https://bugzilla.novell.com/show_bug.cgi?id=400588 Summary: Printing to another CUPS server with via IPP fails with client-error-not-authorized Product: openSUSE 11.0 Version: Final Platform: i386 OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: Printing AssignedTo: jsmeix@novell.com ReportedBy: hpj@urpla.net QAContact: jsmeix@novell.com CC: hpj@urpla.net Found By: Beta-Customer Hi Johannes, I have access to printers of a customer via a VPN, who is running cups-1.1.23, which worked fine up until now after upgrade of my server to 11.0 (coming from 10.2). Local printing works fine, but printing to a printer, attached to the remote cups server resulted in: D [16/Jun/2008:16:54:04 +0200] cupsdAcceptClient: 8 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:04 +0200] cupsdReadClient: 8 POST / HTTP/1.1 D [16/Jun/2008:16:54:04 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:04 +0200] Get-Printer-Attributes ipp://localhost/printers/ky2000gl D [16/Jun/2008:16:54:04 +0200] cupsdProcessIPPRequest: 8 status_code=0 (successful-ok) D [16/Jun/2008:16:54:05 +0200] cupsdAcceptClient: 9 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:05 +0200] cupsdReadClient: 9 POST /printers/ky2000gl HTTP/1.1 D [16/Jun/2008:16:54:05 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:05 +0200] Print-Job ipp://localhost/printers/ky2000gl D [16/Jun/2008:16:54:05 +0200] print_job: auto-typing file... D [16/Jun/2008:16:54:05 +0200] Print-Job client-error-not-authorized: The printer or class is not shared! D [16/Jun/2008:16:54:05 +0200] cupsdProcessIPPRequest: 9 status_code=403 (client-error-not-authorized) D [16/Jun/2008:16:54:05 +0200] cupsdCloseClient: 9 D [16/Jun/2008:16:54:06 +0200] cupsdAcceptClient: 9 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:06 +0200] cupsdReadClient: 9 POST /printers/ HTTP/1.1 D [16/Jun/2008:16:54:06 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:06 +0200] CUPS-Get-Printers D [16/Jun/2008:16:54:06 +0200] cupsdProcessIPPRequest: 9 status_code=0 (successful-ok) D [16/Jun/2008:16:54:06 +0200] cupsdCloseClient: 9 D [16/Jun/2008:16:54:06 +0200] cupsdAcceptClient: 9 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:06 +0200] cupsdReadClient: 9 POST /classes/ HTTP/1.1 D [16/Jun/2008:16:54:06 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:06 +0200] CUPS-Get-Classes D [16/Jun/2008:16:54:06 +0200] cupsdProcessIPPRequest: 9 status_code=0 (successful-ok) D [16/Jun/2008:16:54:06 +0200] cupsdCloseClient: 9 D [16/Jun/2008:16:54:06 +0200] cupsdAcceptClient: 9 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:06 +0200] cupsdReadClient: 9 POST /printers/ HTTP/1.1 D [16/Jun/2008:16:54:06 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:06 +0200] CUPS-Get-Default D [16/Jun/2008:16:54:06 +0200] cupsdProcessIPPRequest: 9 status_code=0 (successful-ok) D [16/Jun/2008:16:54:06 +0200] cupsdCloseClient: 9 D [16/Jun/2008:16:54:06 +0200] cupsdAcceptClient: 9 from 172.16.23.107:631 (IPv4) D [16/Jun/2008:16:54:06 +0200] cupsdReadClient: 9 POST / HTTP/1.1 D [16/Jun/2008:16:54:06 +0200] cupsdAuthorize: No authentication data provided. D [16/Jun/2008:16:54:06 +0200] Get-Jobs ipp://lisa5:631/printers/ky2000gl D [16/Jun/2008:16:54:06 +0200] cupsdProcessIPPRequest: 9 status_code=0 (successful-ok) D [16/Jun/2008:16:54:06 +0200] cupsdCloseClient: 9 I tried hard to disable any authorization on access to my local cups locations "/", "/classes", "/printers", and even "/printers/ky2000gl", but problem persists. The remote cups has this in cupsd.conf: <Location /> Order Deny,Allow Deny From All Allow From 127.0.0.1 Allow From @LOCAL Allow From 172.16.23.0/24 </Location> My local one has (new keys, I tried commented out): <Location /> #AuthType None #AuthClass Anonymous Order Deny,Allow Deny From All Allow From 127.0.0.1 Allow From 127.0.0.2 Allow From @LOCAL Allow From 172.16.24.0/24 </Location> Both are set to require authorization on access to "/admin". When I print a web page from konqueror to the remote printer, a knotify dialog opens, with: A print error occurred. Error message received from system: cupsdoprint -P 'ky2000gl' -J 'http://somepage.html' -H 'tyrex.lisa.loc:631' -U 'hp' -o ' copies=1 multiple-document-handling=separate-documents-collated-copies number-up=2 orientation-requested=3' '/tmp/kde-hp/kdeprint_rdNAYitz' : execution failed with message: client-error-not-authorized triggering the log messages above. Obviously somewhere between cups-1.2.7 (from 10.2) and cups-1.3.7 from 11.0, the IPP protocol implementation has changed to require an authentification incompatible with cups-1.1.23. I've tried to solve the problem myself, but only to ran into other issues: lppasswd seems to be unable to create/change its passwd file. Given, that /etc/cups is owned by root, and lppasswd is lp:sys with sticky bit set, that is no wonder, when it tries to create /etc/cups/passwd.new. Shouldn't /etc/cups be owned by lp:lp? Baffled.. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.