[HLUG] CUPS needs password

[Graham Cole]

On Wed, 2005-07-20 at 18:08 +0100, John Hedges wrote:
> > > Hi Graham
> > > 
> > > Your location section is the same as mine except for these linse after
> > > 'AuthClass' line
> > > 
> > > You might want to try adding them:
> > > 
> > >     ## Restrict access to local domain
> > >     Order Deny,Allow
> > >     Deny From All
> > >     Allow From 127.0.0.1
> > > 
> > > If you can log on as root/passwd from a console then I don't know why
> > > you cant with cups. Are there any interesting messages in
> > > /var/log/auth.log /var/log/syslog /var/log/messages or /var/log/daemon
> > > 
> > > $ls -lrt /var/log
> > > 
> > > is a good way to see which logfiles have been appended to most recently
> > > - try to log into cups and quickly do a ls to see if anything was
> > > logged.
> > > 
> > > You might also consider increasing the log output in
> > > /etc/cups/cupsd.conf to debug or debug2:
> > > 
> > >    LogLevel = debug
> > > 
> > > You will need to restart cups after making changes to the config with
> > > either:
> > > 
> > >     $/etc/init.d/cupsys reload
> > >     
> > > or
> > > 
> > >     $/etc/init.d/cupsys restart
> > > 
> > > John
> > > 
> > Hi John
> > I found no explanations of auth failures in the various log files.
> > I did the last actions and changed the LogLevel to debug.
> > Also your info gave me an idea. In /cupsd.conf I commented out the lines
> > AuthType Basic
> > AuthClass System
> > 
> > and removed the # from 
> > AuthType None
> 
> Good thinking!
> 
> > So now anyone can open the Wizard. Since no-one else tries to use my
> > computer I have no security problem!
> 
> People might try when you are connected to the internet so I would
> definately put the auth stuff back when you're done.
> 
> > The Wizard is simple but so am I. What should I put in the 'Location'
> > box? I have typed 'local'.
> 
> I think it's just a descriptive field - for people in offices so they
> know how many flights of stairs are between them and the printer.
> 
> > There is a slight snag: although I can get the wizard to appear and
> > apparently work it does not enable printing. At the top of the Wizard I
> > have a message in red letters: 'Administrative tasks have been disabled
> > for security reasons. Please use Menu System > Administration >
> > Printing.
> > Another level of security coming into play?
> 
> Don't know - I haven't seen this before.
> 
> > Using this:
> > 
> > root at localhost:/home/gc1 # cat /var/log/cups/error_log
> > 
> >  I got this:
> > 
> > I [20/Jul/2005:16:22:15 +0100] Started
> > "/usr/lib/cups/cgi-bin/admin.cgi" (pid=4779)
> > I [20/Jul/2005:16:22:15 +0100] Saving printers.conf...
> > I [20/Jul/2005:16:22:15 +0100] Printer 'stylus-cx' rejecting jobs ('').
> > I [20/Jul/2005:16:22:26 +0100] Started
> > "/usr/lib/cups/cgi-bin/printers.cgi" (pid=4782)
> > I [20/Jul/2005:16:22:33 +0100] Started
> > "/usr/lib/cups/cgi-bin/admin.cgi" (pid=4783)
> > I [20/Jul/2005:16:22:34 +0100] Saving printers.conf...
> > I [20/Jul/2005:16:22:34 +0100] Printer 'stylus-cx' now accepting jobs
> > ('').
> > I [20/Jul/2005:16:22:38 +0100] Started
> > "/usr/lib/cups/cgi-bin/printers.cgi" (pid=4786)
> > I [20/Jul/2005:16:22:53 +0100] Started
> > "/usr/lib/cups/cgi-bin/admin.cgi" (pid=4790)
> > I [20/Jul/2005:16:22:54 +0100] Saving printers.conf...
> > I [20/Jul/2005:16:22:54 +0100] Saving classes.conf...
> > I [20/Jul/2005:16:22:54 +0100] Default destination set to 'stylus-cx' by
> > ''.
> > Can you detect anything going wrong here?
> 
> This looks promising. What happens when you try to print? If you go to
> Manage Printers and select your printer you can look at the job queue
> and the completed jobs. Any clues there?
> 
> > I'm being very patient with this problem. At least I'm learning a lot as
> > I go so the time is not all wasted.
> 
> Theres no other way - you'll get there in the end, and like you say,
> there's no better way to learn.
> 
> John
> 
> 
> _______________________________________________
No success yet but I have reset the log level to debug and the following
is a log extract after sending a test page, not from the cups admin
window but from the window which arrives with Printers > Properties. I
checked the button there for 'Use detected printer' and my printer was
correctly detected as a cx3600.

D [20/Jul/2005:21:20:52 +0100] print_job: auto-typing file...
D [20/Jul/2005:21:20:52 +0100] print_job: request file type is
application/postscript.
D [20/Jul/2005:21:20:52 +0100] check_quotas: requesting-user-name =
'gc1'
D [20/Jul/2005:21:20:52 +0100] print_job: requesting-user-name = 'gc1'
D [20/Jul/2005:21:20:52 +0100] Adding default job-sheets values
"none,none"...
I [20/Jul/2005:21:20:52 +0100] Adding start banner page "none" to job 9.
I [20/Jul/2005:21:20:52 +0100] Adding end banner page "none" to job 9.
I [20/Jul/2005:21:20:52 +0100] Job 9 queued on 'stylus-cx' by 'gc1'.
D [20/Jul/2005:21:20:52 +0100] Job 9 hold_until = 0
D [20/Jul/2005:21:20:52 +0100] ProcessIPPRequest: 7 status_code=0
D [20/Jul/2005:21:20:52 +0100] AcceptClient: 8 from localhost:631.
D [20/Jul/2005:21:20:52 +0100] ReadClient: 8 POST / HTTP/1.1
D [20/Jul/2005:21:20:52 +0100] ProcessIPPRequest: 8 status_code=0
D [20/Jul/2005:21:20:52 +0100] CloseClient: 8
D [20/Jul/2005:21:20:53 +0100] AcceptClient: 8 from localhost:631.
D [20/Jul/2005:21:20:53 +0100] ReadClient: 8 POST / HTTP/1.1
D [20/Jul/2005:21:20:53 +0100] ProcessIPPRequest: 8 status_code=0
D [20/Jul/2005:21:20:53 +0100] CloseClient: 8
D [20/Jul/2005:21:20:54 +0100] AcceptClient: 8 from localhost:631.
D [20/Jul/2005:21:20:54 +0100] ReadClient: 8 POST / HTTP/1.1
D [20/Jul/2005:21:20:54 +0100] ProcessIPPRequest: 8 status_code=0
D [20/Jul/2005:21:20:54 +0100] CloseClient: 8

the repeats above continued for a long time. Does this look normal? No
printing occurred but I think I must have the USB connection effectively
placed because of the printer detection working as it should.
I may have a printer problem now because a warning label on the machine
said 'You must install your software before connecting the USB cable.' I
didn't really comply with this.

Graham, with thanks