iPrint mangement errors

[Robert H Jenson]

When I try to Manage any of the iPrint objects in OES Linux using iManager, I get a message window labelled: Error Reading Printer information (or Driver store information, etc.) that says:

 

Authorization Required

IPP error: 0xF0191

HTTP Error: 401

 

We recently took some steps to restrict public access to our tree which I think may be the cause of this problem. However, I found an article that suggested using the AuthLDAPBindDN and AuthLDAPBindPassord commands to resolve the problem. When I added them to the iprint_ssl.conf file as instructed and tried to restart Apache, I got an error that they were not supported commands.

 

We have a mixed environment with both NetWare and Linux in our tree. I am still able to work with the Printers, Broker, etc on the NetWare servers so I am not sure the changes to our public access are the cause of the problem, but I have not been able to find a working solution. Any help will be appreciated.

 

Robert Jenson 

[Robert H Jenson]

That is exactly what my iprint_ssl.conf file looked like before I added the AuthLDAPBindDN and AuthLDAPBindPassord  commands.

 

Robert

>>> On 9/20/2009 at 9:36 AM, in message <brunold...@no-mx.forums.novell.com>, brunold<bru...@no-mx.forums.novell.com> wrote:

Robert,what version of oes is that ?Here is a sample iprint_ssl.conf from a oes 2 sp1 server:Code:--------------------    # cat iprint_ssl.conf  # Do not modify this file!  Changes to this file may  # cause iPrint to opperate improperly.  Your changes to this  # file will not be preserved.    <IfModule !mod_ipp.c>  LoadModule ipp_module /opt/novell/iprint/httpd/lib/mod_ipp.so  </IfModule>    <IfModule mod_ipp.c>  <LocationMatch ^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss])($|/)>  SSLRequireSSL  Require valid-user  Order deny,allow  Allow from all  AuthType Basic  AuthBasicProvider ldapdn  AuthName "EDIRNAME"  AuthLDAPDNURL "ldaps://localhost/???(objectClass=user)"  AuthLDAPDNRemoteUserIsDN on  AuthzLDAPDNAuthoritative Off  AuthLDAPDNAllowDNAuth on  </LocationMatch>  </IfModule>--------------------We adopted the AuthLDAPDNURL a little bit that it soes a full treesearch without a base context.Rainer-- brunold------------------------------------------------------------------------brunold's Profile: http://forums.novell.com/member.php?userid=562View this thread: http://forums.novell.com/showthread.php?t=386350

[Robert H Jenson]

I would assume we have the option of activating an LDAP trace, but I do not know how to do it. I am pretty much a novice when it comes to Linux stuff.

 

Robert

>>> On 9/20/2009 at 9:36 AM, in message <brunold...@no-mx.forums.novell.com>, brunold<bru...@no-mx.forums.novell.com> wrote:

Robert,

do you have the option to activate a ldap trace on the server wherethis iprint ssl config points too ? Maybe in the trace you could seewhat it is searching and what it get's and what not.

[Robert H Jenson]

We do have an edirectory admin with rights to everything in the tree.

 

Robert

>>> On 9/21/2009 at 1:16 PM, in message <brunold...@no-mx.forums.novell.com>, brunold<bru...@no-mx.forums.novell.com> wrote:

Robert,

before taking a ldap trace, do you have a edirectory administrator likeadmin with which you can try to administrate the iprint system ? I'm notsure if that can be related to restricting the public rights, becausethe users rights would be used to administrate the objects and not thepublic one.

[Robert H Jenson]

Yes, that is the admin we use when we try to administer anything using iManager.

 

Robert

>>> On 9/25/2009 at 7:06 AM, in message <brunold...@no-mx.forums.novell.com>, brunold<bru...@no-mx.forums.novell.com> wrote:

Robert,

> We do have an edirectory admin with rights to everything in the tree.

and using that to administrate the iprint things also shows the error?
I just want to make sure it is not related to the user that logs in toimanager.