Samba set up, works CUPS 9/10's works

erichbf · September 30, 2009, 5:27am

I have Samba running, and using Yast under SuSE 11.1 am publishing printers.

The windows clients see both of the printers, and seems to print.

The browsing to the CUPS adminsitration page I see the jobs are being received, and the CUPS page says they print.

But nothing actually prints…?

Here is one entry from a supposedly printed job:

samsungml2010-67 smbprn.00000001 download: OpenOffice.org -t… anna 142k 1 completed at
Tue 29 Sep 2009 09:46:06 PM CDT

Any pointers very appreciated. (yes I have read Printer Sharing: Samba Print Server for Suse/openSUSE Linux & Windows Clients)

Thanks!

erichbf

Here’s my Cups.conf file:

“$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $”

Sample configuration file for the Common UNIX Printing System (CUPS)

scheduler. See “man cupsd.conf” for a complete description of this

file.

Log general information in error_log - change “info” to “debug” for

troubleshooting…

LogLevel info

Administrator user group…

SystemGroup sys root

Only listen for connections from the local machine.

Listen *:631
Listen localhost:631
Listen /var/run/cups/cups.sock

Show shared printers on the local network.

Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseAddress @IF(eth0)
BrowseAddress @LOCAL

Default authentication type, when authentication is required…

DefaultAuthType Basic

Restrict access to the server…

<Location />
Allow @IF(eth0)
Allow @LOCAL
Order allow,deny
Allow 127.0.0.2
</Location>

Restrict access to the admin pages…

<Location /admin>
Encryption Required
Order allow,deny
</Location>

Restrict access to configuration files…

<Location /admin/conf>
AuthType Default
Require user @SYSTEM
Order allow,deny
</Location>

Set the default printer/job policies…

Job-related operations must be done by the owner or an administrator…

<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

All administration operations require an administrator to authenticate…

<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>

All printer operations require a printer operator to authenticate…

<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>

Only the owner or an administrator can cancel or authenticate a job…

<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>

<Limit All>
Order deny,allow
</Limit>
</Policy>

DefaultPolicy default

easy is a very relaxed policy

Job-related operations must be done by the owner or an administrator…

<Limit All>
Satisfy any
Order allow,deny
</Limit>
</Policy>

paranoid is a very restricted policy

Job-related operations must be done by the owner

<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

All administration operations require an administrator to authenticate…

<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

All printer operations require a printer operator to authenticate…

<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

Only the owner or an administrator can cancel or authenticate a job…

<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER
Allow from 127.0.0.0/8
Order deny,allow
</Limit>

<Limit All>
Require user @OWNER @SYSTEM
Allow from 127.0.0.0/8
Order deny,allow
</Limit>
</Policy>
ErrorPolicy abort-job

End of “$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $”.

2009-09-27,12:44:43 modify_cupsd_conf Allow @IF(eth0) @LOCAL

2009-09-27,12:44:44 modify_cupsd_conf BrowseAddress @IF(eth0) @LOCAL

2009-09-27,12:44:44 modify_cupsd_conf Browsing On

2009-09-27,12:44:44 modify_cupsd_conf Listen all

2009-09-27,12:45:48 modify_cupsd_conf ErrorPolicy abort-job

And here’s my mime.conv file:

“$Id: mime.convs.in 6761 2007-08-02 17:58:59Z mike $”

DO NOT EDIT THIS FILE, AS IT IS OVERWRITTEN WHEN YOU INSTALL NEW

VERSIONS OF CUPS. Instead, create a “local.convs” file that

reflects your local configuration changes.

MIME converts file for the Common UNIX Printing System (CUPS).

Copyright 2007 by Apple Inc.

Copyright 1997-2007 by Easy Software Products.

These coded instructions, statements, and computer programs are the

property of Apple Inc. and are protected by Federal copyright

law. Distribution and use rights are outlined in the file “LICENSE.txt”

which should have been included with this file. If this file is

file is missing or damaged, see the license at “http://www.cups.org/”.

########################################################################

Format of Lines:

source/type destination/type cost filter

General Notes:

The “cost” field is used to find the least costly filters to run

when converting a job file to a printable format.

All filters must accept the standard command-line arguments

(job-id, user, title, copies, options, [filename or stdin]) to

work with CUPS.

########################################################################

PostScript filters

application/pdf application/postscript 33 pdftops
application/postscript application/vnd.cups-postscript 66 pstops
#application/x-dvi application/postscript 50 dvitops
application/netscape-ps application/postscript 33 ogonki
#application/mozilla-ps application/postscript 33 pswrite
application/mozilla-ps application/vnd.cups-postscript 66 pstops
application/vnd.hp-HPGL application/postscript 66 hpgltops
application/x-cshell application/postscript 33 texttops
application/x-csource application/postscript 33 texttops
application/x-perl application/postscript 33 texttops
application/x-shell application/postscript 33 texttops
text/plain application/postscript 33 texttops
text/html application/postscript 33 texttops
image/gif application/vnd.cups-postscript 66 imagetops
image/png application/vnd.cups-postscript 66 imagetops
image/jpeg application/vnd.cups-postscript 66 imagetops
image/tiff application/vnd.cups-postscript 66 imagetops
image/x-bitmap application/vnd.cups-postscript 66 imagetops
image/x-photocd application/vnd.cups-postscript 66 imagetops
image/x-portable-anymap application/vnd.cups-postscript 66 imagetops
image/x-portable-bitmap application/vnd.cups-postscript 66 imagetops
image/x-portable-graymap application/vnd.cups-postscript 66 imagetops
image/x-portable-pixmap application/vnd.cups-postscript 66 imagetops
image/x-sgi-rgb application/vnd.cups-postscript 66 imagetops
image/x-xbitmap application/vnd.cups-postscript 66 imagetops
image/x-xpixmap application/vnd.cups-postscript 66 imagetops
#image/x-xwindowdump application/vnd.cups-postscript 66 imagetops
image/x-sun-raster application/vnd.cups-postscript 66 imagetops

########################################################################

Form filter…

This filter does not currently exist, but the file format is defined

in the IDD and registered with the IANA for future use…

#application/vnd.cups-form application/vnd.cups-postscript 33 formtops

########################################################################

Raster filters…

image/gif application/vnd.cups-raster 100 imagetoraster
image/png application/vnd.cups-raster 100 imagetoraster
image/jpeg application/vnd.cups-raster 100 imagetoraster
image/tiff application/vnd.cups-raster 100 imagetoraster
image/x-bitmap application/vnd.cups-raster 100 imagetoraster
image/x-photocd application/vnd.cups-raster 100 imagetoraster
image/x-portable-anymap application/vnd.cups-raster 100 imagetoraster
image/x-portable-bitmap application/vnd.cups-raster 100 imagetoraster
image/x-portable-graymap application/vnd.cups-raster 100 imagetoraster
image/x-portable-pixmap application/vnd.cups-raster 100 imagetoraster
image/x-sgi-rgb application/vnd.cups-raster 100 imagetoraster
image/x-xbitmap application/vnd.cups-raster 100 imagetoraster
image/x-xpixmap application/vnd.cups-raster 100 imagetoraster
#image/x-xwindowdump application/vnd.cups-raster 100 imagetoraster
image/x-sun-raster application/vnd.cups-raster 100 imagetoraster

pstoraster is part of GPL Ghostscript…

application/vnd.cups-postscript application/vnd.cups-raster 100 pstoraster

########################################################################

Raw filter…

Uncomment the following filter to allow printing of arbitrary files

without the -oraw option.

application/octet-stream application/vnd.cups-raw 0 -

End of “$Id: mime.convs.in 6761 2007-08-02 17:58:59Z mike $”.

swerdna · September 30, 2009, 11:15am

Try backing up the cupsd.conf (so you can get it back if this doesn’t help) and try changing this:

# Restrict access to the server...
<Location />
Allow @IF(eth0)
Allow @LOCAL
Order allow,deny
Allow 127.0.0.2
</Location>

to this

# Restrict access to the server...
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
#Allow From @LOCAL
Allow From *
</Location>

or better yet to this:

# Restrict access to the server...
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 127.0.0.2
#Allow From @LOCAL
Allow From kkk.mmm.nnn.* <== use your IP net instead of this
</Location>

and perhaps change this:

# Only listen for connections from the local machine.
Listen *:631
Listen localhost:631
Listen /var/run/cups/cups.sock

to this

# Only listen for connections from the local machine.
# Listen localhost:631
# Listen /var/run/cups/cups.sock
port 631

And maybe make sure the [global] stanza in smb.conf contains these lines:

printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
load printers = yes
use client driver = yes

note the last line.

cjcox · September 30, 2009, 4:38pm

On Wed, 2009-09-30 at 03:36 +0000, erichbf wrote:
> I have Samba running, and using Yast under SuSE 11.1 am publishing
> printers.
>
> The windows clients see both of the printers, and seems to print.

I know you CAN make this work… but I just want to suggest also
as something to consider… the fact that (shhh!!) Windows can print
using IPP protocol.

Certainly something that Redmond doesn’t like to advertise, but
it is there… something else to consider.