cups 1.6.2 my online notes to myself

[aus9]

Ok subject to numerous edits.......but to assist me to focus my mind on why some things work and some don't etc

getting somewhere

Firstly with the split in cupsd.conf into cupsd.conf and cups-files.conf......some old terms can no longer be used when I was I fumbling in the dark
from debug log

Unknown directive BrowseOrder on line 18 of /usr/local/etc/cups/cupsd.conf.
Unknown directive BrowseAllow on line 19 of /usr/local/etc/cups/cupsd.conf.

so users must be informed to delete any persistence before reboot.....except for PPD

The new default cupsd.conf for local setting is

# Show shared printers on the local network.
Browsing On
BrowseLocalProtocols dnssd

This backend has built, but at the moment I am using ##### BrowseLocalProtocols all ######
more testing required.# still not done you dummy

build rebuilt again and again. I am getting some funny errors now for my doc/help and doc/images on tce-load

Me thinks I toughened the ownership and perms there without wondering why the install had them......giggles

Any how we finally have something working.......login box now appears but more work needed

[aus9]

firstly I start a previous build of cups with debug log to see that cups wants something

Repairing access permissions of "/var/cache/cups"
Repairing access permissions of "/var/cache/cups/rss"
Repairing ownership of "/var/run/cups/certs"
Repairing access permissions of "/var/run/cups/certs"
Repairing ownership of "/usr/local/etc/cups"
Creating missing directory "/usr/local/etc/cups/ppd"
Repairing ownership of "/usr/local/etc/cups/ppd"
Repairing access permissions of "/usr/local/etc/cups/ppd"
Repairing ownership of "/usr/local/etc/cups/cupsd.conf"
Repairing access permissions of "/usr/local/etc/cups/cupsd.conf"
Repairing ownership of "/usr/local/etc/cups/cups-files.conf"
Repairing access permissions of "/usr/local/etc/cups/cups-files.conf"
Using default TempDir of /var/spool/cups/tmp...
Repairing access permissions of "/var/spool/cups/tmp"

Code: [Select]

ls -al /var/cache/ --> root staff
ls -al /var/cache/cups/  ditto for rss
ls -al /var/run/ ditto for cups
ls -al /usr/local/etc ditto for cups
ls -al /var/run/cups
dr-x--x--x 2 tc   root   60 May  5 13:11 certs/
srwxrwxrwx 1 root root    0 May  5 13:11 cups.sock
 ls -al /usr/local/etc/cups/
-rw-r-----  1 root staff 3047 May  5 13:09 cups-files.conf
rw-r-----  1 root staff 4494 May  5 13:11 cupsd.conf
-rw-r--r--  1 root root   278 May  5 13:09 snmp.conf
drwxr-xr-x  2 root staff   40 May  5 13:11 ppd/  (folder)
sudo ls -al /var/spool/
drwx--x--- 3 root staff  60 May  2 21:11 cups
sudo ls -al /var/spool/cups
drwxrwx--T 2 root staff  40 May  2 21:11 tmp

today's rebuild.....cups still wants to repair......damn....ahh its my eyesight again

Code: [Select]

ls -al /var/cache
drwxrwxr-x 3 root staff 100 May  6 10:07 cups

ls -al /tmp/tcloop/cups/var/cache
drwxr-xr-x 3 root staff 26 May  5 18:33 cups

I will cheat and use unsquash with repacks a while until I get these all resolved

[aus9]

ok rebuilt with CUPS preferred  ownership and CUPS desired permissions but
tce-load  complains with permission denied against the most hardened folders,
ony in the /usr/local/etc folder and /var folder

I have elected to compromise, since I know CUPS repairs as seen in debug mode, my current build shows, before installing a PPD

Repairing access permissions of "/var/spool/cups"
Repairing access permissions of "/usr/local/etc/cups/ssl"

after repair it says

Code: [Select]

ls -al /var/spool
drwx--x--- 3 root staff  60 May  8 14:47 cups

ls -al /usr/local/etc/cups/
drwx------  2 root staff   40 May  8 14:47 ssl

IMHO, if I try to have no group READ permission for staff or the World, tce-load is giving error messages.

Therefore I will rebuild, but probably mention in info file, NOT to post a bug report for the following debug messages
and name them......more building required

[aus9]

right so back to revisit my config and help and now I spot it only thru checking the log

./configure --prefix=/usr/local --sysconfdir=/usr/local/etc --localstatedir=/var \
--enable-libpaper --disable-libusb --enable-dbus --with-dbusdir=/usr/local/etc/dbus-1 \
--enable-ssl --disable-gnutls --enable-openssl --enable-avahi --enable-dnssd \
--with-cups-user=tc --with-cups-group=staff --with-system-groups=root \
--enable-largefile --with-printcap=/usr/local/etc/printcap --enable-pam \
--with-config-file-perm=644  --with-cupsd-file-perm=755 --with-pam-module=unix \
--enable-browsing --enable-webif --with-smbconfig=/usr/local/etc/samba

pam module can't be named pam_unix.so  new way gives

Code: [Select]

cat *.log | grep pam_unix
PAMMOD='pam_unix.so'
PAMMODAUTH='pam_unix.so shadow nodelay'

and Linux-PAM has that pam file!

and contents of the pam file finally change from pam_unknown to

auth   required   pam_unix.so shadow nodelay
account   required   pam_unix.so

have not tested yet, but build also includes file permissions and I will test samba as well

I can't test samba as I don't windows but enabling it in configure gives 2 new docs

usr/local/share/cups/templates/samba-export.tmpl
usr/local/share/cups/templates/samba-exported.tmpl