Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #239299 > unrolled thread

CUPS permissions

Started byPeter Ehlert <pb21a@sdi-baja.com>
First post2021-08-25 14:50 +0200
Last post2021-08-26 17:30 +0200
Articles 20 on this page of 30 — 11 participants

Back to article view | Back to linux.debian.user


Contents

  CUPS permissions Peter Ehlert <pb21a@sdi-baja.com> - 2021-08-25 14:50 +0200
    Re: CUPS permissions Henning Follmann <hfollmann@itcfollmann.com> - 2021-08-25 18:30 +0200
      Re: CUPS permissions Peter Ehlert <pb21a@sdi-baja.com> - 2021-08-25 20:50 +0200
        Re: CUPS permissions Greg Wooledge <greg@wooledge.org> - 2021-08-25 21:20 +0200
          Re: CUPS permissions Peter Ehlert <pb21a@sdi-baja.com> - 2021-08-26 14:10 +0200
            Re: CUPS permissions Tixy <tixy@yxit.co.uk> - 2021-08-26 14:30 +0200
            Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 14:40 +0200
              Re: CUPS permissions Greg Wooledge <greg@wooledge.org> - 2021-08-26 15:00 +0200
                Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 17:20 +0200
                Re: CUPS permissions Peter Ehlert <pb21a@sdi-baja.com> - 2021-08-28 16:20 +0200
                Re: CUPS permissions >Fixed Peter Ehlert <peter@sdi-baja.com> - 2021-08-28 16:40 +0200
                  Re: CUPS permissions >Fixed Greg Wooledge <greg@wooledge.org> - 2021-08-28 21:40 +0200
                    Re: CUPS permissions >Fixed Brian <ad44@cityscape.co.uk> - 2021-08-28 22:10 +0200
                  Re: CUPS permissions >Fixed Brian <ad44@cityscape.co.uk> - 2021-08-28 21:40 +0200
            Re: CUPS permissions Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2021-08-26 14:40 +0200
            Re: CUPS permissions Charles Curley <charlescurley@charlescurley.com> - 2021-08-26 14:50 +0200
    Re: CUPS permissions Keith Bainbridge <keithrboz@gmail.com> - 2021-08-26 01:40 +0200
      Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 14:10 +0200
        Re: CUPS permissions Peter Ehlert <pb21a@sdi-baja.com> - 2021-08-26 15:20 +0200
          Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 16:50 +0200
            Re: CUPS permissions Greg Wooledge <greg@wooledge.org> - 2021-08-26 17:00 +0200
              Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 17:30 +0200
                Re: CUPS permissions Greg Wooledge <greg@wooledge.org> - 2021-08-26 17:40 +0200
                  Re: CUPS permissions "Andrew M.A. Cater" <amacater@einval.com> - 2021-08-26 18:50 +0200
                    Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 21:00 +0200
                  Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 19:30 +0200
                    Re: CUPS permissions <tomas@tuxteam.de> - 2021-08-26 20:20 +0200
                      Re: CUPS permissions Greg Wooledge <greg@wooledge.org> - 2021-08-26 20:30 +0200
                        Re: CUPS permissions <tomas@tuxteam.de> - 2021-08-26 21:00 +0200
              Re: CUPS permissions Brian <ad44@cityscape.co.uk> - 2021-08-26 17:30 +0200

Page 1 of 2  [1] 2  Next page →


#239299 — CUPS permissions

FromPeter Ehlert <pb21a@sdi-baja.com>
Date2021-08-25 14:50 +0200
SubjectCUPS permissions
Message-ID<CQ0vT-1GL-1@gated-at.bofh.it>
CUPS permissions

when I go to http://localhost:631/admin the dashboard is displayed as 
expected.

Manage Printers does display my MFCL3770CDW and I am (apparently) able 
to manage and edit the settings.

however
Add Printer gives> Unable to add printer: Forbidden

is this normal behavior? I do want to add another printer

[toc] | [next] | [standalone]


#239304

FromHenning Follmann <hfollmann@itcfollmann.com>
Date2021-08-25 18:30 +0200
Message-ID<CQ3WN-3PD-7@gated-at.bofh.it>
In reply to#239299
On Wed, Aug 25, 2021 at 05:40:36AM -0700, Peter Ehlert wrote:
> CUPS permissions
> 
> when I go to http://localhost:631/admin the dashboard is displayed as
> expected.
> 
> Manage Printers does display my MFCL3770CDW and I am (apparently) able to
> manage and edit the settings.
> 
> however
> Add Printer gives> Unable to add printer: Forbidden
> 
> is this normal behavior? I do want to add another printer
>

Yes, that is normal.
you should get a login dialog.
What works here depends. In most settings root/root-password will work.

-H

-- 
Henning Follmann           | hfollmann@itcfollmann.com

[toc] | [prev] | [next] | [standalone]


#239310

FromPeter Ehlert <pb21a@sdi-baja.com>
Date2021-08-25 20:50 +0200
Message-ID<CQ68i-557-11@gated-at.bofh.it>
In reply to#239304
On 8/25/21 9:27 AM, Henning Follmann wrote:
> On Wed, Aug 25, 2021 at 05:40:36AM -0700, Peter Ehlert wrote:
>> CUPS permissions
>>
>> when I go to http://localhost:631/admin the dashboard is displayed as
>> expected.
>>
>> Manage Printers does display my MFCL3770CDW and I am (apparently) able to
>> manage and edit the settings.
>>
>> however
>> Add Printer gives> Unable to add printer: Forbidden
>>
>> is this normal behavior? I do want to add another printer
>>
> Yes, that is normal.
> you should get a login dialog.
oops, I forgot this part:

It does not ask for a root password, it goes straight to "forbidden"


> What works here depends. In most settings root/root-password will work.

I will try installing the printer again and check.

>
> -H
>

[toc] | [prev] | [next] | [standalone]


#239312

FromGreg Wooledge <greg@wooledge.org>
Date2021-08-25 21:20 +0200
Message-ID<CQ6Bj-5un-1@gated-at.bofh.it>
In reply to#239310
On Wed, Aug 25, 2021 at 11:47:33AM -0700, Peter Ehlert wrote:
> 
> On 8/25/21 9:27 AM, Henning Follmann wrote:
> > On Wed, Aug 25, 2021 at 05:40:36AM -0700, Peter Ehlert wrote:
> > > CUPS permissions
> > > 
> > > when I go to http://localhost:631/admin the dashboard is displayed as
> > > expected.
> > > 
> > > Manage Printers does display my MFCL3770CDW and I am (apparently) able to
> > > manage and edit the settings.
> > > 
> > > however
> > > Add Printer gives> Unable to add printer: Forbidden
> > > 
> > > is this normal behavior? I do want to add another printer
> > > 
> > Yes, that is normal.
> > you should get a login dialog.
> oops, I forgot this part:
> 
> It does not ask for a root password, it goes straight to "forbidden"

I'm guessing you entered the "wrong" username earlier, and now your
browser is remembering it and isn't giving you the option to change it.

https://superuser.com/questions/596225/entered-wrong-username-at-cups-and-now-i-cant-manage-printers

Some people report restarting the browser is enough.  Some claim they
have to reboot.  Who knows.

[toc] | [prev] | [next] | [standalone]


#239327

FromPeter Ehlert <pb21a@sdi-baja.com>
Date2021-08-26 14:10 +0200
Message-ID<CQmmK-7FN-11@gated-at.bofh.it>
In reply to#239312
On 8/25/21 12:11 PM, Greg Wooledge wrote:
> On Wed, Aug 25, 2021 at 11:47:33AM -0700, Peter Ehlert wrote:
>> On 8/25/21 9:27 AM, Henning Follmann wrote:
>>> On Wed, Aug 25, 2021 at 05:40:36AM -0700, Peter Ehlert wrote:
>>>> CUPS permissions
>>>>
>>>> when I go to http://localhost:631/admin the dashboard is displayed as
>>>> expected.
>>>>
>>>> Manage Printers does display my MFCL3770CDW and I am (apparently) able to
>>>> manage and edit the settings.
>>>>
>>>> however
>>>> Add Printer gives> Unable to add printer: Forbidden
>>>>
>>>> is this normal behavior? I do want to add another printer
>>>>
>>> Yes, that is normal.
>>> you should get a login dialog.
>> oops, I forgot this part:
>>
>> It does not ask for a root password, it goes straight to "forbidden"
> I'm guessing you entered the "wrong" username earlier, and now your
> browser is remembering it and isn't giving you the option to change it.
>
> https://superuser.com/questions/596225/entered-wrong-username-at-cups-and-now-i-cant-manage-printers
>
> Some people report restarting the browser is enough.  Some claim they
> have to reboot.  Who knows.
>
thanks. restarting firefox worked.
I got the login dialog box

after login as (user)
Add Printer gives> Unable to add printer: Forbidden

back to square one

[toc] | [prev] | [next] | [standalone]


#239328

FromTixy <tixy@yxit.co.uk>
Date2021-08-26 14:30 +0200
Message-ID<CQmG5-7MN-9@gated-at.bofh.it>
In reply to#239327
On Thu, 2021-08-26 at 04:59 -0700, Peter Ehlert wrote:
[...]
> 
> thanks. restarting firefox worked.
> I got the login dialog box
> 
> after login as (user)
> Add Printer gives> Unable to add printer: Forbidden
> 
> back to square one
> 

I think the authentication dialog box uses javascript, you don't have
any plugins that might might block that do you? E.g. I needed noscript
set to enable scripts on localhost. Also, I don't know if Firefox's
'Block pop-up windows' setting may affect things.

-- 
Tixy

[toc] | [prev] | [next] | [standalone]


#239329

FromBrian <ad44@cityscape.co.uk>
Date2021-08-26 14:40 +0200
Message-ID<CQmPM-7Q9-11@gated-at.bofh.it>
In reply to#239327
On Thu 26 Aug 2021 at 13:23:58 +0100, mick crane wrote:

> On 2021-08-26 12:59, Peter Ehlert wrote:
> > On 8/25/21 12:11 PM, Greg Wooledge wrote:
> 
> > > Some people report restarting the browser is enough.  Some claim they
> > > have to reboot.  Who knows.
> > > 
> > thanks. restarting firefox worked.
> > I got the login dialog box
> > 
> > after login as (user)
> > Add Printer gives> Unable to add printer: Forbidden
> > 
> > back to square one
> 
> I've got a print server working but I've forgotten how.
> added a new printer a year or so ago.
> Might have been lpadmin or something.
> I do know always have to reboot after making changes.

Rebooting after adding a printer is *never* needed.

-- 
Brian.

[toc] | [prev] | [next] | [standalone]


#239332

FromGreg Wooledge <greg@wooledge.org>
Date2021-08-26 15:00 +0200
Message-ID<CQn97-7XU-3@gated-at.bofh.it>
In reply to#239329
On Thu, Aug 26, 2021 at 01:37:49PM +0100, Brian wrote:
> On Thu 26 Aug 2021 at 13:23:58 +0100, mick crane wrote:
> 
> > On 2021-08-26 12:59, Peter Ehlert wrote:
> > > On 8/25/21 12:11 PM, Greg Wooledge wrote:
> > 
> > > > Some people report restarting the browser is enough.  Some claim they
> > > > have to reboot.  Who knows.
> > > > 
> > > thanks. restarting firefox worked.
> > > I got the login dialog box
> > > 
> > > after login as (user)
> > > Add Printer gives> Unable to add printer: Forbidden
> > > 
> > > back to square one
> > 
> > I've got a print server working but I've forgotten how.
> > added a new printer a year or so ago.
> > Might have been lpadmin or something.
> > I do know always have to reboot after making changes.
> 
> Rebooting after adding a printer is *never* needed.

Agreed.

I suspect there's some *really* basic misunderstanding going on at some
level.  Let's start from the beginning.

In order to administer a printer in CUPS, you do the following things:


1) Make sure the root account has a PASSWORD.  Make sure you know it.
   Access to sudo doesn't count.

2) Install cups.

3) Visit http://localhost:631/ in a GUI web browser.  Make sure Javascript
   is allowed.

4) At some point, when you try to do stuff to the printers in the browser,
   you will be prompted for a username and password, using HTTP basic
   authentication.  When this occurs, you should login as root, using
   root's password.

5) If you screwed up and logged in as yourself, restart the web browser
   so that you can get the HTTP basic authentication dialog box again.  Go
   to step 4.

6) Once the printer is set up via the browser, you should be able to see
   it and print to it from the command line.  "lpstat -t" to see all of
   the printers and their status.  "lp" or "lpr" to print a text file.


Any variants on this procedure will require knowledge that I don't
personally possess.  E.g. if for some reason you refuse to set a root
password, then you may have to set up a printer-admin account which
has the appropriate privileges, and a password, and then use that
instead of root.  I don't know what those privs would be.

[toc] | [prev] | [next] | [standalone]


#239343

FromBrian <ad44@cityscape.co.uk>
Date2021-08-26 17:20 +0200
Message-ID<CQpkB-1mC-1@gated-at.bofh.it>
In reply to#239332
On Thu 26 Aug 2021 at 08:53:19 -0400, Greg Wooledge wrote:

[...]

> I suspect there's some *really* basic misunderstanding going on at some
> level.  Let's start from the beginning.
> 
> In order to administer a printer in CUPS, you do the following things:
> 
> 
> 1) Make sure the root account has a PASSWORD.  Make sure you know it.
>    Access to sudo doesn't count.

I have no experience of using sudo for the task in hand. Ubuntu uses
it by default but also puts the first user in the lpadmin group. Issues
with this seem to be almost non-existent.

> 2) Install cups.
> 
> 3) Visit http://localhost:631/ in a GUI web browser.  Make sure Javascript
>    is allowed.

Mmm. I invariabely use Lynx without a problem to access the CUPS web
interface and install a printer. Lynx doen't support Javascript.

> 4) At some point, when you try to do stuff to the printers in the browser,
>    you will be prompted for a username and password, using HTTP basic
>    authentication.  When this occurs, you should login as root, using
>    root's password.

Being asked for a username and password and logging in as root is my
experience too.

> 5) If you screwed up and logged in as yourself, restart the web browser
>    so that you can get the HTTP basic authentication dialog box again.  Go
>    to step 4.

I do not think CUPS allows logging in as a user unless that user is a
member of the lpadmin group. FWIW, my opinion is that "Unable to add
printer: Forbidden" is a conswquence of not being in that group.
 
> 6) Once the printer is set up via the browser, you should be able to see
>    it and print to it from the command line.  "lpstat -t" to see all of
>    the printers and their status.  "lp" or "lpr" to print a text file.

Agreed.

-- 
Brian.





> 
> 
> Any variants on this procedure will require knowledge that I don't
> personally possess.  E.g. if for some reason you refuse to set a root
> password, then you may have to set up a printer-admin account which
> has the appropriate privileges, and a password, and then use that
> instead of root.  I don't know what those privs would be.
> 

[toc] | [prev] | [next] | [standalone]


#239385

FromPeter Ehlert <pb21a@sdi-baja.com>
Date2021-08-28 16:20 +0200
Message-ID<CR7lD-41S-7@gated-at.bofh.it>
In reply to#239332

[Multipart message — attachments visible in raw view] — view raw

On 8/26/21 5:53 AM, Greg Wooledge wrote:
> On Thu, Aug 26, 2021 at 01:37:49PM +0100, Brian wrote:
>> On Thu 26 Aug 2021 at 13:23:58 +0100, mick crane wrote:
>>
>>> On 2021-08-26 12:59, Peter Ehlert wrote:
>>>> On 8/25/21 12:11 PM, Greg Wooledge wrote:
>>>>> Some people report restarting the browser is enough.  Some claim they
>>>>> have to reboot.  Who knows.
>>>>>
>>>> thanks. restarting firefox worked.
>>>> I got the login dialog box
>>>>
>>>> after login as (user)
>>>> Add Printer gives> Unable to add printer: Forbidden
>>>>
>>>> back to square one
>>> I've got a print server working but I've forgotten how.
>>> added a new printer a year or so ago.
>>> Might have been lpadmin or something.
>>> I do know always have to reboot after making changes.
>> Rebooting after adding a printer is *never* needed.
> Agreed.
>
> I suspect there's some *really* basic misunderstanding going on at some
> level.  Let's start from the beginning.
Thanks for this list of basics. I am now beginning to understand.
>
> In order to administer a printer in CUPS, you do the following things:
>
>
> 1) Make sure the root account has a PASSWORD.  Make sure you know it.
>     Access to sudo doesn't count.
I never use sudo, no users get sudo privileges on any of my machines.
>
> 2) Install cups.
* cups was not installed by default. The Brother installer did flag that 
first off, easily corrected
>
> 3) Visit http://localhost:631/ in a GUI web browser.  Make sure 
> Javascript
>     is allowed.
>
> 4) At some point, when you try to do stuff to the printers in the 
> browser,
>     you will be prompted for a username and password, using HTTP basic
>     authentication.  When this occurs, you should login as root, using
>     root's password.

BINGO: I was not using root

>
> 5) If you screwed up and logged in as yourself, restart the web browser
>     so that you can get the HTTP basic authentication dialog box 
> again.  Go
>     to step 4.
>
> 6) Once the printer is set up via the browser, you should be able to see
>     it and print to it from the command line.  "lpstat -t" to see all of
>     the printers and their status.  "lp" or "lpr" to print a text file.
$ lpstat -t
scheduler is running
no system default destination
device for MFCL3770CDW: 
dnssd://Brother%20MFC-L3770CDW%20series._ipp._tcp.local/?uuid=e3248000-80ce-11db-8000-b4220033103b
MFCL3770CDW accepting requests since Sun 22 Aug 2021 05:44:11 AM PDT
printer MFCL3770CDW is idle.  enabled since Sun 22 Aug 2021 05:44:11 AM PDT
>
> Any variants on this procedure will require knowledge that I don't
> personally possess.  E.g. if for some reason you refuse to set a root
> password, then you may have to set up a printer-admin account which
> has the appropriate privileges, and a password, and then use that
> instead of root.  I don't know what those privs would be.
>
Summary:

I removed my browser cookie for "localhost"

restarted the browser

when CUPS requested a password I used "root"

I am now able to add printers and edit all options

Thanks to all for the assistance and Education

[toc] | [prev] | [next] | [standalone]


#239388 — Re: CUPS permissions >Fixed

FromPeter Ehlert <peter@sdi-baja.com>
Date2021-08-28 16:40 +0200
SubjectRe: CUPS permissions >Fixed
Message-ID<CR7F0-48A-7@gated-at.bofh.it>
In reply to#239332
On 8/26/21 5:53 AM, Greg Wooledge wrote:
> On Thu, Aug 26, 2021 at 01:37:49PM +0100, Brian wrote:
>> On Thu 26 Aug 2021 at 13:23:58 +0100, mick crane wrote:
>>
>>> On 2021-08-26 12:59, Peter Ehlert wrote:
>>>> On 8/25/21 12:11 PM, Greg Wooledge wrote:
>>>>> Some people report restarting the browser is enough.  Some claim they
>>>>> have to reboot.  Who knows.
>>>>>
>>>> thanks. restarting firefox worked.
>>>> I got the login dialog box
>>>>
>>>> after login as (user)
>>>> Add Printer gives> Unable to add printer: Forbidden
>>>>
>>>> back to square one
>>> I've got a print server working but I've forgotten how.
>>> added a new printer a year or so ago.
>>> Might have been lpadmin or something.
>>> I do know always have to reboot after making changes.
>> Rebooting after adding a printer is *never* needed.
> Agreed.
>
> I suspect there's some *really* basic misunderstanding going on at some
> level.  Let's start from the beginning.
Thanks for this list of basics. I am now beginning to understand.
>
> In order to administer a printer in CUPS, you do the following things:
>
>
> 1) Make sure the root account has a PASSWORD.  Make sure you know it.
>     Access to sudo doesn't count.
I never use sudo, no users get sudo privileges on any of my machines.
>
> 2) Install cups.
* cups was not installed by default. The Brother installer did flag that 
first off, easily corrected
>
> 3) Visit http://localhost:631/ in a GUI web browser.  Make sure Javascript
>     is allowed.
>
> 4) At some point, when you try to do stuff to the printers in the browser,
>     you will be prompted for a username and password, using HTTP basic
>     authentication.  When this occurs, you should login as root, using
>     root's password.

BINGO: I was not using root

>
> 5) If you screwed up and logged in as yourself, restart the web browser
>     so that you can get the HTTP basic authentication dialog box again.  Go
>     to step 4.
>
> 6) Once the printer is set up via the browser, you should be able to see
>     it and print to it from the command line.  "lpstat -t" to see all of
>     the printers and their status.  "lp" or "lpr" to print a text file.
$ lpstat -t
scheduler is running
no system default destination
device for MFCL3770CDW: 
dnssd://Brother%20MFC-L3770CDW%20series._ipp._tcp.local/?uuid=e3248000-80ce-11db-8000-b4220033103b
MFCL3770CDW accepting requests since Sun 22 Aug 2021 05:44:11 AM PDT
printer MFCL3770CDW is idle.  enabled since Sun 22 Aug 2021 05:44:11 AM PDT
>
> Any variants on this procedure will require knowledge that I don't
> personally possess.  E.g. if for some reason you refuse to set a root
> password, then you may have to set up a printer-admin account which
> has the appropriate privileges, and a password, and then use that
> instead of root.  I don't know what those privs would be.
>
Summary:

I removed my browser cookie for "localhost"

restarted the browser

when CUPS requested a password I used "root"

I am now able to add printers and edit all options

Thanks to all for the assistance and Education

[toc] | [prev] | [next] | [standalone]


#239399 — Re: CUPS permissions >Fixed

FromGreg Wooledge <greg@wooledge.org>
Date2021-08-28 21:40 +0200
SubjectRe: CUPS permissions >Fixed
Message-ID<CRclk-6V4-1@gated-at.bofh.it>
In reply to#239388
On Sat, Aug 28, 2021 at 08:31:56PM +0100, Brian wrote:
> Nobody should be logging into the web interface as root.

As far as "nobody should...", I don't see the harm.  It's not like the
password is going over a network cable (or wireless EM).  It's just
loopback.

Also note the official instructions from the CUPS web site:

http://www.cups.org/doc/overview.html

  When you are asked for a username and password, enter your login
  username and password or the "root" username and password. On macOS®,
  the login username (or "short name") is typically your first and last
  name in lowercase.

Conveniently, there are no useful instructions on this page that tell
you how to arrange it so that your regular username and password will
work.  That only leaves "root".

Then again, there are no useful instructions on this page about how
to actually *get to* the web interface.  You have to find that on your
own.

There's truly a lot to be desired about this documentation.

[toc] | [prev] | [next] | [standalone]


#239402 — Re: CUPS permissions >Fixed

FromBrian <ad44@cityscape.co.uk>
Date2021-08-28 22:10 +0200
SubjectRe: CUPS permissions >Fixed
Message-ID<CRcOl-7ka-1@gated-at.bofh.it>
In reply to#239399
On Sat 28 Aug 2021 at 15:38:40 -0400, Greg Wooledge wrote:

> On Sat, Aug 28, 2021 at 08:31:56PM +0100, Brian wrote:
> > Nobody should be logging into the web interface as root.
> 
> As far as "nobody should...", I don't see the harm.  It's not like the
> password is going over a network cable (or wireless EM).  It's just
> loopback.
> 
> Also note the official instructions from the CUPS web site:
> 
> http://www.cups.org/doc/overview.html
> 
>   When you are asked for a username and password, enter your login
>   username and password or the "root" username and password. On macOS®,
>   the login username (or "short name") is typically your first and last
>   name in lowercase.
> 
> Conveniently, there are no useful instructions on this page that tell
> you how to arrange it so that your regular username and password will
> work.  That only leaves "root".
> 
> Then again, there are no useful instructions on this page about how
> to actually *get to* the web interface.  You have to find that on your
> own.
> 
> There's truly a lot to be desired about this documentation.

I suggest you submit a report to

 htps://github.com/OpenPrinting/cups/issues

Your points are pertinent.

-- 

Brian.

> 

[toc] | [prev] | [next] | [standalone]


#239401 — Re: CUPS permissions >Fixed

FromBrian <ad44@cityscape.co.uk>
Date2021-08-28 21:40 +0200
SubjectRe: CUPS permissions >Fixed
Message-ID<CRclk-6V4-3@gated-at.bofh.it>
In reply to#239388
On Sat 28 Aug 2021 at 07:11:55 -0700, Peter Ehlert wrote:

> 
> On 8/26/21 5:53 AM, Greg Wooledge wrote:

[...]

> > 2) Install cups.
> * cups was not installed by default. The Brother installer did flag that
> first off, easily corrected

A print queue was installed by Sun 22 Aug 2021 05:44:11 AM PDT. So cups
was present when you first posted.

> > 3) Visit http://localhost:631/ in a GUI web browser.  Make sure Javascript
> >     is allowed.
> > 
> > 4) At some point, when you try to do stuff to the printers in the browser,
> >     you will be prompted for a username and password, using HTTP basic
> >     authentication.  When this occurs, you should login as root, using
> >     root's password.
> 
> BINGO: I was not using root

That's not correct. Your user was not given root priviledges is the
correct conclusiom. You, root  and the user are not the same entities.
What does "I" refer to?

A responsible administrator does not hand out administrator priviledges
to anyone who comes along. Put the user into the lpadmin group.

Nobody should be logging into the web interface as root.

Glad you got it sorted, though.

(Incidentally, why you have any need for the Brother drivers is beyond
me).

-- 
Brian.

> 
> > 
> > 5) If you screwed up and logged in as yourself, restart the web browser
> >     so that you can get the HTTP basic authentication dialog box again.  Go
> >     to step 4.
> > 
> > 6) Once the printer is set up via the browser, you should be able to see
> >     it and print to it from the command line.  "lpstat -t" to see all of
> >     the printers and their status.  "lp" or "lpr" to print a text file.
> $ lpstat -t
> scheduler is running
> no system default destination
> device for MFCL3770CDW: dnssd://Brother%20MFC-L3770CDW%20series._ipp._tcp.local/?uuid=e3248000-80ce-11db-8000-b4220033103b
> MFCL3770CDW accepting requests since Sun 22 Aug 2021 05:44:11 AM PDT
> printer MFCL3770CDW is idle.  enabled since Sun 22 Aug 2021 05:44:11 AM PDT
> > 
> > Any variants on this procedure will require knowledge that I don't
> > personally possess.  E.g. if for some reason you refuse to set a root
> > password, then you may have to set up a printer-admin account which
> > has the appropriate privileges, and a password, and then use that
> > instead of root.  I don't know what those privs would be.
> > 
> Summary:
> 
> I removed my browser cookie for "localhost"
> 
> restarted the browser
> 
> when CUPS requested a password I used "root"
> 
> I am now able to add printers and edit all options
> 
> Thanks to all for the assistance and Education
> 
> 

[toc] | [prev] | [next] | [standalone]


#239330

FromEduardo M KALINOWSKI <eduardo@kalinowski.com.br>
Date2021-08-26 14:40 +0200
Message-ID<CQmPM-7Q9-27@gated-at.bofh.it>
In reply to#239327
On 26/08/2021 08:59, Peter Ehlert wrote:
> thanks. restarting firefox worked.
> I got the login dialog box
>
> after login as (user)
> Add Printer gives> Unable to add printer: Forbidden
>
> back to square one

Users don't ordinarily have permission to add printers, you should login 
as root.

It's possible to grant this permission to users, but you'll have to look 
it up how this is done.


-- 
Alive without breath,
As cold as death;
Never thirsty, ever drinking,
All in mail never clinking.

Eduardo M KALINOWSKI
eduardo@kalinowski.com.br

[toc] | [prev] | [next] | [standalone]


#239331

FromCharles Curley <charlescurley@charlescurley.com>
Date2021-08-26 14:50 +0200
Message-ID<CQmZs-7Up-11@gated-at.bofh.it>
In reply to#239327
On Thu, 26 Aug 2021 04:59:42 -0700
Peter Ehlert <pb21a@sdi-baja.com> wrote:

> thanks. restarting firefox worked.
> I got the login dialog box
> 
> after login as (user)
> Add Printer gives> Unable to add printer: Forbidden
> 
> back to square one

Try logging in as root.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]


#239315

FromKeith Bainbridge <keithrboz@gmail.com>
Date2021-08-26 01:40 +0200
Message-ID<CQaEV-7QV-1@gated-at.bofh.it>
In reply to#239299
On 25/8/21 22:40, Peter Ehlert wrote:
> CUPS permissions
> 
> when I go to http://localhost:631/admin the dashboard is displayed as 
> expected.
> 
> Manage Printers does display my MFCL3770CDW and I am (apparently) able 
> to manage and edit the settings.
> 
> however
> Add Printer gives> Unable to add printer: Forbidden
> 
> is this normal behavior? I do want to add another printer
> 

Have you (username) joined lpadmin (group)?
-- 
All the best

Keith Bainbridge

keith.bainbridge.3216@gmail.com
0447 667 468

[toc] | [prev] | [next] | [standalone]


#239326

FromBrian <ad44@cityscape.co.uk>
Date2021-08-26 14:10 +0200
Message-ID<CQmmJ-7FN-9@gated-at.bofh.it>
In reply to#239315
On Thu 26 Aug 2021 at 09:16:31 +1000, Keith Bainbridge wrote:

> On 25/8/21 22:40, Peter Ehlert wrote:
> > CUPS permissions
> > 
> > when I go to http://localhost:631/admin the dashboard is displayed as
> > expected.
> > 
> > Manage Printers does display my MFCL3770CDW and I am (apparently) able
> > to manage and edit the settings.
> > 
> > however
> > Add Printer gives> Unable to add printer: Forbidden
> > 
> > is this normal behavior? I do want to add another printer
> > 
> 
> Have you (username) joined lpadmin (group)?

It would be useful to have the outputs of

  groups

and

  grep SystemGroup /etc/cups/cups-files.conf

from the OP.

-- 
Brian.

[toc] | [prev] | [next] | [standalone]


#239333

FromPeter Ehlert <pb21a@sdi-baja.com>
Date2021-08-26 15:20 +0200
Message-ID<CQnsu-8kf-17@gated-at.bofh.it>
In reply to#239326
On 8/26/21 5:07 AM, Brian wrote:
> On Thu 26 Aug 2021 at 09:16:31 +1000, Keith Bainbridge wrote:
>
>> On 25/8/21 22:40, Peter Ehlert wrote:
>>> CUPS permissions
>>>
>>> when I go to http://localhost:631/admin the dashboard is displayed as
>>> expected.
>>>
>>> Manage Printers does display my MFCL3770CDW and I am (apparently) able
>>> to manage and edit the settings.
>>>
>>> however
>>> Add Printer gives> Unable to add printer: Forbidden
>>>
>>> is this normal behavior? I do want to add another printer
>>>
>> Have you (username) joined lpadmin (group)?
> It would be useful to have the outputs of
>
>    groups
$ groups
peter cdrom floppy audio dip video plugdev netdev
>
> and
>
>    grep SystemGroup /etc/cups/cups-files.conf
$ grep SystemGroup /etc/cups/cups-files.conf
SystemGroup lpadmin
>
> from the OP.
>

[toc] | [prev] | [next] | [standalone]


#239340

FromBrian <ad44@cityscape.co.uk>
Date2021-08-26 16:50 +0200
Message-ID<CQoRz-Ub-9@gated-at.bofh.it>
In reply to#239333
On Thu 26 Aug 2021 at 06:18:21 -0700, Peter Ehlert wrote:

[...]

> > It would be useful to have the outputs of
> > 
> >    groups
> $ groups
> peter cdrom floppy audio dip video plugdev netdev
> > 
> > and
> > 
> >    grep SystemGroup /etc/cups/cups-files.conf
> $ grep SystemGroup /etc/cups/cups-files.conf
> SystemGroup lpadmin
> > 
> > from the OP.

Follow Keith Bainbridge's advice and add your user to the lpadmin
group. Edit /etc/group and /etc/group- to do this. I would use 'vigr'
and 'vigr -s'.

-- 
Brian.

[toc] | [prev] | [next] | [standalone]


Page 1 of 2  [1] 2  Next page →

Back to top | Article view | linux.debian.user


csiph-web