When I try to print something from root or from user using cups as printing system I got some errors in cups error_log file. I've tried to reemerge cups, ghostscript and foomatic, but with no luck. I've got default cups config, but I've only changed LogLevel from info to debug2. I'm using cups 1.1.23-r1. Here is my error_log: D [15/Feb/2005:18:20:52 +0100] StartJob: argv = "HP690C","32","ceho","[Nowy dokument]","1","multiple-document-handling=separate-documents-collated-copies orientation-requested=3","/var/spool/cups/d00032-001" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[0]="PATH=/usr/lib/cups/filter:/bin:/usr/bin" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[1]="SOFTWARE=CUPS/1.1" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[2]="USER=root" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[3]="CHARSET=iso-8859-1" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[4]="LANG=en" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[5]="PPD=/etc/cups/ppd/HP690C.ppd" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[6]="CUPS_SERVERROOT=/etc/cups" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[7]="RIP_MAX_CACHE=8m" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[8]="TMPDIR=/var/spool/cups/tmp" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[9]="CONTENT_TYPE=application/postscript" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[10]="DEVICE_URI=parallel:/dev/lp0" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[11]="PRINTER=HP690C" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[12]="CUPS_DATADIR=/usr/share/cups" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[13]="CUPS_FONTPATH=/usr/share/cups/fonts" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[14]="CUPS_SERVER=localhost" D [15/Feb/2005:18:20:52 +0100] StartJob: envp[15]="IPP_PORT=631" d [15/Feb/2005:18:20:52 +0100] StartJob: Allocating status buffer... D [15/Feb/2005:18:20:52 +0100] StartJob: statusfds = [ 8 9 ] D [15/Feb/2005:18:20:52 +0100] StartJob: filterfds[1] = [ 10 -1 ] D [15/Feb/2005:18:20:52 +0100] StartJob: filter = "/usr/lib/cups/filter/pstops" D [15/Feb/2005:18:20:52 +0100] StartJob: filterfds[0] = [ 11 12 ] D [15/Feb/2005:18:20:52 +0100] start_process("/usr/lib/cups/filter/pstops", 0xbffefd54, 0xbffef0c4, 10, 12, 9) I [15/Feb/2005:18:20:53 +0100] Started filter /usr/lib/cups/filter/pstops (PID 19242) for job 32. D [15/Feb/2005:18:20:53 +0100] StartJob: filter = "/usr/lib/cups/filter/foomatic-rip" D [15/Feb/2005:18:20:53 +0100] StartJob: filterfds[1] = [ 10 13 ] D [15/Feb/2005:18:20:53 +0100] start_process("/usr/lib/cups/filter/foomatic-rip", 0xbffefd54, 0xbffef0c4, 11, 13, 9) I [15/Feb/2005:18:20:53 +0100] Started filter /usr/lib/cups/filter/foomatic-rip (PID 19243) for job 32. D [15/Feb/2005:18:20:53 +0100] StartJob: backend = "/usr/lib/cups/backend/parallel" D [15/Feb/2005:18:20:53 +0100] StartJob: filterfds[0] = [ -1 11 ] D [15/Feb/2005:18:20:53 +0100] start_process("/usr/lib/cups/backend/parallel", 0xbffefd54, 0xbffef0c4, 10, 11, 9) I [15/Feb/2005:18:20:53 +0100] Started backend /usr/lib/cups/backend/parallel (PID 19244) for job 32. d [15/Feb/2005:18:20:53 +0100] StartJob: Adding fd 8 to InputSet... d [15/Feb/2005:18:20:53 +0100] add_job_state_reasons(0xb7a68c3c[7], 32) D [15/Feb/2005:18:20:53 +0100] ProcessIPPRequest: 7 status_code=0 d [15/Feb/2005:18:20:53 +0100] ProcessIPPRequest: Adding fd 7 to OutputSet... E [15/Feb/2005:18:20:53 +0100] PID 19242 stopped with status 22! E [15/Feb/2005:18:20:53 +0100] PID 19243 stopped with status 22! D [15/Feb/2005:18:20:53 +0100] [Job 32] /usr/lib/cups/filter/pstops: Permission denied D [15/Feb/2005:18:20:53 +0100] [Job 32] /usr/lib/cups/filter/foomatic-rip: Permission denied I've found a thread in gentoo forum, where situation is similar to mine, and I've got the same issues with lppasswd. http://forums.gentoo.org/viewtopic-t-138567-highlight-lppasswd.html I've also tried to add ceho user to group lp, but no luck too. I tried to connect to localhost:631, I can see the main page (it loads very quickly), but for example when I want to follow the 'Do Administration Tasks" link it pops window with auth. request, when I authorize I have to wait a long time and finally got timeout error. Here is a logfile: D [15/Feb/2005:18:41:53 +0100] AcceptClient: 6 from localhost:631. d [15/Feb/2005:18:41:53 +0100] AcceptClient: Adding fd 6 to InputSet... d [15/Feb/2005:18:41:53 +0100] ReadClient: 6, used=0, file=-1 D [15/Feb/2005:18:41:53 +0100] ReadClient: 6 GET /favicon.ico HTTP/1.1 d [15/Feb/2005:18:41:53 +0100] decode_auth(0xb7a66008): Authorization string = "" d [15/Feb/2005:18:41:53 +0100] decode_auth: 6 username="" d [15/Feb/2005:18:41:53 +0100] IsAuthorized: con->uri = "/favicon.ico" d [15/Feb/2005:18:41:53 +0100] FindBest: uri = "/favicon.ico"... d [15/Feb/2005:18:41:53 +0100] FindBest: Location / Limit 7f d [15/Feb/2005:18:41:53 +0100] FindBest: Location /admin Limit 7f d [15/Feb/2005:18:41:53 +0100] FindBest: best = "/" d [15/Feb/2005:18:41:53 +0100] IsAuthorized: auth = 0, satisfy=0... d [15/Feb/2005:18:41:53 +0100] get_file: 6 filename=/usr/share/cups/docs/favicon.ico size=-1 D [15/Feb/2005:18:41:53 +0100] SendError: 6 code=404 (Not Found) D [15/Feb/2005:18:41:53 +0100] CloseClient: 6 d [15/Feb/2005:18:41:53 +0100] CloseClient: Removing fd 6 from InputSet and OutputSet... d [15/Feb/2005:18:41:54 +0100] select_timeout: 6 seconds to send browse update d [15/Feb/2005:18:41:54 +0100] AcceptClient(lis=0x8080b58) 0 NumClients = 0 D [15/Feb/2005:18:41:54 +0100] AcceptClient: 6 from localhost:631. d [15/Feb/2005:18:41:54 +0100] AcceptClient: Adding fd 6 to InputSet... d [15/Feb/2005:18:41:54 +0100] ReadClient: 6, used=0, file=-1 D [15/Feb/2005:18:41:54 +0100] ReadClient: 6 GET /admin HTTP/1.1 d [15/Feb/2005:18:41:54 +0100] decode_auth(0xb7a66008): Authorization string = "" d [15/Feb/2005:18:41:54 +0100] decode_auth: 6 username="" d [15/Feb/2005:18:41:54 +0100] IsAuthorized: con->uri = "/admin" d [15/Feb/2005:18:41:54 +0100] FindBest: uri = "/admin"... d [15/Feb/2005:18:41:54 +0100] FindBest: Location / Limit 7f d [15/Feb/2005:18:41:54 +0100] FindBest: Location /admin Limit 7f d [15/Feb/2005:18:41:54 +0100] FindBest: best = "/admin" d [15/Feb/2005:18:41:54 +0100] IsAuthorized: auth = 0, satisfy=0... d [15/Feb/2005:18:41:54 +0100] IsAuthorized: username = "" password = 0 chars d [15/Feb/2005:18:41:54 +0100] ReadClient: Unauthorized request for /admin... D [15/Feb/2005:18:41:54 +0100] SendError: 6 code=401 (Unauthorized) d [15/Feb/2005:18:41:54 +0100] FindBest: uri = "/admin"... d [15/Feb/2005:18:41:54 +0100] FindBest: Location / Limit 7f d [15/Feb/2005:18:41:54 +0100] FindBest: Location /admin Limit 7f d [15/Feb/2005:18:41:54 +0100] FindBest: best = "/admin" D [15/Feb/2005:18:41:54 +0100] CloseClient: 6 d [15/Feb/2005:18:41:54 +0100] CloseClient: Removing fd 6 from InputSet and OutputSet... d [15/Feb/2005:18:41:55 +0100] select_timeout: 5 seconds to send browse update d [15/Feb/2005:18:42:00 +0100] AcceptClient(lis=0x8080b58) 0 NumClients = 0 D [15/Feb/2005:18:42:00 +0100] AcceptClient: 6 from localhost:631. d [15/Feb/2005:18:42:00 +0100] AcceptClient: Adding fd 6 to InputSet... d [15/Feb/2005:18:42:00 +0100] ReadClient: 6, used=0, file=-1 D [15/Feb/2005:18:42:00 +0100] ReadClient: 6 GET /admin HTTP/1.1 d [15/Feb/2005:18:42:00 +0100] decode_auth(0xb7a66008): Authorization string = "Basic cXXXXd7o5XXXXXndqemNHXXXXNt==" d [15/Feb/2005:18:42:00 +0100] decode_auth: 6 username="root" d [15/Feb/2005:18:42:00 +0100] IsAuthorized: con->uri = "/admin" d [15/Feb/2005:18:42:00 +0100] FindBest: uri = "/admin"... d [15/Feb/2005:18:42:00 +0100] FindBest: Location / Limit 7f d [15/Feb/2005:18:42:00 +0100] FindBest: Location /admin Limit 7f d [15/Feb/2005:18:42:00 +0100] FindBest: best = "/admin" d [15/Feb/2005:18:42:00 +0100] IsAuthorized: auth = 0, satisfy=0... d [15/Feb/2005:18:42:00 +0100] IsAuthorized: username = "root" password = 14 chars d [15/Feb/2005:18:42:00 +0100] IsAuthorized: Checking "root", address = 7f000001, hostname = "localhost" d [15/Feb/2005:18:42:00 +0100] pipe_command: command="/usr/lib/cups/cgi-bin/admin.cgi", options="admin" d [15/Feb/2005:18:42:00 +0100] pipe_command: argv[0] = "admin" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[0] = "PATH=/bin:/usr/bin" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[1] = "SERVER_SOFTWARE=CUPS/1.1" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[2] = "GATEWAY_INTERFACE=CGI/1.1" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[3] = "SERVER_PROTOCOL=HTTP/1.1" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[4] = "REDIRECT_STATUS=1" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[5] = "CUPS_SERVER=localhost" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[6] = "IPP_PORT=631" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[7] = "SERVER_NAME=localhost" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[8] = "SERVER_PORT=631" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[9] = "REMOTE_ADDR=127.0.0.1" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[10] = "REMOTE_HOST=localhost" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[11] = "REMOTE_USER=root" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[12] = "LANG=en_US.UTF-8" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[13] = "" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[14] = "TMPDIR=/var/spool/cups/tmp" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[15] = "CUPS_DATADIR=/usr/share/cups" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[16] = "CUPS_SERVERROOT=/etc/cups" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[17] = "HTTP_USER_AGENT=Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050116 Firefox/1.0" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[18] = "SCRIPT_NAME=/admin" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[19] = "REQUEST_METHOD=GET" d [15/Feb/2005:18:42:00 +0100] pipe_command: envp[20] = "CUPS_ENCRYPTION=IfRequested" d [15/Feb/2005:18:42:00 +0100] AddCert: adding certificate for pid 28485 D [15/Feb/2005:18:42:00 +0100] CGI /usr/lib/cups/cgi-bin/admin.cgi started - PID = 28485 I [15/Feb/2005:18:42:00 +0100] Started "/usr/lib/cups/cgi-bin/admin.cgi" (pid=28485) D [15/Feb/2005:18:42:00 +0100] SendCommand: 6 file=8 d [15/Feb/2005:18:42:00 +0100] SendCommand: Adding fd 8 to InputSet... d [15/Feb/2005:18:42:00 +0100] SendCommand: Adding fd 6 to OutputSet... E [15/Feb/2005:18:42:00 +0100] PID 28485 stopped with status 13! d [15/Feb/2005:18:42:00 +0100] DeleteCert: removing certificate for pid 28485 d [15/Feb/2005:18:42:00 +0100] WriteClient: Removing fd 6 from OutputSet... d [15/Feb/2005:18:42:00 +0100] WriteClient: Removing fd 8 from InputSet... d [15/Feb/2005:18:42:00 +0100] WriteClient: 6 Closing data file 8. d [15/Feb/2005:18:42:01 +0100] select_timeout: 30 seconds to send browse update d [15/Feb/2005:18:42:31 +0100] select_timeout: 31 seconds to send browse update d [15/Feb/2005:18:43:02 +0100] select_timeout: 31 seconds to send browse update d [15/Feb/2005:18:43:33 +0100] select_timeout: 30 seconds to update root certificate Reproducible: Didn't try Steps to Reproduce:
It would be nice if someone could change the title to "CUPS foomatic-rip and pstops: Permission denied".
try to use the vanllia cupsd.conf that is created when emerging cups try to remerge foomatic
any news on this ?
I've changed user and group from lp to root in /etc/cups/cupsd.conf and took off suid from lppasswd (chmod -s /usr/bin/lppasswd). Then I've reemerged "foomatic-filters" package, and restarted cupsd (/etc/init.d/cupsd restart). I know that this solution is only dirty hack, but it WORKS :) http://forums.gentoo.org/viewtopic-t-296028-start-0-postdays-0-postorder-asc-highlight-lppasswd.html
great :) Thanks I'm closing the bug.
