Remote CUPS printing

Hello all,

I am trying to set up OpenSuSE 11.1 as a remote print server.
Initially I am trying to connect via a Windows PC to the queue
using Telnet ipaddress 631, but this connection is denied.
On the box itself this of course works just fine so I know it is
a permissions issue. I have made a few adjustments from ‘howtos’
I found on the web to cupsd.conf but no joy.

Below is my cupsd.conf. Any tips appreciated.

“$Id: cupsd.conf.in 5454 2006-04-23 21:46:38Z mike $”

Sample configuration file for the Common UNIX Printing System (CUPS)

scheduler. See “man cupsd.conf” for a complete description of this

file.

Log general information in error_log - change “info” to “debug” for

troubleshooting…

LogLevel info

Administrator user group…

SystemGroup sys root

Only listen for connections from the local machine local network.

Listen 127.0.0.1:631
Listen 192.168.111.21:631
Listen /var/run/cups/cups.sock

Show shared printers on the local network.

Browsing On
BrowseOrder allow,deny
BrowseAllowFrom @LOCAL
BrowseAllowFrom 192.168.111.0/255.255.255.0

Default authentication type, when authentication is required…

DefaultAuthType Basic

Restrict access to the server…

#<Location />
#Order allow,deny
#Allow From localhost
#Allow From 127.0.0.2
#</Location>

Restrict access to the server…

<Location />
Order allow,deny
Allow From localhost
Allow From 192.168.111.0/255.255.255.0
</Location>

Restrict access to the admin pages…

<Location /admin>
Encryption Required
Order allow,deny
Allow From localhost
</Location>

Restrict access to configuration files…

<Location /admin/conf>
AuthType Basic
Require user @SYSTEM
Order allow,deny
Allow From localhost
</Location>

Set the default printer/job policies…

<Policy default>

Job-related operations must be done by the owner or an adminstrator…

<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs
Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-
Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-
Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

All administration operations require an adminstrator to authenticate…

<Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer
Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-
New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-
Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer
CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-
Reject-Jobs CUPS-Set-Default>
AuthType Basic
Require user @SYSTEM
Order deny,allow
</Limit>

Only the owner or an administrator can cancel or authenticate a job…

<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

<Limit All>
Order deny,allow
</Limit>
</Policy>

End of “$Id: cupsd.conf.in 5454 2006-04-23 21:46:38Z mike $”.

I don’t do it like this. I would share the printer with windu clients through samba. Wouldn’t know if CUPS can handle windu requests directly…

> I don’t do it like this. I would share the printer with windu clients
> through samba. Wouldn’t know if CUPS can handle windu requests
> directly…

Hmm. Everything I read advises against the SAMBA solution since CUPS
handles it natively.

> I don’t do it like this. I would share the printer with windu clients
> through samba. Wouldn’t know if CUPS can handle windu requests
> directly…

Essentially you are just using a straight ipp connection from Windows.
So yes, CUPS can do it.

Hmmm from my side ;). Indeed, networkprinters have cups onboard and windu machines can print to them directly.

Could it be something that has to be done at the windu side? You think it’s CUPS that needs mending to get this working?

Found this one, maybe it has what you need":

Printing to a CUPS server from Linux, OS X and Windows | tjansson.dk

> Found this one, maybe it has what you need":
>
> ‘Printing to a CUPS server from Linux, OS X and Windows | tjansson.dk’
> (http://www.tjansson.dk/?p=54)

Pretty much going in circles. All of these sites I have visited all say the
same thing…but what to do when it doesn’t work? They all say it’s not
listening…but seems to be at least on a localhost level. Basically, I
cannot telnet to ipaddress 631 from the windows client. If I try the same
on the server CLI using the ipaddress as opposed to localhost or 127.0.0.1,
it works. There is no firewall running on the SUSE box and everything is on
the same LAN with nothing in between. Very odd. I have since tried it from a
second machine to confirm that the connection cannot be established.

> Found this one, maybe it has what you need":
>
> ‘Printing to a CUPS server from Linux, OS X and Windows | tjansson.dk’
> (http://www.tjansson.dk/?p=54)

The other problem is these sites deal with no less than 3 versions of CUPS,
not all of which a compatible with each other. :frowning:

If you get no response from telnet 192.168.111.21 631 then perhaps your firewall is blocking it. If you get a connection denied, then look in the cups log file to see why.

> If you get no response from telnet 192.168.111.21 631 then perhaps your
> firewall is blocking it. If you get a connection denied, then look in
> the cups log file to see why.

Yes. And the aggravating part about it is, I’ve never run the SuSE
Firewall. I always disable it on installation…somehow it has gotten
enabled. Arrgh! Well, at least it is working now.

Not the greatest idea NOT to run the firewall. Just open up the port.

> Not the greatest idea NOT to run the firewall. Just open up the port.

As I’m the only machine on a test network behind another firewall, not too
worried about it. :slight_smile:

Ok but it is still not good practice.