Bug#582760: cups administration not work

2011-03-24 Thread Jonathan Nieder
retitle 582760 403 Forbidden when visiting the administration page
tags 582760 + moreinfo
quit

Hi,

yellow wrote:

> I would like to share a printer. I do firefox :
> http://192.168.1.2:631/admin
>
> click on administration 
>
> and get a big page with :
> 403 Forbidden
[...]
> /etc/cups/cupsd.conf changed:

Okay, let's start here.  Comparing to the current default, I find no
differences that would be obviously relevant[1] (though I'm no
expert).  Good.

So, I wonder:

 * are you a member of the lpadmin group?
 * does using the address http://localhost:631/admin work?

(When I try visiting localhost:631 by IP, the connection is refused,
but that might be because of the "Listen localhost:631" line in my
cupsd.conf.)

[1] 
| -# Only listen for connections from the local machine.
| -Listen localhost:631
| +Port 631

I suppose this is to allow remote management.

| +BrowseRemoteProtocols CUPS
| +BrowseAddress @LOCAL

This might be for remote printing.

| -# Restrict access to the server...
|  
| +  # Allow shared printing...
|Order allow,deny
| +  Allow @LOCAL
|  

Likewise.

|  
| -  # Job-related operations must be done by the owner or an administrator...
| -  
| -Order deny,allow
| -  

Tightening of the default policy, presumably.

|  
| -  # Job-related operations must be done by the owner or an administrator...
| -  
| +  

Likewise.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#582760: cups administration not work

2010-05-23 Thread yellow
Package: cups
Version: 1.4.3-1
Severity: important

Hello,

I would like to share a printer. I do firefox :
http://192.168.1.2:631/admin


click on administration 


and get a big page with :
403 Forbidden

So the cups is not working at all :( 

I there better alternatives to cups that simply works? or packages that are 
working under linux?

Best regards



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-3-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cups depends on:
ii  adduser 3.112add and remove users and groups
ii  bc  1.06.95-2The GNU bc arbitrary precision cal
ii  cups-client 1.4.3-1  Common UNIX Printing System(tm) - 
ii  cups-common 1.4.3-1  Common UNIX Printing System(tm) - 
ii  debconf [debconf-2.0]   1.5.32   Debian configuration management sy
ii  ghostscript 8.71~dfsg-4  The GPL Ghostscript PostScript/PDF
ii  libavahi-client30.6.25-3 Avahi client library
ii  libavahi-common30.6.25-3 Avahi common library
ii  libc6   2.10.2-6 Embedded GNU C Library: Shared lib
ii  libcups21.4.3-1  Common UNIX Printing System(tm) - 
ii  libcupscgi1 1.4.3-1  Common UNIX Printing System(tm) - 
ii  libcupsdriver1  1.4.3-1  Common UNIX Printing System(tm) - 
ii  libcupsimage2   1.4.3-1  Common UNIX Printing System(tm) - 
ii  libcupsmime11.4.3-1  Common UNIX Printing System(tm) - 
ii  libcupsppdc11.4.3-1  Common UNIX Printing System(tm) - 
ii  libdbus-1-3 1.2.24-1 simple interprocess messaging syst
ii  libgcc1 1:4.4.4-1GCC support library
ii  libgnutls26 2.8.6-1  the GNU TLS library - runtime libr
ii  libgssapi-krb5-21.8.1+dfsg-2 MIT Kerberos runtime libraries - k
ii  libijs-0.35 0.35-7   IJS raster image transport protoco
ii  libkrb5-3   1.8.1+dfsg-2 MIT Kerberos runtime libraries
ii  libldap-2.4-2   2.4.17-2.1   OpenLDAP libraries
ii  libpam0g1.1.1-3  Pluggable Authentication Modules l
ii  libpaper1   1.1.24   library for handling paper charact
ii  libpoppler5 0.12.4-1 PDF rendering library
ii  libslp1 1.2.1-7.7OpenSLP libraries
ii  libstdc++6  4.4.4-1  The GNU Standard C++ Library v3
ii  libusb-0.1-42:0.1.12-14  userspace USB programming library
ii  lsb-base3.2-23.1 Linux Standard Base 3.2 init scrip
ii  perl-modules5.10.1-12Core Perl modules
ii  poppler-utils   0.12.4-1 PDF utilitites (based on libpopple
ii  procps  1:3.2.8-9/proc file system utilities
ii  ssl-cert1.0.25   simple debconf wrapper for OpenSSL
ii  ttf-freefont20090104-6   Freefont Serif, Sans and Mono True
ii  zlib1g  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages cups recommends:
ii  cups-driver-gutenprint5.2.5-1printer drivers for CUPS
ii  foomatic-filters  4.0-20090509-1 OpenPrinting printer support - fil
ii  ghostscript-cups  8.71~dfsg-4The GPL Ghostscript PostScript/PDF

Versions of packages cups suggests:
pn  cups-bsd   (no description available)
ii  cups-pdf2.5.0-14 PDF printer for CUPS
pn  cups-ppdc  (no description available)
ii  foomatic-db 20090616-1   OpenPrinting printer support - dat
ii  foomatic-db-engine  4.0-20090509-2.1 OpenPrinting printer support - pro
pn  hplip  (no description available)
pn  smbclient  (no description available)
ii  udev153-2/dev/ and hotplug management daemo
pn  xpdf-korean | xpdf-japa(no description available)

-- Configuration Files:
/etc/cups/cupsd.conf changed:
LogLevel warn
MaxLogSize 0
SystemGroup lpadmin
Port 631
Listen /var/run/cups/cups.sock
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseRemoteProtocols CUPS
BrowseAddress @LOCAL
BrowseLocalProtocols CUPS dnssd
DefaultAuthType Basic

  # Allow shared printing...
  Order allow,deny
  Allow @LOCAL


  # Restrict access to the admin pages...
  Order allow,deny


  AuthType Default
  Require user @SYSTEM
  # Restrict access to the configuration files...
  Order allow,deny


  
Require user @OWNER @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user