Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
CUPS 1.2.1 Webgui does not work
View unanswered posts
View posts from last 24 hours
View posts from last 7 days

 
Reply to topic    Gentoo Forums Forum Index Desktop Environments
View previous topic :: View next topic  
Author Message
antares2001
Guru
Guru


Joined: 02 Mar 2004
Posts: 339
Location: Germany

PostPosted: Fri Jul 14, 2006 8:37 am    Post subject: CUPS 1.2.1 Webgui does not work Reply with quote

Hello!

I've installed CUPS 1.2.1 on my Server machine that I want to use to print from client machines (also Linux workstations).

When I want to make settings in the web interface of CUPS, I receive the following error:

Quote:
426 Upgrade Required

You must access this page using the URL https://192.168.10.1:631/admin.


I am never asked for a username or password.

Some more info:

Quote:
# ps aux|grep cupsd
root 8756 3.5 0.1 22180 2468 ? Ss 10:27 0:01 /usr/sbin/cupsd


Quote:
# tail /var/log/cups/error_log
E [14/Jul/2006:10:27:54 +0200] encrypt_client: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
I [14/Jul/2006:10:27:57 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8810)
I [14/Jul/2006:10:27:57 +0200] Started "/usr/libexec/cups/daemon/cups-deviced" (pid=8811)
C [14/Jul/2006:10:27:58 +0200] cupsdUpdateCGI: error reading from CGI error pipe - No such file or directory
C [14/Jul/2006:10:27:58 +0200] cupsdUpdateCGI: error reading from CGI error pipe - No such file or directory
I [14/Jul/2006:10:27:59 +0200] Started "/usr/libexec/cups/cgi-bin/printers.cgi" (pid=8829)
E [14/Jul/2006:10:27:59 +0200] CUPS-Get-Default client-error-not-found: No default printer
I [14/Jul/2006:10:28:01 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8830)
I [14/Jul/2006:10:28:02 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8831)
E [14/Jul/2006:10:28:02 +0200] CUPS-Add-Modify-Printer: Unauthorized


Quote:
# cupsd.conf
# Restrict access to the admin pages...
<Location /admin>
# Encryption Required
Order allow,deny
Allow From all
</Location>


Any ideas? Thank you.
_________________
* Toshiba SM30X Notebook, Pentium-M 725 CPU, ATI Radeon 9700, 512MB RAM, 80GB
* Pentium D 820 2,8 GHz (EM64T), Geforce6, 200GB + 40GB ATA, 250GB SATA2, WinFastTV 2000XP, 1,5GB RAM
Gentoo Linux 2006.1
Back to top
View user's profile Send private message
idella4
Retired Dev
Retired Dev


Joined: 09 Jun 2006
Posts: 1600
Location: Australia, Perth

PostPosted: Fri Jul 14, 2006 10:09 am    Post subject: Reply with quote

well the config file is /etc/cups/cupsd.conf.

I'd have thought the regular config gui that you run for cups included a username password entry,
though I did a quick search and couldn't find one in the config file..

Try removing the s from htpps, and/or remove the admin folder from https://192.168.10.1:631/admin
to see if you can get into the web part from the inside.
_________________
idella4@aus
Back to top
View user's profile Send private message
wynn
Advocate
Advocate


Joined: 01 Apr 2005
Posts: 2421
Location: UK

PostPosted: Sat Jul 15, 2006 10:15 am    Post subject: Reply with quote

The error shown in error_log below throws up a number of hits on the Internet saying that it's a certificate problem.

You appear to be getting through to your server so maybe you have a valid certificate which is authenticating you.

A similar problem here (net-print/cups-1.2.1-r2). On trying to delete a printer using remote administration from another machine, the message
Code:
426 Upgrade Required

You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200.

followed by a popup from Firefox (1.5.0.4)
Code:
Firefox and 192.168.1.36 cannot communicate securely because they
have no common encryption algorithms.

with the entry in the server's (192.168.1.36) /var/log/cups/error_log
Code:
D [15/Jul/2006:10:46:52 +0100] cupsdReadClient: 7 GET /admin/?op=delete-printer&printer_na
me=EPL6200 HTTP/1.1
D [15/Jul/2006:10:46:52 +0100] cupsdReadClient: 7 Browser asked for language "en-us.utf-8"
...
D [15/Jul/2006:10:46:52 +0100] cupsdAuthorize: No authentication data provided.
D [15/Jul/2006:10:46:52 +0100] cupsdSendError: 7 code=426 (Upgrade Required)
D [15/Jul/2006:10:46:52 +0100] cupsdCloseClient: 7
D [15/Jul/2006:10:46:55 +0100] cupsdAcceptClient: 7 from 192.168.1.37:631 (IPv4)
E [15/Jul/2006:10:46:55 +0100] encrypt_client: Unable to encrypt connection from 192.168.1
.37!
E [15/Jul/2006:10:46:55 +0100] encrypt_client: error:1408A0C1:SSL routines:SSL3_GET_CLIENT
_HELLO:no shared cipher


A message has been put into the cups.bugs forum on http://www.cups.org/newsgroups.php
Back to top
View user's profile Send private message
j.crottaz
n00b
n00b


Joined: 12 Jul 2006
Posts: 16

PostPosted: Mon Jul 17, 2006 1:21 pm    Post subject: Reply with quote

Damn! .. it's working with this sh** of IE....
Back to top
View user's profile Send private message
bbe
Apprentice
Apprentice


Joined: 10 Jan 2005
Posts: 158
Location: UK

PostPosted: Mon Jul 17, 2006 2:21 pm    Post subject: Reply with quote

I have the same problem as you wynn.
Back to top
View user's profile Send private message
wynn
Advocate
Advocate


Joined: 01 Apr 2005
Posts: 2421
Location: UK

PostPosted: Mon Jul 17, 2006 3:01 pm    Post subject: Reply with quote

bbe:
Quote:
I have the same problem as you wynn

I got a very quick answer from Michael Sweet, the CUPS developer:

Quote:
> cups-1.2.1-r2 on Gentoo 2006.0
>
> The server is set up (using local administration) to allow remote administration. On trying to delete a printer from another machine (running the same version of CUPS on Gentoo 2006.0 as well), the messages
>
> "426 Upgrade Required
>
> You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200."
> ...

You need to create an encryption certificate. It sounds like Gentoo
is using OpenSSL instead of GNU TLS, so you'll need to run:

openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
-out /etc/cups/ssl/server.crt -days 365 -nodes

to create a self-signed SSL encryption key and certificate.

If you do this on the server — in this example 192.168.1.36 — it works. The only thing to watch out for is that the "Common Name" entry is the same as 192.168.1.36's hostname.

Keep a copy of thei post because, in "-days 365", the certificate will expire :)
Back to top
View user's profile Send private message
bbe
Apprentice
Apprentice


Joined: 10 Jan 2005
Posts: 158
Location: UK

PostPosted: Mon Jul 17, 2006 4:07 pm    Post subject: Reply with quote

Thanks for the answer wynn. Is this a gentoo bug then? Shouldn't this be handled by the ebuild?
Back to top
View user's profile Send private message
wynn
Advocate
Advocate


Joined: 01 Apr 2005
Posts: 2421
Location: UK

PostPosted: Mon Jul 17, 2006 6:29 pm    Post subject: Reply with quote

Quote:
Is this a gentoo bug then? Shouldn't this be handled by the ebuild?
I'm just an ordinary peon, not even "Tux's lil' helper" ( :o I wasn't and now I am!) let alone a dev :)

However, as the certificate is only required on a machine running CUPS which is going to be administered remotely, it's a decision which an ebuiild can't make.

As CUPS 1.2.1 is not considered stable yet, it's probably too early to add it to the Gentoo CUPS documentation.
Back to top
View user's profile Send private message
dreamdreams
n00b
n00b


Joined: 25 Nov 2002
Posts: 43

PostPosted: Sat Jul 29, 2006 2:08 am    Post subject: Reply with quote

wynn wrote:
bbe:
Quote:
I have the same problem as you wynn

I got a very quick answer from Michael Sweet, the CUPS developer:

Quote:
> cups-1.2.1-r2 on Gentoo 2006.0
>
> The server is set up (using local administration) to allow remote administration. On trying to delete a printer from another machine (running the same version of CUPS on Gentoo 2006.0 as well), the messages
>
> "426 Upgrade Required
>
> You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200."
> ...

You need to create an encryption certificate. It sounds like Gentoo
is using OpenSSL instead of GNU TLS, so you'll need to run:

openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
-out /etc/cups/ssl/server.crt -days 365 -nodes

to create a self-signed SSL encryption key and certificate.

If you do this on the server — in this example 192.168.1.36 — it works. The only thing to watch out for is that the "Common Name" entry is the same as 192.168.1.36's hostname.

Keep a copy of thei post because, in "-days 365", the certificate will expire :)


Thanks for sharing. This problem has bothering me for a long time. Had to downgrade to 1.1. Now I can upgrade to 1.2 again.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Desktop Environments All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum