Bug 1494558 - CUPS may fail to start if NIS groups are used
Summary: CUPS may fail to start if NIS groups are used
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: cups
Version: 26
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Zdenek Dohnal
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 1441860
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-22 13:44 UTC by Zdenek Dohnal
Modified: 2020-11-25 08:45 UTC (History)
7 users (show)

Fixed In Version: cups-2.2.2-7.fc26
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1441860
Environment:
Last Closed: 2017-09-26 23:56:12 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Comment 1 Fedora Update System 2017-09-22 16:04:53 UTC
cups-2.2.2-7.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-85a204e9b9

Comment 2 Fedora Update System 2017-09-24 05:51:40 UTC
cups-2.2.2-7.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-85a204e9b9

Comment 3 Fedora Update System 2017-09-26 23:56:12 UTC
cups-2.2.2-7.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 4 Zdenek Dohnal 2020-11-25 08:45:04 UTC
If we place an NIS group name in the SystemGroup parameter in
/etc/cups/cups-files.conf then CUPS will not start correctly at boot
time and gives an error message saying there's a bad group.

Reproducer usable for RHEL 7/CentOS 7 (packages may differ for Fedora):

1. machine - <server hostname> - NIS server
a) $ yum install ypserv ypbind portmap yp-tools
b) edit /etc/sysconfig/network:
   
   NISDOMAIN=<DOMAIN.COM>

c) $ ypdomainname <DOMAIN>COM
d) add into /etc/yp.conf:

   ypserver 127.0.0.1

e) $ systemctl restart ypserv, yppasswdd
f) edit /var/yp/Makefile:

   MERGE_PASSWD=false
   all:  passwd group hosts rpc services netid protocols mail shadow

g) $ /usr/lib64/yp/ypinit -m
h) $ authconfig --update --nisdomain=<DOMAIN.COM> --nisserver=<server hostname> --enablenis
i) $ systemctl restart ypbind, ypxfrd, yppasswdd
j) $ groupadd nis-group
k) $ useradd -g nis-group nisuser
l) $ passwd nisuser
m) $ make -C /var/yp

2. machine - <client hostname> - NIS client and CUPS server
a) $ yum install -y ypbind yp-tools
   $ sudo systemctl enable ypbind
b) $ nisdomainname <DOMAIN.COM>
c) edit /etc/sysconfig/network

   NISDOMAIN = <DOMAIN.COM>

d) edit /etc/yp.conf

   domain <DOMAIN.COM> server <server hostname>

e) edit /etc/nsswitch.conf

   passwd:     files nis        [ add "nis" service ]
   shadow:     files nis        [ add "nis" service ]       
   group:      files nis        [ add "nis" service ]

f) $ authconfig --update --nisdomain=<DOMAIN.COM> --nisserver=<server hostname> --enablenis
g) $ yum install -y cups
h) edit /etc/cups/cups-files.conf

   SystemGroup sys root nis-group

i) $ reboot
j) $ systemctl status cups


Note You need to log in before you can comment on or make changes to this bug.