Authentication not working on CentOS 6.2/ cups1.4.7

Paul Conklin paul.conklin at cerner.com
Tue Mar 20 13:47:58 PDT 2012


well, that's getting me further.

auth    required        pam_unknown.so nodelay
account required        pam_unknown.so

/var/log/secure shows this
Mar 20 13:32:57 localhost cupsd: PAM unable to dlopen(/lib64/security/pam_unknown.so): /lib64/security/pam_unknown.so: cannot open shared object file: No such file or directory
Mar 20 13:32:57 localhost cupsd: PAM adding faulty module: /lib64/security/pam_unknown.so

those files don't exist.  thoughts as to what I should put in there?

> Paul,
>
> Check your /etc/pam.d/cups file - the modules listed there are likely wrong for your distro.
>
>
> On Mar 20, 2012, at 1:12 PM, Paul Conklin <paul.conklin at cerner.com> wrote:
>
> > [root at localhost cups]# grep ^E error_log
> > E [20/Mar/2012:13:05:26 -0700] cupsdAuthorize: pam_authenticate() returned 28 (Module is unknown)!
> > E [20/Mar/2012:13:05:29 -0700] cupsdAuthorize: pam_authenticate() returned 28 (Module is unknown)!
> > E [20/Mar/2012:13:05:29 -0700] Fatal error during SSL shutdown!
> >
> >
> >> i build rpm's on my builder box that I know has SSL and everything on it.  that resolved my issues with not being able to get to https:// side of the house, but it never accepts the password.  i kicked it up to debug and i do get an error for "Fatal error during SSL shutdown!".  any ideas on what to look for next?
> >>
> >> I [20/Mar/2012:13:05:29 -0700] Started "/usr/lib/cups/cgi-bin/admin.cgi" (pid=22953)
> >> D [20/Mar/2012:13:05:29 -0700] cupsdSendCommand: 10 file=14
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] admin.cgi started...
> >> D [20/Mar/2012:13:05:29 -0700] cupsdAcceptClient: 12 from localhost (Domain)
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] http=0x7fa465c4fa70
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] org.cups.sid cookie is "3b4638bb4980d4184a798733481e153c"
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] op="config-server"...
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] DefaultAuthType Basic
> >> D [20/Mar/2012:13:05:29 -0700] cupsdReadClient: 12 PUT /admin/conf/cupsd.conf HTTP/1.1
> >> D [20/Mar/2012:13:05:29 -0700] cupsdAuthorize: No authentication data provided.
> >> D [20/Mar/2012:13:05:29 -0700] cupsdIsAuthorized: username=""
> >> D [20/Mar/2012:13:05:29 -0700] cupsdSendHeader: 12 WWW-Authenticate: Basic realm="CUPS", trc="y"
> >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 12
> >> D [20/Mar/2012:13:05:29 -0700] [CGI] cgi_passwd(prompt="Password for lp on localhost? ") called!
> >> D [20/Mar/2012:13:05:29 -0700] Script header: Status: 401
> >> D [20/Mar/2012:13:05:29 -0700] cupsdSendHeader: 10 WWW-Authenticate: Basic realm="CUPS"
> >> D [20/Mar/2012:13:05:29 -0700] Script header:
> >> D [20/Mar/2012:13:05:29 -0700] cupsdWriteClient: 10 Closing because Keep-Alive disabled
> >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 10
> >> E [20/Mar/2012:13:05:29 -0700] Fatal error during SSL shutdown!
> >> D [20/Mar/2012:13:05:29 -0700] cupsdSetBusyState: Not busy
> >> D [20/Mar/2012:13:05:29 -0700] cupsdReadClient: 10 WAITING Closing on EOF
> >> D [20/Mar/2012:13:05:29 -0700] cupsdCloseClient: 10
> >> D [20/Mar/2012:13:05:29 -0700] PID 22953 (/usr/lib/cups/cgi-bin/admin.cgi) was terminated normally with signal 15
> >>
> >>> More than likely CUPS either isn't compiled with SSL support ("ldd /usr/sbin/cupsd" will show) or is unable to create a certificate.
> >>>
> >>>
> >>> On Mar 20, 2012, at 9:10 AM, Paul Conklin wrote:
> >>>
> >>>> for some reason, when I try and authenticate via the WI on cups 1.4.7 on centos 6.2, it doesn't re-direct to https.  also if i manually go to https it doesn't resolve to an actual page.  I'm sure I'm missing a package or something, but not sure what I'm missing.  openssl is installed and i'm using the same cupsd.conf files that work just fine on 5.6 centos.
> >>>> _______________________________________________
> >>>> cups mailing list
> >>>> cups at easysw.com
> >>>> http://lists.easysw.com/mailman/listinfo/cups
> >>>
> >>> _________________________________________________________
> >>> Michael Sweet, Senior Printing System Engineer, PWG Chair
> >>>
> >>
> >
> > _______________________________________________
> > cups mailing list
> > cups at easysw.com
> > http://lists.easysw.com/mailman/listinfo/cups
>
> __________________________________________________
> Michael Sweet, Senior Printing System Engineer, PWG Chair
>





More information about the cups mailing list