes:
>
> > Hi,
> >
> > Today I encountered an issue where after re-installing a Guix System, I
> > couldn't add a new printer anymore.  Any CUPS client (including the
> > trusty localhost:631 HTTP page) would loop on authenticating my user.
> >
> > After consulting the logs and finding this kind of line:
> >
> > pam_authenticate() returned 7 (Authentication failure)
> >
> > I started looking at our PAM configuration for CUPS, but we currently
> > have none, which is probably the issue.  Using 'cups-minimal' instead of
> > cups (which is built with linux-pam) solves the issue, as the 'cups'
> > value provided to the <cups-configuration> record.
>
> Fixed using the above strategy in 6bc3e3f ("services: cups: Use
> cups-minimal to avoid PAM authentication.")
>
> -- 
> Thanks,
> Maxim
>
>
> --- End Message ---