On Tue, 24 Sep 2002 10:54:48 +0200 (CEST)
Martin MOKREJ� <[EMAIL PROTECTED]> wrote:
> These are non-comment lines from my lpd.perms:
>
> ACCEPT SERVICE=C SERVER REMOTEUSER=root
> ACCEPT SERVICE=C LPC=lpd,status,printcap
> REJECT SERVICE=C
> ACCEPT SERVICE=M SAMEHOST SAMEUSER
> ACCEPT SERVICE=M SERVER REMOTEUSER=root
> REJECT SERVICE=M
> DEFAULT ACCEPT
I think you need to make a few additions:
ACCEPT SERVICE=C UNIXSOCKET
ACCEPT SERVICE=M UNIXSOCKET REMOTEUSER=root
(tweak those as appropriate for what you want to accept/reject).
Your followup truss/strace output makes me think you're dealing with a unix socket
issue. In particular, this so_socket call fails:
27890: so_socket(1, 2, 0, "", 1) = 3
where this one works (with lpr -Plp@host):
27903: so_socket(2, 2, 0, "", 1) = 3
It just happens that socket type PF_UNIX is defined as "1" (for Linux anyway), where
PF_INET (TCP socket) is defined as "2", and that happens to be the first argument to
the socket() function call...
> But why should change the default behaviour? The lpr binary works fine,
> with same config file ... (And I did not mention in the original post,
> that lpd itself has problems to print - I administer the box remotely, but
> users say sometimes they can proint, sometimes not. Reverting to old lpd
> also of course solved their problems. Once more - with same config
> files!).
This is a functionality change in lpd. You should read through the list archives to
figure out why this change was implemented. I think it has to do with servers
handling MANY jobs in batches...there were some problems opening many TCP sockets in a
short period of time for some setups. Patrick gave a much better summary when he
originally wrote the code.
============================================================================
John Perkins | University of Wisconsin-Madison
Associate Researcher | Department of Computer Science
[EMAIL PROTECTED] | 1210 W. Dayton St.
608-262-0438/608-262-9997 FAX | Madison, WI 53706-1685
============================================================================
-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
