Printer sharing config between OS 12.1 (server) & OS 11.4 (client)

**t_neo** · 12-Feb-2012, 07:38

I've configured my printer (using HP-setup) with success on my machine and set-up Cups accordingly. I let the printer be shared through the network. Though the 11.4 machine can't find the printer on the network. I've added a custom rule for the internal zone to allow UDP traffic over port 631 on both machines. Still no luck and the 11.4 machine is not able to connect.

It's driving me insane that I'm unable to configure openSUSE in such a way that I can share my printer with the 11.4 machine and letting my 12.1 desktop be the server. Does anybody have suggestions on what to do to get the printer going?

**robin_listas** · 12-Feb-2012, 08:03

On 2012-02-12 15:46, t neo wrote:
>
> I've configured my printer (using HP-setup) with success on my machine
> and set-up Cups accordingly. I let the printer be shared through the
> network. Though the 11.4 machine can't find the printer on the network.
> I've added a custom rule for the internal zone to allow UDP traffic over
> port 631 on both machines. Still no luck and the 11.4 machine is not
> able to connect.

custom rule?
I would drop the firewall to test. Or look in the log. However, there is no
need to see a printer in order to connect to it.

On the other hand, I don't understand why you post in the hardware forum,
this is not a hardware problem.

--
Cheers / Saludos,

Carlos E. R.
(from 11.4 x86_64 "Celadon" at Telcontar)

**t_neo** · 17-Feb-2012, 01:56

Originally Posted by robin_listas

On 2012-02-12 15:46, t neo wrote:
>
> I've configured my printer (using HP-setup) with success on my machine
> and set-up Cups accordingly. I let the printer be shared through the
> network. Though the 11.4 machine can't find the printer on the network.
> I've added a custom rule for the internal zone to allow UDP traffic over
> port 631 on both machines. Still no luck and the 11.4 machine is not
> able to connect.

custom rule?
I would drop the firewall to test. Or look in the log. However, there is no
need to see a printer in order to connect to it.

Though that is the situation at hand. Even with firewall down it won't print from the 11.3 box, while it than detects the shared printer.

On the other hand, I don't understand why you post in the hardware forum,
this is not a hardware problem.

Because the index description says "configuration" and if it isn't supposed to be here, than move the thread.

**robin_listas** · 17-Feb-2012, 05:48

On 2012-02-17 10:06, t neo wrote:
>
> robin_listas;2439721 Wrote:

>> I would drop the firewall to test. Or look in the log. However, there
>> is no need to see a printer in order to connect to it.

> Though that is the situation at hand. Even with firewall down it won't
> print from the 11.3 box, while it than detects the shared printer.

Then you have too look at the printer logs. I can't say more, you do not
give details.

>
>> On the other hand, I don't understand why you post in the hardware
>> forum, this is not a hardware problem.
> Because the index description says "configuration" and if it isn't
> supposed to be here, than move the thread.

I can not move anything, I'm not an admin here. Just one response in a
week, matches the doubt I expressed.

--
Cheers / Saludos,

Carlos E. R.
(from 11.4 x86_64 "Celadon" at Telcontar)

**venzkep** · 17-Feb-2012, 16:50

On Sun February 12 2012 08:46 am, t neo wrote:

>
> I've configured my printer (using HP-setup) with success on my machine
> and set-up Cups accordingly. I let the printer be shared through the
> network. Though the 11.4 machine can't find the printer on the network.
> I've added a custom rule for the internal zone to allow UDP traffic over
> port 631 on both machines. Still no luck and the 11.4 machine is not
> able to connect.
>
> It's driving me insane that I'm unable to configure openSUSE in such a
> way that I can share my printer with the 11.4 machine and letting my
> 12.1 desktop be the server. Does anybody have suggestions on what to do
> to get the printer going?
>
>
t neo;

Have you edited /etc/cups/cupsd.conf to allow access to the CUPS server from
another location. It would help if you posted the contents of this file.
In the default form there should be nothing confidential, however if you have
already changed this just post with substitute values for public IPs.

cupsd.conf can be edited from the "Administration tab" of CUPS,
https://localhost:631. When asked to authenticate use the username "root",
sans quotes, and your root's password.
--
P. V.
"We're all in this together, I'm pulling for you." Red Green

**t_neo** · 13-Mar-2012, 13:04

Cupsd.conf is as follows:

Code:

LogLevel warn
SystemGroup sys root
# Only listen for connections from the local machine.
Listen *:631
Listen localhost:631
Listen /var/run/cups/cups.sock
Browsing On
BrowseLocalProtocols CUPS
BrowseOrder allow,deny
BrowseAllow none
BrowseDeny all
BrowseAddress @IF(eth0)
BrowseAddress @LOCAL
DefaultAuthType Basic
WebInterface Yes
<Location />
Allow @IF(eth0)
Allow @LOCAL
Order allow,deny
Allow 127.0.0.2
</Location>
<Location /admin>
  # Restrict access to the admin pages...
  Order allow,deny
</Location>
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  # Restrict access to the configuration files...
  Order allow,deny
</Location>
<Policy default>
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>
<Policy authenticated>
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>
<Policy allowallforanybody>
  <Limit All>
    Order deny,allow
    Allow from all
  </Limit>
</Policy>
DefaultPolicy default
# 2012-03-10,16:50:28 modify_cupsd_conf Allow @LOCAL
# 2012-03-10,16:50:28 modify_cupsd_conf BrowseAddress none
# 2012-03-10,16:50:28 modify_cupsd_conf Listen all
# 2012-03-10,16:56:30 modify_cupsd_conf Allow @IF(eth0) @LOCAL
# 2012-03-10,16:56:30 modify_cupsd_conf BrowseAddress @IF(eth0) @LOCAL
# 2012-03-10,16:56:31 modify_cupsd_conf Browsing On
# 2012-03-10,16:56:31 modify_cupsd_conf Listen all

**venzkep** · 13-Mar-2012, 19:08

On Tue March 13 2012 02:06 pm, t neo wrote:

>
> Cupsd.conf is as follows:
>
> Code:
> --------------------
>
<snip>
> BrowseOrder allow,deny
> BrowseAllow none
> BrowseDeny all
<snip>
> <Location />
> Allow @IF(eth0)
> Allow @LOCAL
> Order allow,deny
> Allow 127.0.0.2
> </Location>
<snip>
>

t neo;

You have disallowed browsing (see the first section). However, it looks like
you should still be able to connect to the printers at least by IP. Try
something simpler like:

Code:

BrowseAllow @LOCAL

<Location />
Order allow,deny
Allow @LOCAL
</Location>

If you are still not able to get through, check your logs in /var/log/cups
and /var/log/firewall.

--
P. V.
"We're all in this together, I'm pulling for you." Red Green

**t_neo** · 14-Mar-2012, 10:26

Thanks for the suggestion on cupsd.conf that configuration works, BUT only when I have both firewalls down (which is progress. :-)). I don't follow the sane firewall settings and it is totally unclear to me what I need to configure within the firewall in order to print from the client.

**venzkep** · 14-Mar-2012, 13:59

On Wed March 14 2012 11:36 am, t neo wrote:

>
> Thanks for the suggestion on cupsd.conf that configuration works, BUT
> only when I have both firewalls down (which is progress. :-)). I don't
> follow the sane firewall settings and it is totally unclear to me what I
> need to configure within the firewall in order to print from the client.
>
>
t neo;

You need to open port 631 ( I think it's just TCP but you also may need UDP.)

Go to YaST > Security and Users > Firewall. Under "Allowed services" add CUPS.
If it is not listed just use the "Advanced tab" and add port 631.
--
P. V.
"We're all in this together, I'm pulling for you." Red Green