Sie sind nicht angemeldet.

1

14.02.2012, 23:05

Cups Webinterface - Authentifikation

Hallo Leute

Hab mir einen Cups-Printserver aufgesetzt. Der Server funktioniert und das Webinterface ist erreichbar. Ein paar Probleme sind aber zu lösen wo ich nicht weiter komme.
Zum Ersten musste ich einen "ServerAlias" in die /etc/cups/cupsd.conf eintragen, da sonst der Server nur mit dem Hostnamen und nicht mit der FQDN erreichbar war. Seltsam...

Zum Zweiten soll man sich ins Webinterface einloggen müssen um überhaupt etwas zu sehen. Standard ist ja das man automatisch auf HTTPS weitergeleitet wird, wenn z.B. einen Drucker hinzufügen möchte. Also habe ich die Config wie folgt abgeändert, und ja, man wird nach dem Benutzer und Passwort gefragt.

Quellcode

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
DefaultAuthType Basic
<Location />
  AuthType Default
  Require user @SYSTEM
  # Allow remote administration...
  Order allow,deny
  Allow all
</Location>
<Location /admin>
  AuthType Default
  Require user @SYSTEM
  # Allow remote administration...
  Order allow,deny
  Allow all
</Location>
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  # Allow remote access to the configuration files...
  Order allow,deny
  Allow all
</Location>

Problem dabei wenn ich dann einen neue Drucker hinzufügen möchte kann ich das nicht, auch nicht als root. Siehe Bild im Anhang.
Hoffe ihr könnt mir da weiterhelfen.

lg
boospy
»boospy« hat folgende Datei angehängt:
  • cups-fehler.jpeg (14,04 kB - 3 mal heruntergeladen - zuletzt: 17.02.2012, 14:43)
Desto mehr Wissen man bekommt, desto mehr wird einem klar das man kein Wissen hat.
>>>> boospy@jabber.ccc.de <<<<

2

15.02.2012, 06:45

Setze mal den LogLevel in der /etc/cups/cupsd.conf höher und guck dir die logs in /var/log/cups dann genauer an. Bringt er da was nützliches?
http://www.dyle.org
IM-Account (Jabber!) sind auf meiner HP ...
There is no place like /home

http://www.gentooforum.de
http://www.gentoofreunde.org

<div>how to annoy a web developer?</span>

3

16.02.2012, 20:04

Jo, also die Error.log zeigt folgendes:

Quellcode

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
D [16/Feb/2012:18:45:37 +0100] cupsdReadClient: 14 POST /admin/ HTTP/1.1
D [16/Feb/2012:18:45:37 +0100] cupsdSetBusyState: Active clients                                                                                  
D [16/Feb/2012:18:45:37 +0100] cupsdAuthorize: Authorized as root using Basic                                                                     
D [16/Feb/2012:18:45:37 +0100] cupsdIsAuthorized: username="root"                                                                                 
D [16/Feb/2012:18:45:37 +0100] [CGI] argv[0] = "/usr/libexec/cups/cgi-bin/admin.cgi"                                                              
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[0] = "CUPS_CACHEDIR=/var/cache/cups"                                                                    
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[1] = "CUPS_DATADIR=/usr/share/cups"                                                                     
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[2] = "CUPS_DOCROOT=/usr/share/cups/html"                                                                
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[3] = "CUPS_FONTPATH=/usr/share/cups/fonts"                                                              
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[4] = "CUPS_REQUESTROOT=/var/spool/cups"                                                                 
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[5] = "CUPS_SERVERBIN=/usr/libexec/cups"                                                                 
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[6] = "CUPS_SERVERROOT=/etc/cups"                                                                        
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[7] = "CUPS_STATEDIR=/var/run/cups"                                                                      
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[8] = "HOME=/var/spool/cups/tmp"                                                                         
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[9] = "PATH=/usr/libexec/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin"                                   
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[10] = "SERVER_ADMIN=root@itmgmt"                                                                        
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[11] = "SOFTWARE=CUPS/1.4.8"                                                                             
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[12] = "TMPDIR=/var/spool/cups/tmp"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[13] = "USER=root"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[14] = "CUPS_SERVER=/var/run/cups/cups.sock"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[15] = "CUPS_ENCRYPTION=IfRequested"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[16] = "IPP_PORT=631"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[17] = "AUTH_TYPE=Basic"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[18] = "LANG=de_DE.UTF8"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[19] = "REDIRECT_STATUS=1"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[20] = "GATEWAY_INTERFACE=CGI/1.1"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[21] = "SERVER_NAME=itmgmt.osit.cc"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[22] = "SERVER_PORT=631"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[23] = "REMOTE_ADDR=[v1.2001:460:1f15:1be8:21f:1fef:fe71:faf3]"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[24] = "REMOTE_HOST=[v1.2001:460:1f15:1be8:21f:1fef:fe71:faf3]"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[25] = "SCRIPT_NAME=/admin/"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[26] = "SCRIPT_FILENAME=/usr/share/cups/html/admin/"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[27] = "REMOTE_USER=root"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[28] = "SERVER_PROTOCOL=HTTP/1.1"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[29] = "HTTP_COOKIE=org.cups.sid=6a0eb69ea93d20d2a6676be35fcff46b"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[30] = "HTTP_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.46 Safari/535.11"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[31] = "HTTP_REFERER=https://cups.tux.local:631/admin"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[32] = "REQUEST_METHOD=POST"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[33] = "CONTENT_LENGTH=60"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[34] = "CONTENT_TYPE=application/x-www-form-urlencoded"
D [16/Feb/2012:18:45:37 +0100] [CGI] envp[35] = "HTTPS=ON"
D [16/Feb/2012:18:45:37 +0100] [CGI] Started /usr/libexec/cups/cgi-bin/admin.cgi (PID 590)
I [16/Feb/2012:18:45:37 +0100] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=590)
D [16/Feb/2012:18:45:37 +0100] cupsdSendCommand: 14 file=16
D [16/Feb/2012:18:45:37 +0100] [CGI] admin.cgi started...
D [16/Feb/2012:18:45:37 +0100] cupsdAcceptClient: 17 from localhost (Domain)
D [16/Feb/2012:18:45:37 +0100] [CGI] http=0x7fb0a50dd920
D [16/Feb/2012:18:45:37 +0100] [CGI] org.cups.sid cookie is "6a0eb69ea93d20d2a6676be35fcff46b"
D [16/Feb/2012:18:45:37 +0100] [CGI] op="add-printer"...
D [16/Feb/2012:18:45:37 +0100] [CGI] do_am_printer: DEVICE_URI="(null)"
D [16/Feb/2012:18:45:37 +0100] [CGI] Getting list of devices...
D [16/Feb/2012:18:45:37 +0100] cupsdReadClient: 17 POST / HTTP/1.1
D [16/Feb/2012:18:45:37 +0100] cupsdAuthorize: No authentication data provided.
D [16/Feb/2012:18:45:37 +0100] cupsdIsAuthorized: username=""
D [16/Feb/2012:18:45:37 +0100] cupsdSendHeader: 17 WWW-Authenticate: Basic realm="CUPS", trc="y"
D [16/Feb/2012:18:45:37 +0100] cupsdCloseClient: 17
D [16/Feb/2012:18:45:37 +0100] cupsdAcceptClient: 17 from localhost (Domain)
E [16/Feb/2012:18:45:37 +0100] [CGI] CUPS-Get-Devices request failed with status 502: Unbekannt
D [16/Feb/2012:18:45:37 +0100] PID 590 (/usr/libexec/cups/cgi-bin/admin.cgi) exited with no errors.
D [16/Feb/2012:18:45:37 +0100] cupsdReadClient: 17 POST / HTTP/1.1
E [16/Feb/2012:18:45:37 +0100] cupsdAuthorize: Local authentication certificate not found!
D [16/Feb/2012:18:45:37 +0100] cupsdIsAuthorized: username=""
D [16/Feb/2012:18:45:37 +0100] cupsdSendHeader: 17 WWW-Authenticate: Basic realm="CUPS", trc="y"
D [16/Feb/2012:18:45:37 +0100] cupsdCloseClient: 17
D [16/Feb/2012:18:45:37 +0100] Script header: Content-Type: text/html;charset=utf-8
D [16/Feb/2012:18:45:37 +0100] Script header: 
D [16/Feb/2012:18:45:37 +0100] cupsdSetBusyState: Not busy

Und die Access.log:

Quellcode

1
2
[v1.2001:460:1f15:1be8:21f:1fef:fe71:faf3] - root [16/Feb/2012:18:49:32 +0100] "POST /admin/ HTTP/1.1" 200 60 - -
[v1.2001:460:1f15:1be8:21f:1fef:fe71:faf3] - root [16/Feb/2012:18:49:32 +0100] "POST /admin/ HTTP/1.1" 200 1970 - -


lg
boospy
Desto mehr Wissen man bekommt, desto mehr wird einem klar das man kein Wissen hat.
>>>> boospy@jabber.ccc.de <<<<

4

17.02.2012, 07:40

Quellcode

1
2
3
4
E [16/Feb/2012:18:45:37 +0100] [CGI] CUPS-Get-Devices request failed with status 502: Unbekannt
D [16/Feb/2012:18:45:37 +0100] PID 590 (/usr/libexec/cups/cgi-bin/admin.cgi) exited with no errors.
D [16/Feb/2012:18:45:37 +0100] cupsdReadClient: 17 POST / HTTP/1.1
E [16/Feb/2012:18:45:37 +0100] cupsdAuthorize: Local authentication certificate not found!


Dazu finde ich spontan http://www.linuxquestions.org/questions/…ication-508558/ ... wie sieht es da mit den Zertifikaten aus?
http://www.dyle.org
IM-Account (Jabber!) sind auf meiner HP ...
There is no place like /home

http://www.gentooforum.de
http://www.gentoofreunde.org

<div>how to annoy a web developer?</span>

5

28.02.2012, 23:09

Hmm... seltsam. Also die Zertifikate gibt es.
Desto mehr Wissen man bekommt, desto mehr wird einem klar das man kein Wissen hat.
>>>> boospy@jabber.ccc.de <<<<