Ubuntu
cupsys package

CUPS /usr/lib/cups/backend/smb failed

Bug #172813 reported by Tom Moyer on 2007-11-29

Affects		Status	Importance	Assigned to	Milestone
	cupsys (Ubuntu)	Invalid	Undecided	Unassigned

Bug Description

After adding a printer (in Gutsy fresh install) in the Gnome Printer Management dialog that is a SMB printer, every time I try to print anything the job shows as being held in the queue. If I release the job it immediately goes back to being held. Looking at the CUPS web interface (http://127.0.0.1:631) shows the following error message: '/usr/lib/cups/backend/smb failed' Here is what I see in the logs:

E [15/Nov/2007:12:21:12 +0000] [cups-driverd] Unable to open PPD directory "/opt/share/ppd": No such file or directory
E [15/Nov/2007:12:23:47 +0000] [cups-driverd] Unable to open PPD directory "/opt/share/ppd": No such file or directory
E [15/Nov/2007:12:24:42 +0000] CUPS-Add-Modify-Printer: Unauthorized
E [15/Nov/2007:12:24:45 +0000] [Job 2] No %%BoundingBox: comment in header!
E [15/Nov/2007:12:24:45 +0000] [Job 2] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:12:24:45 +0000] PID 10338 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:12:29:03 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:12:29:03 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:12:29:03 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:18:20:47 +0000] [Job 3] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:20:47 +0000] [Job 3] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:20:47 +0000] PID 12830 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:25:59 +0000] [Job 3] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:25:59 +0000] [Job 3] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:25:59 +0000] PID 12840 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:31:08 +0000] [Job 3] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:31:08 +0000] [Job 3] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:31:08 +0000] PID 12846 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:36:11 +0000] [Job 3] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:36:11 +0000] [Job 3] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:36:11 +0000] PID 12929 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:36:17 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:18:36:17 +0000] CUPS-Add-Modify-Printer: Unauthorized
E [15/Nov/2007:18:36:33 +0000] [Job 4] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:36:33 +0000] [Job 4] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:36:33 +0000] PID 12933 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:41:45 +0000] [Job 4] No %%BoundingBox: comment in header!
E [15/Nov/2007:18:41:45 +0000] [Job 4] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [15/Nov/2007:18:41:45 +0000] PID 12973 (/usr/lib/cups/backend/smb) stopped with status 1!
E [15/Nov/2007:18:44:47 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:18:44:47 +0000] cupsdAuthorize: Local authentication certificate not found!
E [15/Nov/2007:18:44:47 +0000] cupsdAuthorize: Local authentication certificate not found!

Revision history for this message

Soul-Sing (soulzing) wrote on 2007-11-30:

recovery mode:
update-rc.d -f cupsys remove

disable cups

restore:

/etc/init.d/cupsys start

Revision history for this message

Tom Moyer (tom-tom) wrote on 2007-11-30:

Could you please explain what this is doing?

Revision history for this message

Till Kamppeter (till-kamppeter) wrote on 2007-12-01:

Tom, can you run

sudo aa-complain cupsd

and try printing again? Does this help? If so, please post all the lines containing "audit" of your /var/log/messages file here.

To re-activate the AppArmor protection of CUPS, do

sudo aa-enforce cupsd

Have you clicked on "Verify" when you selected an SMB-shared printer with the printer setup tool? This allows you to check whether the printer can be accessed, credentials entered correctly, ...

Revision history for this message

Tom Moyer (tom-tom) wrote on 2007-12-01:

I did click verify and it says it is accessible. The other test (with AppArmor) I will try the next time I am near the printer, and post the results.

Revision history for this message

Tom Moyer (tom-tom) wrote on 2007-12-04:

I tried printing again after running
sudo aa-complain cupsd
and it still does the same thing. Here is the errors in /var/log/cups/error_log
E [04/Dec/2007:13:27:42 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:42 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:43 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:45 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:45 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:46 +0000] [Job 23] No %%BoundingBox: comment in header!
E [04/Dec/2007:13:27:46 +0000] [Job 23] NT_STATUS_ACCESS_DENIED opening remote spool Test Page
E [04/Dec/2007:13:27:46 +0000] PID 18151 (/usr/lib/cups/backend/smb) stopped with status 1!
E [04/Dec/2007:13:27:57 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:57 +0000] cupsdAuthorize: Local authentication certificate not found!
E [04/Dec/2007:13:27:57 +0000] cupsdAuthorize: Local authentication certificate not found!

Revision history for this message

Tom Moyer (tom-tom) wrote on 2008-01-25:

Looking at the logs again, now I'm getting the following errors in /var/log/messages
Jan 25 13:57:13 nash cupsd[11555]: *** WARNING *** The programme 'cupsd' uses the Apple Bonjour compatiblity layer of Avahi.
Jan 25 13:57:13 nash cupsd[11555]: *** WARNING *** Please fix your application to use the native API of Avahi!
Jan 25 13:57:13 nash cupsd[11555]: *** WARNING *** For more information see <http://0pointer.de/avahi-compat?s=libdns_sd&e=cupsd>
Jan 25 13:57:13 nash kernel: [21308.125266] audit(1201287433.582:4): type=1502 operation="inode_permission" requested_mask="a" denied_mask="a" name="/dev/tty" pid=11555 profile="/usr/sbin/cupsd"

I do believe that the last line is what is causing things to fail.

Revision history for this message

Richard Wilbur (richard-wilbur) wrote on 2008-10-27:

I have an Apple iBook G4 PPC connected through USB to an HP Deskjet 5650W printer which has worked for quite a while. Recently I upgraded from Feisty Fawn (7.04) to Gutsy Gibbon (7.10) and then on to Hardy Heron (8.04). (I have kept it up-to-date as of a couple hours ago.) In Hardy Heron I see a problem with printing that I didn't see in Feisty Fawn which is described in /var/log/cups/error.log as:
E [26/Oct/2008:21:23:43 -0600] [Job 129] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:30:02 -0600] [Job 130] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:44:20 -0600] [CGI] Unable to scan "@LOCAL"!
E [26/Oct/2008:21:44:23 -0600] [cups-driverd] Unable to write "/var/cache/cups/ppds.dat" - Permission denied
E [26/Oct/2008:21:45:01 -0600] [CGI] Unable to scan "@LOCAL"!
E [26/Oct/2008:21:45:14 -0600] [cups-driverd] Unable to write "/var/cache/cups/ppds.dat" - Permission denied
E [26/Oct/2008:21:45:41 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:45:41 -0600] CUPS-Add-Modify-Printer: Unauthorized
E [26/Oct/2008:21:45:41 -0600] PID 26280 (/usr/lib/cups/filter/foomatic-rip) crashed on signal 9!
E [26/Oct/2008:21:45:41 -0600] PID 26281 (/usr/lib/cups/backend/hp) crashed on signal 9!
E [26/Oct/2008:21:45:41 -0600] [Job 130] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:46:14 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:46:14 -0600] CUPS-Set-Default: Unauthorized

So I searched for '%%BoundingBox' issues on Launchpad and read the advice above concerning A
ppArmor.

rwilbur@transform:~$ sudo aa-complain cupsd
Setting /etc/apparmor.d/usr.sbin.cupsd to complain mode.

I connected to the printer and tried again with the following

rwilbur@transform:/var/log$ sudo tail messages
Oct 27 12:48:43 transform kernel: [203211.547348] usb 3-1: new full speed USB device using ohci_hcd and address 4
Oct 27 12:48:43 transform kernel: [203211.771641] usb 3-1: configuration #1 chosen from 1 choice
Oct 27 12:48:43 transform kernel: [203211.787706] usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x03F0 pid 0x6104
Oct 27 12:49:32 transform kernel: [203260.592441] usblp0: removed
Oct 27 12:49:33 transform kernel: [203260.951166] audit(1225133373.077:9): type=1502 operation="inode_permission" requested_mask="::rw" denied_mask="::rw" name="/dev/tty" pid=13055 profile="/usr/sbin/cupsd" namespace="default"

The audit entry looks remarkably similar to Tom's above, even though I have a local printer!

I have an Apple iBook G4 PPC connected through USB to an HP Deskjet 5650W printer which has worked for quite a while.  Recently I upgraded from Feisty Fawn (7.04) to Gutsy Gibbon (7.10) and then on to Hardy Heron (8.04).  (I have kept it up-to-date as of a couple hours ago.)  In Hardy Heron I see a problem with printing that I didn't see in Feisty Fawn which is described in /var/log/cups/error.log as:
E [26/Oct/2008:21:23:43 -0600] [Job 129] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:27:37 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:30:02 -0600] [Job 130] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:31:51 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:44:20 -0600] [CGI] Unable to scan "@LOCAL"!
E [26/Oct/2008:21:44:23 -0600] [cups-driverd] Unable to write "/var/cache/cups/ppds.dat" - Permission denied
E [26/Oct/2008:21:45:01 -0600] [CGI] Unable to scan "@LOCAL"!
E [26/Oct/2008:21:45:14 -0600] [cups-driverd] Unable to write "/var/cache/cups/ppds.dat" - Permission denied
E [26/Oct/2008:21:45:41 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:45:41 -0600] CUPS-Add-Modify-Printer: Unauthorized
E [26/Oct/2008:21:45:41 -0600] PID 26280 (/usr/lib/cups/filter/foomatic-rip) crashed on signal 9!
E [26/Oct/2008:21:45:41 -0600] PID 26281 (/usr/lib/cups/backend/hp) crashed on signal 9!
E [26/Oct/2008:21:45:41 -0600] [Job 130] No %%BoundingBox: comment in header!
E [26/Oct/2008:21:46:14 -0600] cupsdAuthorize: Local authentication certificate not found!
E [26/Oct/2008:21:46:14 -0600] CUPS-Set-Default: Unauthorized

So I searched for '%%BoundingBox' issues on Launchpad and read the advice above concerning A
ppArmor.

rwilbur@transform:~$ sudo aa-complain cupsd
Setting /etc/apparmor.d/usr.sbin.cupsd to complain mode.

I connected to the printer and tried again with the following

The audit entry looks remarkably similar to Tom's above, even though I have a local printer!

Revision history for this message

cariboo (cariboo) wrote on 2008-10-31:

output of cat /var/log/messages | grep audit Edit (11.8 KiB, text/plain)

I have an Epson R340 and an HP 5P that I can't access, I'm running Intrepid RC. I noticed a couple of days ago that I could print, but thought nothing about it at the time.

I have followed the above trouble shooting steps and still no luck. I have attached the output of cat /var/log/messages | grep audit

Revision history for this message

Daniel T Chen (crimsun) wrote on 2008-11-16:

Is this symptom still reproducible in 8.10?

Changed in cupsys:
status:	New → Incomplete

Revision history for this message

snyderpa (paul-snyderhome) wrote on 2008-11-19:

#10

paul@homemade1:~$ cat /etc/issue
Ubuntu 8.10 \n \l

paul@homemade1:~$ uname -a
Linux homemade1 2.6.27-7-generic #1 SMP Tue Nov 4 19:33:20 UTC 2008 i686 GNU/Linux

paul@homemade1:~$ sudo tail -f /var/log/messages
  .
  .
  .
Nov 19 13:16:08 homemade1 kernel: [59459.777307] type=1505 audit(1227122168.693:10): operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=14609
Nov 19 13:16:08 homemade1 kernel: [59459.779976] type=1505 audit(1227122168.693:11): operation="profile_replace" name="/usr/sbin/cupsd" name2="default" pid=14609
Nov 19 13:19:05 homemade1 kernel: [59636.414291] type=1502 audit(1227122345.329:12): operation="inode_permission" requested_mask="::rw" denied_mask="::rw" fsuid=7 name="/dev/tty" pid=14887 profile="/usr/sbin/cupsd"

Revision history for this message

Victor Vargas (kamus) wrote on 2009-10-14:

#11

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!