[Pkg-cups-devel] Bug#582760: cups administration not work

[Jonathan Nieder]

retitle 582760 403 Forbidden when visiting the administration page
tags 582760 + moreinfo
quit

Hi,

yellow wrote:

> I would like to share a printer. I do firefox :
> http://192.168.1.2:631/admin
>
> click on administration 
>
> and get a big page with :
> 403 Forbidden
[...]
> /etc/cups/cupsd.conf changed:

Okay, let's start here.  Comparing to the current default, I find no
differences that would be obviously relevant[1] (though I'm no
expert).  Good.

So, I wonder:

 * are you a member of the lpadmin group?
 * does using the address http://localhost:631/admin work?

(When I try visiting localhost:631 by IP, the connection is refused,
but that might be because of the "Listen localhost:631" line in my
cupsd.conf.)

[1] 
| -# Only listen for connections from the local machine.
| -Listen localhost:631
| +Port 631

I suppose this is to allow remote management.

| +BrowseRemoteProtocols CUPS
| +BrowseAddress @LOCAL

This might be for remote printing.

| -# Restrict access to the server...
|  <Location />
| +  # Allow shared printing...
|    Order allow,deny
| +  Allow @LOCAL
|  </Location>

Likewise.

|  <Policy default>
| -  # Job-related operations must be done by the owner or an administrator...
| -  <Limit Create-Job Print-Job Print-URI Validate-Job>
| -    Order deny,allow
| -  </Limit>

Tightening of the default policy, presumably.

|  <Policy authenticated>
| -  # Job-related operations must be done by the owner or an administrator...
| -  <Limit Create-Job Print-Job Print-URI Validate-Job>
| +  <Limit Create-Job Print-Job Print-URI>

Likewise.