Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.5: Disable printer queue password requirements Printers
Mac OS X 10.5 requires you to enter an administrator's password to pause/resume a print queue, where no previous version of OS X has done so. This is extremely annoying in a lab setting -- if there's a paper jam or something, the queues on all the computers need to be restarted by an administrator, instead of the user just clicking Resume. I haven't seen a solution to this elsewhere, so here's what I came up with:
  1. As root, or in a Terminal session with su privileges, edit /etc/cups/cupsd.conf.
  2. Find this section:
    <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Res
    tart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
        AuthType Default
        Require user @AUTHKEY(system.print.admin) @admin @lpadmin
        Order deny,allow
    </Limit>
    
    
  3. Remove the items you don't want limited: Pause-Printer, Resume-Printer, Pause-Printer-After-Current-Job, etc.
  4. Save the file, quit the editor, and restart your computer.
After restarting, you should be able to pause/resume the print queue as any user. Hope this helps, it was annoying the heck out of me.
    •    
  • Currently 3.89 / 5
  You rated: 5 / 5 (18 votes cast)
 
[41,393 views]  

10.5: Disable printer queue password requirements | 13 comments | Create New Account
Click here to return to the '10.5: Disable printer queue password requirements' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Disable printer queue password requirements
Authored by: mleacy on Nov 10, '08 08:57:27AM

If this works, does it follow that removing "CUPS-Add-Modify-Printer" from the block below will allow anyone to add a printer?

[code]# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
[/code]



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: lugal on Nov 10, '08 09:26:43AM
Better than doing this on the command line, open a browser to localhost:631, and edit the configs there. This allows you to remove the offending lines and restart CUPS w/o restarting the computer.

See this post for more details:
http://mattson.edgemereroadrunners.com/?p=291

[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: mleacy on Nov 10, '08 11:14:01AM

I've been to that site, but it advocates a sledgehammer approach rather than a scalpel approach. If you want to go from totally locked down to totally open, then that's the way to go. I do not want to go to totally open. I want to selectively grant rights.

My question was, would simply removing the one item from the <limit> tag allow non-admins to add printers? The logic would seem to follow, if this hint is correct and functions as described.



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: packhater on Nov 10, '08 03:48:00PM

I ghave not seen this to be the case. I have several mbps that I create a 10.5.2 image for and have never seen this. The users are all standard users. Also they have been upgraded to 10.5.5 and still no issues with pausing and resuming. They are not bound to AD. Is this a AD issue? I actually just verified this to see if I was crazy or not.

:)



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: beauh on Nov 11, '08 12:27:08AM

Yes, it does mean that you can grant them add/remove rights. The caveat is that your users will still not have the ability to unlock system preferences, so they cannot add printers via the print and fax prefpane. They will have to add them via the "Add Printer" pulldown in the print dialog pane, or you can create an alias to /System/Library/CoreServices/AddPrinter.app in their dock/desktop/apps/whatnot.



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: nider on Nov 10, '08 07:06:11PM

This hint is invaluable, it's been causing me a world of grief since I updated the systems I manage to 10.5.



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: packhater on Nov 12, '08 10:44:52AM

Is this a AD things only? I have about 20 mbp's all have 10.5.2 and all users are normal users not admins. I had no trouble pausing and resuming printing on any of them I tested.



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: packhater on Nov 12, '08 10:46:28AM

I have not seen this to be the case. I have several MBPs that I created a 10.5.2 image for and have never seen this. The users are all standard users. Also they have been upgraded to 10.5.5 and still no issues with pausing and resuming. They are not bound to AD. Is this a AD issue? I actually just verified this to see if I was crazy or not.

:)



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: abeness on Nov 13, '08 09:36:40AM

It affects me, with network home users (middle school students) on 10.5.4 client with 10.5.4 server-based print queues. Using OD/LDAP. Can't wait to try this fix!

---
--Abe



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: pgsengstock on Dec 18, '08 09:05:35PM

This problem has been plaguing us ever since we upgraded this summer. I was very excited to publish printers using OD, but found early on that the printers would randomly pause themselves and the above stated problem would ensue for my users. I've been tracking it for quite some time and I think it's because the PPDs, as configured on the server, aren't sent out to the workstations by OD. I can set all the necessary printing preferences on the server (ie: set the printer to duplex), but when I go back to a workstation, they're all set to the defaults. The default error policy for all printers is to stop printing. Creating the printer locally and changing the options seems to work, but if the printer is coming down from the directory, BAM!--problems.

This is a great workaround, but I still think it's just that and not a true solution. Anyone know if Apple has addressed this issue in versions later than 10.5.4 (Client and Server)?



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: pgsengstock on Jan 22, '09 02:21:50PM

Still not fixed in 10.5.6. Also, we recently updated our HP drivers for another type of printer, and for some reason, HP changed the default config for one of their PPDs. Now, the PPD in questions that comes down via MCX has the default tray set to the letter feed instead of the tray underneath. Because the clients aren't honoring the printer options set in CUPS, I have no way to fix this.

What a mess. I think I'm going to just bite the bullet and ditch MCX printer management--I've got better things to spend my time on, rather than fielding calls every five minutes because of another stupid printer error. Apple better get their $h17 together, ASAP...




[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: ngwaltney on Dec 23, '08 07:28:59AM

I am getting ready to try this at our school. Has this been addressed at all in 10.5.6?

Thanks



[ Reply to This | # ]
10.5: Disable printer queue password requirements
Authored by: orionrush on Feb 12, '13 01:29:59PM

I'm working on a school lab as well - our imacs have the same as above listed on line 110, 77, 40

<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @AUTHKEY(system.print.operator) @admin @lpadmin
Order deny,allow
</Limit>

Im having trouble telling why its in there three times - anyone know? I really want to enable the user to pause and resume printing.



[ Reply to This | # ]