apfilter, ghostscript, and printer! yikes!

Top Page
This message is part of the following thread:
Mthe complete thread tree sorted by date
M 
Mrustyc at ->
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: rustyc
Date:  
Old-Topics: test
Subject: apfilter, ghostscript, and printer! yikes!
Help! I've fallen and I cannot get up!

Oh, wait, wrong story.

I've finally decided to get my Canon BJC6000 printer
working - somehow. (DON'T BUY CANON PRINTERS!)

So, first attempt was to run vmware and print using
the windows printer driver under windows, exported
via samba to linux. (VMware allows the windows client
OS to have access to devices you specify, and I tried
to let it have the parallel port).

This attempt failed miserably - when I try to have VMWare
take the printer port it says 

"Unsupported parallel port hardware /dev/parport0
(no ECR register).
Failed to connect device parallel0
    [OK]"


(I tried with lp0, and it complained about not having
readback (basically)).

Ok, I thought, so the kludge won't work, how about doing
it 'right' - I'll get ghostscript working.

Installed gs 6.01
Installed lprng (removing lpr)
Installed apsfilter

Everything looked good. Tried to print. Nothing.

syslog says:

Sep 15 18:27:18 base-station-alpha kernel: ppuser00: registered pardevice
Sep 15 18:27:18 base-station-alpha kernel: ppuser00: claim the port first
Sep 15 18:27:18 base-station-alpha kernel: ppuser00: released pardevice because user-space forgot
Sep 15 18:27:18 base-station-alpha kernel: ppuser00: unregistered pardevice

the lp2.0 log says:

Status: subserver pid 18644 starting at 18:30:41.487
Status: accounting at start at 18:30:41.514
Status: waiting for subserver to exit at 18:30:41.484
Status: opening device '/dev/parport0' at 18:30:41.559
Status: printing job 'root@base-station-alpha+640' at 18:30:41.560
Status: processing 'dfA640base-station-alpha.descomp.com', size 226361, format 'f', IF filter 'aps1-bjc610a0.upp-letter-auto-default' at 18:30:41.560
Status: IF filter 'aps1-bjc610a0.upp-letter-auto-default' filter msg - 'Make_passthrough: pid 18645, execve '/root/apsfilter/filter/aps1-bjc610a0.upp-letter-auto-default' failed - 'Permission denied'' at 18:30:41.564
Status: IF filter 'aps1-bjc610a0.upp-letter-auto-default' filter exit status 'JABORT' at 18:30:41.564
Status: printing finished at 18:30:41.564
Status: accounting at end at 18:30:41.565
Status: finished 'root@base-station-alpha+640', status 'JABORT' at 18:30:41.565
Status: subserver pid 18644 exit status 'JABORT' at 18:30:41.566
Status: job 'root@base-station-alpha+640' error 'aborting operations' at 18:30:41.566
Status: removing job 'root@base-station-alpha+640' - ABORT at 18:30:41.568
Filter_status: lp2 is ready and printing


Ok, so the obvious thing is that my execve target is bad. Here's a look at it: 


lrwxrwxrwx    1 root     root           16 Sep 14 18:52 aps1-bjc610a0.upp-letter-auto-default -> ../bin/apsfilter*
lrwxrwxrwx    1 root     root           16 Sep 14 18:52 aps2-bjc610a0.upp-letter-raw -> ../bin/apsfilter*



And here's what it points at: 

-r-xr-xr-x    1 bin      wheel       55807 Sep 14 19:13 ../bin/apsfilter*


THAT all looks good to me.

So, ANYBODY, HELP! What have I fat-fingered?

Oh, just in case it helps, here is my /etc/printcap: 

# LABEL apsfilter
# apsfilter setup Thu Sep 14 18:51:53 MST 2000
#
# DON'T DELETE THIS:
# APS_BASEDIR:/root/apsfilter
#
# APS1_BEGIN:printer1:bjc610a0.upp:letter:default
# - don't delete start label for apsfilter printer1
# - no other printer defines between BEGIN and END LABEL
#
lp2|aps1-bjc6000a1.upp-letter-auto-default|Printer1 bjc6000a1.upp letter auto default:\
    :lp=/dev/lp0:\
    :sd=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default:\
    :lf=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default/log:\
    :af=/var/spool/lpd/printer1-bjc6000a1.upp-letter-auto-default/acct:\
    :if=/root/apsfilter/filter/aps1-bjc610a0.upp-letter-auto-default:\
    :mx#0:\
    :sh:
# APS1_END - don't delete this END LABEL for printer1



Ok, I lied, I deleted all but lp2.

anybody have a clue? I'm totally baffled...

rusty



From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Mon, 25 Sep 100 14:36:50 EST
Subject: user tracking
Message-ID: <>

\_ Thanks for the responses. I never know about the command "last". Very
\_ cool. I've already found out most of what I needed. It was some guy over
\_ in Russia. Those punks! :-)

I'd guess that the box in Russia was merely a springboard not the
source.

David

________________________________________________

Thats true, but I couldn't trace it back any further than that.

Don


From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Mon, 25 Sep 100 14:40:57 EST
Subject: redhat tries apt-get
Message-ID: <>

The only beaf I've got agains apt-get is the versions of the packages. They always seem to be slightly more dated than thier rpm counterparts or naturally the .tgz's... Maybe I've just got an outdated server in my server list?

Don


I would guess it was a unintentional flame, or it could
have been intentional. I don't think it is the thing that
will make me drop Debian and go back to Redhat, though thats
for sure. I am sure it will be some time still before this
new system will be able to catch up to the matureness of apt.

Bill Warner

> On Sep 21, 8:35am, Craig White wrote:
> 
> Seems pretty clear that Debian is a committed free venture whereas > Redhat is
> > and apparently always will be a commercial enterprise. Their hope is to
> > commercialize added value. It may very well be the thing that kills apt.
>                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

>
> I really don't understand this statement. Would you care to clarify?
>
> Kevin
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
>
> Plug-discuss mailing list -
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>



--
--
Bill Warner
Direct Alliance Corp.
Unix/Linux Admin.



From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Tue, 26 Sep 100 10:37:46 EST
Subject: user tracking
Message-ID: <>

Ya, I already know about *most* of them. I'm pretty sure I cleaned it all up though. He tried again last night and couldn't. ;-) Clean up was successful. Rebuilding the whole box would have been a mojor pain in the ass as well as unwanted down time. I know it's only a mush (game) server but those are the people that are constantly on and scream during downtime.. :-)

Don

There are also other items in a standard rootkit.

You could spend time checking ls, ps, top, sum, yada
yada yada, against your pristine versions on read-only
installation media (after booting into single-user
mode on pristine read-only trusted media (and ONLY
running binaries from said media)), but IMHO your best
bet after a breach/rootkit incident is to take off and
nuke the site from orbit. It's the only way to be sure.

I'm sure there's a HOWTO on cleaning up your system
after a rootkit "upgrade." Check Google.


D



From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Tue, 26 Sep 100 10:39:07 EST
Subject: user tracking
Message-ID: <>

Eh, oh.. Better update again.. :-)

Don

>I saw it. <g>



Actually, I'm quite afraid that wu-ftpd 2.6 is also compromised...didn't I
see a notice a few weeks back?

Craig

> -----Original Message-----
> From:
> [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of Don
> Harrop
> Sent: Monday, September 25, 2000 1:24 PM
> To:
> Subject: Re: user tracking
>
>
> Thanks for the responses. I never know about the command "last". Very
> cool. I've already found out most of what I needed. It was some guy over
> in Russia. Those punks! :-) He left some cool utilz on the hard drive
> for me though. A login replacement that logs all usernames and passwords
> and a in.ftpd replacement. That's how he got in in the first place. I
> was running wu-ftpd 2.5.x... I already know there's tons of documented
> exploits with that verison. I've just upgraded to wu-ftpd 2.6 so that
> should slow 'em down a little bit.
>
> Don
>
> On 26 Sep 2000, Bill Warner wrote:
>
> > This information is located in the /etc/shadow file. it is refrenced
> > in the standard unix time thing (seconds sense jan 1 1970) check
> > man shadow for more details
> >
> > Bill Warner
> >
> > > Hey guys.
> > >       At login I get a printout of when the last login occured.  Where
> > > is that info stored?  I want to check out a user on the system but
> > > don't want to log in as them.  One of the machines I work with had the
> > > root account compromised.  It's just running a few mushes so
> it's not that
> > > big of deal but I don't want it happening again.  I went
> through it with a
> > > fine tooth comb and wouldn't mind it if any of you guys tried
> to whack at
> > > it...  Lemme know what you find.  The IP is 205.216.140.17

> > >
> > > Don
> > >
> > >
> > > ________________________________________________
> > > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your
> mail doesn't post to the list quickly and you use Netscape to write mail.
> > >
> > > Plug-discuss mailing list -
> > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > >
> >
> >
> >
> >
>
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
> doesn't post to the list quickly and you use Netscape to write mail.
>
> Plug-discuss mailing list -
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


________________________________________________
See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post
to the list quickly and you use Netscape to write mail.

Plug-discuss mailing list -
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


________________________________________________
See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.

Plug-discuss mailing list -
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Tue, 26 Sep 100 12:32:30 EST
Subject: ARTICLE: Red Hat launching Linux subscription services network
Message-ID: <>

Here, here. (whatever that means) :-) I have no problem with spending money on things worth spending money on. If my few dollars and cents can help RedHat continue development of Linux, I'm happy with that. As long as they don't go overboard like Microsloth has. Don't get me wrong here. I'd like to see everything about linux remain free-of-charge. I just don't want to see linux raped to death because no one is willing to kick in any money.


I don't know about you guys, but I think Red Hat deserves credit for their work. I think it's a great idea.

-------------------------------------------
Lucas Vogel, Software Developer
Exponent Failure Analysis Associates, Inc.

(623)587-6739


From Don Harrop" < Wed Jun 25 15:52:58 2003
From: Don Harrop" < (Don Harrop)
Date: Tue, 26 Sep 100 12:56:48 EST
Subject: Samba with NT
Message-ID: <>

I've got mixed Linux and NT and 95 boxen and haven't had a problem since I learned how to seutp the smb.conf file correctly. I can connect from any one to any other too. I've even got a bounce share. NT connecting to a smb share that is connected to another NT share. Make sure you double check all your permissions!

Don

>I have the same problem. I have a NT and 95 box. the 95 can connect and see the shares just
fine but NT doesn't see it. Since it's not a big problem I haven't bothered to dig into it.


>
>
> I have Samba running at home with my 9.x boxes. I am trying to get it to run
> with an NT box now. I am not able to access the shared directories of the
> Linux box on the NT box. I have 9.x here at work to test with. Has anyone
> had a problem with Samba with NT boxes?
>
> Thank You,
>
> David Demland
> Qa/Testing Manager
> CADTEL Systems, Inc.
> 11201 N. Tatum Ste. 200
> Phoenix, AZ 85028
> (602) 953-4888
> Fax: (602) 953-4833
>
>
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
>
> Plug-discuss mailing list -
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>


________________________________________________
See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.

Plug-discuss mailing list -
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



This message was posted to the following mailing lists:
Plug Discuss
Mailing List Info | Nearby Messages		<-how to get linux MBRinit.d startup scripts.->
Some Mailing List Archive administrated by UnconfiguredLurker (version 2.3)