Bug#855961: Cups PPD Update authentication requested

[Jeff Burns]

Brian,

After reviewing your results and then double checking my setup, after some 
experimenting I found if I remove client.conf then the prompt for a localhost 
password does not occur anymore. The contents of the client.conf were just:

ServerName localhost

This seems like a pointless/redundant setting that I had if I understand it 
correctly, maybe it was confusing the post install to try and connect to itself 
over localhost thus prompting for a password to update the PPDs as if it were 
an external print server. I think after my quick testing this resolves my 
issue, but was hoping you could shed some light on if this explanation makes 
sense or if there is another reason why this would break things?

Jeff Burns
Engineering Systems Administrator

5011 Gate Parkway
Building 100 Suite 225
Jacksonville, FL 32256
(800) 624 5999 ext 9325
www.efi.com



On Feb 26, 2017, at 10:07 AM, Brian Potkin 
> wrote:

On Fri 24 Feb 2017 at 20:24:05 +, Jeff Burns wrote:

Brian,

Hopefully this is everything you requested, let me know if you need anything 
else, thanks!

Thanks.

#cups version

root@cupsdebug:~#dpkg -l | grep cups
...redacted..
ii  cups 1.7.5-11+deb8u1  amd64
Common UNIX Printing System(tm) - PPD/driver support, web interface
...redacted..

#set debug through /etc/cups/cupsd.conf

root@cupsdebug:~#cupsctl
_debug_logging=1
_remote_admin=1
_remote_any=0
_share_printers=0
_user_cancel_any=1
AccessLog=/var/log/cups/access_log
DefaultEncryption=IfRequested
ErrorLog=/var/log/cups/error_log
PageLog=/var/log/cups/page_log
Printcap=/etc/printcap.cups
ServerAlias=*

AccessLog=, ErrorLog=, PageLog= and Printcap= do not appear to be
cupsd.conf directives; at least, they are not in its manual. They
probably don't cause any problem.

#emptied cups error log

root@cupsdebug:~#echo "" > /var/log/cups/error_log
root@cupsdebug:~#tail /var/log/cups/error_log

root@cupsdebug:~#

#contents of /usr/share/cups/ppd-updaters

root@cupsdebug:/usr/share/cups/ppd-updaters#ll
total 16
-rw-r--r-- 1 root root  81 Mar 11  2015 cups-filters.ppd-updater
-rw-r--r-- 1 root root  55 Nov 12  2011 printer-driver-cups-pdf.ppd-updater
-rw-r--r-- 1 root root 220 Jun 25  2014 printer-driver-gutenprint.ppd-updater
-rw-r--r-- 1 root root 642 Nov  8  2014 printer-driver-hpijs.ppd-updater

Looks ok.

#touched it as requested

root@cupsdebug:~#touch /usr/share/cups/ppd-updaters/*
root@cupsdebug:~#cd /usr/share/cups/ppd-updaters/
root@cupsdebug:/usr/share/cups/ppd-updaters#ll
total 16
-rw-r--r-- 1 root root  81 Feb 24 15:10 cups-filters.ppd-updater
-rw-r--r-- 1 root root  55 Feb 24 15:10 printer-driver-cups-pdf.ppd-updater
-rw-r--r-- 1 root root 220 Feb 24 15:10 printer-driver-gutenprint.ppd-updater
-rw-r--r-- 1 root root 642 Feb 24 15:10 printer-driver-hpijs.ppd-updater

Updating the PPDs can now be run from the cups postinst script. (The
date stamps don't fit with those in /var/cache/cups/ppd-updates).

#created a dummy printer using gutenprint driver (this has only so far occured 
on boxes that have a printer using any gutenprint driver)

I did the same:

 lpadmin -p ... -v file:/dev/null -E -m 

#reinstalled cups and got stuck at prompt that breaks our unattended upgrade

root@cupsdebug:~# apt-get --reinstall install cups
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 203 not upgraded.
Need to get 290 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://ftp.debian.org/debian/ jessie/main cups amd64 1.7.5-11+deb8u1 [290 
kB]
Fetched 290 kB in 0s (376 kB/s)
(Reading database ... 55169 files and directories currently installed.)
Preparing to unpack .../cups_1.7.5-11+deb8u1_amd64.deb ...
Unpacking cups (1.7.5-11+deb8u1) over (1.7.5-11+deb8u1) ...
Processing triggers for man-db (2.7.0.2-5) ...
Setting up cups (1.7.5-11+deb8u1) ...
Updating PPD files for cups ...
Updating PPD files for cups-filters ...
Updating PPD files for cups-pdf ...
Password for root on localhost?

Did pressing the ENTER key move you on with the installation?

Using your cupsd.conf on my Jessie machine:

 root@gnome-stable:~# touch /usr/share/cups/ppd-updaters/*
 root@gnome-stable:~# apt-get --reinstall install cups
 Reading package lists... Done
 Building dependency tree
 Reading state information... Done
 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 3 not upgraded.
 Need to get 0 B/294 kB of archives.
 After this operation, 0 B of additional disk space will be used.
 Preconfiguring packages ...
 (Reading database ... 188237 files and directories currently installed.)
 Preparing to unpack .../cups_1.7.5-11+deb8u1_i386.deb ...
 Unpacking cups (1.7.5-11+deb8u1) over (1.7.5-11+deb8u1) ...
 Processing triggers for man-db (2.7.0.2-5) ...
 Setting up cups (1.7.5-11+deb8u1) ...
 Updating 

Bug#855961: Cups PPD Update authentication requested

[Brian Potkin]

On Fri 24 Feb 2017 at 20:24:05 +, Jeff Burns wrote:

> Brian,
> 
> Hopefully this is everything you requested, let me know if you need anything 
> else, thanks!

Thanks.
 
> #cups version
> 
> root@cupsdebug:~#dpkg -l | grep cups
> ...redacted..
> ii  cups 1.7.5-11+deb8u1  amd64   
>  Common UNIX Printing System(tm) - PPD/driver support, web interface
> ...redacted..
> 
> #set debug through /etc/cups/cupsd.conf
> 
> root@cupsdebug:~#cupsctl
> _debug_logging=1
> _remote_admin=1
> _remote_any=0
> _share_printers=0
> _user_cancel_any=1
> AccessLog=/var/log/cups/access_log
> DefaultEncryption=IfRequested
> ErrorLog=/var/log/cups/error_log
> PageLog=/var/log/cups/page_log
> Printcap=/etc/printcap.cups
> ServerAlias=*

AccessLog=, ErrorLog=, PageLog= and Printcap= do not appear to be
cupsd.conf directives; at least, they are not in its manual. They
probably don't cause any problem.

> #emptied cups error log
> 
> root@cupsdebug:~#echo "" > /var/log/cups/error_log
> root@cupsdebug:~#tail /var/log/cups/error_log
> 
> root@cupsdebug:~#
> 
> #contents of /usr/share/cups/ppd-updaters
> 
> root@cupsdebug:/usr/share/cups/ppd-updaters#ll
> total 16
> -rw-r--r-- 1 root root  81 Mar 11  2015 cups-filters.ppd-updater
> -rw-r--r-- 1 root root  55 Nov 12  2011 printer-driver-cups-pdf.ppd-updater
> -rw-r--r-- 1 root root 220 Jun 25  2014 printer-driver-gutenprint.ppd-updater
> -rw-r--r-- 1 root root 642 Nov  8  2014 printer-driver-hpijs.ppd-updater

Looks ok.
 
> #touched it as requested
> 
> root@cupsdebug:~#touch /usr/share/cups/ppd-updaters/*
> root@cupsdebug:~#cd /usr/share/cups/ppd-updaters/
> root@cupsdebug:/usr/share/cups/ppd-updaters#ll
> total 16
> -rw-r--r-- 1 root root  81 Feb 24 15:10 cups-filters.ppd-updater
> -rw-r--r-- 1 root root  55 Feb 24 15:10 printer-driver-cups-pdf.ppd-updater
> -rw-r--r-- 1 root root 220 Feb 24 15:10 printer-driver-gutenprint.ppd-updater
> -rw-r--r-- 1 root root 642 Feb 24 15:10 printer-driver-hpijs.ppd-updater

Updating the PPDs can now be run from the cups postinst script. (The
date stamps don't fit with those in /var/cache/cups/ppd-updates).
 
> #created a dummy printer using gutenprint driver (this has only so far 
> occured on boxes that have a printer using any gutenprint driver)

I did the same:

  lpadmin -p ... -v file:/dev/null -E -m 

> #reinstalled cups and got stuck at prompt that breaks our unattended upgrade
> 
> root@cupsdebug:~# apt-get --reinstall install cups
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 203 not 
> upgraded.
> Need to get 290 kB of archives.
> After this operation, 0 B of additional disk space will be used.
> Get:1 http://ftp.debian.org/debian/ jessie/main cups amd64 1.7.5-11+deb8u1 
> [290 kB]
> Fetched 290 kB in 0s (376 kB/s)
> (Reading database ... 55169 files and directories currently installed.)
> Preparing to unpack .../cups_1.7.5-11+deb8u1_amd64.deb ...
> Unpacking cups (1.7.5-11+deb8u1) over (1.7.5-11+deb8u1) ...
> Processing triggers for man-db (2.7.0.2-5) ...
> Setting up cups (1.7.5-11+deb8u1) ...
> Updating PPD files for cups ...
> Updating PPD files for cups-filters ...
> Updating PPD files for cups-pdf ...
> Password for root on localhost?

Did pressing the ENTER key move you on with the installation?

Using your cupsd.conf on my Jessie machine:

  root@gnome-stable:~# touch /usr/share/cups/ppd-updaters/*
  root@gnome-stable:~# apt-get --reinstall install cups
  Reading package lists... Done
  Building dependency tree
  Reading state information... Done
  0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 3 not upgraded.
  Need to get 0 B/294 kB of archives.
  After this operation, 0 B of additional disk space will be used.
  Preconfiguring packages ...
  (Reading database ... 188237 files and directories currently installed.)
  Preparing to unpack .../cups_1.7.5-11+deb8u1_i386.deb ...
  Unpacking cups (1.7.5-11+deb8u1) over (1.7.5-11+deb8u1) ...
  Processing triggers for man-db (2.7.0.2-5) ...
  Setting up cups (1.7.5-11+deb8u1) ...
  Updating PPD files for cups ...
  PPD for printer realq updated
  Updating PPD files for cups-filters ...
  Updating PPD files for openprinting-ppds ...
  Updating PPD files for cups-pdf ...
  Updating PPD files for escpr ...
  Updating PPD files for foo2zjs-common ...
  Updating PPD files for gutenprint ...
  PPD for printer gutenp updated
  Updating PPD files for hpijs ...
  PPD for printer hpijs updated
  Updating PPD files for ptouch ...
  Updating PPD files for splix ...

So, I am unable to reproduce the issue. Perhaps there is something
specific to your setup in /etc/cups/ which causes it.

I have attached my error_log so that it can be compared with yours. One
of the differences is that mine has load_ppd lines. (The "cupsd is not
idle" lines have been removed from the log).

Regards,

-- 
Brian.



ccc.gz

Bug#855961: Cups PPD Update authentication requested

[Brian Potkin]

Thank you for this descriptive report, Jeff.

On Thu 23 Feb 2017 at 20:40:36 +, Jeff Burns wrote:

> When doing an installation of the latest cups package, when PPDs can be 
> updated, you are prompted for root password on localhost. You can hit enter 
> to by pass, and this is confirmed to break even when running as root. 
> Unfortunately this breaks unattended upgrades.
> 
> Processes that get stuck:
> 
> root 11264 0.0 0.4 63060 16884 pts/1 S+ 11:48 0:00 _ /usr/bin/perl -w 
> /usr/share/debconf/frontend /var/lib/dpkg/info/cups.postinst triggered 
> /usr/share/cups/ppd-updaters
> root 11268 0.0 0.0 4336 1596 pts/1 S+ 11:48 0:00 _ /bin/sh 
> /var/lib/dpkg/info/cups.postinst triggered /usr/share/cups/ppd-updaters
> root 11345 0.0 0.1 65696 5388 pts/1 S+ 11:48 0:00 _ lpadmin -h 
> /var/run/cups/cups.sock -p LANIER_5622 -m gutenprint.5.2://lanier-5622/expert
> 
> If you run apt-get from CLI to update you get this prompted:
> “Password for root on localhost?”
> 
> This appears to be relevant to past cups bug report #662915.

Please would you

1. Set debug logging: cupsctl --debug-logging

2. Empty the error_log: >/var/log/cups/error_log

3. touch /usr/share/cups/ppd-updaters/*

4. apt-get --reinstall install cups

Compress the error_log and attach it, a transcript for the output of the
last command and your cupsd.conf to your reply.

Regards,

-- 
Brian.

Bug#855961: Cups PPD Update authentication requested

[Jeff Burns]

Package: cups
Version: 1.7.5-11+deb8u1

When doing an installation of the latest cups package, when PPDs can be 
updated, you are prompted for root password on localhost. You can hit enter to 
by pass, and this is confirmed to break even when running as root. 
Unfortunately this breaks unattended upgrades.

Processes that get stuck:

root 11264 0.0 0.4 63060 16884 pts/1 S+ 11:48 0:00 _ /usr/bin/perl -w 
/usr/share/debconf/frontend /var/lib/dpkg/info/cups.postinst triggered 
/usr/share/cups/ppd-updaters
root 11268 0.0 0.0 4336 1596 pts/1 S+ 11:48 0:00 _ /bin/sh 
/var/lib/dpkg/info/cups.postinst triggered /usr/share/cups/ppd-updaters
root 11345 0.0 0.1 65696 5388 pts/1 S+ 11:48 0:00 _ lpadmin -h 
/var/run/cups/cups.sock -p LANIER_5622 -m gutenprint.5.2://lanier-5622/expert

If you run apt-get from CLI to update you get this prompted:
“Password for root on localhost?”

This appears to be relevant to past cups bug report #662915.

Jeff Burns
Engineering Systems Administrator

5011 Gate Parkway
Building 100 Suite 225
Jacksonville, FL 32256
(800) 624 5999 ext 9325
www.efi.com



Confidentiality notice: This message may contain confidential information. It 
is intended only for the person to whom it is addressed. If you are not that 
person, you should not use this message. We request that you notify us by 
replying to this message, and then delete all copies including any contained in 
your reply. Thank you.