Bug 873264 - Cups continuously retries forbidden print jobs
Summary: Cups continuously retries forbidden print jobs
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: cups
Version: 17
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tim Waugh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-11-05 13:26 UTC by Jonathan Dieter
Modified: 2012-11-23 07:13 UTC (History)
2 users (show)

Fixed In Version: cups-1.5.4-11.fc17
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-11-19 02:22:26 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
CUPS Bugs and Features 4190 0 None None None 2012-11-05 17:17:44 UTC

Description Jonathan Dieter 2012-11-05 13:26:13 UTC
Description of problem:
I have a Fedora 17 print server and roughly 100 Fedora 17 desktops in a school with roughly 1000 users.  Only members of the "allstaff" group are allowed to print, but that doesn't stop some students from trying.

When a student attempts to print a job, /var/log/cups/error_log fills with:
I [05/Nov/2012:10:17:42 +0200] Denying user "student" access to printer "JSR"...
E [05/Nov/2012:10:17:42 +0200] Returning IPP client-error-not-authorized for Create-Job (ipp://10.10.0.1:631/printers/JSR) from 10.10.100.34
I [05/Nov/2012:10:17:42 +0200] Denying user "student" access to printer "JSR"...
E [05/Nov/2012:10:17:42 +0200] Returning IPP client-error-not-authorized for Create-Job (ipp://10.10.0.1:631/printers/JSR) from 10.10.100.34

and /var/log/cups/access_log fills with:
10.10.100.34 - - [05/Nov/2012:10:17:18 +0200] "POST /printers/JSR HTTP/1.1" 200 613 Create-Job client-error-not-authorized
10.10.100.34 - - [05/Nov/2012:10:17:18 +0200] "POST /printers/JSR HTTP/1.1" 200 613 Create-Job client-error-not-authorized

After a few hours, the root partition on the print server (which is only about 4GB) fills with the log messages.

Version-Release number of selected component (if applicable):
cups-1.5.4-13.fc18.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Set up a printer on a separate cups server with permissions restricting who can print
2. Attempt to print using a user who does *not* have permission to print
  
Actual results:
Client continuously tries to print, while server continuously refuses the job.  Server load jumps through the roof, and the hard drive fills with log messages.

Expected results:
Client accepts that they can print and stops harassing the server.


Please let me know if you need any of the logs or the configuration files for either the server or the clients.

Additional info:

Comment 1 Tim Waugh 2012-11-05 17:17:44 UTC
Looks like this is fixed by the patch for STR #4190.

Comment 2 Fedora Update System 2012-11-05 17:41:09 UTC
cups-1.5.4-11.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/FEDORA-2012-14508/cups-1.5.4-11.fc17

Comment 3 Tim Waugh 2012-11-05 17:41:41 UTC
Could you give cups-1.5.4-11.fc17 a go please?  The change is on the client side, and those jobs should now fail rather than retry.

Comment 4 Fedora Update System 2012-11-06 07:52:28 UTC
Package cups-1.5.4-11.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing cups-1.5.4-11.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-14508/cups-1.5.4-11.fc17
then log in and leave karma (feedback).

Comment 5 Jonathan Dieter 2012-11-06 08:57:47 UTC
(In reply to comment #3)
> Could you give cups-1.5.4-11.fc17 a go please?  The change is on the client
> side, and those jobs should now fail rather than retry.

This works perfectly!!!!  I've just pushed it out to all of our workstations.  Thank you so much for the quick fix!

Comment 6 Fedora Update System 2012-11-06 11:08:31 UTC
cups-1.5.4-14.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/FEDORA-2012-15936/cups-1.5.4-14.fc18

Comment 7 Fedora Update System 2012-11-19 02:22:28 UTC
cups-1.5.4-11.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Fedora Update System 2012-11-23 07:13:19 UTC
cups-1.5.4-14.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.