Authentication to CUPS from kprinter
Helge Hansemann
Helge.Hansemann at lrz-muenchen.de
Wed Sep 13 13:12:35 CEST 2006
Hi,
first of all thanks for your patience...
> kprinter writes it upon closing to save its last configuration. Note,
> I didn't suggest to edit it manually (you *could* do, but kprinter
> should not be opened at that moment), but I said:
>
> "Access it via the 'System
> Options'-button of kprinter."
>
I did this, but after it failed, I tried to set a password by hand...
> OK, let's try one more thing, so you have the order of "Listen" lines
> so that the domain socket is named last:
>
> LogLevel debug
> SystemGroup sys root
> Listen *:631
> Listen /usr/local/cups/etc/cups/cups.sock
> Browsing On
>
>
It looks like this now, but with no other result...
The error messages seems to be the same:
D [13/Sep/2006:12:53:30 +0200] cupsdAcceptClient: 7 from
129.187.15.9:631 (IPv4)
D [13/Sep/2006:12:53:30 +0200] cupsdReadClient: 7 POST /jobs/ HTTP/1.1
D [13/Sep/2006:12:53:30 +0200] cupsdAuthorize: No authentication data
provided.
D [13/Sep/2006:12:53:30 +0200] Cancel-Job
ipp://lxgmm06.lrz-muenchen.de:631/jobs/21
E [13/Sep/2006:12:53:30 +0200] Cancel-Job: Unauthorized
D [13/Sep/2006:12:53:30 +0200] cupsdSendError: 7 code=426 (Upgrade Required)
D [13/Sep/2006:12:53:30 +0200] cupsdCloseClient: 7
D [13/Sep/2006:12:53:30 +0200] cupsdAcceptClient: 7 from
129.187.15.9:631 (IPv4)
D [13/Sep/2006:12:53:30 +0200] cupsdReadClient: 7 OPTIONS * HTTP/1.1
D [13/Sep/2006:12:53:30 +0200] cupsdAuthorize: No authentication data
provided.
D [13/Sep/2006:12:53:30 +0200] encrypt_client: 7 Connection from
129.187.15.9 now encrypted.
D [13/Sep/2006:12:53:30 +0200] cupsdReadClient: 7 POST /jobs/ HTTP/1.1
D [13/Sep/2006:12:53:30 +0200] cupsdAuthorize: No authentication data
provided.
D [13/Sep/2006:12:53:30 +0200] Cancel-Job
ipp://lxgmm06.lrz-muenchen.de:631/jobs/21
E [13/Sep/2006:12:53:30 +0200] Cancel-Job: Unauthorized
D [13/Sep/2006:12:53:30 +0200] cupsdSendError: 7 code=401 (Unauthorized)
D [13/Sep/2006:12:53:30 +0200] cupsdCloseClient: 7
I [13/Sep/2006:12:53:30 +0200] cupsdCloseClient: SSL shutdown successful!
D [13/Sep/2006:12:53:30 +0200] cupsdCloseClient: 7
To me it looks like that the credentials are not delivered to CUPS or
not in the right way. Could this be tested? (Maybe without using ethereal)
What I do not understand, what would cause kprinter to show an
authentication popup, like the one for konqueror, and is kprinter able
to do so?
LogLevel debug
SystemGroup sys root
Listen *:631
Listen /usr/local/cups//var/run/cups/cups.sock
Browsing On
BrowseOrder allow,deny
BrowseAllow @LOCAL
BrowseAllow IP-HostA
DefaultAuthType Basic
<Location />
Order allow,deny
Allow localhost
Allow IP-HostA
</Location>
<Location /admin>
Encryption Required
AuthType Basic
Require user @SYSTEM
Order allow,deny
Allow localhost
Allow IP-HostA
</Location>
<Location /admin/conf>
AuthType Basic
Require user @SYSTEM
Order allow,deny
Allow localhost
Allow IP-HostA
</Location>
<Policy default>
# Job-related operations must be done by the owner or an adminstrator...
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job
Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription
Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job
Suspend-Current-Job Resume-Job CUPS-Move-Job>
AuthType Basic
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
# All administration operations require an adminstrator to authenticate...
<Limit Pause-Printer Resume-Printer Set-Printer-Attributes
Enable-Printer Disable-Printer Pause-Printer-After-Current-Job
Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer
Restart-Printer Shutdown-Printer Startup-Printer Promote-Job
Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class
CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
AuthType Basic
Require user @SYSTEM
Order deny,allow
</Limit>
# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
AuthType Basic
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
<Limit All>
Order deny,allow
</Limit>
</Policy>
Greetings, Helge
More information about the kde-print
mailing list