remote administration requires additional step than those described in README.Debian.gz

Bug #47874 reported by Walter Tautz
16
Affects Status Importance Assigned to Milestone
cupsys (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

Dapper version of cupsys Version: 1.2.0-0ubuntu5

Granted you folks don't want us users to use remote
web administration (if cupsd is linked to encryption
library the default behaviour is to force encryption)
so no security issue? See below on what I had to
do to get this to work.

So following all the steps in /usr/share/doc/cupsys/README.Debian.gz

I needed to create /etc/cups/ssl afterwhich cupsd fixes
the permission (saw this in error_log). However trying
to add a printer doesn't work since it forces you to
connect via https. (Edit cupsd.conf ok). Alas there
is not cert or key in /etc/ssl/. Now talking to Michael
Sweet he confirms this process takes a long time
provided (cupsd is linked to libgnutls which is the
case in dapper) eventually the key gets generated
but I couldn't wait that long so I installed openssl
package and generated my own copy afterwhich
I was finally able successfully generate the key.

so to summarize:

1. /etc/ssl needs to be created,
2. /etc/ssl/server.{crt,key} need to be generated
since if cupsd is linked to encryption library then
this is the default behaviour of web administration.

3. Apparently allow,deny means allow, deny from everywhere.
hence I had to put in deny,allow in to allow web administration.

Revision history for this message
Walter Tautz (wtautz) wrote :

package and generated my own copy afterwhich
I was finally able successfully generate the key.

Should say "finally able to successfully add printer" via
web interface.

Revision history for this message
Ante Karamatić (ivoks) wrote :

For remote administration, only thing needed is:

sudo adduser cupsys shadow

This is a bug about SSL connection, right?

Changed in cupsys:
status: Unconfirmed → Needs Info
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for cupsys (Ubuntu) because there has been no activity for 60 days.]

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.