cups web admin help

[40esp]

I want to enable cups web administration, ive added my ip and everything, but it wont work, i am getting 403 Forbidden.


here is my cupsd.conf:

#
# "$Id: cupsd.conf.in 6720 2007-07-25 00:40:03Z mike $"
#
# Sample configuration file for the Common UNIX Printing System (CUPS)
# scheduler. See "man cupsd.conf" for a complete description of this
# file.
#

# Log general information in error_log - change "info" to "debug" for
# troubleshooting...
LogLevel info

# Administrator user group...
SystemGroup sys root


# Only listen for connections from the local machine.
Listen localhost:631
Listen 71.13.92.138
Listen *
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
#Browsing On
#BrowseOrder allow,deny
#BrowseAllow all

Browsing On
BrowseOrder allow,deny
BrowseAllow all

# Default authentication type, when authentication is required...
DefaultAuthType Basic
DefaultEncryption IfRequested

# Restrict access to the server...
<Location />
Order allow,deny
Allow localhost
Allow 71.13.92.138*
</Location>

# Restrict access to the admin pages...
<Location /admin>
Encryption Required
Order allow,deny
Allow localhost
Allow 71.13.92.138
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
AuthType Default
Require user @SYSTEM
Order allow,deny
Allow localhost
Allow 71.13.92.138
</Location>

# Set the default printer/job policies...
<Policy default>
# Job-related operations must be done by the owner or an administrator...
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
Allow 71.13.92.138
</Limit>

# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
AuthType Default
Require user @SYSTEM
Order deny,allow
Allow 71.13.92.138
</Limit>

# All printer operations require a printer operator to authenticate...
<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
AuthType Default
Require user @SYSTEM
Order deny,allow
Allow 71.13.92.138
</Limit>

# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
Allow 71.13.92.138
</Limit>

<Limit All>
Order deny,allow
Allow 71.13.92.138
</Limit>
</Policy>

#
# End of "$Id: cupsd.conf.in 6720 2007-07-25 00:40:03Z mike $".
#

can you tell me what else i must configure?

[scottro]

Default is to deny all but localhost. Note that you have order deny, allow. I think you might have to change it to allow,deny and restart cups.

Also, when you do that, as allow is coming first, you might want to add localhost to allow--otherwise, you won't be able to administer it locally. (I hope that's clear. You're doing allow deny, so it might ONLY allow that remote address. That's untested on my part, but I'd play it safe, and add localhost to the allowed line.)

[40esp]

thanks for the help I got it now =]

[scottro]

Glad to hear it. Now, whenever you run into something like this, it's always useful to the next person to explain what fixed it. When you say got it now, it implies that my solution was the one, but the next person who finds the thread can't be sure. There's always the possibility that I was wrong (oh no!!) and that it was something completely different. The other reason one should always try to make it clear is that often, the readers of these forums don't have English as their first language, so posting something specific like, thanks, yes, that was it, changing the order to allow deny fixed it makes it easier for them to understand. (Also, of course, if the solution turned out to be something completely different, that's important too.) :)