Re: [gentoo-user] Re: Re: Home Network Printing

Re: [gentoo-user] Re: Re: Home Network Printing

[brettholcomb]

Are you running cups?

> 
> From: Mick <michaelkintzios@lycos.co.uk>
> Date: 2005/11/30 Wed PM 02:31:16 EST
> To: gentoo-user@lists.gentoo.org
> Subject: [gentoo-user]  Re: Re: Home Network Printing
> 
> Guys, this is ridiculous! Every time I want to print something from my main
> Linux machine I have to physically disconnect the printer from the second
> box and connect it to this one.  The way this is going I will soon need to
> buy another parallel port connector because the pins will wear out!
> 
> Surely, it can't be that difficult.  I mean, it obviously is for me, but a
> lot of people have cracked it.  It should be straight forward printing from
> one Linux box to the other. Please ask if you need more info from config
> files etc.
> 
> In hope that some advice will soon arrive  ;-)
> 
> Cheers,
> 
> Michael Kintzios wrote:
> 
> > 
> >> From:: Oliver Friedrich <beowulfwork@gmx.de>
> >> To: gentoo-user@lists.gentoo.org
> >> Subject: Re: [gentoo-user] Home Network Printing
> >> Date: Fri, 25 Nov 2005 11:58:27 +0100
> > 
> >> Michael Kintzios wrote:
> >> 
> >> > I created a new printer on hostname1 and also named it Compaq-HP. I
> >> > set the ipp address to ipp://hostname2.STUDY/ipp but I kept
> >> > getting errors telling me it can't resolve the address.
> >> 
> >> AFAIR the IPP-Adress has to be: "ipp://[Host]/[PrinterName]"
> >> in your case this would mean: "ipp://hostname2.STUDY/Compaq-HP"
> > 
> > I'm afraid I had no success.  I tried using the address as you suggested
> > above but it says unknown host . . . perhaps I should add it in my
> > hostname file, but my netgear router which acts as the nameserver should
> > know where to go?
> > 
> > In any case, when I changed it to the IP address of hostname2 box
> > (192.168.0.3) I got this: ====================================
> > I [25/Nov/2005:20:23:13 +0000] [Job 56] Connecting to 192.168.0.3 on port
> > 631... I [25/Nov/2005:20:23:13 +0000] [Job 56] Connected to 192.168.0.3...
> > D [25/Nov/2005:20:23:13 +0000] [Job 56] Getting supported attributes...
> > E [25/Nov/2005:20:23:13 +0000] [Job 56] Destination printer does not
> > exist! E [25/Nov/2005:20:23:14 +0000] PID 13299 stopped with status 1!
> > ====================================
> > 
> > Anything else I should try?
> 
> -- 
> Regards,
> Mick
> 
> -- 
> gentoo-user@gentoo.org mailing list
> 
> 

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Re: Home Network Printing

[Richard Fish]

On 11/30/05, brettholcomb@bellsouth.net <brettholcomb@bellsouth.net> wrote:
> Are you running cups?

And if so, post the output of:

grep -v "^#" /etc/cups/cupsd.conf | grep -v "^$"

for both systems.

-Richard

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Re: Re: Home Network Printing

[Mick]

Richard Fish wrote:

> On 11/30/05, brettholcomb@bellsouth.net <brettholcomb@bellsouth.net>
> wrote:
>> Are you running cups?
> 
> And if so, post the output of:
> 
> grep -v "^#" /etc/cups/cupsd.conf | grep -v "^$"
> 
> for both systems.

Thanks Richard, this is what I get from box 1 (this is the client):
=========================
# grep -v "^#" /etc/cups/cupsd.conf | grep v "^$"
DocumentRoot /usr/share/cups/docs
LogLevel debug2 
MaxCopies 10
MaxJobs 70
MaxJobsPerPrinter 30
MaxJobsPerUser 30
User lp
Group lp
Listen 127.0.0.1:631
MaxClients 10
Browsing Off
SystemGroup lp
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
</Location>
<Location /admin>
AuthType Basic
AuthClass System
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
</Location>
=========================

This is what I get from host 2 (the server):
=========================
# grep -v "^#" /etc/cups/cupsd.conf | grep -v "^$"
DocumentRoot /usr/share/cups/docs
LogLevel info
User lp
Group lp
Port 631
SystemGroup lp
     IfRequested  - Use encryption if the server requests it
<Location />
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.0.2
</Location>
<Location /printers>
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.0.2
</Location>
<Location /admin>
AuthType Basic
AuthClass System
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
</Location>
=========================

Any wrong entries?
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Re: Re: Home Network Printing

[Richard Fish]

On 11/30/05, Mick <michaelkintzios@lycos.co.uk> wrote:
> This is what I get from host 2 (the server):
...
>      IfRequested  - Use encryption if the server requests it

Shouldn't this line be commented out??

-Richard

-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] Re: Re: Re: Home Network Printing

[Michael Kintzios]

> -----Original Message-----
> From: richard.j.fish@gmail.com 
> [mailto:richard.j.fish@gmail.com] On Behalf Of Richard Fish
> Sent: 30 November 2005 23:33
> To: gentoo-user@lists.gentoo.org
> Subject: Re: [gentoo-user] Re: Re: Re: Home Network Printing
> 
> 
> On 11/30/05, Mick <michaelkintzios@lycos.co.uk> wrote:
> > This is what I get from host 2 (the server):
> ...
> >      IfRequested  - Use encryption if the server requests it
> 
> Shouldn't this line be commented out??

Quite possibly so, I'll try it when I get home.  Thank you.
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Re: Re: Home Network Printing

[Holly Bostick]

Mick schreef:
> Richard Fish wrote:
> 
> 
>> On 11/30/05, brettholcomb@bellsouth.net 
>> <brettholcomb@bellsouth.net> wrote:
>> 
>>> Are you running cups?
>> 
>> And if so, post the output of:
>> 
>> grep -v "^#" /etc/cups/cupsd.conf | grep -v "^$"
>> 
>> for both systems.
> 
> 
> Thanks Richard, this is what I get from box 1 (this is the client): 
> =========================
<snip>
> Order Deny,Allow

> Deny From All Allow

> From 127.0.0.1

<snip>

> Allow From 127.0.0.1

</Location>

 =========================

> 


> This is what I get from host 2 (the server):

> =========================

<snip>

> Order Deny,Allow

> Deny From All

> Allow From 127.0.0.1

> Allow From 192.168.0.2

> </Location>

> <Location /printers>

> Order Deny,Allow

> Deny From All

> Allow From 127.0.0.1

> Allow From 192.168.0.2

<snip>

> Any wrong entries?

What I see is:

I assume the printer is connected to the server--- but the server only
allows connections from localhost (itself), and 192.168.0.2.

If 192.168.0.2 is not the network IP address of the client (host 1),
then the connection is denied.

If the printer is connected to host 1... well, that only allows
connections from localhost (itself). Connections from everywhere else
are refused.

So what I would suggest is that the server allow connections from the
network as a whole, or the specific network IPs of the various networked
clients.

According to the well-commented cupsd.conf file:

# Allow: allows access from the specified hostname, domain, IP address,
# network, or interface.
#
# Deny: denies access from the specified hostname, domain, IP address,
# network, or interface.
#
# Both "Allow" and "Deny" accept the following notations for addresses:
#
#     All
#     None
#     *.domain.com
#     .domain.com
#     host.domain.com
#     nnn.*
#     nnn.nnn.*
#     nnn.nnn.nnn.*
#     nnn.nnn.nnn.nnn
#     nnn.nnn.nnn.nnn/mm
#     nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm
#     @LOCAL
#     @IF(name)
#
# The host and domain address require that you enable hostname lookups
# with "HostNameLookups On" above.
#
# The @LOCAL address allows or denies from all non point-to-point
# interfaces.  For example, if you have a LAN and a dial-up link,
# @LOCAL could allow connections from the LAN but not from the dial-up
# link.  Similarly, the @IF(name) address allows or denies from the
# named network interface, e.g. @IF(eth0) under Linux.  Interfaces are
# refreshed automatically (no more than once every 60 seconds), so
# they can be used on dynamically-configured interfaces, e.g. PPP,
# 802.11, etc.
#

So if you have more than one machine on the network, you might consider
changing the "Allow From" statements to read something like


 Allow From 192.168.0.*

(assuming that your network mask is 192.168.0. , which it may not be).
Modify for your actual network configuration.

Sorry, I use Samba to connect to the network printer, as it's connected
to a Windows box, so I can't help much more. Hope this is helpful though.

Holly



-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] Home Network Printing

[Michael Kintzios]

Thank you Holly,

> -----Original Message-----
> From: Holly Bostick [mailto:motub@planet.nl] 
> Sent: 01 December 2005 13:33
> To: gentoo-user@lists.gentoo.org
> Subject: Re: [gentoo-user] Re: Re: Re: Home Network Printing
> 
[snip] 
> 
> What I see is:
> 
> I assume the printer is connected to the server--- but the server only
> allows connections from localhost (itself), and 192.168.0.2.

Yes on all counts.

> If 192.168.0.2 is not the network IP address of the client (host 1),
> then the connection is denied.

192.168.0.2 is the LAN address of the client (host 1).
 
> If the printer is connected to host 1... well, that only allows
> connections from localhost (itself). Connections from everywhere else
> are refused.

The printer is physically connected to host 2 which acts as the server
with IP address 102.168.0.3

> So what I would suggest is that the server allow connections from the
> network as a whole, or the specific network IPs of the 
> various networked
> clients.
> 
[snip]
> 
> So if you have more than one machine on the network, you 
> might consider
> changing the "Allow From" statements to read something like 
> 
>  Allow From 192.168.0.*

Each machine has only one NIC which connects them to the
router/LAN/Internet.  The router (netgear ADSL thingy) is 192.168.0.1
and acts both as the Internet gateway and the DNS for the machines on
the LAN.  I would rather allow access to explicit IP addresses, in this
case 192.168.0.2 which is the client.

Thanks for the heads up on the "HostNameLookups On".  I'll try it
tonight - although setting the IP address would remove one more thing
for me to get wrong.  ;-)
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Home Network Printing

[John Jolet]

silly question, but...any firewalling on the host?
or client for that matter?
On Dec 1, 2005, at 8:34 AM, Michael Kintzios wrote:

> Thank you Holly,
>
>> -----Original Message-----
>> From: Holly Bostick [mailto:motub@planet.nl]
>> Sent: 01 December 2005 13:33
>> To: gentoo-user@lists.gentoo.org
>> Subject: Re: [gentoo-user] Re: Re: Re: Home Network Printing
>>
> [snip]
>>
>> What I see is:
>>
>> I assume the printer is connected to the server--- but the server  
>> only
>> allows connections from localhost (itself), and 192.168.0.2.
>
> Yes on all counts.
>
>> If 192.168.0.2 is not the network IP address of the client (host 1),
>> then the connection is denied.
>
> 192.168.0.2 is the LAN address of the client (host 1).
>
>> If the printer is connected to host 1... well, that only allows
>> connections from localhost (itself). Connections from everywhere else
>> are refused.
>
> The printer is physically connected to host 2 which acts as the server
> with IP address 102.168.0.3
>
>> So what I would suggest is that the server allow connections from the
>> network as a whole, or the specific network IPs of the
>> various networked
>> clients.
>>
> [snip]
>>
>> So if you have more than one machine on the network, you
>> might consider
>> changing the "Allow From" statements to read something like
>>
>>  Allow From 192.168.0.*
>
> Each machine has only one NIC which connects them to the
> router/LAN/Internet.  The router (netgear ADSL thingy) is 192.168.0.1
> and acts both as the Internet gateway and the DNS for the machines on
> the LAN.  I would rather allow access to explicit IP addresses, in  
> this
> case 192.168.0.2 which is the client.
>
> Thanks for the heads up on the "HostNameLookups On".  I'll try it
> tonight - although setting the IP address would remove one more thing
> for me to get wrong.  ;-)
> -- 
> Regards,
> Mick
>
> -- 
> gentoo-user@gentoo.org mailing list
>

-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] Home Network Printing

[Michael Kintzios]

Not silly at all.  Yes, I have firewall on both - but the first thing I
did was to shut down the firewalls, just in case.
-- 
Regards,
Mick

> -----Original Message-----
> From: John Jolet [mailto:john@jolet.net] 
> Sent: 01 December 2005 14:48
> To: gentoo-user@lists.gentoo.org
> Subject: Re: [gentoo-user] Home Network Printing
> 
> 
> silly question, but...any firewalling on the host?
> or client for that matter?
> On Dec 1, 2005, at 8:34 AM, Michael Kintzios wrote:
> 
> > Thank you Holly,
> >
> >> -----Original Message-----
> >> From: Holly Bostick [mailto:motub@planet.nl]
> >> Sent: 01 December 2005 13:33
> >> To: gentoo-user@lists.gentoo.org
> >> Subject: Re: [gentoo-user] Re: Re: Re: Home Network Printing
> >>
> > [snip]
> >>
> >> What I see is:
> >>
> >> I assume the printer is connected to the server--- but the server  
> >> only
> >> allows connections from localhost (itself), and 192.168.0.2.
> >
> > Yes on all counts.
> >
> >> If 192.168.0.2 is not the network IP address of the client 
> (host 1),
> >> then the connection is denied.
> >
> > 192.168.0.2 is the LAN address of the client (host 1).
> >
> >> If the printer is connected to host 1... well, that only allows
> >> connections from localhost (itself). Connections from 
> everywhere else
> >> are refused.
> >
> > The printer is physically connected to host 2 which acts as 
> the server
> > with IP address 102.168.0.3
> >
> >> So what I would suggest is that the server allow 
> connections from the
> >> network as a whole, or the specific network IPs of the
> >> various networked
> >> clients.
> >>
> > [snip]
> >>
> >> So if you have more than one machine on the network, you
> >> might consider
> >> changing the "Allow From" statements to read something like
> >>
> >>  Allow From 192.168.0.*
> >
> > Each machine has only one NIC which connects them to the
> > router/LAN/Internet.  The router (netgear ADSL thingy) is 
> 192.168.0.1
> > and acts both as the Internet gateway and the DNS for the 
> machines on
> > the LAN.  I would rather allow access to explicit IP addresses, in  
> > this
> > case 192.168.0.2 which is the client.
> >
> > Thanks for the heads up on the "HostNameLookups On".  I'll try it
> > tonight - although setting the IP address would remove one 
> more thing
> > for me to get wrong.  ;-)
> > -- 
> > Regards,
> > Mick
> >
> > -- 
> > gentoo-user@gentoo.org mailing list
> >
> 
> -- 
> gentoo-user@gentoo.org mailing list
> 
> 

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] RE: Home Network Printing

[Mick]

Michael Kintzios wrote:

> Not silly at all.  Yes, I have firewall on both - but the first thing I
> did was to shut down the firewalls, just in case.

OK, I may be getting somewhere.  I removed the "IfRequested  - Use
encryption if the server requests it" - although I would have thought that
some pop up would appear asking for user name/passwd?

The gui interface on the client shows the printer URL as follows:

Device URI: http://192.168.0.3:631/Compaq-HP

Checking the server's cups error log I get:
===========================
get_printer_attrs: resource name '/Compaq-HP' no good!
===========================

The client gives the same old printer does not exist error:
===========================
I [01/Dec/2005:20:13:20 +0000] [Job 67] Connecting to 192.168.0.3 on port
631...
I [01/Dec/2005:20:13:20 +0000] [Job 67] Connected to 192.168.0.3...
D [01/Dec/2005:20:13:20 +0000] [Job 67] Getting supported attributes...
E [01/Dec/2005:20:13:20 +0000] [Job 67] Destination printer does not exist!
E [01/Dec/2005:20:13:22 +0000] PID 22860 stopped with status 1!
===========================

The above makes me think that there's something wrong in the way I specify
the ipp address for the remote printer.  Why is the "/" separator
interpreted as part of the name of the printer?

What is the correct syntax?  The gui gives the following examples when
adding a printer:
===========================
Examples: 

    file:/path/to/filename.prn
    http://hostname:631/ipp/
    http://hostname:631/ipp/port1
    ipp://hostname/ipp/
    ipp://hostname/ipp/port1
    lpd://hostname/queue
    socket://hostname
    socket://hostname:9100
===========================
Anyawy, I've tried all possible ipp combinations to no avail.  :-(
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] RE: Home Network Printing

[Richard Fish]

On 12/1/05, Mick <michaelkintzios@lycos.co.uk> wrote:
> The gui interface on the client shows the printer URL as follows:
>
> Device URI: http://192.168.0.3:631/Compaq-HP
>
> Checking the server's cups error log I get:
> ===========================
> get_printer_attrs: resource name '/Compaq-HP' no good!

<snip>

> What is the correct syntax?  The gui gives the following examples when
> adding a printer:
> ===========================
> Examples:
>
>     file:/path/to/filename.prn
>     http://hostname:631/ipp/
>     http://hostname:631/ipp/port1
>     ipp://hostname/ipp/
>     ipp://hostname/ipp/port1
>     lpd://hostname/queue

First, let me say that I don't have this setup, but based on
/usr/share/doc/cups-1.1.23-r4/html/ipp.pdf, you should have something
like:

ipp://192.168.0.3/printers/Compaq-HP

You should also be able to do some browing on the cups server:

http://192.168.0.3:631/admin/
http://192.168.0.3:631/printers/

-Richard

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: RE: Home Network Printing

[Mick]

Richard Fish wrote:

> First, let me say that I don't have this setup, but based on
> /usr/share/doc/cups-1.1.23-r4/html/ipp.pdf, you should have something
> like:
> 
> ipp://192.168.0.3/printers/Compaq-HP

Wey-hey! It WORKS! :-D

Thanks Richard, thank you all.  The mistake was with me missing out
the /printers/ part of the address.  Hmm, perhaps the Example given on the
gui needs improving?

Last question and then I'll be good to print until I run out of money to pay
for the *extremely expensive* HP ink ;-)

What rule should I add to the firewall on the server to allow it to accept
cups requests from the client.  I don't want to open a great big hole for
all traffic, just the cups requests only.  With the firewall working the
client logs show:
================================
 Network host '192.168.0.3' is busy; will retry in 30 seconds...
================================

Also, if I were to tweak the cupsd.conf file with security in mind what
would be your recommendations for a good set up?
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: RE: Home Network Printing

[John Jolet]

allow port 631....tcp and udp.
On Dec 1, 2005, at 5:02 PM, Mick wrote:

> Richard Fish wrote:
>
>> First, let me say that I don't have this setup, but based on
>> /usr/share/doc/cups-1.1.23-r4/html/ipp.pdf, you should have something
>> like:
>>
>> ipp://192.168.0.3/printers/Compaq-HP
>
> Wey-hey! It WORKS! :-D
>
> Thanks Richard, thank you all.  The mistake was with me missing out
> the /printers/ part of the address.  Hmm, perhaps the Example given  
> on the
> gui needs improving?
>
> Last question and then I'll be good to print until I run out of  
> money to pay
> for the *extremely expensive* HP ink ;-)
>
> What rule should I add to the firewall on the server to allow it to  
> accept
> cups requests from the client.  I don't want to open a great big  
> hole for
> all traffic, just the cups requests only.  With the firewall  
> working the
> client logs show:
> ================================
>  Network host '192.168.0.3' is busy; will retry in 30 seconds...
> ================================
>
> Also, if I were to tweak the cupsd.conf file with security in mind  
> what
> would be your recommendations for a good set up?
> -- 
> Regards,
> Mick
>
> -- 
> gentoo-user@gentoo.org mailing list
>

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: RE: Home Network Printing

[Nick Rout]

Mick, this page http://clug.net.nz/index.php/WinCupsNoSamba is not 100%
on topic, but it deals with basic steps and the URL to connect to a
printer.


On Thu, 01 Dec 2005 23:02:51 +0000
Mick wrote:

> Richard Fish wrote:
> 
> > First, let me say that I don't have this setup, but based on
> > /usr/share/doc/cups-1.1.23-r4/html/ipp.pdf, you should have something
> > like:
> > 
> > ipp://192.168.0.3/printers/Compaq-HP
> 
> Wey-hey! It WORKS! :-D
> 
> Thanks Richard, thank you all.  The mistake was with me missing out
> the /printers/ part of the address.  Hmm, perhaps the Example given on the
> gui needs improving?
> 
> Last question and then I'll be good to print until I run out of money to pay
> for the *extremely expensive* HP ink ;-)
> 
> What rule should I add to the firewall on the server to allow it to accept
> cups requests from the client.  I don't want to open a great big hole for
> all traffic, just the cups requests only.  With the firewall working the
> client logs show:
> ================================
>  Network host '192.168.0.3' is busy; will retry in 30 seconds...
> ================================
> 
> Also, if I were to tweak the cupsd.conf file with security in mind what
> would be your recommendations for a good set up?
> -- 
> Regards,
> Mick
> 
> -- 
> gentoo-user@gentoo.org mailing list

-- 
Nick Rout <nick@rout.co.nz>

-- 
gentoo-user@gentoo.org mailing list