Re: Cups, Samba, and Usernames
> On the printer test page, the printer name is \\techlnux\MF_PRT6-7 and > the port name is "Samba Printer Port". The same is true in Windows > Explorer. So, I am assuming it is using samba. Doug, Just for grins, go to one of the Windows boxes and try defining a printer like this: When it asks for the network printer location, instead of browsing for it, try typing: http://:631/printers/ replacing with the full name of the Linux host, and with the printer queue name on the CUPS implementation. Should work. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Cups, Samba, and Usernames
Mark, On the printer test page, the printer name is \\techlnux\MF_PRT6-7 and the port name is "Samba Printer Port". The same is true in Windows Explorer. So, I am assuming it is using samba. Doug -Original Message- From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of Mark Post Sent: Thursday, March 17, 2011 12:04 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Cups, Samba, and Usernames >>> On 3/15/2011 at 06:06 PM, "Lester, Doug" wrote: > Hi Mark, > > Unfortunately, the user still shows up as "guest". I guess my next question is whether the users are going through Samba at all, or hitting the printer via CUPS on HTTP port 631. When I look at my wife's desktop, Windows Explorer shows our CUPS printer as: printername on http://servername:631. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Cups, Samba, and Usernames
>>> On 3/15/2011 at 06:06 PM, "Lester, Doug" wrote: > Hi Mark, > > Unfortunately, the user still shows up as "guest". I guess my next question is whether the users are going through Samba at all, or hitting the printer via CUPS on HTTP port 631. When I look at my wife's desktop, Windows Explorer shows our CUPS printer as: printername on http://servername:631. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Cups, Samba, and Usernames
Hi Mark, Unfortunately, the user still shows up as "guest". Thanks, Doug -Original Message- From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of Mark Post Sent: Tuesday, March 15, 2011 2:51 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Cups, Samba, and Usernames >>> On 3/15/2011 at 01:56 PM, "Lester, Doug" wrote: > I recently added some mainframe printers to cups and made them available > to our Windows domain via samba. These printers print a banner page used > for distribution. I would like to have the username on the banner page > change from "Guest" to the Active Directory username. Can someone let me > know how this can be accomplished? Sounds like they're not being authenticated by the Samba server. I see you have map to guest = Bad User [print$] guest ok = yes The first thing I would try is changing the "guest ok = yes" to "no." Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: Cups, Samba, and Usernames
>>> On 3/15/2011 at 01:56 PM, "Lester, Doug" wrote: > I recently added some mainframe printers to cups and made them available > to our Windows domain via samba. These printers print a banner page used > for distribution. I would like to have the username on the banner page > change from "Guest" to the Active Directory username. Can someone let me > know how this can be accomplished? Sounds like they're not being authenticated by the Samba server. I see you have map to guest = Bad User [print$] guest ok = yes The first thing I would try is changing the "guest ok = yes" to "no." Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For more information on Linux on System z, visit http://wiki.linuxvm.org/
Re: CUPS printing not recognising ANSI Printer Control Characters
Thank you Paul for your response. We were not getting anywhere and so looked within the application. We have found the application can send ASCII control characters (CR, LF, FF, VT, HT, etc.) which CUPS interprets correctly. Thanks to all that responded. Kind Regards, Vikesh Bhoola Please Note: This email and its contents are subject to our email legal notice which can be viewed at http://www.sars.gov.za/Email_Disclaimer.pdf -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing not recognising ANSI Printer Control Characters
Hi Vikesh, I asked the CUPS developer whether CUPS currently offers support for ANSI carriage control. His response is listed below. "Nope. The current text filter only supports ASCII control characters (CR, LF, FF, VT, HT, etc.) That said, it would be easy to develop a text filter that supports the ANSI printer control characters and then drop it in for CUPS to use." If you need any suggestions about where to place a custom ANSI printer control character filter into the CUPS filter chain, please let me know. Best Regards, /Paul -- Paul Tykodi Principal Consultant TCS - Tykodi Consulting Services LLC Tel/Fax: 603-343-1820 Mobile: 603-866-0712 E-mail: ptyk...@tykodi.com WWW: http://www.tykodi.com > Date:Mon, 20 Apr 2009 11:08:13 +0200 > From:Vikesh Bhoola > Subject: Re: CUPS printing not recognising ANSI Printer Control Characters > > David, thanks for your response. > I have tried -f option on lpr and get the following : > > # lpr -P Printer_name -f print.test2 > lpr: warning - 'f' format modifier not supported - output may not be > correct! > Tried searching for more information on lpr filtering and ANSI but didn't > come up with anything to do as we want. > > Any further assistance is much appreciated. > > Kind Regards, > Vikesh Bhoola -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing not recognising ANSI Printer Control Characters
David, thanks for your response. I have tried -f option on lpr and get the following : # lpr -P Printer_name -f print.test2 lpr: warning - 'f' format modifier not supported - output may not be correct! Tried searching for more information on lpr filtering and ANSI but didn't come up with anything to do as we want. Any further assistance is much appreciated. Kind Regards, Vikesh Bhoola -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of David Boyes Sent: 15 April 2009 04:00 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: CUPS printing not recognising ANSI Printer Control Characters You need to specify a filter that processes ANSI formatting. Try -f on the lpr command. You can define sets of CUPS options and use them similar to a form code, but AFAIK, there isn't a autodetect for rotation. You could easily write one as a filter; the CUPS code provides sufficient exits to allow it. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 Please Note: This email and its contents are subject to our email legal notice which can be viewed at http://www.sars.gov.za/Email_Disclaimer.pdf -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing not recognising ANSI Printer Control Characters
You need to specify a filter that processes ANSI formatting. Try -f on the lpr command. You can define sets of CUPS options and use them similar to a form code, but AFAIK, there isn't a autodetect for rotation. You could easily write one as a filter; the CUPS code provides sufficient exits to allow it. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS -- was Re: Philosophical: Linux vs. AIX
David Boyes wrote: There's no harm to installing both CUPS server and client code on each host. If you never define a printer on the host, the server is quiet and this is what Apple does, and it's why I have CUPS on my Powerbook G4. It's also probably the reason Apple bought CUPS. -- Cheers John -- spambait [EMAIL PROTECTED] [EMAIL PROTECTED] Please do not reply off-list -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS -- was Re: Philosophical: Linux vs. AIX
Patrick Spinler wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Summerfield wrote: I can understand that if you're running Ghostscript, then you're in for some trouble. No ghostscript, thank heavens. We just provide a dumb queuing service, and send whatever the app produces straight to the printer. No filtering. I think you'd need to pay close attention to how (often) the CUPS servers talk to each other, too. If they're discussing 10,000 printers every few seconds. The default browseinterval is 30 seconds, that might be a little often. the problem appeared to be related to this, but not between the CUPS servers. Specifically, since CUPS' default broadcast behavior doesn't work across subnets, and since most of my hosts wanting to print to CUPS weren't on those subnets, the client hosts had to be configured to poll, and that broke the cups servers. Our setup was like this: Network Network Network Network Network many many Printer Printer Printer Printer Printer others... Cups ServerCups ServerCups Server Subnet 1 Subnet 2 Subnet 3 Other Unix Other Unix Other Unix 400 other Cups clientCups ClientCups Clientunix hosts. Subnet 4 Subnet 5 Subnet 6 >20 subnets Since broadcasts only propagate as far as a subnet boundary, the 'other hosts' would not see the broadcasts from the cups servers. Ergo, they had to be configured to poll the servers, and that's what appeared to break 'em, even on a several hour polling interval. For those who haven't been around so long, I don't actually use zLinux (except sometimes under Hercules, and that's about as close as I'm likely to get to a Zed these days). I do administer Linux systems, and I have some S/360, S/370 background. My home LAN and the LAN I administer at home are linked via VPN, and we too use several subnets. At one time I wanted to print something from home to work, so I had CUPS at home poll work's server, and suddenly all work's printers appeared at home! -- Cheers John -- spambait [EMAIL PROTECTED] [EMAIL PROTECTED] Please do not reply off-list -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS -- was Re: Philosophical: Linux vs. AIX
> In other words, a cups server on *each* subnet. At least a system that is designated to perform the distribution of printer information. It does not have to be dedicated, and it does not have to be the same server at any given time. It also gets little extra load to get the information, so it's negligible. But, this sounds more like a political problem than a technical one...8-) > Technical issues first. In short it *still* doesn't (or didn't) work. > My testing only had a half dozen clients trying to poll. I certainly > didn't drop this system on all 400 of our hosts just as a trial. Certainly not. I am surprised, though. I have clients that have much larger print environments than yours (2x or 3x) that are using CUPS just fine. I'd really like to see your cupsd.conf and printers.conf files, if you can share them. > from a systems management perspective, it means we actually have to > have a server, (actually two servers for redundancy) on each subnet. > Adding yet another layer like this is a huge hassle to designate and > maintain. I'd much rather simply get a smaller number of print server > boxes pimped out with 20 or more interfaces, and pull a cable to each > subnet. Linux support for VLAN tagging is your friend. Multiple physical interfaces are hard to manage. > > You should also look at the multicast support in the current CUPS. Since > > multicast traffic IS routable > Now that is something I didn't have at the time. It's not all that recent. It certainly isn't the default, and you do have to have working multicast routing infrastructure to use it, but it's really, really effective for one-to-many tasks like this. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS -- was Re: Philosophical: Linux vs. AIX
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Boyes wrote: >> the problem appeared to be related to this, but not between the CUPS >> servers. Specifically, since CUPS' default broadcast behavior doesn't >> work across subnets, and since most of my hosts wanting to print to >> CUPS weren't on those subnets, the client hosts had to be configured >> to poll, and that broke the cups servers. > > Yeah, that configuration would cause a problem with 10K printers and > lots of clients hammering the CUPS servers. That's also not the way CUPS > is designed to work. > > The way to do this (this is now in the sysadmin manuals) for large > numbers of printers is to designate one or two hosts per subnet as > printer info servers, and have them redistribute the information they > receive to the local subnet via directed broadcast/multicast. In other words, a cups server on *each* subnet. Unfortunately, at our shop, that's also a model with some significant issues, both from a systems management viewpoint, and some technical issues: Technical issues first. In short it *still* doesn't (or didn't) work. My testing only had a half dozen clients trying to poll. I certainly didn't drop this system on all 400 of our hosts just as a trial. If the cups servers can't handle 6 hosts polling them, whyever would they be able to handle more than twenty? from a systems management perspective, it means we actually have to have a server, (actually two servers for redundancy) on each subnet. Adding yet another layer like this is a huge hassle to designate and maintain. I'd much rather simply get a smaller number of print server boxes pimped out with 20 or more interfaces, and pull a cable to each subnet. > It also provides a better > failure model, as the central servers can be temporarily restarted > without risking losing printing enterprise wide. One of the things I like about CUPS is the failure model -- the client can automatically select amoung servers which all publish a queue of the same name. This applies to central print servers, also. > You should also look at the multicast support in the current CUPS. Since > multicast traffic IS routable Now that is something I didn't have at the time. - -- Pat -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHHNZpNObCqA8uBswRAp3NAJ40FA/3n54gZxuDnggo1vDCnucxMQCfV77N j49NLS4s+zrYGvQh79wk450= =fc2z -END PGP SIGNATURE- -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 begin:vcard fn:Patrick Spinler n:Spinler;Patrick adr:Ozmun Center 1-12;;200 First St SW;Rochester;Mn;55905;United States email;internet:[EMAIL PROTECTED] tel;work:507-284-9485 x-mozilla-html:FALSE version:2.1 end:vcard
Re: CUPS -- was Re: Philosophical: Linux vs. AIX
> the problem appeared to be related to this, but not between the CUPS > servers. Specifically, since CUPS' default broadcast behavior doesn't > work across subnets, and since most of my hosts wanting to print to > CUPS weren't on those subnets, the client hosts had to be configured > to poll, and that broke the cups servers. Yeah, that configuration would cause a problem with 10K printers and lots of clients hammering the CUPS servers. That's also not the way CUPS is designed to work. The way to do this (this is now in the sysadmin manuals) for large numbers of printers is to designate one or two hosts per subnet as printer info servers, and have them redistribute the information they receive to the local subnet via directed broadcast/multicast. That reduces the load on the central servers that actually route the output (because the definitions also include the correct URI, which won't involve the "local" servers in any queuing). It also provides a better failure model, as the central servers can be temporarily restarted without risking losing printing enterprise wide. There's no harm to installing both CUPS server and client code on each host. If you never define a printer on the host, the server is quiet and does nothing, and in a pinch you can use it as a distribution point if the usual servers are unavailable. You should also look at the multicast support in the current CUPS. Since multicast traffic IS routable (broadcasts are not, at least w/o bridging), this reduces the load on the central servers w/o the pain of messing with distribution of /etc/printcap. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
>>> On Wed, May 23, 2007 at 3:51 PM, in message <[EMAIL PROTECTED]>, "Jones, Russell" <[EMAIL PROTECTED]> wrote: > I did a recursive chmod on all files and subdirectories in > /usr/doc/cups-1.1.23/ so the content of the images directory is 755 > also. Make sure you have these two ymbolic links v /usr/share/doc lrwxrwxrwx 1 root root 6 2004-08-22 15:01 /usr/share/doc -> ../doc/ v /usr/doc/cups lrwxrwxrwx 1 root root 11 2005-01-27 15:49 /usr/doc/cups -> cups-1.1.23/ If those are in place, send me the output from strace -f -F -p # where is the PID of cupsd. After that has started, click on the link that is giving you problems. Once the output has stopped, enter a control-c to get out. Send me the output and I'll take a look. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
I did a recursive chmod on all files and subdirectories in /usr/doc/cups-1.1.23/ so the content of the images directory is 755 also. Russ -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mark Post Sent: Wednesday, May 23, 2007 2:44 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: CUPS printing help >>> On Wed, May 23, 2007 at 3:36 PM, in message <[EMAIL PROTECTED]> , "Jones, Russell" <[EMAIL PROTECTED]> wrote: -snip- > I changed the permissions on /usr/doc/cups-1.1.23/ to 755, and restarted > cups, but it did not seem to make a difference. Do I need to alter the > permissions on some other file system? What about the /usr/doc/cups-1.1.23/images/ directory permissions? Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
>>> On Wed, May 23, 2007 at 3:36 PM, in message <[EMAIL PROTECTED]>, "Jones, Russell" <[EMAIL PROTECTED]> wrote: -snip- > I changed the permissions on /usr/doc/cups-1.1.23/ to 755, and restarted > cups, but it did not seem to make a difference. Do I need to alter the > permissions on some other file system? What about the /usr/doc/cups-1.1.23/images/ directory permissions? Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
I put the mentioned lines back in the cupsd.conf file and I changed the Allow from 127.0.0.1 line to the ip of my pc. I uncommented the SystemGroup sys line and created a cupsadmin user with sys as his primary group. Then I restarted cups. Now I am prompted to logon when I try to access the cups admin web interface (I was not before.) I can logon with cupsadmin, but the images are still not displayed and I can't access the manage printers page. The /var/log/cups/access_log is full of messages like this: 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/left.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/right.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/add-class.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/manage-classes.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/manage-jobs.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/add-printer.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:11:50 -0500] "GET /images/manage-printers.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:03 -0500] "GET /printers/ HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:06 -0500] "GET /cups.css HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:06 -0500] "GET /images/navbar.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:06 -0500] "GET /images/left.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/right.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/add-class.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/manage-classes.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/manage-jobs.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/add-printer.gif HTTP/1.1" 403 0 10.5.8.76 - cupsadmin [23/May/2007:14:12:07 -0500] "GET /images/manage-printers.gif HTTP/1.1" 403 0 I changed the permissions on /usr/doc/cups-1.1.23/ to 755, and restarted cups, but it did not seem to make a difference. Do I need to alter the permissions on some other file system? Russ -----Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mark Post Sent: Wednesday, May 23, 2007 1:09 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: CUPS printing help >>> On Tue, May 22, 2007 at 1:58 PM, in message <[EMAIL PROTECTED]> , "Jones, Russell" <[EMAIL PROTECTED]> wrote: > I am running Slack/390 10.1 in an LPAR. I am trying to use CUPS to set > up a network printer. I commented out the following lines in the > cupsd.conf file that restrict remote CUPS admin and require > authentication. That probably wasn't a good idea. If you don't want to send root's password over the network, then uncomment this in /etc/cups/cupsd.conf SystemGroup sys Then add a user, say cupsadmin, with sys as their primary group. > Order deny,allow > Deny from all > Allow from 127.0.0.1 > > AuthType Basic > AuthClass System Put all these statements back in. Change the "Allow from 127.0.0.1" to "Allow from xx.xx.xx.xx/24" or whatever subnet you want to accept logins from. Restart cupsd. Login as cupsadmin to do any administration work. > I am now able to get to the main admin page at myip:631/admin, but none > of the images on the page are being displayed. I can get to the "add new > printer" and "add new classes" pages, but when I attempt to access the > "manage printers" and "manage classes" pages, I get an http 403 > forbidden error. Look in /var/log/cups/access_log and /var/log/cups/error_log. See what exactly is getting the 403 error. Check the permissions on those directories and files. If they're not 755, they probably should be. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
Mark Post wrote: > That probably wasn't a good idea. If you don't want to send root's password > over the network, then uncomment this in /etc/cups/cupsd.conf > SystemGroup sys > > Then add a user, say cupsadmin, with sys as their primary group. > I also have another suggestion once you restore those lines to the config file: Tunnel the web interface over ssh. On your local machine: ssh -L :localhost:631 [EMAIL PROTECTED] Where is port number over 1024. Now, to connect to the web administrative interface, point your browser to: http://127.0.0.1: Again, substitute your decided port number. What this does is tunnel your web traffic to the remote cups server over ssh... so it's encrypted (good idea) and so CUPS sees it as coming from it's own localhost, thus letting you in. AND you don't have to change any configuration files from the default for this to work. *Darb -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS printing help
>>> On Tue, May 22, 2007 at 1:58 PM, in message <[EMAIL PROTECTED]>, "Jones, Russell" <[EMAIL PROTECTED]> wrote: > I am running Slack/390 10.1 in an LPAR. I am trying to use CUPS to set > up a network printer. I commented out the following lines in the > cupsd.conf file that restrict remote CUPS admin and require > authentication. That probably wasn't a good idea. If you don't want to send root's password over the network, then uncomment this in /etc/cups/cupsd.conf SystemGroup sys Then add a user, say cupsadmin, with sys as their primary group. > Order deny,allow > Deny from all > Allow from 127.0.0.1 > > AuthType Basic > AuthClass System Put all these statements back in. Change the "Allow from 127.0.0.1" to "Allow from xx.xx.xx.xx/24" or whatever subnet you want to accept logins from. Restart cupsd. Login as cupsadmin to do any administration work. > I am now able to get to the main admin page at myip:631/admin, but none > of the images on the page are being displayed. I can get to the "add new > printer" and "add new classes" pages, but when I attempt to access the > "manage printers" and "manage classes" pages, I get an http 403 > forbidden error. Look in /var/log/cups/access_log and /var/log/cups/error_log. See what exactly is getting the 403 error. Check the permissions on those directories and files. If they're not 755, they probably should be. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
New development. Network allowed ICMP. Could ping & traceroute to the printers but could not telnet to any printers on port 9100 when the printing stops. Ken Libutti CNE, CNI, SCSA, RHCT Asst. Director of Systems Services Broward Community College 225 E. Las Olas Blvd. 31/330 Ft. Lauderdale, Fl 33301 Phone: 954-201-7361 Fax: 954-201-7053 [EMAIL PROTECTED] Please Note: Due to Florida's very broad public records law, most written communications to or from College employees regarding College business are public records, available to the public and media upon request. Therefore, this email communication may be subject to public disclosure. >>> [EMAIL PROTECTED] 8/18/2006 8:02:06 AM >>> How are you checking that the guest is responsive? I'm assuming you are logging on locally. I don't believe this is a network problem if it only affects one of your guests. We've had problems with our CTC connections before which caused a guest to lose network connectivity, however you could still ping it as z/VM appeared to be answering the pings for the guest as long as it is logged in. I would do more extensive checking to verify network connectivity, such as SSH to the guest. Josh Konkol, CCSE CNE MCSE Technical Research Specialist .~.GuideOne Insurance /V\ /( )\ ^^-^^ [EMAIL PROTECTED] -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Posted At: Thursday, August 17, 2006 8:09 PM Posted To: Marist EDU Conversation: CUPS Subject: Re: CUPS > Nothing I can see in the logs. > Guest is responsive. Probably not VM or Linux-related, then. > Pings blocked on network firewall but cannot Telnet to port 9100 during > printer outage. Can Telnet when printing working. Hmm. Have there been any recent physical expansion or wiring topology changes in your external network switches or routers? This kind of symptom is sometimes caused by layer 2 routing or spanning tree loops in the external switch topology, which cause the external network boxes to stop forwarding frames while the switches try to sort out the spanning tree topology. You'd see exactly this kind of thing if that were the case -- traffic will just stop periodically. Are your test systems for SSH and other services that continue to work on the same switch or switches downstream from a common switch? If it's not a spanning-tree problem, or is limited to one protocol only, I'd suspect an external firewall or router ACL. > Traceroute all blanks (* * *). Good reason to not disable ICMP entirely. Tough to debug your network if you can't get useful diagnostics. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
We have been able to ssh and ftp to the guest while the prinitng is not working. Ken Libutti CNE, CNI, SCSA, RHCT Asst. Director of Systems Services Broward Community College 225 E. Las Olas Blvd. 31/330 Ft. Lauderdale, Fl 33301 Phone: 954-201-7361 Fax: 954-201-7053 [EMAIL PROTECTED] Please Note: Due to Florida's very broad public records law, most written communications to or from College employees regarding College business are public records, available to the public and media upon request. Therefore, this email communication may be subject to public disclosure. >>> [EMAIL PROTECTED] 8/18/2006 8:02:06 AM >>> How are you checking that the guest is responsive? I'm assuming you are logging on locally. I don't believe this is a network problem if it only affects one of your guests. We've had problems with our CTC connections before which caused a guest to lose network connectivity, however you could still ping it as z/VM appeared to be answering the pings for the guest as long as it is logged in. I would do more extensive checking to verify network connectivity, such as SSH to the guest. Josh Konkol, CCSE CNE MCSE Technical Research Specialist .~.GuideOne Insurance /V\ /( )\ ^^-^^ [EMAIL PROTECTED] -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Posted At: Thursday, August 17, 2006 8:09 PM Posted To: Marist EDU Conversation: CUPS Subject: Re: CUPS > Nothing I can see in the logs. > Guest is responsive. Probably not VM or Linux-related, then. > Pings blocked on network firewall but cannot Telnet to port 9100 during > printer outage. Can Telnet when printing working. Hmm. Have there been any recent physical expansion or wiring topology changes in your external network switches or routers? This kind of symptom is sometimes caused by layer 2 routing or spanning tree loops in the external switch topology, which cause the external network boxes to stop forwarding frames while the switches try to sort out the spanning tree topology. You'd see exactly this kind of thing if that were the case -- traffic will just stop periodically. Are your test systems for SSH and other services that continue to work on the same switch or switches downstream from a common switch? If it's not a spanning-tree problem, or is limited to one protocol only, I'd suspect an external firewall or router ACL. > Traceroute all blanks (* * *). Good reason to not disable ICMP entirely. Tough to debug your network if you can't get useful diagnostics. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
How are you checking that the guest is responsive? I'm assuming you are logging on locally. I don't believe this is a network problem if it only affects one of your guests. We've had problems with our CTC connections before which caused a guest to lose network connectivity, however you could still ping it as z/VM appeared to be answering the pings for the guest as long as it is logged in. I would do more extensive checking to verify network connectivity, such as SSH to the guest. Josh Konkol, CCSE CNE MCSE Technical Research Specialist .~.GuideOne Insurance /V\ /( )\ ^^-^^ [EMAIL PROTECTED] -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Posted At: Thursday, August 17, 2006 8:09 PM Posted To: Marist EDU Conversation: CUPS Subject: Re: CUPS > Nothing I can see in the logs. > Guest is responsive. Probably not VM or Linux-related, then. > Pings blocked on network firewall but cannot Telnet to port 9100 during > printer outage. Can Telnet when printing working. Hmm. Have there been any recent physical expansion or wiring topology changes in your external network switches or routers? This kind of symptom is sometimes caused by layer 2 routing or spanning tree loops in the external switch topology, which cause the external network boxes to stop forwarding frames while the switches try to sort out the spanning tree topology. You'd see exactly this kind of thing if that were the case -- traffic will just stop periodically. Are your test systems for SSH and other services that continue to work on the same switch or switches downstream from a common switch? If it's not a spanning-tree problem, or is limited to one protocol only, I'd suspect an external firewall or router ACL. > Traceroute all blanks (* * *). Good reason to not disable ICMP entirely. Tough to debug your network if you can't get useful diagnostics. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
> Nothing I can see in the logs. > Guest is responsive. Probably not VM or Linux-related, then. > Pings blocked on network firewall but cannot Telnet to port 9100 during > printer outage. Can Telnet when printing working. Hmm. Have there been any recent physical expansion or wiring topology changes in your external network switches or routers? This kind of symptom is sometimes caused by layer 2 routing or spanning tree loops in the external switch topology, which cause the external network boxes to stop forwarding frames while the switches try to sort out the spanning tree topology. You'd see exactly this kind of thing if that were the case -- traffic will just stop periodically. Are your test systems for SSH and other services that continue to work on the same switch or switches downstream from a common switch? If it's not a spanning-tree problem, or is limited to one protocol only, I'd suspect an external firewall or router ACL. > Traceroute all blanks (* * *). Good reason to not disable ICMP entirely. Tough to debug your network if you can't get useful diagnostics. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
Nothing I can see in the logs. Guest is responsive. Pings blocked on network firewall but cannot Telnet to port 9100 during printer outage. Can Telnet when printing working. Traceroute all blanks (* * *). Ken Libutti CNE, CNI, SCSA, RHCT Asst. Director of Systems Services Broward Community College 225 E. Las Olas Blvd. 31/330 Ft. Lauderdale, Fl 33301 Phone: 954-201-7361 Fax: 954-201-7053 [EMAIL PROTECTED] Please Note: Due to Florida's very broad public records law, most written communications to or from College employees regarding College business are public records, available to the public and media upon request. Therefore, this email communication may be subject to public disclosure. >>> [EMAIL PROTECTED] 8/17/2006 5:38 PM >>> Some questions: - Any informationV in the log files? - Is the guest responsive during that 5-10 minute period? - Can you ping the printers from that guest? - What does traceroute show during the time the printers aren't accessible? -Original Message- OK, I am a little frustrated here. Have a guest that all printing stops for about 5-10 minutes. SuSE 9 sp3 on vm 5.2 Cannot Telnet to the printers from this guest but can from others on same vswtich and other servers on the network. Shut down Susefirewall and did and iptables -F. No help. It just clears itself up. We also restart cupsd. No errors on the interface. SSH & other communications never stop. Any ideas? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: CUPS
Some questions: - Any informationV in the log files? - Is the guest responsive during that 5-10 minute period? - Can you ping the printers from that guest? - What does traceroute show during the time the printers aren't accessible? -Original Message- OK, I am a little frustrated here. Have a guest that all printing stops for about 5-10 minutes. SuSE 9 sp3 on vm 5.2 Cannot Telnet to the printers from this guest but can from others on same vswtich and other servers on the network. Shut down Susefirewall and did and iptables -F. No help. It just clears itself up. We also restart cupsd. No errors on the interface. SSH & other communications never stop. Any ideas? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
