From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id CA+XAd1XUmRhNwAASxT56A (envelope-from ) for ; Wed, 03 May 2023 14:47:25 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 6JleAd1XUmRQXwAA9RJhRA (envelope-from ) for ; Wed, 03 May 2023 14:47:25 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B615E158DB for ; Wed, 3 May 2023 14:47:24 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1puBsu-0003Yj-Fj; Wed, 03 May 2023 08:47:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1puBst-0003WJ-3v for bug-guix@gnu.org; Wed, 03 May 2023 08:47:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1puBss-0007Qq-O8 for bug-guix@gnu.org; Wed, 03 May 2023 08:47:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1puBss-0002W2-6i for bug-guix@gnu.org; Wed, 03 May 2023 08:47:02 -0400 Subject: bug#63198: cups-service-type uses PAM-enabled 'cups' by default which prevents authentication Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-To: bug-guix@gnu.org Resent-Date: Wed, 03 May 2023 12:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 63198 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 63198-done@debbugs.gnu.org Mail-Followup-To: 63198@debbugs.gnu.org, maxim.cournoyer@gmail.com, maxim.cournoyer@gmail.com Received: via spool by 63198-done@debbugs.gnu.org id=D63198.16831179879614 (code D ref 63198); Wed, 03 May 2023 12:47:01 +0000 Received: (at 63198-done) by debbugs.gnu.org; 3 May 2023 12:46:27 +0000 Received: from localhost ([127.0.0.1]:45880 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1puBsJ-0002V0-1s for submit@debbugs.gnu.org; Wed, 03 May 2023 08:46:27 -0400 Received: from mail-qt1-f169.google.com ([209.85.160.169]:44105) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1puBsE-0002Ui-Cq for 63198-done@debbugs.gnu.org; Wed, 03 May 2023 08:46:25 -0400 Received: by mail-qt1-f169.google.com with SMTP id d75a77b69052e-3ef3887e3c0so22460381cf.0 for <63198-done@debbugs.gnu.org>; Wed, 03 May 2023 05:46:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1683117976; x=1685709976; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:to:from:from:to:cc:subject:date:message-id:reply-to; bh=EhD3dfFWs48bQosPTOsh+30HldmYY1HrIg2Vl48lW48=; b=CxwT9vAVUlpZtW2TovLBZA/CkaKdLWZuwPrBI+VkbL/wwe8NtRKTNT736TH0B28eOq qZcc2/HMhjuuHeoRsJHK05eAwYmcfD2b7v1m/fFvEK6kpWkBVMGdPrx2jf8wF0i1ZH5c i2fl3XU9belr1UvkzQLyKlO5UYGYmj0KrfeK5b+PWOxMlAlCA44VOsLeeLR6sChMbSdq fS2vld+jTuR2p8HwpEfuvHQ6ffP+QLMPcUuaqMox0vLGh1LXPmuUS7vfDp5vKPijxcBm 0zXEwBTIv+16LCygmfN8i4/9U7YeJ1gvmpdOTD3uYWXO7lLcjm3RvX5ooibnWsOzMW36 hrrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1683117976; x=1685709976; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=EhD3dfFWs48bQosPTOsh+30HldmYY1HrIg2Vl48lW48=; b=eF9GgH1b9kjIzZfpMfnCDLKjiLh/bQOan/dES8Px7wWnj5sScrKczjCmmw8yjJDfM5 f9VkS3MknSXAe060lb40r5wg/MEnsRn5UE4aapE3Kvq4qlX2GcpDaBtu/Gv3fvAXDusN y+AePskY8huBgR6jWi36HYKkAzKyLE77O6pPtLTQo7V8OuDnQZ91Wvl6ZeZ1Fyxs25gi AElnTI5uiAG2RpNotmkUElThH0u23tMldScQgcgC/yXU/V4ynZ9U2REnVI+xXypcl4I9 Il07FB755knGcCjK73kWzqokF7nyQW7SLVe5z9m0kUiDv9CcMbQtrlj8Dbfn8U5hl/TV ikTg== X-Gm-Message-State: AC+VfDyr+jympReMqjySvCoV6H+iHNl75Ayrg7MB5/iMHE3iKzO6hVUG H8VNAIwHw7jiSGfuUJcm0sJSe6F6gRmeMQ== X-Google-Smtp-Source: ACHHUZ6Cf4DOJ/uKCMQnFzhVF2XJRLrrDTuM5ebEOVtby3C/S6NLkq/HV+IS3iK6PrUtE/BEXScwzA== X-Received: by 2002:a05:622a:110:b0:3f1:f8fa:11c7 with SMTP id u16-20020a05622a011000b003f1f8fa11c7mr30498400qtw.34.1683117976378; Wed, 03 May 2023 05:46:16 -0700 (PDT) Received: from hurd (dsl-151-193.b2b2c.ca. [66.158.151.193]) by smtp.gmail.com with ESMTPSA id dz20-20020a05620a2b9400b0074dd97b28b3sm10535624qkb.113.2023.05.03.05.46.15 for <63198-done@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 03 May 2023 05:46:15 -0700 (PDT) From: Maxim Cournoyer References: <87wn1s695u.fsf@gmail.com> Date: Wed, 03 May 2023 08:46:14 -0400 In-Reply-To: <87wn1s695u.fsf@gmail.com> (Maxim Cournoyer's message of "Sun, 30 Apr 2023 23:08:13 -0400") Message-ID: <87o7n1zip5.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Seal: i=1; s=key1; d=yhetil.org; t=1683118044; a=rsa-sha256; cv=none; b=p+PLVOXItc8sLIcKYhmS07sErXBmfuYauTev9xfT3uv7mj2hCiEXEHkOiwcOFtuuMf8zX8 DPozcNWXYMZFGxiX8jHirZ64dBkA3p9Nd4yHRRozc3+rwHcbCAm0cVdu5geXgyCvNue3a8 FmqE/Ggx/pnYDAd+CU4oRziH9lFOMFJkZzcy5yK1JtMwgZbhLs7ESIXWgr2PiBP3iHO1tf wnnkO4MiehNxMD/1oMu2MNIn4xI+TESfAMxHz/zJlwJYOOnxvL2rBn/L3XF8gSdf0cT1p0 qLOY1qwrUgod25bLskfhpSMZ2CKalQD/tEL3wKH6jGg2ltz5PxnFl853hH3HfA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20221208 header.b=CxwT9vAV; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1683118044; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=EhD3dfFWs48bQosPTOsh+30HldmYY1HrIg2Vl48lW48=; b=Sh2ylZ2nX5RHqc3nYLdW2+lRRcAIK2XrXZmm71wQ6x/4Sqic0bLX5gMy/06H5rNpI0qgN4 QvAIn522Rs9PaOAZXc9bRbp6fkwSmSsbbVLS4ySVMx9jxkFprpIjk32aLjTgF6ZSmNujVR mV2/xI9blqkJSLq8BE8uCtwY4ybPbI3HAlvV2HWph6ukOjs5GQGMJMLTCAb6DcI5fxSBb+ GtBIRQuLDa3m49SRB861aHai4IAWzWCAzA4PDyazKPiq2qUjtWw2oXz28HDKKoRl+G1mYV Vk1CcXLxBC0YOpOAesGqxpYh35G9LDKBNDrNCYnkmzd5pcWczvLIwCmfmNuslA== X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20221208 header.b=CxwT9vAV; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 5.80 X-Spam-Score: 5.80 X-Migadu-Queue-Id: B615E158DB X-TUID: 4YZEbfwYVFVh Hi, Maxim Cournoyer writes: > Hi, > > Today I encountered an issue where after re-installing a Guix System, I > couldn't add a new printer anymore. Any CUPS client (including the > trusty localhost:631 HTTP page) would loop on authenticating my user. > > After consulting the logs and finding this kind of line: > > pam_authenticate() returned 7 (Authentication failure) > > I started looking at our PAM configuration for CUPS, but we currently > have none, which is probably the issue. Using 'cups-minimal' instead of > cups (which is built with linux-pam) solves the issue, as the 'cups' > value provided to the record. Fixed using the above strategy in 6bc3e3f ("services: cups: Use cups-minimal to avoid PAM authentication.") -- Thanks, Maxim