Find the answer to your Linux question:
Results 1 to 6 of 6
No matter what I change in my cups configuration file, it just won't work. Every time I try to access the administration pages or add a new printer, I get ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Apr 2008
    Posts
    3

    Question CUPS 403 Forbidden error


    No matter what I change in my cups configuration file, it just won't work. Every time I try to access the administration pages or add a new printer, I get a 403 forbidden error.

    Please look at my current config file and tell me where I'm going wrong.
    Be gentle, I'm fairly new to Linux.

    Code:
    LogLevel info
    SystemGroup sys root
    #Allow remote access
    Port 631
    Listen /var/run/cups/cups.sock
    Listen 127.0.0.1:631
    Listen 192.168.1.100:631
    Listen 192.168.1.101:631
    Listen 192.168.1.102:631
    #Enable printer sharing and shared printers.
    ServerName 192.168.1.151
    Browsing On
    BrowseOrder allow,deny
    BrowseAllow all
    BrowseAddress 192.168.1.255
    DefaultAuthType Basic
    <Location />
      # Allow shared printing...
      Order allow,deny
      Allow From 192.168.1.*
      Allow From 127.0.0.1
      Allow From localhost.localdomain
      Allow all
    </Location>
    <Location /admin>
      Encryption Required
      # Restrict access to the admin pages...
      Order allow,deny
      Allow localhost
    </Location>
    <Location /admin/conf>
      AuthType Default
      #Require user @SYSTEM
      # Restrict access to the configuration files...
      Order allow,deny
      Allow localhost
    </Location>
    <Policy default>
      <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
        Require user @OWNER @SYSTEM
        Order deny,allow
      </Limit>
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
        Allow localhost
      </Limit>
      <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
      </Limit>
      <Limit Cancel-Job CUPS-Authenticate-Job>
        Require user @OWNER @SYSTEM
        Order deny,allow
      </Limit>
      <Limit All>
        Order deny,allow
      </Limit>
    </Policy>

  2. #2
    Blackfooted Penguin daark.child's Avatar
    Join Date
    Apr 2006
    Location
    West Yorks
    Posts
    4,393
    Are you trying to access the admin page from a different machine one the same network?

  3. #3
    Just Joined!
    Join Date
    Apr 2008
    Posts
    3

    same machine and on network

    I've tried both. However, I only have three machines, so it's no big deal to add printers from my linux box. I get the 403 permission error when I go to port 631/admin from the server itself.

    Part of my problem, I suspect, is that I may not have SAMBA configured properly. This is a bit overwhelming.

  4. $spacer_open
    $spacer_close
  5. #4
    Blackfooted Penguin daark.child's Avatar
    Join Date
    Apr 2006
    Location
    West Yorks
    Posts
    4,393
    I doubt that the problem is related to samba, but maybe the way you have configured access permissions in cupsd.conf. This is part of my cupsd.conf
    Code:
    # Only listen for connections from the local machine.
    #Listen localhost:631
    Listen 192.168.1.126:631
    Listen /var/run/cups/cups.sock
    
    # Show shared printers on the local network.
    Browsing On
    BrowseOrder allow,deny
    BrowseAllow all
    BrowseAddress @LOCAL
    
    # Default authentication type, when authentication is required...
    DefaultAuthType Basic
    
    # Restrict access to the server...
    <Location />
      Order allow,deny
      Allow localhost
      Allow @LOCAL
    </Location>
    
    # Restrict access to the admin pages...
    <Location /admin>
      Order allow,deny
      Allow @LOCAL
    </Location>
    
    # Restrict access to configuration files...
    <Location /admin/conf>
      AuthType Default
      Require user @SYSTEM
      Order allow,deny
      Allow @LOCAL
    </Location>
    ...
    I configured cups to only listen to the ip address allocated to the server and allowed machines on the local network to browse the printers, access the server, admin pages and configuration files. Hope you can use this as a guide to fix your problem.

  6. #5
    Just Joined!
    Join Date
    Apr 2008
    Posts
    3

    Smile getting closer

    Thank you for your prompt response. I'm getting closer. I was missing info in the admin section (as you suggested).
    Now there appears to be some confusion with my certificate. when I navigate to part 631 it wants to take me to localhost.localdomain instead of my ip address. I get a security certificate warning that I'm trying to access an IP address but the certificate is for localhost.localdomain. I then get an error or I land on my default apache page.
    I'll keep playing. Any ideas?
    Thanks again for the help.

  7. #6
    Just Joined!
    Join Date
    Sep 2009
    Posts
    1

    Thank you, it works

    Solution posted by Daark.Child works for me. At the begining I got the same problem with the Error 403 Forbidden, but now it's solved to me.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •