[Pkg-cups-devel] Bug#425944: "cupsdCallPamAuthHelper" is a Debian bug!

[Kurt Pfeifle]

Roger Leigh wrote:
> Kurt Pfeifle <k1pfeifle at gmx.net> writes:
>
>> @Debian's CUPS-Patchers: What about properly closing the pipes again
>> your (seetuid root!) helper utility opened?
>>
>> I'm still failing to see where the printing and CUPS-related wisdom of
>> the Debian packagers is superior to the one living in the brains of the
>> CUPS upstream developers.
>
> While I can't comment upon the quality of the patch in question, PAM
> is used for systemwide authentication and authorisation for all
> services on Debian systems, and this must include CUPS.

I don't question the use of PAM.

This is all about 'cupsdCallPamAuthHelper'. Which is not part of CUPS
proper, but an invention of Debian packaging in order to make up for
lost features and usability. These were lost by making CUPS on Debian
run as non-root (essentially forking CUPS for no good reason).

BTW, CUPS proper *does* work with PAM already...

-- 
Kurt Pfeifle
System & Network Printing Consultant ---- Linux/Unix/Windows/Samba/CUPS
Infotec Deutschland GmbH  .....................  Hedelfinger Strasse 58
A RICOH Company  ...........................  D-70327 Stuttgart/Germany