[Pkg-cups-devel] Bug#689991: CUPS: error_log flooded due to AllowUser restriction

[Jan Lieskovsky]

Thank you for your report, Sergio.

> Package: cups
> Version: 1.5.3-1
> Severity: important
> Tags: security
> 
> I've created a print queue with an
> 	AllowUser user1
> option. When submitting a print job as user1 all goes as expected, but
> if I submit it as some other user I see a flood of error messages appear
> (observed rates: 375-500 Hz, depending on the client) in
> /var/log/cups/error_log:
> 
> E [08/Oct/2012:20:31:23 +0200] Returning IPP client-error-not-authorized for Create-Job 
> (ipp://xxx.yyy.zzz.ttt:631/printers/test1) from aaa.bbb.ccc.ddd
> 
> cupsd consumes significant amounts of CPU time while the client is trying
> to submit the job.

Could you be more specific what 'significant amounts of CPU time' means 
(30% / 50% / 90%)? Also, which cupsd would spin trying to log this error,
are print jobs / requests from valid users still served properly?

> Both the log flood and the CPU consumption stop as soon
> as I cancel the print job on the client.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky