modify iprint installation web page

[ketter]

I don't need the "Install iPrint Client" link since I push that out
with ZCM. I also want to include this on our company intranet. So I
was hoping there was a way to display (maybe embed?) the instructions
and printer listing table. Does anyone know how to do this?

Ken

[ketter]

On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
<ketter@no-mx.forums.microfocus.com> wrote:

>I don't need the "Install iPrint Client" link since I push that out
>with ZCM. I also want to include this on our company intranet. So I
>was hoping there was a way to display (maybe embed?) the instructions
>and printer listing table. Does anyone know how to do this?
>
>Ken

Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
want. But I'm assuming that the server has x-frame-options set to
soemthing restrictive because I can't get this to display in an
iframe. And so far I can't figure out where this is being controlled
from. Any suggestions?

Ken

[ketter]

On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
<ketter@no-mx.forums.microfocus.com> wrote:

>On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
><ketter@no-mx.forums.microfocus.com> wrote:
>
>>I don't need the "Install iPrint Client" link since I push that out
>>with ZCM. I also want to include this on our company intranet. So I
>>was hoping there was a way to display (maybe embed?) the instructions
>>and printer listing table. Does anyone know how to do this?
>>
>>Ken
>
>Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>want. But I'm assuming that the server has x-frame-options set to
>soemthing restrictive because I can't get this to display in an
>iframe. And so far I can't figure out where this is being controlled
>from. Any suggestions?
>
>Ken

Found a solution. Probably not supported and I imagine updates will
overwrite it, but this is what I did for now. Edit
/etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
section:

# <IfModule headers_module>
# Header add X-Frame-Options SAMEORIGIN
# </IfModule>

Then restart tomcat.

If someone knows of a supported method, let me know. If there isn't
one, maybe I will go make a request at the iPrint Ideas page.

Ken

[kjhurni]

ketter;2423275 wrote:
On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
<ketter@no-mx.forums.microfocus.com> wrote:

>On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
><ketter@no-mx.forums.microfocus.com> wrote:
>
>>I don't need the "Install iPrint Client" link since I push that out
>>with ZCM. I also want to include this on our company intranet. So I
>>was hoping there was a way to display (maybe embed?) the instructions
>>and printer listing table. Does anyone know how to do this?
>>
>>Ken
>
>Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>want. But I'm assuming that the server has x-frame-options set to
>soemthing restrictive because I can't get this to display in an
>iframe. And so far I can't figure out where this is being controlled
>from. Any suggestions?
>
>Ken

Found a solution. Probably not supported and I imagine updates will
overwrite it, but this is what I did for now. Edit
/etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
section:

# <IfModule headers_module>
# Header add X-Frame-Options SAMEORIGIN
# </IfModule>

Then restart tomcat.

If someone knows of a supported method, let me know. If there isn't
one, maybe I will go make a request at the iPrint Ideas page.

Ken

Thanks for the info Ken, much appreciated. I Just stumbled into this situation as well (can't display in a frame).
Although on my OES11 SP2 servers, I had to just restart apache:
rcapache2 restart

--Kevin

[ketter]

On Mon, 11 Apr 2016 14:26:01 GMT, kjhurni
<kjhurni@no-mx.forums.microfocus.com> wrote:

>
>ketter;2423275 Wrote:
>> On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
>> <ketter@no-mx.forums.microfocus.com> wrote:
>>
>> >On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
>> ><ketter@no-mx.forums.microfocus.com> wrote:
>> >
>> >>I don't need the "Install iPrint Client" link since I push that out
>> >>with ZCM. I also want to include this on our company intranet. So I
>> >>was hoping there was a way to display (maybe embed?) the instructions
>> >>and printer listing table. Does anyone know how to do this?
>> >>
>> >>Ken
>> >
>> >Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>> >want. But I'm assuming that the server has x-frame-options set to
>> >soemthing restrictive because I can't get this to display in an
>> >iframe. And so far I can't figure out where this is being controlled
>> >from. Any suggestions?
>> >
>> >Ken
>>
>> Found a solution. Probably not supported and I imagine updates will
>> overwrite it, but this is what I did for now. Edit
>> /etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
>> section:
>>
>> # <IfModule headers_module>
>> # Header add X-Frame-Options SAMEORIGIN
>> # </IfModule>
>>
>> Then restart tomcat.
>>
>> If someone knows of a supported method, let me know. If there isn't
>> one, maybe I will go make a request at the iPrint Ideas page.
>>
>> Ken
>
>Thanks for the info Ken, much appreciated. I Just stumbled into this
>situation as well (can't display in a frame).
>
>--Kevin

Your welcome!
Ken

[Anonymous_User]

On 04/12/2016 02:31 PM, KeN Etter wrote:
> On Mon, 11 Apr 2016 14:26:01 GMT, kjhurni
> <kjhurni@no-mx.forums.microfocus.com> wrote:
>
>>
>> ketter;2423275 Wrote:
>>> On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>
>>>> On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
>>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>>
>>>>> I don't need the "Install iPrint Client" link since I push that out
>>>>> with ZCM. I also want to include this on our company intranet. So I
>>>>> was hoping there was a way to display (maybe embed?) the instructions
>>>>> and printer listing table. Does anyone know how to do this?
>>>>>
>>>>> Ken
>>>>
>>>> Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>>>> want. But I'm assuming that the server has x-frame-options set to
>>>> soemthing restrictive because I can't get this to display in an
>>>> iframe. And so far I can't figure out where this is being controlled
>>>> from. Any suggestions?
>>>>
>>>> Ken
>>>
>>> Found a solution. Probably not supported and I imagine updates will
>>> overwrite it, but this is what I did for now. Edit
>>> /etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
>>> section:
>>>
>>> # <IfModule headers_module>
>>> # Header add X-Frame-Options SAMEORIGIN
>>> # </IfModule>
>>>
>>> Then restart tomcat.
>>>
>>> If someone knows of a supported method, let me know. If there isn't
>>> one, maybe I will go make a request at the iPrint Ideas page.
>>>
>>> Ken
>>
>> Thanks for the info Ken, much appreciated. I Just stumbled into this
>> situation as well (can't display in a frame).
>>
>> --Kevin
>
> Your welcome!
> Ken
>


Do you realize that this line was added to fix a vulnerability issue? If
you remove this line, you're making your server vulnerable again

Bug 947285 - Security Vulnerability:85582 - Web Application Potentially
Vulnerable to Click jacking (CVE Number :CVE-2015-5971)

[kjhurni]

Mysterious;2425582 wrote:
On 04/12/2016 02:31 PM, KeN Etter wrote:
> On Mon, 11 Apr 2016 14:26:01 GMT, kjhurni
> <kjhurni@no-mx.forums.microfocus.com> wrote:
>
>>
>> ketter;2423275 Wrote:
>>> On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>
>>>> On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
>>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>>
>>>>> I don't need the "Install iPrint Client" link since I push that out
>>>>> with ZCM. I also want to include this on our company intranet. So I
>>>>> was hoping there was a way to display (maybe embed?) the instructions
>>>>> and printer listing table. Does anyone know how to do this?
>>>>>
>>>>> Ken
>>>>
>>>> Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>>>> want. But I'm assuming that the server has x-frame-options set to
>>>> soemthing restrictive because I can't get this to display in an
>>>> iframe. And so far I can't figure out where this is being controlled
>>>> from. Any suggestions?
>>>>
>>>> Ken
>>>
>>> Found a solution. Probably not supported and I imagine updates will
>>> overwrite it, but this is what I did for now. Edit
>>> /etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
>>> section:
>>>
>>> # <IfModule headers_module>
>>> # Header add X-Frame-Options SAMEORIGIN
>>> # </IfModule>
>>>
>>> Then restart tomcat.
>>>
>>> If someone knows of a supported method, let me know. If there isn't
>>> one, maybe I will go make a request at the iPrint Ideas page.
>>>
>>> Ken
>>
>> Thanks for the info Ken, much appreciated. I Just stumbled into this
>> situation as well (can't display in a frame).
>>
>> --Kevin
>
> Your welcome!
> Ken
>


Do you realize that this line was added to fix a vulnerability issue? If
you remove this line, you're making your server vulnerable again

Bug 947285 - Security Vulnerability:85582 - Web Application Potentially
Vulnerable to Click jacking (CVE Number :CVE-2015-5971)

Yes. Although if you read some articles the fix is intended for things that one "cares" about.
http://javascript.info/tutorial/clickjacking#x-frame-options
See this little section:

It is recommended that you use the X-Frame-Options at pages which are not meant to run into a frame.

Our iPrint web pages are not accessible externally, and believe it or not, there are legitimate reasons for displaying things in a frame/iFrame. That is why the requisite tag/section is in the code to allow *you* to select which items to allow or not (you probably wouldn't want this on your public web server, but maybe you do, as it sounds like the issue is more of a malicious website with a "click here" action vs. actually being able to compromise your web server, but I could be reading step 1 wrong).

However, I understand the concern that by turning this off, you're making the server "vulnerable" again.

[ketter]

On Tue, 12 Apr 2016 12:43:54 GMT, Mysterious <Mysterious@heaven.com>
wrote:

>On 04/12/2016 02:31 PM, KeN Etter wrote:
>> On Mon, 11 Apr 2016 14:26:01 GMT, kjhurni
>> <kjhurni@no-mx.forums.microfocus.com> wrote:
>>
>>>
>>> ketter;2423275 Wrote:
>>>> On Fri, 18 Mar 2016 18:05:29 GMT, KeN Etter
>>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>>
>>>>> On Fri, 18 Mar 2016 16:21:47 GMT, KeN Etter
>>>>> <ketter@no-mx.forums.microfocus.com> wrote:
>>>>>
>>>>>> I don't need the "Install iPrint Client" link since I push that out
>>>>>> with ZCM. I also want to include this on our company intranet. So I
>>>>>> was hoping there was a way to display (maybe embed?) the instructions
>>>>>> and printer listing table. Does anyone know how to do this?
>>>>>>
>>>>>> Ken
>>>>>
>>>>> Well I found that http://<server>/ipp/pdisplay.htm shows me the area I
>>>>> want. But I'm assuming that the server has x-frame-options set to
>>>>> soemthing restrictive because I can't get this to display in an
>>>>> iframe. And so far I can't figure out where this is being controlled
>>>>> from. Any suggestions?
>>>>>
>>>>> Ken
>>>>
>>>> Found a solution. Probably not supported and I imagine updates will
>>>> overwrite it, but this is what I did for now. Edit
>>>> /etc/opt/novell/iprint/httpd/conf/iprint_g.conf and comment out this
>>>> section:
>>>>
>>>> # <IfModule headers_module>
>>>> # Header add X-Frame-Options SAMEORIGIN
>>>> # </IfModule>
>>>>
>>>> Then restart tomcat.
>>>>
>>>> If someone knows of a supported method, let me know. If there isn't
>>>> one, maybe I will go make a request at the iPrint Ideas page.
>>>>
>>>> Ken
>>>
>>> Thanks for the info Ken, much appreciated. I Just stumbled into this
>>> situation as well (can't display in a frame).
>>>
>>> --Kevin
>>
>> Your welcome!
>> Ken
>>
>
>
>Do you realize that this line was added to fix a vulnerability issue? If
>you remove this line, you're making your server vulnerable again
>
>Bug 947285 - Security Vulnerability:85582 - Web Application Potentially
>Vulnerable to Click jacking (CVE Number :CVE-2015-5971)
>

Yep, but it is an internal site and only accessible internally and for
my limited use I figured it was a risk I would take. It would be nice
if Novell provided a way to integrate this page into a company
intranet without me having to take this step.
Ken