job owner can't move job?

Wed Feb 6 11:17:29 PST 2008

Michael,

I cranked the debug level up to debug2 and got the following in the error_log:

d [06/Feb/2008:13:57:42 -0500] pipe_command: argv[0] = "/usr/lib/cups/cgi-bin/jobs.cgi"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[0] = "CUPS_CACHEDIR=/var/cache/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[1] = "CUPS_DATADIR=/usr/share/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[2] = "CUPS_DOCROOT=/usr/share/doc/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[3] = "CUPS_FONTPATH=/usr/share/cups/fonts"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[4] = "CUPS_REQUESTROOT=/var/spool/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[5] = "CUPS_SERVERBIN=/usr/lib/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[6] = "CUPS_SERVERROOT=/etc/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[7] = "CUPS_STATEDIR=/var/run/cups"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[8] = "PATH=/usr/lib/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[9] = "SERVER_ADMIN=root at datatel.ashland.edu"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[10] = "SOFTWARE=CUPS/1.3.3"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[11] = "TMPDIR=/var/spool/cups/tmp"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[12] = "TZ=America/Detroit"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[13] = "USER=root"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[14] = "CUPS_SERVER=localhost"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[15] = "CUPS_ENCRYPTION=IfRequested"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[16] = "IPP_PORT=631"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[17] = "AUTH_TYPE=Basic"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[18] = "LANG=en_US.UTF8"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[19] = "REDIRECT_STATUS=1"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[20] = "GATEWAY_INTERFACE=CGI/1.1"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[21] = "SERVER_NAME=datatel.ashland.edu"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[22] = "SERVER_PORT=631"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[23] = "REMOTE_ADDR=172.16.185.15"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[24] = "REMOTE_HOST=172.16.185.15"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[25] = "SCRIPT_NAME=/jobs/"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[26] = "SCRIPT_FILENAME=/usr/share/doc/cups/jobs/"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[27] = "REMOTE_USER=dprez"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[28] = "SERVER_PROTOCOL=HTTP/1.1"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[29] = "HTTP_COOKIE=__utmz=195367740.1188930583.1.1.utmccn=(direct)|utm
csr=(direct)|utmcmd=(none); __utma=195367740.1403637403.1188930583.1201193143.1201730408.14"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[30] = "HTTP_USER_AGENT=Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
 rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[31] = "HTTP_REFERER=https://datatel.ashland.edu:631/jobs/?op=move-job&
job_id=6031"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[32] = "REQUEST_METHOD=POST"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[33] = "CONTENT_LENGTH=109"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[34] = "CONTENT_TYPE=application/x-www-form-urlencoded"
d [06/Feb/2008:13:57:42 -0500] pipe_command: envp[35] = "HTTPS=ON"
d [06/Feb/2008:13:57:42 -0500] cupsdStartProcess("/usr/lib/cups/cgi-bin/jobs.cgi", 0x7fbfff2170, 0x7fbfff1db0, 10, 12, 6
)
d [06/Feb/2008:13:57:42 -0500] cupsdAddCert: adding certificate for pid 3898
D [06/Feb/2008:13:57:42 -0500] [CGI] /usr/lib/cups/cgi-bin/jobs.cgi started - PID = 3898
I [06/Feb/2008:13:57:42 -0500] Started "/usr/lib/cups/cgi-bin/jobs.cgi" (pid=3898)
D [06/Feb/2008:13:57:42 -0500] cupsdSendCommand: 8 file=11
d [06/Feb/2008:13:57:42 -0500] cupsdAddSelect: fd=11, read_cb=0x41291a, write_cb=(nil), data=0x6df540
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: polling 8 fds for 1 seconds...
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: epoll() returned 1...
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: Read on fd 3...
d [06/Feb/2008:13:57:42 -0500] cupsdAcceptClient(lis=0x6b1b00) 3 Clients = 1
D [06/Feb/2008:13:57:42 -0500] cupsdAcceptClient: 10 from localhost:631 (IPv4)
d [06/Feb/2008:13:57:42 -0500] cupsdAcceptClient: 10 connected to server on localhost.localdomain:631
d [06/Feb/2008:13:57:42 -0500] cupsdAddSelect: fd=10, read_cb=0x410692, write_cb=(nil), data=0x6ff6f0
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: polling 9 fds for 1 seconds...
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: epoll() returned 1...
d [06/Feb/2008:13:57:42 -0500] cupsdDoSelect: Read on fd 10...
d [06/Feb/2008:13:57:42 -0500] cupsdReadClient: 10, used=0, file=-1 state=0
D [06/Feb/2008:13:57:42 -0500] cupsdReadClient: 10 POST /jobs/6031 HTTP/1.1
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: uri = "/jobs/6031"...
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: Location CUPS_INTERNAL_BROWSE_ACL Limit 0
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: Location /admin/conf Limit 7f
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: Location /admin Limit 7f
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: Location / Limit 7f
d [06/Feb/2008:13:57:42 -0500] cupsdFindBest: best = /
d [06/Feb/2008:13:57:42 -0500] cupsdAuthorize: con->uri="/jobs/6031", con->best=0x707400(/)
d [06/Feb/2008:13:57:42 -0500] cupsdAuthorize: Authorization=""
D [06/Feb/2008:13:57:42 -0500] cupsdAuthorize: No authentication data provided.
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: con->uri="/jobs/6031", con->best=0x707400(/)
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: level=AUTH_ANON, type=AUTH_NONE, satisfy=AUTH_SATISFY_ALL, num_names=0
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: auth=AUTH_ALLOW...
d [06/Feb/2008:13:57:42 -0500] POST /jobs/6031
d [06/Feb/2008:13:57:42 -0500] CONTENT_TYPE = application/ipp
d [06/Feb/2008:13:57:42 -0500] cupsdReadClient: 10 con->data_encoding=HTTP_ENCODE_LENGTH, con->data_remaining=209, con->
file=-1
d [06/Feb/2008:13:57:42 -0500] cupsdProcessIPPRequest(0x6ff6f0[10]): operation_id = 400d
D [06/Feb/2008:13:57:42 -0500] CUPS-Move-Job ipp://localhost/jobs/6031
d [06/Feb/2008:13:57:42 -0500] move_job(0x6ff6f0[10], ipp://localhost/jobs/6031)
d [06/Feb/2008:13:57:42 -0500] cupsdFindPolicyOp(p=0x705430, op=400d(CUPS-Move-Job))
d [06/Feb/2008:13:57:42 -0500] cupsdFindPolicyOp: Found exact match...
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: con->uri="/jobs/6031", con->best=0x66c6c0((null))
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: level=AUTH_USER, type=AUTH_NONE, satisfy=AUTH_SATISFY_ALL, num_names=4
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: op=400d(CUPS-Move-Job)
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: auth=AUTH_ALLOW...
D [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: requesting-user-name="dprez"
d [06/Feb/2008:13:57:42 -0500] cupsdIsAuthorized: Checking user membership...
d [06/Feb/2008:13:57:42 -0500] cupsdCheckGroup(username="dprez", user=0x3cec2325a0, groupname="OWNER")
d [06/Feb/2008:13:57:42 -0500] get_md5_password(username="dprez", group="OWNER", passwd=0x7fbfff2070)
d [06/Feb/2008:13:57:42 -0500] cupsdCheckGroup(username="dprez", user=0x3cec2325a0, groupname="sys")
d [06/Feb/2008:13:57:42 -0500] get_md5_password(username="dprez", group="sys", passwd=0x7fbfff2070)
d [06/Feb/2008:13:57:42 -0500] cupsdCheckGroup(username="dprez", user=0x3cec2325a0, groupname="root")
d [06/Feb/2008:13:57:42 -0500] get_md5_password(username="dprez", group="root", passwd=0x7fbfff2070)
d [06/Feb/2008:13:57:42 -0500] cupsdCheckGroup(username="dprez", user=0x3cec2325a0, groupname="lp")
d [06/Feb/2008:13:57:42 -0500] get_md5_password(username="dprez", group="lp", passwd=0x7fbfff2070)
d [06/Feb/2008:13:57:42 -0500] cupsdCheckGroup(username="dprez", user=0x3cec2325a0, groupname="adm")
d [06/Feb/2008:13:57:42 -0500] get_md5_password(username="dprez", group="adm", passwd=0x7fbfff2070)
E [06/Feb/2008:13:57:42 -0500] CUPS-Move-Job: Unauthorized
D [06/Feb/2008:13:57:42 -0500] cupsdSendError: 10 code=401 (Unauthorized)

It appears as if, instead of using @OWNER to mean the owner of the job, it is seeing as 'member of the group "OWNER"'. It appears to properly interpret @SYSTEM and the two groups @lp and @adm. Is there something wrong in how I am specifying @OWNER?

Thanks

Don
> Don Prezioso wrote:
> > I am having a problem where a job owner cannot move their job to a
> > different queue. If the user belongs to the 'lp' group it works fine.
> > Also the owner can cancel their job, hold their job, or release their
> > job. When they attempt to move a job however, it continually prompts
> > for their username and password.
>  > ...
>
> Hmm, everything looks correct.
>
> What version of CUPS are you using?
>
> What OS/Linux distro are you using?
>
> --
> ______________________________________________________________________
> Michael R Sweet                        Senior Printing System Engineer
>