ipp/http backends not available: invalid file permissions

I'm conforming this bug as of 10/03/2008.

Package: cups
Priority: optional
Section: net
Installed-Size: 10584
Maintainer: Debian CUPS Maintainers <email address hidden>
Architecture: i386
Version: 1.3.8-11ubuntu2

cups 1.3.9-2

Intrepid Ibex Release still suffers from this bug.
No custom config changes, default installation. No IPP/HTTP printers accessible.

If you cannot use your network IPP enabled printer,
chmod 0755 /usr/lib/cups/backend/*

It took a while to find out why I can't print on our Xerox WorkCentre M20i despite I am the submitter of this bugreport.

Regression in intrepid.

debian/patches/rootbackends-worldreadable.dpatch allowed backends to be installed as 0744 and still being run as root, which doesn't violate the Debian/Ubuntu policy as much as installing them as 0700. However, this apparently broke cups-deviced which seems to only recognize 0700 or 0755 backends.

As a workaround you should chmod ipp and http to 0700.

http://bazaar.launchpad.net/~pitti/cups/debian-trunk/revision/578

This bug was fixed in the package cups - 1.3.9-5

---------------
cups (1.3.9-5) experimental; urgency=low

  * hpgl-regression.dpatch: Replaced with version which got committed
    upstream.
  * Add runloop-backchannel-eof-spin.dpatch: Fix backend runloop spin on
    backchannel EOF (select() returns "ready for read" on EOF). This
    completely broke printing with e. g. HPJetDirect. Thanks to
    Samuel Thibault for tracking down the problem! (Closes: #489045)
  * debian/cups-bsd.postinst: Assume default printcap path (in /var/run/cups/)
    if not specified in cupsd.conf. This brings back the lost /etc/printcap
    for legacy applications. (Closes: #482186, LP: #282667)
  * debian/rules: Drop arm/armel -f-no-stack-protector workaround, since SSP
    works on these architectures now. (See #469517)
  * debian/cups-bsd.postinst: Robustify the cupsd.conf parsing for Printcap,
    as per suggestion from Jo Mills.
  * rootbackends-worldreadable.dpatch: Apply the same relaxed permission check
    to cups-deviced, so that backends installed as 0744 don't disappear from
    printer detecttion. (Closes: #503644, LP: #275407)

 -- Martin Pitt <email address hidden> Mon, 17 Nov 2008 08:50:34 +0100

Intrepid fix: http://bazaar.launchpad.net/~ubuntu-core-dev/cups/intrepid/revision/570

Accepted cups into intrepid-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

I tested the intrepid-proposed .debs on my wife's computer, and these backends appear now in "lpinfo -v" and detect the printer. Printing works fine.

This bug was fixed in the package cups - 1.3.9-2ubuntu3

---------------
cups (1.3.9-2ubuntu3) intrepid-proposed; urgency=low

  * debian/local/filters/pdf-filters/filter/pdftoraster.cxx: Fix include path
    of image.h, to fix FTBFS if libcupsimage-dev is not installed.

cups (1.3.9-2ubuntu2) intrepid-proposed; urgency=low

  [ Till Kamppeter ]
  * debian/local/filters/cpdftocps: The cpdftocps filter did case-sensitive
    checking for CUPS options to keep them away from the pstops filter. CUPS
    treats such options case-insensitive, so in some cases CUPS options got
    applied twice (LP: #299707).
  * debian/local/filters/pdf-filters/filter/pdftoraster.cxx: Fix handling of
    CMYK color space. Patch taken from upstream:
    http://svn.sourceforge.jp/view/pdftoraster/trunk/src/pdftoraster.cc?root=opfc&rev=850&r1=848&r2=850
    (LP: #294671)
  * debian/filters/pstopdf: Do not supply the margins from the PPD to the
    ps2pdf process, as this breaks full-bleed printing and is also disturbs
    the printing if PPDs have too conservative margin definitions. (LP: #282186)

  [ Martin Pitt ]
  * rootbackends-worldreadable.dpatch: Apply the same relaxed permission check
    to cups-deviced, so that backends installed as 0744 don't disappear from
    printer detecttion. This unbreaks the ipp/http and lpd detection.
    (LP: #275407, Debian #503644)
  * debian/rules: Install the serial backend with 0744 permissions to make it
    run as root, since /dev/ttyS* are root:dialout and thus not accessible as
    user "lp". Thanks to Chanoch (Ken) Bloom. (part of #506181, LP: #154277)
  * debian/control: Update Vcs-* for intrepid branch.

 -- Martin Pitt <email address hidden> Fri, 21 Nov 2008 13:13:14 +0100

Copied to intrepid-updates.

This is not fixed on upgrades: After upgrading from Hardy to Intrepid using the update-manager release upgrade, the file permissions were 0744 on http, lpd, ipp (and serial but that looks correct).

744 is fine in intrepid, it has a patch to only check for world-executability.

Yes, you're right of course. My problem was simply that the admin user (created in Gutsy I think) was not member of lpadmin :( which is a different bug. World-readability is enough, to be precise.