Page 1 of 2 12 LastLast
Results 1 to 10 of 22

Thread: Ubuntu + CUPS = Cannot Admin via {hostname}:631

Hybrid View

  1. #1
    Join Date
    Aug 2012
    Beans
    10

    Angry Ubuntu + CUPS = Cannot Admin via {hostname}:631

    PLEASE HELP!

    I'm trying to build a new print server on Ubuntu 12.04 + CUPS. (Coming over from other distros....want to standardize on Ubuntu, if I can make it work!)


    I can use the basic Ubuntu System Settings to add a printer, but not the CUPS http://{hostname}:631 page for remote administration! The page comes up and most functions appear fine.

    But try anything like the "Add Printer" button and a prompt asks "A username and password are being requested by http://localhost:631. The site says: "CUPS"--but then it doesn't appear to accepts ANY credentials (my sysop, root, nor Windows AD PrinterAdmins group members!!! "The connection was reset" is all Firefox shows...

    Any ideas are appreciated!

  2. #2
    Join Date
    Oct 2012
    Beans
    187

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    Quote Originally Posted by LydaRA View Post
    PLEASE HELP!

    I'm trying to build a new print server on Ubuntu 12.04 + CUPS. (Coming over from other distros....want to standardize on Ubuntu, if I can make it work!)


    I can use the basic Ubuntu System Settings to add a printer, but not the CUPS http://{hostname}:631 page for remote administration! The page comes up and most functions appear fine.

    But try anything like the "Add Printer" button and a prompt asks "A username and password are being requested by http://localhost:631. The site says: "CUPS"--but then it doesn't appear to accepts ANY credentials (my sysop, root, nor Windows AD PrinterAdmins group members!!! "The connection was reset" is all Firefox shows...

    Any ideas are appreciated!
    It needs a user id and password of a user on the ubuntu machine.

  3. #3
    Join Date
    Aug 2012
    Beans
    10

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    Yes, I'm not even focused on the AD PrinterAdmins group yet. But I cannot even get it to take root or sysop (obviously both local admin accounts on the Ubuntu server.

    I saw somewhere else that I needed to add the local user cupsys to the shadow group. But the command tells me that cupsys doesn't exist!

  4. #4
    Join Date
    Oct 2012
    Beans
    187

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    I'm not even focused on the AD PrinterAdmins group yet. But I cannot even get it to take root or sysop
    I couldn't exactly understand what you said sorry.
    You can create a new user for accessing cups using the useradd command
    or you can edit /etc/cups/cupsd.conf file and comment the "Require user @SYSTEM" for your desired portion i.e. change
    Code:
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
      </Limit>
    to
    Code:
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    #    AuthType Default
    #    Require user @SYSTEM
        Order allow,deny
      </Limit>
    while you are testing your system and have not started using it in production

  5. #5
    Join Date
    Aug 2012
    Beans
    10

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    cupsd.conf:

    LogLevel warn
    MaxLogSize 0
    SystemGroup root sysop lpadmin HHP\PrinterAdmins
    # Allow remote access
    Port 631
    Listen /var/run/cups/cups.sock
    # Share local printers on the local network.
    Browsing On
    BrowseOrder allow,deny
    BrowseRemoteProtocols
    BrowseAddress @LOCAL
    BrowseLocalProtocols CUPS dnssd
    DefaultAuthType Basic
    WebInterface Yes
    <Location />
    # Allow shared printing...
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Location /admin>
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Location /admin/conf>
    AuthType Default
    Require user @SYSTEM
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Policy default>
    JobPrivateAccess default
    JobPrivateValues default
    SubscriptionPrivateAccess default
    SubscriptionPrivateValues default
    <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
    </Limit>
    <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit All>
    Order deny,allow
    </Limit>
    </Policy>
    <Policy authenticated>
    JobPrivateAccess default
    JobPrivateValues default
    SubscriptionPrivateAccess default
    SubscriptionPrivateValues default
    <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
    </Limit>
    <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit All>
    Order deny,allow
    </Limit>
    </Policy>

  6. #6
    Join Date
    May 2006
    Location
    Milwaukee,WI
    Beans
    6,108
    Distro
    Xubuntu 14.04 Trusty Tahr

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    Check out my Blog about my life and computer software and hardware. http://ubuntuaddicted.blogspot.com/
    My YouTube channel:
    http://www.youtube.com/ubuntuaddicted

  7. #7
    Join Date
    Aug 2012
    Beans
    10

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    dannyboy79: You like several other posts I've seen recommend:
    Allow CUPS to read the password file
    To do admin tasks remotely using the web interface, it will ask you for a password. In order to check this password CUPS needs to be able to read the password shadow file. To do this 'cupsys' needs to be a member of the group 'shadow'.

    adduser cupsys shadow
    But I get:
    adduser: The user `cupsys' does not exist.

    Does Ubuntu run this process as some other user???

  8. #8
    Join Date
    Oct 2012
    Beans
    187

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    Quote Originally Posted by LydaRA View Post
    dannyboy79: You like several other posts I've seen recommend:

    But I get:



    Does Ubuntu run this process as some other user???
    the link dannyboy79 posted is a summarized version of a long manual.

    My understanding is (I may be wrong) that cupsys user is not created automatically, you have to do it manually. After creating this user you assign the shadow group so that it can do the admin tasks.

    You might be interested in the following ubuntu help page which eventually directs you to the CUPS Admin Manual here
    http://www.cups.org/doc-1.1/sam.html#13_4

    Read these and you will understand what to do next. I hope the problem is solved.

  9. #9
    Join Date
    Aug 2012
    Beans
    10

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    I wish I did understand. I've read the docs for 1.5 (the version bundled with Ubuntu 12.04). And yet I don't see any mention of creating a user or specifying what user CUPS processes will run as. I did see settings for authentication types to use the host UNIX users, but the system still doesn't seem to be able to handle comparing the incoming web credentials to the system and continue to the admin web pages...

    I think this may be more of an issue with something about Ubuntu's setup of CUPS than CUPS internal? Is there not a complete step-by-step guide for Ubuntu 12 installation of CUPS?

  10. #10
    Join Date
    Oct 2012
    Beans
    187

    Re: Ubuntu + CUPS = Cannot Admin via {hostname}:631

    Quote Originally Posted by LydaRA View Post
    cupsd.conf:

    LogLevel warn
    MaxLogSize 0
    SystemGroup root sysop lpadmin HHP\PrinterAdmins
    # Allow remote access
    Port 631
    Listen /var/run/cups/cups.sock
    # Share local printers on the local network.
    Browsing On
    BrowseOrder allow,deny
    BrowseRemoteProtocols
    BrowseAddress @LOCAL
    BrowseLocalProtocols CUPS dnssd
    DefaultAuthType Basic
    WebInterface Yes
    <Location />
    # Allow shared printing...
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Location /admin>
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Location /admin/conf>
    AuthType Default
    Require user @SYSTEM
    Order allow,deny
    Allow from @LOCAL
    </Location>
    <Policy default>
    JobPrivateAccess default
    JobPrivateValues default
    SubscriptionPrivateAccess default
    SubscriptionPrivateValues default
    <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
    </Limit>
    <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit All>
    Order deny,allow
    </Limit>
    </Policy>
    <Policy authenticated>
    JobPrivateAccess default
    JobPrivateValues default
    SubscriptionPrivateAccess default
    SubscriptionPrivateValues default
    <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
    </Limit>
    <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>

    <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    </Limit>
    <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
    </Limit>
    <Limit All>
    Order deny,allow
    </Limit>
    </Policy>
    If I understood right and this is what you want then you have to change the highlighted text in the quote above to the below given text
    Code:
    <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
        #AuthType Default
        #Require user @SYSTEM
        Order deny,allow
      </Limit>

Page 1 of 2 12 LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •