Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Jun 2014 11:53:20 +0200
From:      Willy Offermans <Willy@Offermans.Rompen.nl>
To:        "The CUPS user discussion list." <cups@cups.org>
Cc:        freebsd-stable@FreeBSD.ORG, freebsd-ports@freebsd.org
Subject:   Re: [cups] Setup cups and Brother HL-4150CDN on FreeBSD 10
Message-ID:  <20140611095320.GA3714@vpn.offrom.nl>
In-Reply-To: <2D62D5B3-A64C-4A97-86AD-A775B03F8CF4@web.de>
References:  <20140608154130.GA3621@vpn.offrom.nl> <a39f2d7b53fd52dee066388dab64f42a.authenticated@ultimatedns.net> <20140609173800.GC30045@vpn.offrom.nl> <C0CA2A11-783E-4820-8324-189A8DDE2687@web.de> <20140610091221.GA3793@vpn.offrom.nl> <830609B9-9480-4A42-A5BE-15A267BE7587@web.de> <20140610110637.GD3793@vpn.offrom.nl> <1ED5763D-A7C3-49BA-AC7C-9E93D9ABBD14@web.de> <20140610140744.GI3793@vpn.offrom.nl> <2D62D5B3-A64C-4A97-86AD-A775B03F8CF4@web.de>

next in thread | previous in thread | raw e-mail | index | archive | help
Dear Helge, cups and freebsd friends,

On Tue, Jun 10, 2014 at 04:59:05PM +0200, Helge Blischke wrote:
> 
> Am 10.06.2014 um 16:07 schrieb Willy Offermans:
> 
> >Hello Helge, cups and freebsd friends,
> >
> >On Tue, Jun 10, 2014 at 03:46:37PM +0200, Helge Blischke wrote:
> >>
> >>Am 10.06.2014 um 13:06 schrieb Willy Offermans:
> >>
> >>>Hello Helge, cups and freebsd friends,
> >>>
> >>>I do not use top-posting. I hope you do not mind. See below for
> >>>output of
> >>>configure script.
> >>>
> >>>On Tue, Jun 10, 2014 at 12:56:57PM +0200, Helge Blischke wrote:
> >>>>After a quick search for freebsd through the cups lists, I found
> >>>>some entries
> >>>>omplaining on issues with sys/ucred.h in combination with sys/
> >>>>param.h.
> >>>>Could you rerun your configure script with saving the output
> >>>>messages and post them?
> >>>>
> >>>>Helge
> >>>>
> >>>>Am 10.06.2014 um 11:12 schrieb Willy Offermans:
> >>>>
> >>>>>Hello Helga, cups and freebsd friends,
> >>>>>
> >>>>>On Mon, Jun 09, 2014 at 10:56:23PM +0200, Helge Blischke wrote:
> >>>>>>The error message
> >>>>>>E [08/Jun/2014:17:37:53 +0200] [Client 15] Invalid peer
> >>>>>>credentials
> >>>>>>for "root" - got 8, expected 0!
> >>>>>>states that the efective user id cupsd is runnin under
> >>>>>>is 8, which
> >>>>>>certainly is not root.
> >>>>>>Make sure your cupsd is running as root.
> >>>>>>(see scheduler/auth.c in your sources directory tree).
> >>>>>>
> >>>>>
> >>>>>I also checked this before.
> >>>>>
> >>>>>I ran ``ps waux | grep cups'':
> >>>>>
> >>>>>root        1645   0.0  0.0   64032       0  -  SWs  -
> >>>>>0:00.00 /usr/local/sbin/cupsd -C /usr/local/etc/cups/cupsd.conf
> >>>>>root        1962   0.0  0.0   14448       0  -  IWs  -
> >>>>>0:00.00 daemon: /usr/local/sbin/cups-browsed[1969] (daemon)
> >>>>>root        1969   0.0  0.0   62884    2892  -  S    12:20PM
> >>>>>0:09.49 /usr/local/sbin/cups-browsed
> >>>>>
> >>>>>To my belief and according the system, cupsd is run by root.
> >>>>>Though the error message claims something else.
> >>>>>
> >>>>>A look in scheduler/auth.c does not bring me any further to the
> >>>>>solution.
> >>>>>I can detect the error message in the file, but I have no clue why
> >>>>>cups
> >>>>>takes up id 8 (=news) in stead of 0. To debug the code is
> >>>>>impossible for
> >>>>>me.
> >>>>>
> >>>>>Does anyone has an idea?
> >>>>>
> >>>>>
> >>>>>-- 
> >>>
> >>>
> >>>checking for gawk... no
> >>>config.status: creating doc/ru/index.html
> >>>config.status: creating templates/ru/header.tmpl
> >>>config.status: creating config.h
> >>>config.status: config.h is unchanged
> >>>
> >>>I hope this is what you need.
> >>>
> >>>-- 
> >>Well, the configure output seems reasonable.
> >>And, I should have looked into your log file portion a littie bit
> >>more carefully:
> >>the invalid credential error mesage refers to client14, not to cupsd
> >>itself.
> >>To get more info, could you change the log level to debug2 (must be
> >>set by editing cupsd.conf, I think)
> >>and repeat the failing operation?
> >>
> >>Thanks,
> >>
> >>Helge
> >>
> >
> >I will sent you the error_log privately. It is huge and will not
> >contain
> >any useful info for the lists, at least not filtered.
> >
> 
> Thanks for the error_log. A first glance revealed some strange things:
> 
> d [10/Jun/2014:15:56:13 +0200] [Client 15] con->uri="/admin/", con-
> >best=0x8034171a0(/admin)
> d [10/Jun/2014:15:56:13 +0200] [Client 15] Authorization="PeerCred root"
> E [10/Jun/2014:15:56:13 +0200] [Client 15] Invalid peer credentials
> for "root" - got 8, expected 0!
> D [10/Jun/2014:15:56:13 +0200] [Client 15] cr_version=0
> D [10/Jun/2014:15:56:13 +0200] [Client 15] cr_uid=8
> D [10/Jun/2014:15:56:13 +0200] [Client 15] cr_ngroups=1760
> <=========????
> D [10/Jun/2014:15:56:13 +0200] [Client 15] cr_groups[0]=32767
> <=========????
> 
> the marked log lines seem to tell that root's effective user id is 8
> (strange),
> the number of advisory groups for this user is 1760 (a cockeyed number),
> and the group id (the first one of the groups list) is 32767 (0x7fff).
> 
> This seems to me that in your system something is misaligned
> (perhaps an invalid header file
> for sys/ucred.h ?).
> 
> I think you need (someone else) to dig into your system  more deeply.
> 
> Helge
> 
> 

My system has saved cred.h at 3 different locations:

/bootdir/usr/include/sys/ucred.h
/usr/include/sys/ucred.h
/usr/obj/amd64.amd64/usr/src/lib32/usr/include/sys/ucred.h

All three files are identical.

cupsd is not the only daemon running with root privileges on this machine,
but cupsd is the only one with this problem. So I might be mistaken, but I
doubt that something is wrong with sys/ucred.h.

When I logon as root, then I can delete the printers, that I have added
manually. If something would be wrong with root credentials, then this
should also not be possible, to my opinion.

I'm getting the impression that I'm fighting with some kind of bug in cups.


-- 
Met vriendelijke groeten,
With kind regards,
Mit freundlichen Gruessen,
De jrus wah,

Wiel

*************************************
 W.K. Offermans
e-mail: Willy@Offermans.Rompen.nl

                                       Powered by ....

                                            (__)
                                         \\\'',)
                                           \/  \ ^
                                           .\._/_)

                                       www.FreeBSD.org
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140611095320.GA3714>