What happened to my printer!?!

Daniel J Walsh dwalsh at redhat.com
Tue Sep 10 13:56:55 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/09/2013 06:34 PM, Rick Stevens wrote:
> On 09/09/2013 02:49 PM, Alan Evans issued this missive:
>> On Mon, Sep 9, 2013 at 2:34 PM, Rick Stevens wrote:
>> 
>> Well, since it seems to be a Windows printer (e.g. a print spooler 
>> running on a Windows box), did they change the authentication at that 
>> end? Did you change the firewall settings on your box so that Samba stuff
>> is blocked now?
>> 
>> 
>> The authentication has not changed on the Windows box. (The guy in charge
>> of that would never do that, since it would force him to go around
>> reconfiguring everybody's machine for the new authentication. He would
>> never want to do that much work.) In any case, I asked, and there has
>> been no change to the print-spooler's configuration.
> 
> Did you do an update to your machine just before this started happening? 
> You also didn't say if you're running F17, F18 or F19 (or something older).
> If you're running F20, then this isn't the list for that as F20 isn't
> released yet.
> 
>> As for the firewall, it is disabled on this machine. For fun, I just 
>> issued a "setenforce 0" and tried resuming the printer. No change in 
>> status. So it is something of a mystery to me why I can't even browse for
>> network printers.
> 
> I'm just shotgunning this, so bear with me. The firewall and SELinux are
> completely separate things. "setenforce 0" does NOT disable SELinux--it
> just puts it in permissive mode and SELinux still gets in the way on
> certain things even in permissive mode (ask me how I know). You might find
> some clues in SELinux's logs and such.
> 
> There are Samba-based selinux policies and booleans. To see if this is the
> problem, disable SELinux completely by editing /etc/selinux/config and
> changing the line:
> 
> SELINUX=enforcing
> 
> to
> 
> SELINUX=disabled
> 
> and rebooting. See if you can browse your network printers then. If so, 
> then obviously SELinux is in the way. Change the config line back and 
> reboot to re-enable SELinux, then have a looksee at the man pages for 
> samba_net_selinux, samba_unconfined_net_selinux and 
> samba_unconfined_script_selinux and play with that stuff.
> 
> If you still can't browse with SELinux disabled, please ensure that the 
> firewall is disabled. As root, try "iptables -L -n" and see if anything 
> pops up. You must permit incoming UDP connections on ports 137 and 138 to
> browse Samba/SMB/Windows stuff.
> 
> Like I said, this is shotgun stuff and it may not solve your problem, but
> it's a start. 
> ---------------------------------------------------------------------- -
> Rick Stevens, Systems Engineer, AllDigital    ricks at alldigital.com - -
> AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 - -
> - - Real Time, adj.: Here and now, as opposed to fake time, which only - -
> occurs there and then                       - 
> ----------------------------------------------------------------------
What things are you seeing Blocked with SELinux is in permissive mode?  Bugzillas?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlIvJScACgkQrlYvE4MpobMERACfSDLwD20kogwGIDoOSiAFwriw
pRQAoLi1hvh2azMmJ9U/UBFFTO7u6Hlw
=IWPO
-----END PGP SIGNATURE-----


More information about the users mailing list