Re: Cups no longer accepting remote connections for printing.

2020-02-09 Thread Brian
On Sun 09 Feb 2020 at 14:08:41 +, James Allsopp wrote:

> Hi,
> Thanks Brian, this is the server;
> 
> scheduler is running
> system default destination: HL-2030-series
> device for HL-2030-series: usb://Brother/HL-2030%20series?serial=L0J260292
> HL-2030-series accepting requests since Sun 23 Jul 2017 21:21:32 BST
> printer HL-2030-series is idle.  enabled since Sun 23 Jul 2017 21:21:32 BST

Nothing untoward here that I can see. You should, if this queue is
shared, be able to see its URI from the client with 'lpinfo -v' and
'lpstat -l -e'. What do they give?
 
> The is the client;
> scheduler is running
> no system default destination
> lpstat: Forbidden
> lpstat: Forbidden
> lpstat: Forbidden
> lpstat: Forbidden
> lpstat: Forbidden

I've never come across that before. "Forbidden" simply shouldn't happen.
It looks like the client is denying access to its cupsd.

A common way to access the print queue on the server is to set a queue
up on the client. The state of this *local queue* is shown by the lpstat
command run on the client. What is happening on the server is of no
consequence.

Are you using a client.conf in $HOME/.cups or /etc/cups?

Anything in /etc/cups/ppd?

What do you have for 'ls -l /etc/cups/cupsd.conf?

-- 
Brian.



Re: Cups no longer accepting remote connections for printing.

2020-02-09 Thread Klaus Singvogel
Hi,

James Allsopp wrote:
[...]
> 
> # Restrict access to the server...
> 
>   Order allow,deny
>   Allow localhost
>   Allow 192.168.1.*
> 
> ServerAlias *
> # Restrict access to the admin pages...
> 
>   Order allow,deny
>   Allow localhost
>   Allow  192.168.1.*
> 
> 

Don't mix DNS wildcard '*' with network netmask '/xx'
Both are different things and not compatible.

Correct is in your case: Allow 192.168.1.0/24

Regards,
Klaus.
-- 
Klaus Singvogel
GnuPG-Key-ID: 1024R/5068792D  1994-06-27



Re: Cups no longer accepting remote connections for printing.

2020-02-09 Thread James Allsopp
Hi,
Thanks Brian, this is the server;

scheduler is running
system default destination: HL-2030-series
device for HL-2030-series: usb://Brother/HL-2030%20series?serial=L0J260292
HL-2030-series accepting requests since Sun 23 Jul 2017 21:21:32 BST
printer HL-2030-series is idle.  enabled since Sun 23 Jul 2017 21:21:32 BST

The is the client;
scheduler is running
no system default destination
lpstat: Forbidden
lpstat: Forbidden
lpstat: Forbidden
lpstat: Forbidden
lpstat: Forbidden

Here's an nmap for the port on the server.
# nmap -sS -p631 hawaiian
Starting Nmap 7.70 ( https://nmap.org ) at 2020-02-09 14:07 GMT
Nmap scan report for hawaiian (192.168.1.206)
Host is up (0.022s latency).
Other addresses for hawaiian (not scanned): fde6:4511:f54::1a3
fde6:4511:f54::a55
rDNS record for 192.168.1.206: hawaiian.frankexchangeofviews.uk

PORTSTATE SERVICE
631/tcp open  ipp
MAC Address: 00:1D:7D:0D:2A:9D (Giga-byte Technology)

Nmap done: 1 IP address (1 host up) scanned in 0.53 seconds


On Sun, 9 Feb 2020 at 12:13, Brian  wrote:

> On Sun 09 Feb 2020 at 02:06:22 +, James Allsopp wrote:
>
> > HI,
> > My printer on a remote machine works when access from that machine, I've
> > checked port 631 isn't blocked using Xnat, but I can't work out why I
> can't
> > print.
> > All the user pages say forbidden, and a test page from my local cups
> hangs.
>
> Please give the printer make and model and the outputs of 'lpstat -t'
> on server and client.
>
> --
> Brian.
>
>


Re: Cups no longer accepting remote connections for printing.

2020-02-09 Thread Brian
On Sun 09 Feb 2020 at 02:06:22 +, James Allsopp wrote:

> HI,
> My printer on a remote machine works when access from that machine, I've
> checked port 631 isn't blocked using Xnat, but I can't work out why I can't
> print.
> All the user pages say forbidden, and a test page from my local cups hangs.

Please give the printer make and model and the outputs of 'lpstat -t'
on server and client.

-- 
Brian. 



Cups no longer accepting remote connections for printing.

2020-02-08 Thread James Allsopp
HI,
My printer on a remote machine works when access from that machine, I've
checked port 631 isn't blocked using Xnat, but I can't work out why I can't
print.
All the user pages say forbidden, and a test page from my local cups hangs.

I'm using Buster on this machine currently. Here's my cupsd.conf,
Thanks
James
# Configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
# complete description of this file.
#

# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
LogLevel warn
PageLogFormat

# Deactivate CUPS' internal logrotating, as we provide a better one,
especially
# LogLevel debug2 gets usable now
MaxLogSize 0

# Only listen for connections from the local machine.
Listen *:631
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseLocalProtocols dnssd
#BrowseAllow all
#BrowseAddress 192.168.1.*:631
# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Web interface setting...
WebInterface Yes

# Restrict access to the server...

  Order allow,deny
  Allow localhost
  Allow 192.168.1.*

ServerAlias *
# Restrict access to the admin pages...

  Order allow,deny
  Allow localhost
  Allow  192.168.1.*


# Restrict access to configuration files...

  AuthType Default
  Require user @SYSTEM
  Order allow,deny


# Restrict access to log files...

  AuthType Default
  Require user @SYSTEM
  Order allow,deny


# Set the default printer/job policies...

  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  
Order deny,allow
  

  
Require user @OWNER @SYSTEM
Order deny,allow
  

  # All administration operations require an administrator to
authenticate...
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  

  # All printer operations require a printer operator to authenticate...
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  

  # Only the owner or an administrator can cancel or authenticate a job...
  
Require user @OWNER @SYSTEM
Order deny,allow
  

  
Order deny,allow
  


# Set the authenticated printer/job policies...

  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  
AuthType Default
Order deny,allow
  

  
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
  

  # All administration operations require an administrator to
authenticate...
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  

  # All printer operations require a printer operator to authenticate...
  
AuthType Default
Require user @SYSTEM
Order deny,allow
  

  # Only the owner or an administrator can cancel or authenticate a job...
  
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
  

  
Order deny,allow