| View previous topic :: View next topic |
| Author |
Message |
bartmank
n00b
Joined: 09 Oct 2002
Posts: 14
|
 Posted: Thu Jul 31, 2003 10:33 pm Post subject: LDAP and CUPS web auth problem (Solved) |
 |
|
I have an interesting problem getting authorized to modify printers on my cups install.
A run down of the situation is thus:
1. install gentoo base system. use flags marked to use ldap, cups, and a few other programs.
2. Install cups 1.1.14 as that was the last version that I have gotten working.
3. Configure 2 network attached printers (Phaser7700 and a HP4si)
4. Install openldap 2.0.27, and configure it to do login authorization for users.
5. Try to configure the previously installed printer, via cups web interface, but cant seem to get root access to printer config. (Popup window with "username and password")
6. Screem bloody murder while boss says "This is why we dont use linux on the desktop"
I have 8 shell accounts that can log into the machine right now. root is _not_ in ldap, and my personal account is defined in both local files and ldap database. Everyone else is only in ldap. All shell accounts have been confirmed as working, including root.
If you need the config files posted, I'll do that in a follow-up. (Kinda long for a bb post)
Last edited by bartmank on Wed Mar 24, 2004 5:46 pm; edited 1 time in total |
|
| Back to top |
|
 |
rwallace
Tux's lil' helper
Joined: 22 May 2003
Posts: 107
Location: Phoenix, AZ US
|
| Posted: Thu Jul 31, 2003 10:56 pm Post subject: |
|
|
I have the same issues. But I'm using ldap for name service lookups and krb5 for authentication. If I modify my /etc/pam.d/system-auth to drop the krb5 modules, everything works fine and I can do administration from the web interface. Otherwise, it throws me out.
I have pam configured to try the unix module first, so it should check the passwd file first and only if that fails should ldap even come into play. I'm at work and don't have the log files around, but I seem to remember it was actually a problem with session or account settings in pam.
bartmank: Could you check the logs and post the error message pam is kicking up for you? |
|
| Back to top |
|
|
bartmank
n00b
Joined: 09 Oct 2002
Posts: 14
|
| Posted: Fri Aug 01, 2003 5:04 pm Post subject: |
|
|
Here is my pam config file. I followed an online howto as well as I could.
| Code: |
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_ldap.so
auth required /lib/security/pam_unix_auth.so use_first_pass
account sufficient /lib/security/pam_ldap.so
account required /lib/security/pam_unix_acct.so
password required /lib/security/pam_cracklib.so
password sufficient /lib/security/pam_ldap.so
password required /lib/security/pam_unix_passwd.so use_first_pass md5 shadow
session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ mask=0022
session required /lib/security/pam_unix_session.so
|
If there is a obvious mistake, I would have missed it, due to pam+ldap inexperience. |
|
| Back to top |
|
|
bartmank
n00b
Joined: 09 Oct 2002
Posts: 14
|
| Posted: Fri Aug 01, 2003 5:09 pm Post subject: |
|
|
| Another problem I just noticed, su no longer works. |
|
| Back to top |
|
|
bartmank
n00b
Joined: 09 Oct 2002
Posts: 14
|
| Posted: Wed Mar 24, 2004 5:45 pm Post subject: Solved |
|
|
I fixed it by putting the following into the file /etc/pam.d/cups:
| Code: |
auth required /lib/security/pam_unix_auth.so
account required /lib/security/pam_unix_acct.so
password required /lib/security/pam_unix_passwd.so md5 shadow
session required /lib/security/pam_unix_session.so
|
That way, it will only use the "normal" unix methods to auth root to get into cups. |
|
| Back to top |
|
|
|
Networking & Security
