Highlighted
Absent Member.
Absent Member.
1383 views

OES11 iPrint - define Admin-Users

Hi there,

goal is to make some of my peers iPrint Admins with rights for the
complete iPrint management. I assigned trustee-rights (supervisor) for
the DriverStore and the PrintManager as well as for the whole container
which contains all the printers and the Driverstore and Manager.

But there seems to be a problem with insufficient rights. What's wrong?

TIA

Tom




0 Likes
7 Replies
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

On 03/11/2014 10:00 AM, bwisupport wrote:
> Hi there,
>
> goal is to make some of my peers iPrint Admins with rights for the
> complete iPrint management. I assigned trustee-rights (supervisor) for
> the DriverStore and the PrintManager as well as for the whole container
> which contains all the printers and the Driverstore and Manager.
>
> But there seems to be a problem with insufficient rights. What's wrong?
>
> TIA
>
> Tom
>
>
>
>


https://www.novell.com/documentation/oes11/iprint_lx/data/akey2rp.html
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

Am 11.03.2014 10:07, schrieb Mysterious:
> https://www.novell.com/documentation/oes11/iprint_lx/data/akey2rp.html


That's what I meant assigning rights. Problem is: admin object is able
to manage, in the above way assigned users are'nt.


/var/log/apache2/error_log

[Tue Mar 11 16:32:01 2014] [warn] [client 192.168.224.1] [29828]
authnz_ldapdn authenticate: user cn=tbein,ou=admins,ou=EDV,o=Zentrale
authentication failed; URI /idss [User not found][No such object]
[Tue Mar 11 16:32:01 2014] [error] [client 192.168.224.1] no acceptable
variant: /usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var

TIA Tom
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

On 03/11/2014 04:45 PM, bwisupport wrote:
> Am 11.03.2014 10:07, schrieb Mysterious:
> > https://www.novell.com/documentation/oes11/iprint_lx/data/akey2rp.html

>
> That's what I meant assigning rights. Problem is: admin object is able
> to manage, in the above way assigned users are'nt.
>
>
> /var/log/apache2/error_log
>
> [Tue Mar 11 16:32:01 2014] [warn] [client 192.168.224.1] [29828]
> authnz_ldapdn authenticate: user cn=tbein,ou=admins,ou=EDV,o=Zentrale
> authentication failed; URI /idss [User not found][No such object]
> [Tue Mar 11 16:32:01 2014] [error] [client 192.168.224.1] no acceptable
> variant: /usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var
>
> TIA Tom



It looks like the other users are not under the iprint_ssl.conf search
container or you have ldap problems searching for user tbein

check first your iprint_ssl and look at the authldapdnurl field
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

> It looks like the other users are not under the iprint_ssl.conf search
> container or you have ldap problems searching for user tbein
>
> check first your iprint_ssl and look at the authldapdnurl field


That seems to bo a good advice, the context o=bwi in fact is wrong!
Maybe that's an issue with the still not finished migration (MigWiz)from
NW65 to OES11...

What confuses me are the warning not to modify this file. Is there
another way to modify it?

# Do not modify this file! Changes to this file may
# cause iPrint to opperate improperly. Your changes to this
# file will not be preserved.



<IfModule !mod_ipp.c>
LoadModule ipp_module /opt/novell/iprint/httpd/lib64/mod_ipp.so
</IfModule>

<IfModule mod_ipp.c>
<LocationMatch
^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss])($|/)>
SSLRequireSSL
Require valid-user
Order deny,allow
Allow from all
AuthType Basic
AuthBasicProvider ldapdn
AuthName "BWI"
AuthLDAPDNURL "ldaps://BRZ1SRVOES1:636/o=bwi???(objectClass=user)"
AuthLDAPDNRemoteUserIsDN on
AuthzLDAPDNAuthoritative Off
AuthLDAPDNAllowDNAuth on
</LocationMatch>
</IfModule>

Thanks

Tom
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

On 03/12/2014 08:57 AM, bwisupport wrote:
>> It looks like the other users are not under the iprint_ssl.conf search
>> container or you have ldap problems searching for user tbein
>>
>> check first your iprint_ssl and look at the authldapdnurl field

>
> That seems to bo a good advice, the context o=bwi in fact is wrong!
> Maybe that's an issue with the still not finished migration (MigWiz)from
> NW65 to OES11...
>
> What confuses me are the warning not to modify this file. Is there
> another way to modify it?
>
> # Do not modify this file! Changes to this file may
> # cause iPrint to opperate improperly. Your changes to this
> # file will not be preserved.
>
>
>
> <IfModule !mod_ipp.c>
> LoadModule ipp_module /opt/novell/iprint/httpd/lib64/mod_ipp.so
> </IfModule>
>
> <IfModule mod_ipp.c>
> <LocationMatch
> ^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss])($|/)>
> SSLRequireSSL
> Require valid-user
> Order deny,allow
> Allow from all
> AuthType Basic
> AuthBasicProvider ldapdn
> AuthName "BWI"
> AuthLDAPDNURL "ldaps://BRZ1SRVOES1:636/o=bwi???(objectClass=user)"
> AuthLDAPDNRemoteUserIsDN on
> AuthzLDAPDNAuthoritative Off
> AuthLDAPDNAllowDNAuth on
> </LocationMatch>
> </IfModule>
>
> Thanks
>
> Tom



you can modify it with no issues and there is no other way
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

Am 12.03.2014 09:29, schrieb Mysterious:

>> What confuses me are the warning not to modify this file. Is there
>> another way to modify it?


>> # Do not modify this file! Changes to this file may
>> # cause iPrint to opperate improperly. Your changes to this
>> # file will not be preserved.


> you can modify it with no issues and there is no other way


You're right. Works perfect, thank you very much

Tom

0 Likes
Highlighted
Absent Member.
Absent Member.

Re: OES11 iPrint - define Admin-Users

On 03/12/2014 01:06 PM, bwisupport wrote:
> Am 12.03.2014 09:29, schrieb Mysterious:
>
>>> What confuses me are the warning not to modify this file. Is there
>>> another way to modify it?

>
>>> # Do not modify this file! Changes to this file may
>>> # cause iPrint to opperate improperly. Your changes to this
>>> # file will not be preserved.

>
>> you can modify it with no issues and there is no other way

>
> You're right. Works perfect, thank you very much
>
> Tom
>


you're welcome
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.