Re: [sane-devel] need network syntax for saned.conf

[Olaf Meeuwissen]

Hi,

ToddAndMargo writes:

>>
>> Le samedi 25 novembre 2017, 01:38:56 ToddAndMargo a écrit :
>>> Hi All,
>>>
>>> In saned.conf,
>>>
>>> what is the proper syntax to allow all IP from a particular network:
>>>
>>> 192.168.100.0/24
>>>
>>> and what is the syntax allow a range of networks:
>>>
>>> 192.168.100.0/24 through 192.168.105.0/24
>>>
>>>
>>> Many thanks,
>>> -T
>>
>
> On 11/25/2017 02:05 AM, e.m...@orange.fr wrote:
>  > Hello Sir,
>  >
>  > I'm not a specialist of sane but my search engine with "man
> saned.conf" gave
>  > me the following page
>  > https://linux.die.net/man/8/saned
>  > where I see an example
>  ># Access list
>  >scan-client.somedomain.firm
>  ># this is a comment
>  >192.168.0.1
>  >192.168.2.12/29
>  >[::1]
>  >[2001:7a8:185e::42:12]/64
>  >
>  > Is it clear enough?
>  >
>  > Have a nice Saturday
>  >
>  > Regards
>
>
> Actually no.
>
> I had found that portion, but got frustrated with them
> calling "hostnames" as "IP addresses".  Not the same
> thing.  Hostname is before the IP address is resolved.

You're right that host names and IP addresses are not the same thing,
but the saned manual page says:

  The access list is a list of host names, IP addresses or IP subnets
  (CIDR notation)

It doesn't say they are the same thing.  It just says that you can use
whatever combination of these three is most convenient for you.

> And "192.168.2.12/29" which only gives you a single IP
> address with its subnet mask.

Using that would allow access from all eight IPv4 addresses that have
the same 29 initial bits as 192.168.2.12.  Please note that the CIDR
notation was introduced exactly to allow addressing on arbitrary bit
boundaries.

See https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing

> The above line shows that
> you do not need the subnet mask.  xxx.xxx.xxx.0/24
> tells you  all the IP's from xxx.xxx.xxx.1 to 255
>
> Can I get away with 192.168.222.0/23?  That would
> be 192.168.222 to 223. 1 to 255

Yes.

Hope this helps,
--
Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
 Support Free Softwarehttps://my.fsf.org/donate
 Join the Free Software Foundation  https://my.fsf.org/join

-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] SANE needs a GUI like CUPS's 'system-config-printer' to manually add a network scanner.

[Hans Deragon]

Greetings Simon,

Isn't this a problem?  I thought that Sane, like CUPS, is a generic 
standard.  So why would my HP MFC's scanner be something HP specific?


Shouldn't there be a way to just tell Sane "Hey, there is a scanner at 
IP  you are unable to detect automatically.  Please add it to your 
list."?


If a printer is not found, I can add it with system-config-printer.  But 
if the magic of automatic detection of Sane fails, I cannot add a 
scanner manually.  This is an important feature that is missing in 
Linux, IMHO.


Has this topic been discussed before?  I must not be the first to bring 
it up.


Best regards,
Hans Deragon

On 2017-11-06 03:25, Simon Matter wrote:

Greetings, I understand that saned is a daemon / API running in the 
backend, but I believe that like CUPS's 'system-config-printer', it 
should come with a frontend to manage scanners.


AFAIK system-config-printer is a development of RedHat and has no 
relation

with CUPS. The only problem here is that RedHat "forgot" to implement
'system-config-scanner' :-)

I have a network (wifi) scanner setup properly. One of my Linux 
machine (a desktop computer) connects to it without any issue. I have 
setup that machine with hplip. However, another Linux laptop cannot 
find it on the network. I know its IP and I can ping it, figure out 
the ports that are open, but there is no GUI to add a scanner. In 
fact, I cannot even figure out how to add this scanner via the 
terminal. Searching for any reference to it under /etc on the desktop 
machine for which it works returns nothing. I have no clue where the 
scanner is configured on that machine so I can copy the configuration 
on the laptop. The scanner is part of my MFC "HP Officejet Pro 6978 
All-in-one". hplip requires me to set it up (again!) with a USB cable. 
But this device is already setup and I should not have to plug as USB 
cable to it and reconfigure it. I should just be able to find it on 
the network and go on with it, or at least, add it manually via a GUI.


Here again, AFAIK, HPLIP is a HP thing and not developed by SANE. So I
guess you should send your requests to the HPLIP developers as only 
they

may be able to help you with the HP specific things.

Regards,
Simon


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] SANE needs a GUI like CUPS's 'system-config-printer' to manually add a network scanner.

[Hans Deragon]

Greetings Alex,


There is program named xsane that could help you.


It does not help.  It aborts because it does not found a scanner I use 
occasionally, when I am at my friend's house, and it does not find my 
scanner, which I am able to ping to and access to from another computer.



If you use an HP multifunction printer you can configure it from
system-config-printer and you scanner feature will automatically work.


Nope, that is not the case.  system-config-printer is only for the 
printer side of a MFC device.  I can print to my MFC, but I cannot scan 
it.  As a scanner, it does not exists and I have no means to add it 
manually to Linux.


Merci,
Hans Deragon


On 2017-11-07 05:04, Alex ARNAUD wrote:


Hello Hans,

There is program named xsane that could help you.

If you use an HP multifunction printer you can configure it from
system-config-printer and you scanner feature will automatically work.

Best regards.
--
Alex ARNAUD
Visual-Impairment Project Manager
Hypra - "Humanizing technology"

Le 05/11/2017 à 19:53, Hans Deragon a écrit :

Greetings, I understand that saned is a daemon / API running in the 
backend, but I believe that like CUPS's 'system-config-printer', it 
should come with a frontend to manage scanners. I have a network 
(wifi) scanner setup properly. One of my Linux machine (a desktop 
computer) connects to it without any issue. I have setup that machine 
with hplip. However, another Linux laptop cannot find it on the 
network. I know its IP and I can ping it, figure out the ports that 
are open, but there is no GUI to add a scanner. In fact, I cannot even 
figure out how to add this scanner via the terminal. Searching for any 
reference to it under /etc on the desktop machine for which it works 
returns nothing. I have no clue where the scanner is configured on 
that machine so I can copy the configuration on the laptop. The 
scanner is part of my MFC "HP Officejet Pro 6978 All-in-one". hplip 
requires me to set it up (again!) with a USB cable. But this device is 
already setup and I should not have to plug as USB cable to it and 
reconfigure it. I should just be able to find it on the network and go 
on with it, or at least, add it manually via a GUI. Has this issue 
already been discussed? BTW, I am new to this mailing list and I have 
no history regarding the SANE project; I am just a simple user. Best 
regards, Hans Deragon



--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] Everyone!

[ToddAndMargo]

Em sáb, 25 de nov de 2017 07:24, ToddAndMargo > escreveu:


On 11/25/2017 01:02 AM, Olaf Meeuwissen wrote:
 > A
 >   line containing the single character ``+'' is
interpreted to
 >   match any hostname


My firewall blocks everything from the Internet.

"A line containing the single character ``+'' is
interpreted to match any hostname"

Not sure what that means.  Any IP or any host name?
Jut use a "+" on a blank line?




On 11/25/2017 03:55 AM, Luiz Angelo Daros de Luca wrote:

Yes


Thank you.  I was overthinking it.

I wish the man page would stop using "hostname" in place
of IP address.


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] need network syntax for saned.conf

[ToddAndMargo]

Le samedi 25 novembre 2017, 01:38:56 ToddAndMargo a écrit :

Hi All,

In saned.conf,

what is the proper syntax to allow all IP from a particular network:

192.168.100.0/24

and what is the syntax allow a range of networks:

192.168.100.0/24 through 192.168.105.0/24


Many thanks,
-T




On 11/25/2017 02:05 AM, e.m...@orange.fr wrote:
> Hello Sir,
>
> I'm not a specialist of sane but my search engine with "man 
saned.conf" gave

> me the following page
> https://linux.die.net/man/8/saned
> where I see an example
># Access list
>scan-client.somedomain.firm
># this is a comment
>192.168.0.1
>192.168.2.12/29
>[::1]
>[2001:7a8:185e::42:12]/64
>
> Is it clear enough?
>
> Have a nice Saturday
>
> Regards


Actually no.

I had found that portion, but got frustrated with them
calling "hostnames" as "IP addresses".  Not the same
thing.  Hostname is before the IP address is resolved.

And "192.168.2.12/29" which only gives you a single IP
address with its subnet mask.  The above line shows that
you do not need the subnet mask.  xxx.xxx.xxx.0/24
tells you  all the IP's from xxx.xxx.xxx.1 to 255

Can I get away with 192.168.222.0/23?  That would
be 192.168.222 to 223. 1 to 255

Thank you for helping anyway.

-T


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] Everyone!

[Luiz Angelo Daros de Luca]

Yes

Em sáb, 25 de nov de 2017 07:24, ToddAndMargo 
escreveu:

> On 11/25/2017 01:02 AM, Olaf Meeuwissen wrote:
> > A
> >   line containing the single character ``+'' is interpreted to
> >   match any hostname
>
>
> My firewall blocks everything from the Internet.
>
> "A line containing the single character ``+'' is
> interpreted to match any hostname"
>
> Not sure what that means.  Any IP or any host name?
> Jut use a "+" on a blank line?
>
>
>
> --
> ~~
> Computers are like air conditioners.
> They malfunction when you open windows
> ~~
>
>
> --
> sane-devel mailing list: sane-devel@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
> Unsubscribe: Send mail with subject "unsubscribe your_password"
>  to sane-devel-requ...@lists.alioth.debian.org
>
-- 

Luiz Angelo Daros de Luca
luizl...@gmail.com
-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org

[sane-devel] gscan2pdf v1.8.9 released

[Jeff]

gscan2pdf - A GUI to produce a multipage PDF or DjVu from a scan.

http://gscan2pdf.sourceforge.net/

Five clicks are required to scan several pages and then save all or
a selection as a PDF or DjVu file, including metadata if required.

gscan2pdf can control regular or sheet-fed (ADF) scanners with SANE via
libimage-sane-perl, scanimage or scanadf, and can scan multiple pages at
once. It presents a thumbnail view of scanned pages, and permits simple
operations such as cropping, rotating and deleting pages.

OCR can be used to recognise text in the scans, and the output
embedded in the PDF or DjVu.

PDF conversion is done by PDF::API2.

The resulting document may be saved as a PDF, DjVu, multipage TIFF file,
or single page image file.

Changelog for 1.8.9:
* Rename preference "Open scan dialog at program start"
  -> "Open scanner at program start"
* Fix killing processes on cancel
* Hide extended page numbering checkbox and source document frame unless
  scanner is not capable of duplex and ADF is selected. Therefore, for
  duplex-capable scanners, this is never shown. For duplex-incapable
  scanners, this is shown if the ADF is selected, but otherwise hidden.
* + support for the new API in ImageMagick 7 for unsharp mask
* For single-sided documents, hide rotate facing/reverse/both side
  dropdown.
* + missing documentation for Edit/Properties
* Don't reapply scan settings if value is within tolerance.
  Closes bug #287 (Reload recursion limit (5050) exceeded)
* Fix crash reading corrupt config file
  Closes bug #288 (gscan2pdf-1.8.8 does not run in Ubuntu 16.04)
* Update to Slovak translation (thanks to Dušan Kazik)



signature.asc
Description: OpenPGP digital signature
-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] need network syntax for saned.conf

[e . marc]

Hello Sir,

I'm not a specialist of sane but my search engine with "man saned.conf" gave 
me the following page
https://linux.die.net/man/8/saned
where I see an example
# Access list
scan-client.somedomain.firm
# this is a comment
192.168.0.1
192.168.2.12/29
[::1]
[2001:7a8:185e::42:12]/64 

Is it clear enough?

Have a nice Saturday

Regards

Le samedi 25 novembre 2017, 01:38:56 ToddAndMargo a écrit :
> Hi All,
> 
> In saned.conf,
> 
> what is the proper syntax to allow all IP from a particular network:
> 
>192.168.100.0/24
> 
> and what is the syntax allow a range of networks:
> 
>192.168.100.0/24 through 192.168.105.0/24
> 
> 
> Many thanks,
> -T

-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org

[sane-devel] need network syntax for saned.conf

[ToddAndMargo]

Hi All,

In saned.conf,

what is the proper syntax to allow all IP from a particular network:

  192.168.100.0/24

and what is the syntax allow a range of networks:

  192.168.100.0/24 through 192.168.105.0/24


Many thanks,
-T


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] saned@service environment question

[ToddAndMargo]

On 11/25/2017 01:09 AM, Olaf Meeuwissen wrote:

Hi ToddAndMargo,

ToddAndMargo writes:


Dear list,

In the man page, the script for saned@.service shows:


# OK, you are reading the documentation, just rather selectively ;-)


Environment=SANE_CONFIG_DIR=/etc/sane.d
# If you need to debug your configuration uncomment the next line and
# change it as appropriate to set the desired debug options
# Environment=SANE_DEBUG_DLL=255 SANE_DEBUG_BJNP=5

https://bugzilla.redhat.com/show_bug.cgi?id=1091566#c8
also adds:

#Environment=SANE_DEBUG_DLL=128 SANE_DEBUG_NET=128

Question:
Do you un-comment the all, or only uncomment one of them?


You add the SANE_DEBUG_* variables for the backends you want to debug.
In your case, you probably want to look at least at SANE_DEBUG_DLL and
SANE_DEBUG_NET and the backend that supports your particular scanner.


Question:

Should it not be?

Environment=SANE_CONFIG_DIR=/etc/sane.d SANE_DEBUG_DLL=255
SANE_DEBUG_BJNP=5 SANE_DEBUG_NET=128

all run togther with spaces as the demlimier?


Please read the systemd documentation.  I vaguely seem to remember all
the Environment "assignments" are run together by systemd, though.

# Disclaimer: I no longer use systemd.


Questions:

What is
SANE_CONFIG_DIR=/etc/sane.d


An environment variable that tells the dll (and most other backends)
where to look for their configuration.  See sane-dll(5).


SANE_DEBUG_DLL=255
SANE_DEBUG_BJNP=5, and
SANE_DEBUG_NET=128


Environment variables that tell each of the backend how much to log.
Larger values produce more output.  What and how much exactly differs
between backends.

Hope this helps,


Not really, but thank you for trying.

What systemd documentation are you speaking of?


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] Everyone!

[ToddAndMargo]

On 11/25/2017 01:02 AM, Olaf Meeuwissen wrote:

A
  line containing the single character ``+'' is interpreted to
  match any hostname



My firewall blocks everything from the Internet.

"A line containing the single character ``+'' is
interpreted to match any hostname"

Not sure what that means.  Any IP or any host name?
Jut use a "+" on a blank line?



--
~~
Computers are like air conditioners.
They malfunction when you open windows
~~


--
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] saned@service environment question

[Olaf Meeuwissen]

Hi ToddAndMargo,

ToddAndMargo writes:

> Dear list,
>
> In the man page, the script for saned@.service shows:

# OK, you are reading the documentation, just rather selectively ;-)

> Environment=SANE_CONFIG_DIR=/etc/sane.d
> # If you need to debug your configuration uncomment the next line and
> # change it as appropriate to set the desired debug options
> # Environment=SANE_DEBUG_DLL=255 SANE_DEBUG_BJNP=5
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1091566#c8
> also adds:
>
> #Environment=SANE_DEBUG_DLL=128 SANE_DEBUG_NET=128
>
> Question:
> Do you un-comment the all, or only uncomment one of them?

You add the SANE_DEBUG_* variables for the backends you want to debug.
In your case, you probably want to look at least at SANE_DEBUG_DLL and
SANE_DEBUG_NET and the backend that supports your particular scanner.

> Question:
>
> Should it not be?
>
> Environment=SANE_CONFIG_DIR=/etc/sane.d SANE_DEBUG_DLL=255
> SANE_DEBUG_BJNP=5 SANE_DEBUG_NET=128
>
> all run togther with spaces as the demlimier?

Please read the systemd documentation.  I vaguely seem to remember all
the Environment "assignments" are run together by systemd, though.

# Disclaimer: I no longer use systemd.

> Questions:
>
> What is
>SANE_CONFIG_DIR=/etc/sane.d

An environment variable that tells the dll (and most other backends)
where to look for their configuration.  See sane-dll(5).

>SANE_DEBUG_DLL=255
>SANE_DEBUG_BJNP=5, and
>SANE_DEBUG_NET=128

Environment variables that tell each of the backend how much to log.
Larger values produce more output.  What and how much exactly differs
between backends.

Hope this helps,
--
Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
 Support Free Softwarehttps://my.fsf.org/donate
 Join the Free Software Foundation  https://my.fsf.org/join

-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org

Re: [sane-devel] Everyone!

[Olaf Meeuwissen]

Hi ToddAndMargo,

ToddAndMargo writes:

>>> Em sex, 24 de nov de 2017 09:47, ToddAndMargo >> > escreveu:
>>>
>>> On 11/24/2017 03:44 AM, ToddAndMargo wrote:
>>>  > Hi All,
>>>  >
>>>  > What to I do to saned.conf to tell it I want EVERYONE to
>>>  > be able to access it?
>>>
>>> Both network users and all users in general
>>>
>
> On 11/24/2017 05:26 PM, Luiz Angelo Daros de Luca wrote:
>> Add a single + in a line.
>
> I do not understand.
>
> I should have said I was speaking of
>  /etc/sane.d/saned.conf

Straight from the saned manual page in the CONFIGURATION section

  CONFIGURATION
 First and foremost: saned is not intended to be exposed to the
 internet or other non-trusted networks. Make sure that access
 is limited by tcpwrappers and/or a fire‐ wall setup. Don't
 depend only on saned's own authentication. Don't run saned as
 root if it's not necessary. And do not install saned as setuid
 root.

 The saned.conf configuration file contains both options for the
 daemon and the access list.

 data_portrange = min_port - max_port
Specify the port range to use for the data
connection. Pick a port range between 1024 and 65535;
don't pick a too large port range, as it may have
performance issues. Use this option if your saned server
is sitting behind a firewall. If that firewall is a
Linux machine, we strongly recommend using the Netfilter
nf_conntrack_sane module instead.

 The access list is a list of host names, IP addresses or IP
 subnets (CIDR notation) that are permitted to use local SANE
 devices. IPv6 addresses must be enclosed in brackets, and
 should always be specified in their compressed
 form. Connections from localhost are always permitted. Empty
 lines and lines starting with a hash mark (#) are ignored.  A
 line containing the single character ``+'' is interpreted to
 match any hostname. This allows any remote machine to use your
 scanner and may present a security risk, so this shouldn't be
 used unless you know what you're doing.

> I am look at how to add all users and all networks.  I want
> everyone to be able to access the scanner.

Reading or searching the documentation might help ;-)

Hope this helps,
--
Sent with my mu4e

-- 
sane-devel mailing list: sane-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel
Unsubscribe: Send mail with subject "unsubscribe your_password"
 to sane-devel-requ...@lists.alioth.debian.org