Arch Linux

jib2

Member

From: Paris, France

Registered: 2009-08-13

Posts: 95

[SOLVED] Firefox can't access cups admin page anymore

Since a couple of days (firefox update?), I can't access the cups admin web interface from Firefox anymore (it works OK from Chromium).
I'm not prompted for root password, I only get an error message "Forbidden".
On Firefox, localhost is not recognized anymore ("Bas Request"), i have to enter 127.0.0.1 (not a big deal, just puzzling)

I tried disabling all Ffox extensions...
I didn't change anything to my cups config files...
My user is a member of the lp group...

/etc/hosts

127.0.0.1	localhost	localhost
::1		localhost.localdomain	localhost
192.168.1.2	hector.jsb.bla	hector

/etc/cups/cupsd.conf

LogLevel warn

Listen 127.0.0.1:631
Listen 192.168.1.2:631
Listen /run/cups/cups.sock

Browsing On
BrowseLocalProtocols dnssd

DefaultAuthType Basic
WebInterface Yes

<Location />
  Order allow,deny
  Allow From 127.0.0.1
  Allow From 192.168.1.*
</Location>
<Location /admin>
  Order allow,deny
  Allow 192.168.1.*
</Location>
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
  Allow 192.168.1.*
</Location>

<Policy default>
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
   <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

<Policy authenticated>
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
  </Limit>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

Thanks for your help.

Last edited by jib2 (2014-02-09 22:37:39)

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: [SOLVED] Firefox can't access cups admin page anymore

Assuming you are talking about this page: http://localhost:631, it works fine for me.

Try creating a new firefox profile and see if it makes a difference.

Last edited by x33a (2014-02-09 18:28:30)

Pank

Member

From: IT

Registered: 2009-06-13

Posts: 371

Re: [SOLVED] Firefox can't access cups admin page anymore

What's the value of network.dns.disableIPv6;false in about:config?  It should be false.

---

Arch x64 on Thinkpad X200s/W530

jwhendy

Member

Registered: 2010-04-01

Posts: 621

Re: [SOLVED] Firefox can't access cups admin page anymore

This and this appear related. I had no issues with accessing localhost:631 until starting to get "Bad Rquest" errors for localhost:631 and "Forbidden" erros with 127.0.0.1:631 last week. I don't print that often, so I'm not sure what caused the issue, but I'm thinking it might be related to the upgrade from cups 1.7.0 to 1.7.1, which came through sometime in January.

The fix on the first thread above was simply to add an ipv6 line to /etc/hosts, but you have that and are still not able to connect. I thought this was the fix, as I had it commented out on my work laptop, and uncommenting it immediately allows me to access localhost:631 again.

I checked on my home computer, however, and I can access localhost:631 just fine and yet my ipv6 line in /etc/hosts is still commented out, so I don't believe that's the sole issue. I've tried to hunt around in chromium settings to see if it's related to that, but am not getting anywhere. It would be simple to confirm that cups requires ipv6 for the web interface, but I've had this commented out due to network issues with it enabled for some 1-2 years and never had an issue before. Quite puzzled at what's going on.

My setting for both computers in Firefox for network.dns.disableIPv6 is false. I get "Bad Request" in both Firefox and Chromium.

jib2

Member

From: Paris, France

Registered: 2009-08-13

Posts: 95

Re: [SOLVED] Firefox can't access cups admin page anymore

Thanks Pank. It was the solution. After setting network.dns.disableIPv6 to false and restarting Ffox, everything is back to normal.

Thanks everybody for your help.