On Wed, 2010-10-20 at 13:32 +0100, John A. Murdie wrote:
<monitor.Monitor instance at 0x9b13eec>: CUPS IPP error (1025, 'client-er=
ror-forbidden')
Created subscription -1
This looks like IPP-Create-Subscription is not allowed for this client, due to the way CUPS is configured. Subscriptions are more efficient for this sort of application because it can be told about relevant changes rather than having to fetch the entire list each time:
I attach our server's cupsd.conf file (bowdlerised with "whatever"s!), which contains:
# Set the default printer/job policies...
<Policy default>
# Job-related operations must be done by the owner or an adminstrator... # Note that we need to 'Allow from localhost' for Windows LPR printing <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription
Cancel-Subscription
Get-Notifications Reprocess-Job Cancel-Job Cancel-Current-Job
Suspend-Current-Job
Resume-Job CUPS-Move-Job Get-Job-Attributes
CUPS-Authenticate-Job>
Order allow,deny AuthType Default # required to force authentication Require user @OWNER @SYSTEM Allow from localhost Satisfy any
</Limit>
So yes, Create-Job-Subscription and Create-Printer-Subscription require authentication. Currently system-config-printer's CUPS monitor module does not support using authentication for that, and it isn't really meant to handle automatic updating if it can't use subscriptions.
It does seem to happen continually even when there is no activity, as fast as CUPS can respond - which is presumably why the CPU% of cupsd rises to 99%.
I think I might have found the problem. When it fails to get notifications (because there is no subscription to use), it refreshes the entire list of printers and jobs... and tries to create another subscription.
Should be fixed upstream now, in that it won't try to automatically update printers and jobs if subscriptions cannot be used.
Would you be able to try it out? Just down monitor.py from the current 1.2.x branch and use it as a replacement for the one in 1.2.5: http://git.fedorahosted.org/git/?p=system-config-printer.git;a=blob_plain;f=...
Thanks, Tim. */