Re: [gentoo-user] Recent CUPS "upgrade" broke my printer server

[Kevin O'Gorman]

On 7/15/06, Michael [Plouj] Ploujnikov <ploujj@×××××.com> wrote:
> There must be a good reason it isn't stable yet:
> http://www.gentoo-portage.com/net-print/cups
>
> On 7/15/06, Kevin O'Gorman <kogorman@×××××.com> wrote:
> > I've been running cups happily on this box for a couple of years.  It serves
> > print requests from two other computers I have, one running Ubuntu (also
> > running cups), and the other running WinXP.
> >
> > With the upgrade to 1.2.1-r2 from 1.1.23, some probelms arose:
> > 1) neither of the other machines can print through this server any more.
> > 2) When either of the other machines is running at all, requests to print
> >     on this gentoo server lock up for just under 2 minutes before they
> >     get to printing.  If I shut down the other machines, printing returns
> >     to normal locally.
> >
> > The error logs show a repeated error that doesn't ring a bell with me:
> >
> > E [15/Jul/2006:14:20:18 -0700] encrypt_client: Unable to encrypt
> > connection from 64.166.164.53!
> >
> > The config files changed a bit on the upgrade, and I did my best.  The last
> > go 'round was through the web interface (once I got that working) so they've
> > all been rewritten by cups.  I cannot claim to understand them completely.
> > Can anyone explain the @OWNER @SYSTEM things -- they sound good,
> > but I'm not truly clear on exactly what they do in cups.
> > I want to allow ports 631 (normal cups stuff from the Ubuntu machine) and
> > 515 (LPD things for WinXP).
> >
> > I've looked at the config files, and nothing jumps out at me.  The one mention
> > of encryption is in the /auth section, which I don't use remotely
> > anyway.  Here's
> > cupsd.conf:
> >
> > # Show general information in error_log.
> > LogLevel info
> > SystemGroup lpadmin
> > # Allow remote access
> > Port 631
> > Listen *:printer
> > Listen /var/run/cups/cups.sock
> > # Enable printer sharing and shared printers.
> > Browsing On
> > BrowseOrder allow,deny
> > BrowseAllow @LOCAL
> > BrowseAddress @LOCAL
> > DefaultAuthType Basic
> > <Location />
> >   # Allow shared printing...
> >   Order allow,deny
> >   Allow @LOCAL
> > </Location>
> > <Location /admin>
> >   Encryption Required
> >   # Restrict access to the admin pages...
> >   Order allow,deny
> >   Allow localhost
> > </Location>
> > <Location /admin/conf>
> >   AuthType Basic
> >   Require user @SYSTEM
> >   # Restrict access to the configuration files...
> >   Order allow,deny
> >   Allow localhost
> > </Location>
> > <Policy default>
> >   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job
> > Purge-Jobs Set-Job-Attributes Create-Job-Subscription
> > Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job
> > Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
> >     Require user @OWNER @SYSTEM
> >     Order deny,allow
> >   </Limit>
> >   <Limit Pause-Printer Resume-Printer Set-Printer-Attributes
> > Enable-Printer Disable-Printer Pause-Printer-After-Current-Job
> > Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer
> > Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer
> > Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer
> > CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs
> > CUPS-Set-Default>
> >     AuthType Basic
> >     Require user @SYSTEM
> >     Order deny,allow
> >   </Limit>
> >   <Limit CUPS-Authenticate-Job>
> >     Require user @OWNER @SYSTEM
> >     Order deny,allow
> >   </Limit>
> >   <Limit All>
> >     Order deny,allow
> >   </Limit>
> > </Policy>
> >
> >
> >
> > --
> > Kevin O'Gorman, PhD

Drat, I need a better memory.  I got dragged into allowing unstable
because something else I wanted depended on it.  Fortunately I
buildpkg; I'll just back up.

++ kevin

-- 
Kevin O'Gorman, PhD
-- 
gentoo-user@g.o mailing list