CUPS/PAM configuration authentication problem.
David Southwell
david at vizion2000.net
Fri Dec 11 14:44:20 UTC 2009
Hi
Thanks to some help from people on the freebsd-questions lists I have
finally succeeded in getting cups the server to communicate with my
printer and print.
HOWEVER!!
One minor niggling problem remains. I still cannot communicate with the
cups management interface on http://localhost:631 due to password
authentication failure.
I have asked for help on the cups-general mailing list. That list has light
traffic and so far there is no solution in sight. Thanks in advance for any
help with the problem.
I try logging in as 'root' with correct root password in the login
dialogue.
I altered the cupsd.conf loglevel to debug and attached some sample the
output to the end of this post.
It seems as though the cupsd is not receiving the input (probably due to
some config error on my part!). I have tried using a number of different
browsers but get the same result.
Prior to testing I did:
dns1# lppasswd -g wheel -a root
The standard cups error log showed
cupsdAuthorize: pam_start() returned 4 (system error)!
On good authority I believe I have a PAM configuration error most likely - and
was told to check my /etc/pam.d/cups file. Not that I would know what to do
with it when I found it!!!
However there is no /etc/pam.d/cups file !!
BUT: there is a /usr/local/etc/pam.d/cups
which has the following lines:
auth required pam_unknown.so nodelay
account required pam_unknown.so
Shown below is ls -l for each directory!
Wanted --- good model for pam.d/cups and where to put it!!! <chuckles>
[NB This is a freebsd 7.2 p3 amd64 system with intel quad core.]
dns1# ls -l /etc/pam.d/
total 38
-r--r--r-- 1 root wheel 2907 May 1 2009 README
-rw-r--r-- 1 root wheel 322 May 1 2009 atrun
-rw-r--r-- 1 root wheel 199 May 1 2009 cron
-rw-r--r-- 2 root wheel 547 May 1 2009 ftp
-rw-r--r-- 2 root wheel 547 May 1 2009 ftpd
-rw-r--r-- 1 root wheel 467 May 1 2009 gdm_disabled
-rw-r--r-- 1 root wheel 365 May 1 2009 imap
-rw-r--r-- 1 root wheel 467 May 1 2009 kde
-rw-r--r-- 1 root wheel 374 May 1 2009 login
-rw-r--r-- 1 root wheel 662 May 1 2009 other
-rw-r--r-- 1 root wheel 319 May 1 2009 passwd
-rw-r--r-- 1 root wheel 365 May 1 2009 pop3
-rw-r--r-- 1 root wheel 328 May 1 2009 rsh
-rw-r--r-- 1 root wheel 739 May 1 2009 sshd
-rw-r--r-- 1 root wheel 380 May 1 2009 su
-rw-r--r-- 1 root wheel 705 May 1 2009 system
-rw-r--r-- 1 root wheel 754 May 1 2009 telnetd
-rw-r--r-- 1 root wheel 532 May 1 2009 xdm
dns1# ls -l /usr/local/etc/pam.d
total 16
-r--r--r-- 1 root wheel 69 Dec 10 09:19 cups
-r--r--r-- 1 root wheel 672 Dec 7 10:06 gdm
-r--r--r-- 1 root wheel 98 Nov 29 17:42 gnome-screensaver
-r--r--r-- 1 root wheel 135 Nov 4 22:09 polkit
-r--r--r-- 1 root wheel 135 Dec 2 09:00 polkit-1
-r--r--r-- 1 root wheel 399 Sep 27 18:20 sudo
-r--r--r-- 1 root wheel 399 Sep 27 18:20 sudo.default
-r--r--r-- 1 root wheel 98 Nov 5 03:22 xscreensaver
# RESTART CUPS HERE:I [10/Dec/2009:11:06:07 +0000] Scheduler shutting down
normally.
D [10/Dec/2009:11:06:07 +0000] Discarding unused server-stopped event...
D [10/Dec/2009:11:06:07 +0000]
cupsdDeregisterPrinter(p=0x801f78800(LaserJet-2200), removeit=1)
X [10/Dec/2009:11:06:07 +0000] kevent() returned Bad file descriptor
I [10/Dec/2009:11:06:07 +0000] Saving job cache file
"/var/cache/cups/job.cache"...
I [10/Dec/2009:11:06:07 +0000] Listening to ::1:631 (IPv6)
I [10/Dec/2009:11:06:07 +0000] Listening to 127.0.0.1:631 (IPv4)
I [10/Dec/2009:11:06:07 +0000] Listening to /var/run/cups.sock (Domain)
D [10/Dec/2009:11:06:07 +0000] cupsdDenyIP(loc=0x801f800a0(/),
address=0:0:0:0, netmask=0:0:0:0)
D [10/Dec/2009:11:06:07 +0000] cupsdDenyIP(loc=0x801f80100(/admin),
address=0:0:0:0, netmask=0:0:0:0)
D [10/Dec/2009:11:06:07 +0000] cupsdDenyIP(loc=0x801f80160(/admin/conf),
address=0:0:0:0, netmask=0:0:0:0)
I [10/Dec/2009:11:06:07 +0000] Remote access is disabled.
D [10/Dec/2009:11:06:07 +0000] Added auto ServerAlias dns1.vizion2000.net
D [10/Dec/2009:11:06:07 +0000] Added auto ServerAlias dns1
I [10/Dec/2009:11:06:07 +0000] Loaded configuration file
"/usr/local/etc/cups/cupsd.conf"
I [10/Dec/2009:11:06:07 +0000] Using default TempDir of /var/spool/cups/tmp...
I [10/Dec/2009:11:06:07 +0000] Configured for up to 100 clients.
I [10/Dec/2009:11:06:07 +0000] Allowing up to 100 client connections per host.
I [10/Dec/2009:11:06:07 +0000] Using policy "default" as the default!
I [10/Dec/2009:11:06:07 +0000] Full reload is required.
I [10/Dec/2009:11:06:07 +0000] Loaded MIME database from
"/usr/local/share/cups/mime" and "/usr/local/etc/cups": 35 types, 40
filters...
D [10/Dec/2009:11:06:07 +0000] Loading printer LaserJet-2200...
D [10/Dec/2009:11:06:07 +0000] load_ppd: Loading
/var/cache/cups/LaserJet-2200.ipp...
D [10/Dec/2009:11:06:07 +0000]
cupsdRegisterPrinter(p=0x801f78800(LaserJet-2200))
D [10/Dec/2009:11:06:07 +0000] load_ppd: Loading
/var/cache/cups/LaserJet-2200.ipp...
D [10/Dec/2009:11:06:07 +0000]
cupsdRegisterPrinter(p=0x801f78800(LaserJet-2200))
I [10/Dec/2009:11:06:07 +0000] Loading job cache file
"/var/cache/cups/job.cache"...
D [10/Dec/2009:11:06:07 +0000] [Job 5] Loading from cache...
D [10/Dec/2009:11:06:07 +0000] [Job 6] Loading from cache...
D [10/Dec/2009:11:06:07 +0000] [Job 7] Loading from cache...
I [10/Dec/2009:11:06:07 +0000] Full reload complete.
I [10/Dec/2009:11:06:07 +0000] Cleaning out old temporary files in
"/var/spool/cups/tmp"...
I [10/Dec/2009:11:06:07 +0000] Listening to ::1:631 on fd 6...
I [10/Dec/2009:11:06:07 +0000] Listening to 127.0.0.1:631 on fd 7...
I [10/Dec/2009:11:06:07 +0000] Listening to /var/run/cups.sock on fd 8...
I [10/Dec/2009:11:06:07 +0000] Resuming new connection processing...
D [10/Dec/2009:11:06:07 +0000]
cupsdRegisterPrinter(p=0x801f78800(LaserJet-2200))
D [10/Dec/2009:11:06:07 +0000] Discarding unused server-started event...
D [10/Dec/2009:11:06:08 +0000] Report: clients=0
D [10/Dec/2009:11:06:08 +0000] Report: jobs=3
D [10/Dec/2009:11:06:08 +0000] Report: jobs-active=0
D [10/Dec/2009:11:06:08 +0000] Report: printers=1
D [10/Dec/2009:11:06:08 +0000] Report: printers-implicit=0
D [10/Dec/2009:11:06:08 +0000] Report: stringpool-string-count=266
D [10/Dec/2009:11:06:08 +0000] Report: stringpool-alloc-bytes=6352
D [10/Dec/2009:11:06:08 +0000] Report: stringpool-total-bytes=6088
D [10/Dec/2009:11:08:40 +0000] cupsdAcceptClient: 12 from localhost:631 (IPv4)
D [10/Dec/2009:11:08:40 +0000] Report: clients=1
D [10/Dec/2009:11:08:40 +0000] Report: jobs=3
D [10/Dec/2009:11:08:40 +0000] Report: jobs-active=0
D [10/Dec/2009:11:08:40 +0000] Report: printers=1
D [10/Dec/2009:11:08:40 +0000] Report: printers-implicit=0
D [10/Dec/2009:11:08:40 +0000] Report: stringpool-string-count=266
D [10/Dec/2009:11:08:40 +0000] Report: stringpool-alloc-bytes=6352
D [10/Dec/2009:11:08:40 +0000] Report: stringpool-total-bytes=6088
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 12 GET / HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Active clients
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 12 GET /cups.css HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Active clients
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 12 GET /images/left.gif
HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Active clients
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdAcceptClient: 14 from localhost:631 (IPv4)
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:08:40 +0000] cupsdAcceptClient: 13 from localhost:631 (IPv4)
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 14 GET /images/sel.gif
HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Active clients
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdAcceptClient: 16 from localhost:631 (IPv4)
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 13 GET /images/cups-icon.png
HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdAcceptClient: 15 from localhost:631 (IPv4)
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 16 GET /images/right.gif
HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdReadClient: 15 GET /images/unsel.gif
HTTP/1.1
D [10/Dec/2009:11:08:40 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:40 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:08:46 +0000] cupsdReadClient: 15 GET /admin HTTP/1.1
D [10/Dec/2009:11:08:46 +0000] cupsdSetBusyState: Active clients
D [10/Dec/2009:11:08:46 +0000] cupsdAuthorize: No authentication data
provided.
D [10/Dec/2009:11:08:46 +0000] cupsdIsAuthorized: username=""
D [10/Dec/2009:11:08:46 +0000] cupsdSendHeader: 15 WWW-Authenticate: Basic
realm="CUPS", trc="y"
D [10/Dec/2009:11:08:46 +0000] cupsdCloseClient: 15
D [10/Dec/2009:11:08:46 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:08:59 +0000] cupsdReadClient: 16 GET /admin HTTP/1.1
D [10/Dec/2009:11:08:59 +0000] cupsdSetBusyState: Active clients
E [10/Dec/2009:11:08:59 +0000] cupsdAuthorize: pam_start() returned 4 (system
error)!
D [10/Dec/2009:11:08:59 +0000] cupsdIsAuthorized: username=""
D [10/Dec/2009:11:08:59 +0000] cupsdSendHeader: 16 WWW-Authenticate: Basic
realm="CUPS", trc="y"
D [10/Dec/2009:11:08:59 +0000] cupsdCloseClient: 16
D [10/Dec/2009:11:08:59 +0000] cupsdSetBusyState: Not busy
D [10/Dec/2009:11:13:44 +0000] Closing client 12 after 300 seconds of
inactivity...
D [10/Dec/2009:11:13:44 +0000] cupsdCloseClient: 12
More information about the freebsd-ports
mailing list