View previous topic :: View next topic |
Author |
Message |
antares2001 Guru
Joined: 02 Mar 2004 Posts: 339 Location: Germany
|
Posted: Fri Jul 14, 2006 8:37 am Post subject: CUPS 1.2.1 Webgui does not work |
|
|
Hello!
I've installed CUPS 1.2.1 on my Server machine that I want to use to print from client machines (also Linux workstations).
When I want to make settings in the web interface of CUPS, I receive the following error:
I am never asked for a username or password.
Some more info:
Quote: | # ps aux|grep cupsd
root 8756 3.5 0.1 22180 2468 ? Ss 10:27 0:01 /usr/sbin/cupsd
|
Quote: | # tail /var/log/cups/error_log
E [14/Jul/2006:10:27:54 +0200] encrypt_client: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
I [14/Jul/2006:10:27:57 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8810)
I [14/Jul/2006:10:27:57 +0200] Started "/usr/libexec/cups/daemon/cups-deviced" (pid=8811)
C [14/Jul/2006:10:27:58 +0200] cupsdUpdateCGI: error reading from CGI error pipe - No such file or directory
C [14/Jul/2006:10:27:58 +0200] cupsdUpdateCGI: error reading from CGI error pipe - No such file or directory
I [14/Jul/2006:10:27:59 +0200] Started "/usr/libexec/cups/cgi-bin/printers.cgi" (pid=8829)
E [14/Jul/2006:10:27:59 +0200] CUPS-Get-Default client-error-not-found: No default printer
I [14/Jul/2006:10:28:01 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8830)
I [14/Jul/2006:10:28:02 +0200] Started "/usr/libexec/cups/cgi-bin/admin.cgi" (pid=8831)
E [14/Jul/2006:10:28:02 +0200] CUPS-Add-Modify-Printer: Unauthorized
|
Quote: | # cupsd.conf
# Restrict access to the admin pages...
<Location /admin>
# Encryption Required
Order allow,deny
Allow From all
</Location>
|
Any ideas? Thank you. _________________ * Toshiba SM30X Notebook, Pentium-M 725 CPU, ATI Radeon 9700, 512MB RAM, 80GB
* Pentium D 820 2,8 GHz (EM64T), Geforce6, 200GB + 40GB ATA, 250GB SATA2, WinFastTV 2000XP, 1,5GB RAM
Gentoo Linux 2006.1 |
|
Back to top |
|
|
idella4 Retired Dev
Joined: 09 Jun 2006 Posts: 1600 Location: Australia, Perth
|
Posted: Fri Jul 14, 2006 10:09 am Post subject: |
|
|
well the config file is /etc/cups/cupsd.conf.
I'd have thought the regular config gui that you run for cups included a username password entry,
though I did a quick search and couldn't find one in the config file..
Try removing the s from htpps, and/or remove the admin folder from https://192.168.10.1:631/admin
to see if you can get into the web part from the inside. _________________ idella4@aus |
|
Back to top |
|
|
wynn Advocate
Joined: 01 Apr 2005 Posts: 2421 Location: UK
|
Posted: Sat Jul 15, 2006 10:15 am Post subject: |
|
|
The error shown in error_log below throws up a number of hits on the Internet saying that it's a certificate problem.
You appear to be getting through to your server so maybe you have a valid certificate which is authenticating you.
A similar problem here (net-print/cups-1.2.1-r2). On trying to delete a printer using remote administration from another machine, the message
Code: | 426 Upgrade Required
You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200. |
followed by a popup from Firefox (1.5.0.4)
Code: | Firefox and 192.168.1.36 cannot communicate securely because they
have no common encryption algorithms. |
with the entry in the server's (192.168.1.36) /var/log/cups/error_log
Code: | D [15/Jul/2006:10:46:52 +0100] cupsdReadClient: 7 GET /admin/?op=delete-printer&printer_na
me=EPL6200 HTTP/1.1
D [15/Jul/2006:10:46:52 +0100] cupsdReadClient: 7 Browser asked for language "en-us.utf-8"
...
D [15/Jul/2006:10:46:52 +0100] cupsdAuthorize: No authentication data provided.
D [15/Jul/2006:10:46:52 +0100] cupsdSendError: 7 code=426 (Upgrade Required)
D [15/Jul/2006:10:46:52 +0100] cupsdCloseClient: 7
D [15/Jul/2006:10:46:55 +0100] cupsdAcceptClient: 7 from 192.168.1.37:631 (IPv4)
E [15/Jul/2006:10:46:55 +0100] encrypt_client: Unable to encrypt connection from 192.168.1
.37!
E [15/Jul/2006:10:46:55 +0100] encrypt_client: error:1408A0C1:SSL routines:SSL3_GET_CLIENT
_HELLO:no shared cipher |
A message has been put into the cups.bugs forum on http://www.cups.org/newsgroups.php |
|
Back to top |
|
|
j.crottaz n00b
Joined: 12 Jul 2006 Posts: 16
|
Posted: Mon Jul 17, 2006 1:21 pm Post subject: |
|
|
Damn! .. it's working with this sh** of IE.... |
|
Back to top |
|
|
bbe Apprentice
Joined: 10 Jan 2005 Posts: 158 Location: UK
|
Posted: Mon Jul 17, 2006 2:21 pm Post subject: |
|
|
I have the same problem as you wynn. |
|
Back to top |
|
|
wynn Advocate
Joined: 01 Apr 2005 Posts: 2421 Location: UK
|
Posted: Mon Jul 17, 2006 3:01 pm Post subject: |
|
|
bbe:
Quote: | I have the same problem as you wynn |
I got a very quick answer from Michael Sweet, the CUPS developer:
Quote: | > cups-1.2.1-r2 on Gentoo 2006.0
>
> The server is set up (using local administration) to allow remote administration. On trying to delete a printer from another machine (running the same version of CUPS on Gentoo 2006.0 as well), the messages
>
> "426 Upgrade Required
>
> You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200."
> ...
You need to create an encryption certificate. It sounds like Gentoo
is using OpenSSL instead of GNU TLS, so you'll need to run:
openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
-out /etc/cups/ssl/server.crt -days 365 -nodes
to create a self-signed SSL encryption key and certificate. |
If you do this on the server â in this example 192.168.1.36 â it works. The only thing to watch out for is that the "Common Name" entry is the same as 192.168.1.36's hostname.
Keep a copy of thei post because, in "-days 365", the certificate will expire |
|
Back to top |
|
|
bbe Apprentice
Joined: 10 Jan 2005 Posts: 158 Location: UK
|
Posted: Mon Jul 17, 2006 4:07 pm Post subject: |
|
|
Thanks for the answer wynn. Is this a gentoo bug then? Shouldn't this be handled by the ebuild? |
|
Back to top |
|
|
wynn Advocate
Joined: 01 Apr 2005 Posts: 2421 Location: UK
|
Posted: Mon Jul 17, 2006 6:29 pm Post subject: |
|
|
Quote: | Is this a gentoo bug then? Shouldn't this be handled by the ebuild? | I'm just an ordinary peon, not even "Tux's lil' helper" ( I wasn't and now I am!) let alone a dev
However, as the certificate is only required on a machine running CUPS which is going to be administered remotely, it's a decision which an ebuiild can't make.
As CUPS 1.2.1 is not considered stable yet, it's probably too early to add it to the Gentoo CUPS documentation. |
|
Back to top |
|
|
dreamdreams n00b
Joined: 25 Nov 2002 Posts: 43
|
Posted: Sat Jul 29, 2006 2:08 am Post subject: |
|
|
wynn wrote: | bbe:
Quote: | I have the same problem as you wynn |
I got a very quick answer from Michael Sweet, the CUPS developer:
Quote: | > cups-1.2.1-r2 on Gentoo 2006.0
>
> The server is set up (using local administration) to allow remote administration. On trying to delete a printer from another machine (running the same version of CUPS on Gentoo 2006.0 as well), the messages
>
> "426 Upgrade Required
>
> You must access this page using the URL https://192.168.1.36:631/admin/?op=delete-printer&printer_name=EPL6200."
> ...
You need to create an encryption certificate. It sounds like Gentoo
is using OpenSSL instead of GNU TLS, so you'll need to run:
openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
-out /etc/cups/ssl/server.crt -days 365 -nodes
to create a self-signed SSL encryption key and certificate. |
If you do this on the server â in this example 192.168.1.36 â it works. The only thing to watch out for is that the "Common Name" entry is the same as 192.168.1.36's hostname.
Keep a copy of thei post because, in "-days 365", the certificate will expire |
Thanks for sharing. This problem has bothering me for a long time. Had to downgrade to 1.1. Now I can upgrade to 1.2 again. |
|
Back to top |
|
|
|