Root can print locally but users cannot. Remote printing is configured

[BrianBE]

I recently configured two HP JetDirect Printservers on our sco unix box (5.0.6), one a 300x & the other a 3 port 500x. When I log in as root i'm able to print to any of the 4 printers. When a regular user logs in it appears to send print jobs to the queues but nothing happens. I'm a bit desperate for help so if anybody has experienced this problem before let me know what the solution was. I've changed the permissions on lp files and still nothing. I suspect that its a permission issue, but i'm at a complete loss as to what the solution could possibly be.

 

[PHV]

I recently configured two HP JetDirect Printservers
With hpnp or lpd ?

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244

 

[BrianBE]

LPD ... i used the hp printer management app. for unix and then modified the interface files using info from sco.com

 

[BrianBE]

sorry .. just realized i typed the wrong with .. hpnp not lpd.

 

[PHV]

Is RS506A installed ?
Are the perms of /usr/bin/lp like ---x--s--x bin/lp ?
Does all the /usr/spool/lp/admins tree belong to group lp ?

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244

 

[BrianBE]

Yes to all of the questions PH.

Brian

 

[PHV]

No /tmp/hpnpf.* files ?

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244

 

[BrianBE]

yes, those are all there.

 

[PHV]

So you may take a look at the content of the /tmp/NameOfPrinter.* files.

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244

 

[motoslide]

Try running the System Integrity check utility.

/tcb/bin/integrity -e|more

There will be some "errors" that you can ignore. (As an example, you now have a directory called
/usr/spool/lp/admins/lp/interfaces/model.orig that "integrity" will complain about.)
Don't worry about that one, but DO pay attention if it flags files or directories with incorrect ownership and/or permissions. Keep in mind that some processes can fail if permissions are set too liberally.

 

[BrianBE]

Just did /tcb/bin/integrity -e|more ... i did return a few errors including incorrect ownerships and permissions. I'm not really an expert user but wasnt award that processess could/would fail if permissions are set liberally..

A lot of the errors indicated incorrect ownerships, incorrect modes. for eg:
________________________
/usr/spool/lp/admins/lp/interfaces/accprnt (wildcard entry 329) is wrong.
Owner is bin, should be lp.
Mode is 0777, should be 0775
________________________
/usr/spool/lp/admins/lp/interfaces (entry 327) is wrong.
Mode is 0774, should be 0775.
______________________
/etc/auth/subsystems/lp (entry 52) is wrong.
Owner is root, should be auth.
______________________

______________________


Would these permission /ownership issues be enough to prevent regular users from accessing these printers, but root being able to function normally?

I'm not at the location now, but will attempt to change these permissions tomorrow when I go there.

 

[PHV]

I guess the culprit is here:
/usr/spool/lp/admins/lp/interfaces (entry 327) is wrong.
Mode is 0774, should be 0775

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244

 

[BrianBE]

Well, i just logged on via our vpn and changed it from 0775 to 0774. Can you explain the differnt modes, permissions and how they could have caused the problem?

I wont be able to tell if these fixed the problem until tomorrow morning when i go to the location.. theres really no way to tell if printing worked from here. If this works i owe you guys some caribbean rum.

 

[PHV]

changed it from 0775 to 0774
Hopefully a typo !
Should be changed from 0774 to 0775, ie with the execution bit set for everyone.
0774 = rwxrwxr--
0775 = rwxrwxr-x

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ222-2244