Anonymous_User Absent Member.
Absent Member.
1101 views

cannot authenticate to PSMStatus page, cannot manage Print Manager in iManager

iPrint appliance 1.1, patches 417 & 418 applied, running in VMWare

Suddently this afternoon I am no longer able to authenticate to the
PSMStatus page to check on printers. Also, in iManager if I try to
access the Print Manager it throws an authentication error as follows:

Authorization Required
IPP Error: 0xF0191
HTTP Error: 401

Tomcat6, Jetty, and Apache are all running on the machine and I have
restarted Jetty but no difference. Is this a certificate issue
similar to TID 7016019? I can't see any way in the appliance iManager
to refresh certificates. The certs I imported into the appliance,
long ago on the initial deployment, are not showing as expired.

Any ideas?

Thx,

DG
0 Likes
4 Replies
Knowledge Partner
Knowledge Partner

Re: cannot authenticate to PSMStatus page, cannot manage PrintManager in iManager

On 22/10/2015 23:47, DG wrote:

> iPrint appliance 1.1, patches 417 & 418 applied, running in VMWare
>
> Suddently this afternoon I am no longer able to authenticate to the
> PSMStatus page to check on printers. Also, in iManager if I try to
> access the Print Manager it throws an authentication error as follows:
>
> Authorization Required
> IPP Error: 0xF0191
> HTTP Error: 401
>
> Tomcat6, Jetty, and Apache are all running on the machine and I have
> restarted Jetty but no difference. Is this a certificate issue
> similar to TID 7016019? I can't see any way in the appliance iManager
> to refresh certificates. The certs I imported into the appliance,
> long ago on the initial deployment, are not showing as expired.
>
> Any ideas?


Since you have 1.1 Patch 3 (417 & 418) I'd say perhaps TID 7016906 is
more likely.

HTH.

[1] https://www.novell.com/support/kb/doc.php?id=7016906
--
Simon
Novell/NetIQ Knowledge Partner

------------------------------------------------------------------------
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.
------------------------------------------------------------------------
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: cannot authenticate to PSMStatus page, cannot manage Print Manager in iManager

On Mon, 26 Oct 2015 10:41:04 GMT, Simon Flood
<smflood@no-mx.forums.microfocus.com> wrote:

>On 22/10/2015 23:47, DG wrote:
>
>> iPrint appliance 1.1, patches 417 & 418 applied, running in VMWare
>>
>> Suddently this afternoon I am no longer able to authenticate to the
>> PSMStatus page to check on printers. Also, in iManager if I try to
>> access the Print Manager it throws an authentication error as follows:
>>
>> Authorization Required
>> IPP Error: 0xF0191
>> HTTP Error: 401
>>
>> Tomcat6, Jetty, and Apache are all running on the machine and I have
>> restarted Jetty but no difference. Is this a certificate issue
>> similar to TID 7016019? I can't see any way in the appliance iManager
>> to refresh certificates. The certs I imported into the appliance,
>> long ago on the initial deployment, are not showing as expired.
>>
>> Any ideas?

>
>Since you have 1.1 Patch 3 (417 & 418) I'd say perhaps TID 7016906 is
>more likely.
>
>HTH.
>
>[1] https://www.novell.com/support/kb/doc.php?id=7016906



Thank you for your response. I've checked that file and the line in
question appears to be OK. Here's the contents of the file verbatim:

***************************************

# Do not modify this file! Changes to this file may
# cause iPrint to opperate improperly. Your changes to this
# file will not be preserved.

<IfModule !mod_ipp.c>
LoadModule ipp_module /opt/novell/iprint/httpd/lib64/mod_ipp.so
</IfModule>

<IfModule mod_ipp.c>
<LocationMatch
^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss]|auth)($|/)>
SSLRequireSSL
Require valid-user
Order deny,allow
Allow from all
AuthType Basic
AuthBasicProvider ldapdn
AuthName "iprintva"
AuthLDAPDNURL "ldaps://localhost/???(objectClass=user)"
AuthLDAPDNRemoteUserIsDN on
AuthzLDAPDNAuthoritative Off
AuthLDAPDNAllowDNAuth On
AuthLDAPDNDereferenceAliases never
</LocationMatch>
</IfModule>


***************************************

I am also getting RPC errors when I try to look at Renderers, which
are not connecting.

DG
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: cannot authenticate to PSMStatus page, cannot manage Print Manager in iManager

On Mon, 26 Oct 2015 17:34:15 GMT, DG <devern.gerber@ccsdut.org> wrote:

>On Mon, 26 Oct 2015 10:41:04 GMT, Simon Flood
><smflood@no-mx.forums.microfocus.com> wrote:
>
>>On 22/10/2015 23:47, DG wrote:
>>
>>> iPrint appliance 1.1, patches 417 & 418 applied, running in VMWare
>>>
>>> Suddently this afternoon I am no longer able to authenticate to the
>>> PSMStatus page to check on printers. Also, in iManager if I try to
>>> access the Print Manager it throws an authentication error as follows:
>>>
>>> Authorization Required
>>> IPP Error: 0xF0191
>>> HTTP Error: 401
>>>
>>> Tomcat6, Jetty, and Apache are all running on the machine and I have
>>> restarted Jetty but no difference. Is this a certificate issue
>>> similar to TID 7016019? I can't see any way in the appliance iManager
>>> to refresh certificates. The certs I imported into the appliance,
>>> long ago on the initial deployment, are not showing as expired.
>>>
>>> Any ideas?

>>
>>Since you have 1.1 Patch 3 (417 & 418) I'd say perhaps TID 7016906 is
>>more likely.
>>
>>HTH.
>>
>>[1] https://www.novell.com/support/kb/doc.php?id=7016906

>
>
>Thank you for your response. I've checked that file and the line in
>question appears to be OK. Here's the contents of the file verbatim:
>
>***************************************
>
># Do not modify this file! Changes to this file may
># cause iPrint to opperate improperly. Your changes to this
># file will not be preserved.
>
><IfModule !mod_ipp.c>
> LoadModule ipp_module /opt/novell/iprint/httpd/lib64/mod_ipp.so
></IfModule>
>
><IfModule mod_ipp.c>
> <LocationMatch
>^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss]|auth)($|/)>
> SSLRequireSSL
> Require valid-user
> Order deny,allow
> Allow from all
> AuthType Basic
> AuthBasicProvider ldapdn
> AuthName "iprintva"
> AuthLDAPDNURL "ldaps://localhost/???(objectClass=user)"
> AuthLDAPDNRemoteUserIsDN on
> AuthzLDAPDNAuthoritative Off
> AuthLDAPDNAllowDNAuth On
> AuthLDAPDNDereferenceAliases never
> </LocationMatch>
></IfModule>
>
>
>***************************************
>
>I am also getting RPC errors when I try to look at Renderers, which
>are not connecting.
>
>DG


On reboot, when iPrintMobile starts I am seeing a warning flash by
complaining about path to keyfile. However, no changes have been made
to the directory, certfiles, or conf files.

Clearly, LDAP authentication is not working but I'm not seeing a clear
indication as to why...

Thx,

DG
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: cannot authenticate to PSMStatus page, cannot manage Print Manager in iManager

Resolved.

Who knew that eDir certs in the appliance have only a two-year
expiration?? TID 7016720 details the process for re-creating these on
the appliance, a process that could hardly be described as
appliance-like. I really, really miss tools like pkidiag...

At least now I have the cert management tools installed into the
appliance iManager for future use.

Sorry about the bandwidth,

On Mon, 26 Oct 2015 19:18:01 GMT, DG <devern.gerber@ccsdut.org> wrote:

>On Mon, 26 Oct 2015 17:34:15 GMT, DG <devern.gerber@ccsdut.org> wrote:
>
>>On Mon, 26 Oct 2015 10:41:04 GMT, Simon Flood
>><smflood@no-mx.forums.microfocus.com> wrote:
>>
>>>On 22/10/2015 23:47, DG wrote:
>>>
>>>> iPrint appliance 1.1, patches 417 & 418 applied, running in VMWare
>>>>
>>>> Suddently this afternoon I am no longer able to authenticate to the
>>>> PSMStatus page to check on printers. Also, in iManager if I try to
>>>> access the Print Manager it throws an authentication error as follows:
>>>>
>>>> Authorization Required
>>>> IPP Error: 0xF0191
>>>> HTTP Error: 401
>>>>
>>>> Tomcat6, Jetty, and Apache are all running on the machine and I have
>>>> restarted Jetty but no difference. Is this a certificate issue
>>>> similar to TID 7016019? I can't see any way in the appliance iManager
>>>> to refresh certificates. The certs I imported into the appliance,
>>>> long ago on the initial deployment, are not showing as expired.
>>>>
>>>> Any ideas?
>>>
>>>Since you have 1.1 Patch 3 (417 & 418) I'd say perhaps TID 7016906 is
>>>more likely.
>>>
>>>HTH.
>>>
>>>[1] https://www.novell.com/support/kb/doc.php?id=7016906

>>
>>
>>Thank you for your response. I've checked that file and the line in
>>question appears to be OK. Here's the contents of the file verbatim:
>>
>>***************************************
>>
>># Do not modify this file! Changes to this file may
>># cause iPrint to opperate improperly. Your changes to this
>># file will not be preserved.
>>
>><IfModule !mod_ipp.c>
>> LoadModule ipp_module /opt/novell/iprint/httpd/lib64/mod_ipp.so
>></IfModule>
>>
>><IfModule mod_ipp.c>
>> <LocationMatch
>>^/(ipps|idss|[Pp][Ss][Mm][Ss][Tt][Aa][Tt][Uu][Ss]|auth)($|/)>
>> SSLRequireSSL
>> Require valid-user
>> Order deny,allow
>> Allow from all
>> AuthType Basic
>> AuthBasicProvider ldapdn
>> AuthName "iprintva"
>> AuthLDAPDNURL "ldaps://localhost/???(objectClass=user)"
>> AuthLDAPDNRemoteUserIsDN on
>> AuthzLDAPDNAuthoritative Off
>> AuthLDAPDNAllowDNAuth On
>> AuthLDAPDNDereferenceAliases never
>> </LocationMatch>
>></IfModule>
>>
>>
>>***************************************
>>
>>I am also getting RPC errors when I try to look at Renderers, which
>>are not connecting.
>>
>>DG

>
>On reboot, when iPrintMobile starts I am seeing a warning flash by
>complaining about path to keyfile. However, no changes have been made
>to the directory, certfiles, or conf files.
>
>Clearly, LDAP authentication is not working but I'm not seeing a clear
>indication as to why...
>
>Thx,
>
>DG

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.