[bonaventure]

No matter what I change in my cups configuration file, it just won't work. Every time I try to access the administration pages or add a new printer, I get a 403 forbidden error.

Please look at my current config file and tell me where I'm going wrong.
Be gentle, I'm fairly new to Linux.

LogLevel info
SystemGroup sys root
#Allow remote access
Port 631
Listen /var/run/cups/cups.sock
Listen 127.0.0.1:631
Listen 192.168.1.100:631
Listen 192.168.1.101:631
Listen 192.168.1.102:631
#Enable printer sharing and shared printers.
ServerName 192.168.1.151
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseAddress 192.168.1.255
DefaultAuthType Basic
<Location />
  # Allow shared printing...
  Order allow,deny
  Allow From 192.168.1.*
  Allow From 127.0.0.1
  Allow From localhost.localdomain
  Allow all
</Location>
<Location /admin>
  Encryption Required
  # Restrict access to the admin pages...
  Order allow,deny
  Allow localhost
</Location>
<Location /admin/conf>
  AuthType Default
  #Require user @SYSTEM
  # Restrict access to the configuration files...
  Order allow,deny
  Allow localhost
</Location>
<Policy default>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
    Allow localhost
  </Limit>
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

[daark.child]

Are you trying to access the admin page from a different machine one the same network?

[bonaventure]

I've tried both. However, I only have three machines, so it's no big deal to add printers from my linux box. I get the 403 permission error when I go to port 631/admin from the server itself.

Part of my problem, I suspect, is that I may not have SAMBA configured properly. This is a bit overwhelming.

[daark.child]

I doubt that the problem is related to samba, but maybe the way you have configured access permissions in cupsd.conf. This is part of my cupsd.conf

# Only listen for connections from the local machine.
#Listen localhost:631
Listen 192.168.1.126:631
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseAddress @LOCAL

# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Restrict access to the server...
<Location />
  Order allow,deny
  Allow localhost
  Allow @LOCAL
</Location>

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
  Allow @LOCAL
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
  Allow @LOCAL
</Location>
...

I configured cups to only listen to the ip address allocated to the server and allowed machines on the local network to browse the printers, access the server, admin pages and configuration files. Hope you can use this as a guide to fix your problem.

[bonaventure]

Thank you for your prompt response. I'm getting closer. I was missing info in the admin section (as you suggested).
Now there appears to be some confusion with my certificate. when I navigate to part 631 it wants to take me to localhost.localdomain instead of my ip address. I get a security certificate warning that I'm trying to access an IP address but the certificate is for localhost.localdomain. I then get an error or I land on my default apache page.
I'll keep playing. Any ideas?
Thanks again for the help.