Package: cups Version: 2.1.0-4 Severity: important I've flagged this as important because it could lead to a DoS attack potentially. (It filled up my whole disk partition until I located the source of the problem.) I am utterly bemused as to what might be causing this problem....
Situation: I have a Samsung ML-1610 printer connected to a machine running Debian testing. I can print from the server with no problem. However, I have tried printing to it from another Debian testing machine and from an Apple MacBook running OSX 10.11, and they both end up flooding the log file. This must have started relatively recently, as I certainly used to be able to print from a remote computer. I have tried using the foomatic ppds and also tried installing the suld packages from http://www.bchemnet.com/suldr/ to no avail. My cupsd.conf file reads as follows, heavily based on the sample configuration file: ----- # Log general information in error_log - change "warn" to "debug" # for troubleshooting... LogLevel debug # Deactivate CUPS' internal logrotating, as we provide a better one, especially # LogLevel debug2 gets usable now MaxLogSize 0 # Don't only listen for connections from the local machine. Port 631 Listen /var/run/cups/cups.sock # Show shared printers on the local network. Browsing On BrowseLocalProtocols dnssd # Default authentication type, when authentication is required... DefaultAuthType Basic # Web interface setting... WebInterface Yes # Restrict access to the server... <Location /> Order allow,deny Allow from localhost Allow from 192.168.0.* </Location> # Restrict access to the admin pages... <Location /admin> Order allow,deny </Location> # Restrict access to configuration files... <Location /admin/conf> AuthType Default Require user @SYSTEM Order allow,deny </Location> # Set the default printer/job policies... <Policy default> # Job/subscription privacy... JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default # Job-related operations must be done by the owner or an administrator... <Limit Create-Job Print-Job Print-URI Validate-Job> Order deny,allow </Limit> <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> Require user @OWNER @SYSTEM Order deny,allow </Limit> # All administration operations require an administrator to authenticate... <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> AuthType Default Require user @SYSTEM Order deny,allow </Limit> # All printer operations require a printer operator to authenticate... <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> AuthType Default Require user @SYSTEM Order deny,allow </Limit> # Only the owner or an administrator can cancel or authenticate a job... <Limit Cancel-Job CUPS-Authenticate-Job> Require user @OWNER @SYSTEM Order deny,allow </Limit> <Limit All> Order deny,allow </Limit> </Policy> # Set the authenticated printer/job policies... <Policy authenticated> # Job/subscription privacy... JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default # Job-related operations must be done by the owner or an administrator... <Limit Create-Job Print-Job Print-URI Validate-Job> AuthType Default Order deny,allow </Limit> <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> AuthType Default Require user @OWNER @SYSTEM Order deny,allow </Limit> # All administration operations require an administrator to authenticate... <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> AuthType Default Require user @SYSTEM Order deny,allow </Limit> # All printer operations require a printer operator to authenticate... <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> AuthType Default Require user @SYSTEM Order deny,allow </Limit> # Only the owner or an administrator can cancel or authenticate a job... <Limit Cancel-Job CUPS-Authenticate-Job> AuthType Default Require user @OWNER @SYSTEM Order deny,allow </Limit> <Limit All> Order deny,allow </Limit> </Policy> ----- Part of the very long error_log file reads as follows, showing the whole of "Client 106"; this pattern is repeated again and again with different client numbers. The most interesting (though perhaps misleading) comment is that no authentication data is provided. ----- D [25/Oct/2015:22:43:07 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Not busy" D [25/Oct/2015:22:43:07 +0000] [Client 106] Accepted from 192.168.0.6:55356 (IPv4) D [25/Oct/2015:22:43:07 +0000] [Client 106] Waiting for request. D [25/Oct/2015:22:43:07 +0000] [Client 106] POST /printers/HomePrinter HTTP/1.1 D [25/Oct/2015:22:43:07 +0000] cupsdSetBusyState: newbusy="Active clients", busy="Not busy" D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=200 D [25/Oct/2015:22:43:07 +0000] [Client 106] No authentication data provided. D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:07 +0000] [Client 106] 2.0 Get-Job-Attributes 172 D [25/Oct/2015:22:43:07 +0000] Get-Job-Attributes ipp://erdos.local:631/printers/HomePrinter D [25/Oct/2015:22:43:07 +0000] [Client 106] Returning IPP successful-ok for Get-Job-Attributes (ipp://erdos.local:631/printers/HomePrinter) from 192.168.0.6 D [25/Oct/2015:22:43:07 +0000] [Client 106] Content-Length: 345 D [25/Oct/2015:22:43:07 +0000] [Client 106] cupsdSendHeader: code=200, type="application/ipp", auth_type=0 D [25/Oct/2015:22:43:07 +0000] [Client 106] con->http=0x55d43dfc4c10 D [25/Oct/2015:22:43:07 +0000] [Client 106] cupsdWriteClient error=0, used=0, state=HTTP_STATE_POST_SEND, data_encoding=HTTP_ENCODING_LENGTH, data_remaining=345, response=0x55d43dfc2750(IPP_STATE_DATA), pipe_pid=0, file=-1 D [25/Oct/2015:22:43:07 +0000] [Client 106] Writing IPP response, ipp_state=IPP_STATE_DATA, old wused=0, new wused=0 D [25/Oct/2015:22:43:07 +0000] [Client 106] bytes=0, http_state=0, data_remaining=345 D [25/Oct/2015:22:43:07 +0000] [Client 106] Flushing write buffer. D [25/Oct/2015:22:43:07 +0000] [Client 106] New state is HTTP_STATE_WAITING D [25/Oct/2015:22:43:07 +0000] [Client 106] Waiting for request. D [25/Oct/2015:22:43:07 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Active clients" D [25/Oct/2015:22:43:08 +0000] [Job 906] Unloading... D [25/Oct/2015:22:43:15 +0000] [Client 107] Accepted from 192.168.0.6:55358 (IPv4) D [25/Oct/2015:22:43:15 +0000] [Client 107] Waiting for request. D [25/Oct/2015:22:43:15 +0000] [Client 107] POST /printers/HomePrinter HTTP/1.1 D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Active clients", busy="Not busy" D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=200 D [25/Oct/2015:22:43:15 +0000] [Client 107] No authentication data provided. D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] 2.0 Get-Printer-Attributes 173 D [25/Oct/2015:22:43:15 +0000] Get-Printer-Attributes ipp://erdos.local:631/printers/HomePrinter D [25/Oct/2015:22:43:15 +0000] [Client 107] Returning IPP successful-ok for Get-Printer-Attributes (ipp://erdos.local:631/printers/HomePrinter) from 192.168.0.6 D [25/Oct/2015:22:43:15 +0000] [Client 107] Content-Length: 1897 D [25/Oct/2015:22:43:15 +0000] [Client 107] cupsdSendHeader: code=200, type="application/ipp", auth_type=0 D [25/Oct/2015:22:43:15 +0000] [Client 107] con->http=0x55d43dfcd250 D [25/Oct/2015:22:43:15 +0000] [Client 107] cupsdWriteClient error=0, used=0, state=HTTP_STATE_POST_SEND, data_encoding=HTTP_ENCODING_LENGTH, data_remaining=1897, response=0x55d43dfc2ba0(IPP_STATE_DATA), pipe_pid=0, file=-1 D [25/Oct/2015:22:43:15 +0000] [Client 107] Writing IPP response, ipp_state=IPP_STATE_DATA, old wused=0, new wused=0 D [25/Oct/2015:22:43:15 +0000] [Client 107] bytes=0, http_state=0, data_remaining=1897 D [25/Oct/2015:22:43:15 +0000] [Client 107] Flushing write buffer. D [25/Oct/2015:22:43:15 +0000] [Client 107] New state is HTTP_STATE_WAITING D [25/Oct/2015:22:43:15 +0000] [Client 107] Waiting for request. D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Active clients" D [25/Oct/2015:22:43:15 +0000] [Client 107] POST /printers/HomePrinter HTTP/1.1 D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Active clients", busy="Not busy" D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=200 D [25/Oct/2015:22:43:15 +0000] [Client 107] No authentication data provided. D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 107] 2.0 Get-Job-Attributes 174 D [25/Oct/2015:22:43:15 +0000] Get-Job-Attributes ipp://erdos.local:631/printers/HomePrinter D [25/Oct/2015:22:43:15 +0000] [Job 906] Loading attributes... D [25/Oct/2015:22:43:15 +0000] [Client 107] Returning IPP successful-ok for Get-Job-Attributes (ipp://erdos.local:631/printers/HomePrinter) from 192.168.0.6 D [25/Oct/2015:22:43:15 +0000] [Client 107] Content-Length: 345 D [25/Oct/2015:22:43:15 +0000] [Client 107] cupsdSendHeader: code=200, type="application/ipp", auth_type=0 D [25/Oct/2015:22:43:15 +0000] [Client 107] con->http=0x55d43dfcd250 D [25/Oct/2015:22:43:15 +0000] [Client 107] cupsdWriteClient error=0, used=0, state=HTTP_STATE_POST_SEND, data_encoding=HTTP_ENCODING_LENGTH, data_remaining=345, response=0x55d43dfc4b80(IPP_STATE_DATA), pipe_pid=0, file=-1 D [25/Oct/2015:22:43:15 +0000] [Client 107] Writing IPP response, ipp_state=IPP_STATE_DATA, old wused=0, new wused=0 D [25/Oct/2015:22:43:15 +0000] [Client 107] bytes=0, http_state=0, data_remaining=345 D [25/Oct/2015:22:43:15 +0000] [Client 107] Flushing write buffer. D [25/Oct/2015:22:43:15 +0000] [Client 107] New state is HTTP_STATE_WAITING D [25/Oct/2015:22:43:15 +0000] [Client 107] Waiting for request. D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Active clients" D [25/Oct/2015:22:43:15 +0000] [Client 107] HTTP_STATE_WAITING Closing for error 32 (Broken pipe) D [25/Oct/2015:22:43:15 +0000] [Client 107] Closing connection. D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Not busy" D [25/Oct/2015:22:43:15 +0000] [Client 106] POST /printers/HomePrinter HTTP/1.1 D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Active clients", busy="Not busy" D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=200 D [25/Oct/2015:22:43:15 +0000] [Client 106] No authentication data provided. D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] Read: status=100 D [25/Oct/2015:22:43:15 +0000] [Client 106] 2.0 Get-Printer-Attributes 175 D [25/Oct/2015:22:43:15 +0000] Get-Printer-Attributes ipp://erdos.local:631/printers/HomePrinter D [25/Oct/2015:22:43:15 +0000] [Client 106] Returning IPP successful-ok for Get-Printer-Attributes (ipp://erdos.local:631/printers/HomePrinter) from 192.168.0.6 D [25/Oct/2015:22:43:15 +0000] [Client 106] Content-Length: 1897 D [25/Oct/2015:22:43:15 +0000] [Client 106] cupsdSendHeader: code=200, type="application/ipp", auth_type=0 D [25/Oct/2015:22:43:15 +0000] [Client 106] con->http=0x55d43dfc4c10 D [25/Oct/2015:22:43:15 +0000] [Client 106] cupsdWriteClient error=0, used=0, state=HTTP_STATE_POST_SEND, data_encoding=HTTP_ENCODING_LENGTH, data_remaining=1897, response=0x55d43dfc2ba0(IPP_STATE_DATA), pipe_pid=0, file=-1 D [25/Oct/2015:22:43:15 +0000] [Client 106] Writing IPP response, ipp_state=IPP_STATE_DATA, old wused=0, new wused=0 D [25/Oct/2015:22:43:15 +0000] [Client 106] bytes=0, http_state=0, data_remaining=1897 D [25/Oct/2015:22:43:15 +0000] [Client 106] Flushing write buffer. D [25/Oct/2015:22:43:15 +0000] [Client 106] New state is HTTP_STATE_WAITING D [25/Oct/2015:22:43:15 +0000] [Client 106] Waiting for request. D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Active clients" D [25/Oct/2015:22:43:15 +0000] [Client 106] HTTP_STATE_WAITING Closing for error 32 (Broken pipe) D [25/Oct/2015:22:43:15 +0000] [Client 106] Closing connection. D [25/Oct/2015:22:43:15 +0000] cupsdSetBusyState: newbusy="Not busy", busy="Not busy" ----- Any ideas would be gratefully appreciated! Many thanks, Julian -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages cups depends on: ii cups-client 2.1.0-4 ii cups-common 2.1.0-4 ii cups-core-drivers 2.1.0-4 ii cups-daemon 2.1.0-4 ii cups-filters 1.0.76-1 ii cups-ppdc 2.1.0-4 ii cups-server-common 2.1.0-4 ii debconf [debconf-2.0] 1.5.57 ii ghostscript 9.16~dfsg-2 ii libavahi-client3 0.6.31-5 ii libavahi-common3 0.6.31-5 ii libc-bin 2.19-22 ii libc6 2.19-22 ii libcups2 2.1.0-4 ii libcupscgi1 2.1.0-4 ii libcupsimage2 2.1.0-4 ii libcupsmime1 2.1.0-4 ii libcupsppdc1 2.1.0-4 ii libgcc1 1:5.2.1-22 ii libstdc++6 5.2.1-22 ii libusb-1.0-0 2:1.0.20-1 ii lsb-base 9.20150917 ii poppler-utils 0.26.5-4 ii procps 2:3.3.10-2 Versions of packages cups recommends: vii avahi-daemon 0.6.31-5 ii colord 1.2.11-1 ii cups-filters [ghostscript-cups] 1.0.76-1 ii printer-driver-gutenprint 5.2.10-3 Versions of packages cups suggests: ii cups-bsd 2.1.0-4 pn cups-pdf <none> ii foomatic-db-compressed-ppds [foomatic-db] 20150825-1 pn hplip <none> ii printer-driver-hpcups 3.14.6-1+b2 ii smbclient 2:4.1.17+dfsg-4 ii udev 227-2 -- debconf information: cupsys/raw-print: true cupsys/backend: lpd, socket, usb, snmp, dnssd
