Bug#991518: cups: CUPS web interface is not available due to missing settings

[Didier 'OdyX' Raboud]

Control: tags -1 +moreinfo

26 juillet 2021 13:03 "Anthony Gaudino"  a écrit:
> Package: cups
> Version: 2.3.3op2-3+deb11u1
> Severity: normal
> X-Debbugs-Cc: anthonygaudin...@gmail.com
> 
> Dear Maintainer,
> 
> After installing CUPS, I could not access the web interface, trying to
> access localhost:631 showed a page not found error in the browser.

Hi again Anthony,

I'm very surprised by this, as this has been working reliably for a long time, 
and no recent changes have happened at all. So I just pulled a Debian Bullseye 
install and installed CUPS on it; the cupsd.conf file had this in, which makes 
for a working webinterface:

# Only listen for connections from the local machine.
Listen localhost:631
Listen /run/cups/cups.sock

# …

# Web interface setting...
WebInterface Yes

# Restrict access to the server...

  Order allow,deny


> I figured that I would need to add some settings in the CUPS
> configuration file (/etc/cups/cupsd.conf).
> 
> If I remember correctly I added:
> ```
> 
> Order Deny,Allow
> Deny From All
> Allow From 127.0.0.1
> 
> ```
> 
> After the changes I could access the CUPS web interface.

Is your machine really just a Debian Bullseye host? (It feels like it could 
have been cross-graded from Ubuntu…).

I'd be really curious to hear how you got in this situation, as a default 
Debian Bullseye with CUPS clearly has working print jobs and an accessible 
webinterface.

Best,
OdyX

Bug#991518: cups: CUPS web interface is not available due to missing settings

[Anthony Gaudino]

Package: cups
Version: 2.3.3op2-3+deb11u1
Severity: normal
X-Debbugs-Cc: anthonygaudin...@gmail.com

Dear Maintainer,

After installing CUPS, I could not access the web interface, trying to
access localhost:631 showed a page not found error in the browser.

I figured that I would need to add some settings in the CUPS
configuration file (/etc/cups/cupsd.conf).

If I remember correctly I added:
```

Order Deny,Allow
Deny From All
Allow From 127.0.0.1

```

After the changes I could access the CUPS web interface.

I'm also attaching the whole configuration file.


-- System Information:
Debian Release: 11.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/16 CPU threads)
Kernel taint flags: TAINT_CPU_OUT_OF_SPEC, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cups depends on:
ii  cups-client2.3.3op2-3+deb11u1
ii  cups-common2.3.3op2-3+deb11u1
ii  cups-core-drivers  2.3.3op2-3+deb11u1
ii  cups-daemon2.3.3op2-3+deb11u1
ii  cups-filters   1.28.7-1
ii  cups-ppdc  2.3.3op2-3+deb11u1
ii  cups-server-common 2.3.3op2-3+deb11u1
ii  debconf [debconf-2.0]  1.5.77
ii  ghostscript9.53.3~dfsg-7
ii  libavahi-client3   0.8-5
ii  libavahi-common3   0.8-5
ii  libc6  2.31-13
ii  libcups2   2.3.3op2-3+deb11u1
ii  libgcc-s1  10.2.1-6
ii  libstdc++6 10.2.1-6
ii  libusb-1.0-0   2:1.0.24-3
ii  poppler-utils  20.09.0-3.1
ii  procps 2:3.3.17-5

Versions of packages cups recommends:
ii  avahi-daemon  0.8-5
ii  colord1.4.5-3

Versions of packages cups suggests:
pn  cups-bsd   
pn  cups-pdf   
pn  foomatic-db-compressed-ppds | foomatic-db  
pn  smbclient  
ii  udev   247.3-6

-- debconf information:
  cupsys/raw-print: true
  cupsys/backend: lpd, socket, usb, snmp, dnssd
LogLevel warn
PageLogFormat 
MaxLogSize 0
ErrorPolicy retry-job
Listen /run/cups/cups.sock
Listen /run/cups/cups.sock
Browsing On
BrowseLocalProtocols dnssd
DefaultAuthType Basic
WebInterface Yes

  Order allow,deny


  Order allow,deny


  AuthType Default
  Require user @SYSTEM
  Order allow,deny


  AuthType Default
  Require user @SYSTEM
  Order allow,deny


Order Deny,Allow
Deny From All
Allow From 127.0.0.1

Port 631
Listen 127.0.0.1:631

  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  
Order deny,allow
  
  
Require user @OWNER @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
Require user @OWNER @SYSTEM
Order deny,allow
  
  
Order deny,allow
  


  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  
AuthType Default
Order deny,allow
  
  
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
  
  
Order deny,allow
  


  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  
AuthType Negotiate
Order deny,allow
  
  
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  
  
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
  
  
Order deny,allow
  

JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default