cups error 403 Forbidden

Squeezer · #1 29th December 2006, 01:54 AM

My fedora core 6 server is 10.1.3.1 with cups 1.2.7. I have a computer 10.1.3.225 and when I go to http://10.1.3.1:631 from it I get the error in my browser window "403 Forbidden". on 10.1.3.1 when I run system-config-printer and click goto server and put in 10.1.3.1 I get the error:

CUPS Server Error
There was an error during the CUPS operation: 'client-error-forbidden'.

/var/log/cups/access_log has:

10.1.3.225 - - [28/Dec/2006:20:52:25 -0600] "GET / HTTP/1.1" 403 0 - -
10.1.3.225 - - [28/Dec/2006:20:52:26 -0600] "GET /cups.css HTTP/1.1" 403 0 - -

any suggestions on what I need to do so that I can connect to cups remotely? I can connect to it fine from http://localhost:631

and below is my cupsd.conf

#
# "$Id: cupsd.conf.in 5454 2006-04-23 21:46:38Z mike $"
#
# Sample configuration file for the Common UNIX Printing System (CUPS)
# scheduler. See "man cupsd.conf" for a complete description of this
# file.
#

# Log general information in error_log - change "info" to "debug" for
# troubleshooting...
LogLevel info

# Administrator user group...
SystemGroup sys root

# Only listen for connections from the local machine.
Listen localhost:631
Listen 10.1.3.1:631
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow From localhost 10.

# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Restrict access to the server...
<Location />
Order allow,deny
Allow From localhost 10.
</Location>

# Restrict access to the admin pages...
<Location /admin>
# Encryption Required
Order allow,deny
Allow From localhost 10.
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
AuthType Basic
Require user @SYSTEM
Order allow,deny
Allow From localhost 10.
</Location>

# Set the default printer/job policies...
<Policy default>
# Job-related operations must be done by the owner or an adminstrator...
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
Require user @OWNER @SYSTEM
Order deny,allow
Allow From localhost 10.
</Limit>

# All administration operations require an adminstrator to authenticate...
<Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
AuthType Basic
Require user @SYSTEM
Order deny,allow
Allow From localhost 10.
</Limit>

# Only the owner or an administrator can cancel or authenticate a job...
<Limit Cancel-Job CUPS-Authenticate-Job>
Require user @OWNER @SYSTEM
Order deny,allow
Allow From localhost 10.
</Limit>

<Limit All>
Order deny,allow
Allow From localhost 10.
</Limit>
</Policy>

# LogFilePerm: determines the file mode to set log files to.
#
MaxLogSize 2000000000

LogFilePerm 0600

#
# End of "$Id: cupsd.conf.in 5454 2006-04-23 21:46:38Z mike $".
#

osprey · #2 23rd October 2007, 08:36 PM

Guys, this is why Linux is struggling for public acceptance on the desktop:

This was posted back in December of last year.

NOBODY POSTED A RESPONSE!

Either:
a. The poster quit using linux, and gave M$ money for Vista (The end of us all...)
b. Nobody knows how to fix this (I doubt it, this is not hard.)
c. He threw his computer out a windows, and followed himself moments later.

I have the same problem, 10 months later, and am looking for help.

Can someone help please?

Thanks.

scottro · #3 24th October 2007, 02:41 AM

Because C(an't)U(sually)P(rint)S(tuff) annoys people?

In this particular case, it makes sense. By default, Cups will only allowi management from the web interface from the localhost. Actually, I think it only allows any managment from the local host (though you can ssh in and do things with it.)

Notice that you're only allowing from the localhost for administration.

gesho · #4 24th October 2007, 05:57 PM

this gave me pains too. I typed in allow XX. literally everywhere till it worked. I 'll paste my .conf file once at home.

C4talyst · #5 15th September 2008, 08:03 PM

You home yet? I'm having same problem.

zackf · #6 15th September 2008, 08:40 PM

Instead of

Code:

Allow From localhost 10.

try

Code:

Allow From localhost
Allow From 10.0.0.0/8

zackf · #7 15th September 2008, 08:41 PM

Also make sure :631 is open in your firewall.

marcrblevins · #8 16th September 2008, 06:17 AM

That is old post.

Nabeel Moidu · #9 9th June 2009, 07:19 AM

Just in case anyone comes across this again,
I fixed this issue by relaunching system-config-printer as root and I could add a new printer. Could be some permission issue.

apusa · #10 22nd December 2009, 05:56 AM

Thanks Nabeel.
logging in as root fixed my problem.

Quote:

Originally Posted by Nabeel Moidu

Just in case anyone comes across this again,
I fixed this issue by relaunching system-config-printer as root and I could add a new printer. Could be some permission issue.

johnbergsing · #11 2nd January 2010, 01:09 PM

Quote:

Originally Posted by Nabeel Moidu

Just in case anyone comes across this again,
I fixed this issue by relaunching system-config-printer as root and I could add a new printer. Could be some permission issue.

I'm having a similar problem. How do I 'relaunch system-config-printer as root'?

scottro · #12 2nd January 2010, 02:18 PM

Open a terminal. Type su and put in root's password when asked.
Then type

system-config-printer

If you get command not found, then install it with

yum install system-config-printer

Personally, I've found that I always had the best results with using the cups web interface.

In a web browser type

localhost:631

At some point or another it asks for the user's credentials, and one uses root as the username and root's password. The exception has been some HP all in ones, where I used hp-setup, which is part of the hplip program.

csumm · #13 8th January 2012, 05:39 AM

I came here looking for an answer to the same problem. But I use Ubuntu.
However, I found the answer (at least for me).

I tried running the cups configuration under root. That works. But it only works for linux machines. I have an android tablet that I'd like to print from. This solution works for all machines, all clients. and you don't have to configure under root.

I went to the machine running cups server. I went to System-Administration- Users and Groups.

I highlighted the user under which cups is running. I clicked on Advanced settings. Make sure under "user privileges" that "configure printers" is checked.

Check "configure printers" if its not checked and restart. try it again. it should work

asaddotcom · #14 11th January 2012, 06:08 PM

hi palls,

I have FC16 and samba server installed on it.
I am getting this error in /var/log/messages

Code:

Jan 11 22:52:45 dotcom smbd[17710]: [2012/01/11 22:52:45.687323,  0] printing/print_cups.c:110(cups_connect)
Jan 11 22:52:45 dotcom smbd[17710]:   Unable to connect to CUPS server localhost:631 - No such file or directory
Jan 11 22:52:45 dotcom smbd[1204]: [2012/01/11 22:52:45.687571,  0] printing/print_cups.c:487(cups_async_callback)
Jan 11 22:52:45 dotcom smbd[1204]:   failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL

can anyone tell what is this error for?