[Pkg-cups-devel] Bug#489892: Printing from local network does not work either here

Tue Jul 8 21:01:47 UTC 2008

Hello,

not sure if that is the same issue. I opened up all config settings I saw in 
the cupsd.conf of the server (192.168.1.10) and I still got a 403 Forbidden 
from the client (192.168.1.12).

Excerpt from the error log of the server (level debug2):

D [08/Jul/2008:22:50:16 +0200] cupsdAcceptClient: 11 from 192.168.1.12:631 
(IPv4)
d [08/Jul/2008:22:50:16 +0200] cupsdAcceptClient: 11 connected to server on 
blackbox.local:631
d [08/Jul/2008:22:50:16 +0200] cupsdAddSelect: fd=11, read_cb=0x80590e0, 
write_cb=(nil), data=0x80ef530
d [08/Jul/2008:22:50:16 +0200] cupsdDoSelect: Read on fd 10...
d [08/Jul/2008:22:50:16 +0200] cupsdReadClient: 10, used=0, file=-1 state=0
d [08/Jul/2008:22:50:16 +0200] cupsdReadClient: httpGets returned EOF...
D [08/Jul/2008:22:50:16 +0200] cupsdCloseClient: 10
d [08/Jul/2008:22:50:16 +0200] cupsdRemoveSelect: fd=10
d [08/Jul/2008:22:50:16 +0200] cupsdDoSelect: polling 6 fds for 1 seconds...
d [08/Jul/2008:22:50:16 +0200] cupsdDoSelect: epoll() returned 1...
d [08/Jul/2008:22:50:16 +0200] cupsdDoSelect: Read on fd 11...
d [08/Jul/2008:22:50:16 +0200] cupsdReadClient: 11, used=0, file=-1 state=0
D [08/Jul/2008:22:50:16 +0200] cupsdReadClient: 11 POST /printers/ HTTP/1.1
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: uri = "/printers/"...
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: Location 
CUPS_INTERNAL_BROWSE_ACL Limit 0
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: Location /printers/ Limit 7f
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: Location /admin/conf Limit 7f
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: Location /admin Limit 7f
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: Location / Limit 7f
d [08/Jul/2008:22:50:16 +0200] cupsdFindBest: best = /printers/
d [08/Jul/2008:22:50:16 +0200] cupsdAuthorize: con->uri="/printers/", 
con->best=0x80b5688(/printers/)
d [08/Jul/2008:22:50:16 +0200] cupsdAuthorize: Authorization=""
D [08/Jul/2008:22:50:16 +0200] cupsdAuthorize: No authentication data 
provided.
d [08/Jul/2008:22:50:16 +0200] cupsdIsAuthorized: con->uri="/printers/", 
con->best=0x80b5688(/printers/)
d [08/Jul/2008:22:50:16 +0200] cupsdIsAuthorized: level=CUPSD_AUTH_ANON, 
type=None, satisfy=CUPSD_AUTH_SATISFY_ALL, num_names=0
d [08/Jul/2008:22:50:16 +0200] cupsdIsAuthorized: auth=CUPSD_AUTH_DENY...
d [08/Jul/2008:22:50:16 +0200] cupsdReadClient: Unauthorized request 
for /printers/...
D [08/Jul/2008:22:50:16 +0200] cupsdSendError: 11 code=403 (Forbidden)
D [08/Jul/2008:22:50:16 +0200] cupsdCloseClient: 11
d [08/Jul/2008:22:50:16 +0200] cupsdRemoveSelect: fd=11
d [08/Jul/2008:22:50:16 +0200] cupsdDoSelect: polling 5 fds for 1 seconds...
d [08/Jul/2008:22:50:17 +0200] cupsdDoSelect: epoll() returned 0...
d [08/Jul/2008:22:50:17 +0200] select_timeout(0): 86400 seconds to do nothing
d [08/Jul/2008:22:50:17 +0200] cupsdDoSelect: polling 5 fds for 86400 
seconds...

my cupsd.conf on the server:

blackbox:~# cat /etc/cups/cupsd.conf
#
#
#   Sample configuration file for the Common UNIX Printing System (CUPS)
#   scheduler.  See "man cupsd.conf" for a complete description of this
#   file.
#

# Log general information in error_log - change "info" to "debug" for
# troubleshooting...
LogLevel debug2

# Administrator user group...
SystemGroup lpadmin

# Only listen for connections from the local machine and the ethernet
Listen localhost:631
Listen 192.168.1.10:631
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow from all
#BrowseAllow @LOCAL
#BrowseAllow 192.168.1.12

# Default authentication type, when authentication is required...
DefaultAuthType Basic
DefaultEncryption IfRequested

# Restrict access to the server...
<Location />
  Order allow,deny
  Allow localhost
  Allow 192.169.1.12
</Location>

<Location /printers/>
  Order allow,deny
  Allow localhost
  Allow 192.169.1.12
</Location>

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
#  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

# Set the default printer/job policies...
<Policy default>
  # Job-related operations must be done by the owner or an administrator...
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs 
Set-Job-Attributes Create-Job-Subscription Renew-Subscription 
Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job 
Suspend-Current-Job Resume-Job CUPS-Move-Job>
    Require user @OWNER @SYSTEM
#    Order deny,allow
    Order allow,deny
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class 
CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
#    Order deny,allow
    Order allow,deny
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer 
Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs 
Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer 
Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs 
CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
#    Order deny,allow
    Order allow,deny
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
#    Order deny,allow
    Order allow,deny
  </Limit>

  <Limit All>
#    Order deny,allow
    Order allow,deny
  </Limit>
</Policy>

#
#
blackbox:~#

Thanks,
Rainer

-- 
Rainer Dorsch
Lärchenstr. 6
D-72135 Dettenhausen
07157-734133
email: rdorsch at web.de
jabber: rdorsch at jabber.org
GPG Fingerprint: 5966 C54C 2B3C 42CC 1F4F  8F59 E3A8 C538 7519 141E
Full GPG key: http://pgp.mit.edu/