I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
B.J.
[root@office bmcclure]# ssh 192.168.2.200 root@192.168.2.200's password: Last login: Sat Feb 21 17:39:51 2009 [root@fileserver ~]# nmap -sT -p 631 -PT 192.168.2.200
Starting Nmap 4.20 ( http://insecure.org ) at 2009-03-02 11:00 EST Interesting ports on 192.168.2.200: PORT STATE SERVICE 631/tcp open ipp
Nmap finished: 1 IP address (1 host up) scanned in 0.121 seconds [root@fileserver ~]# nmap -sT -p 631 -PT 192.168.2.205
Starting Nmap 4.20 ( http://insecure.org ) at 2009-03-02 11:01 EST Interesting ports on 192.168.2.205: PORT STATE SERVICE 631/tcp closed ipp MAC Address: 00:17:31:EC:0B:2D (Asustek Computer)
Nmap finished: 1 IP address (1 host up) scanned in 0.185 seconds [root@fileserver ~]# exit logout
Connection to 192.168.2.200 closed. [root@office bmcclure]# ssh 192.168.2.205 root@192.168.2.205's password: Last login: Mon Mar 2 06:52:36 2009 from house.keepertoad.com [root@webserver ~]# service iptables stop [root@webserver ~]# service ip6tables stop [root@webserver ~]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination
Chain FORWARD (policy ACCEPT) target prot opt source destination
Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@webserver ~]# ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination
Chain FORWARD (policy ACCEPT) target prot opt source destination
Chain OUTPUT (policy ACCEPT) target prot opt source destination [root@webserver ~]# nmap -sT -p 631 -PT 127.0.0.1
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:03 EST Interesting ports on localhost (127.0.0.1): PORT STATE SERVICE 631/tcp closed ipp
Nmap finished: 1 IP address (1 host up) scanned in 0.031 seconds [root@webserver ~]# service cups status cupsd (pid 6941) is running... [root@webserver ~]# nmap -sT -F -PT 127.0.0.1
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:09 EST Interesting ports on localhost (127.0.0.1): Not shown: 1233 closed ports PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 111/tcp open rpcbind 443/tcp open https 636/tcp open ldapssl 2049/tcp open nfs
Nmap finished: 1 IP address (1 host up) scanned in 0.077 seconds
[root@webserver ~]#
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 10:54:59 up 17:48, 1 user, load average: 0.34, 0.23, 0.09
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
JohnStanley
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
10.40.90.14 is my IP address [roger@rwells-rh legacydp]$ nmap -sT -p 631 -PT 10.40.90.14
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:34 EST Interesting ports on rwells-rh (10.40.90.14): PORT STATE SERVICE 631/tcp closed ipp
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:47 EST Interesting ports on localhost.localdomain (127.0.0.1): PORT STATE SERVICE 631/tcp open ipp
Nmap finished: 1 IP address (1 host up) scanned in 0.017 seconds
I hope that there are some clues here
JohnStanley
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
It is configured by default to it has to be changed
See below working config. You will need to have iptables to allow access from remote connections. /etc cups and hp dirs. cupsd.conf:
MaxLogSize 2000000000 # Show general information in error_log. LogLevel info SystemGroup sys root # Allow remote access Port 631 Listen /var/run/cups/cups.sock # Enable printer sharing and shared printers. Browsing On BrowseOrder allow,deny # (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.) BrowseAllow @LOCAL BrowseAddress @LOCAL DefaultAuthType Basic ------ hplip.conf:
# hplip.conf
[hpiod] # port=0 (dynamic IP port) port=2208 [hpssd] # port=0 (dynamic IP port) port=2207
[hplip] version=1.7.2 jdprobe=0
Iptables needs: -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
On Mon, 2009-03-02 at 12:27 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
It is configured by default to it has to be changed
See below working config. You will need to have iptables to allow access from remote connections. /etc cups and hp dirs. cupsd.conf:
MaxLogSize 2000000000 # Show general information in error_log. LogLevel info SystemGroup sys root # Allow remote access Port 631 Listen /var/run/cups/cups.sock # Enable printer sharing and shared printers. Browsing On BrowseOrder allow,deny # (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.) BrowseAllow @LOCAL BrowseAddress @LOCAL DefaultAuthType Basic
hplip.conf:
# hplip.conf
[hpiod] # port=0 (dynamic IP port) port=2208 [hpssd] # port=0 (dynamic IP port) port=2207
[hplip] version=1.7.2 jdprobe=0
Iptables needs: -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
My config files agree with yours except hplip is version 1.6.7.
Firewall is completely down, i.e., iptables and ip6tables are stopped.
Thanks for the input. B.J.
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 12:37:10 up 19:31, 3 users, load average: 0.06, 0.07, 0.02
On Mon, 2009-03-02 at 12:43 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 12:27 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
It is configured by default to it has to be changed
See below working config. You will need to have iptables to allow access from remote connections. /etc cups and hp dirs. cupsd.conf:
MaxLogSize 2000000000 # Show general information in error_log. LogLevel info SystemGroup sys root # Allow remote access Port 631 Listen /var/run/cups/cups.sock # Enable printer sharing and shared printers. Browsing On BrowseOrder allow,deny # (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.) BrowseAllow @LOCAL BrowseAddress @LOCAL DefaultAuthType Basic
hplip.conf:
# hplip.conf
[hpiod] # port=0 (dynamic IP port) port=2208 [hpssd] # port=0 (dynamic IP port) port=2207
[hplip] version=1.7.2 jdprobe=0
Iptables needs: -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
My config files agree with yours except hplip is version 1.6.7.
Ok the version I have running is directly from the hplip website. It is not the CentOS Distro version. This actually brings up something of which I really believe that upstream has modified the code (backports etc). What is extremly strange is that I could not get any HP printers to function correctly with the hplip rpm from Upstream. So what I done was down load the binary from HP, thus far I have not have any problems. There is a newer version on the site than I have running. Why I don't have the newest is, for some strange reason it does not want to work right. http://hplipopensource.com/hplip-web/index.html You can try this but it want solve the your current problem of knowing why it want work. Ultimately file a bug report as both of you are having the same problem and none seems to have an answer.
Firewall is completely down, i.e., iptables and ip6tables are stopped.
OK i see now
JohnStanley
On Mon, 2009-03-02 at 13:06 -0500, JohnS wrote:
On Mon, 2009-03-02 at 12:43 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 12:27 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
It is configured by default to it has to be changed
See below working config. You will need to have iptables to allow access from remote connections. /etc cups and hp dirs. cupsd.conf:
MaxLogSize 2000000000 # Show general information in error_log. LogLevel info SystemGroup sys root # Allow remote access Port 631 Listen /var/run/cups/cups.sock # Enable printer sharing and shared printers. Browsing On BrowseOrder allow,deny # (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.) BrowseAllow @LOCAL BrowseAddress @LOCAL DefaultAuthType Basic
hplip.conf:
# hplip.conf
[hpiod] # port=0 (dynamic IP port) port=2208 [hpssd] # port=0 (dynamic IP port) port=2207
[hplip] version=1.7.2 jdprobe=0
Iptables needs: -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
My config files agree with yours except hplip is version 1.6.7.
Ok the version I have running is directly from the hplip website. It is not the CentOS Distro version. This actually brings up something of which I really believe that upstream has modified the code (backports etc). What is extremly strange is that I could not get any HP printers to function correctly with the hplip rpm from Upstream. So what I done was down load the binary from HP, thus far I have not have any problems. There is a newer version on the site than I have running. Why I don't have the newest is, for some strange reason it does not want to work right. http://hplipopensource.com/hplip-web/index.html You can try this but it want solve the your current problem of knowing why it want work. Ultimately file a bug report as both of you are having the same problem and none seems to have an answer.
I just called and had the printer (hplaserjet 1300) reconnected to the old server and it works fine with hplip ver. 1.6.7 so I don't think it's hplip. Both machines are identical except for motherboard, ram and drives, none of which should be in the picture here AFAIK. Even had the cat5 cable switched between the two boxes with no change. Don't think I have ever seen a port closed with the firewall down and a service running on it before. You may be right, it may be a bug but I've done this so many times on centos 5 without this issue. Thanks for all your help. I'll keep plugging at it and if all else fails try another install.
Firewall is completely down, i.e., iptables and ip6tables are stopped.
OK i see now
JohnStanley
B.J.
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 13:13:37 up 20:07, 3 users, load average: 0.44, 0.48, 0.34
On Mon, 2009-03-02 at 13:21 -0500, b.j. mcclure wrote:
Ok the version I have running is directly from the hplip website. It is not the CentOS Distro version. This actually brings up something of which I really believe that upstream has modified the code (backports etc). What is extremly strange is that I could not get any HP printers to function correctly with the hplip rpm from Upstream. So what I done was down load the binary from HP, thus far I have not have any problems. There is a newer version on the site than I have running. Why I don't have the newest is, for some strange reason it does not want to work right. http://hplipopensource.com/hplip-web/index.html You can try this but it want solve the your current problem of knowing why it want work. Ultimately file a bug report as both of you are having the same problem and none seems to have an answer.
I just called and had the printer (hplaserjet 1300) reconnected to the old server and it works fine with hplip ver. 1.6.7 so I don't think it's hplip. Both machines are identical except for motherboard, ram and drives, none of which should be in the picture here AFAIK. Even had the cat5 cable switched between the two boxes with no change. Don't think I have ever seen a port closed with the firewall down and a service running on it before. You may be right, it may be a bug but I've done this so many times on centos 5 without this issue. Thanks for all your help. I'll keep plugging at it and if all else fails try another install.
Just for kicks have you tried to restart the services? Now that I read in a bug report that for the ipp port to open up cups had to be restarted. That was on like cups 1.2 or 1.4 I believe but should not affect you. Last thing that comes to mind is possibly a previous admin black listed that port 631.
JohnStanley
On Mon, 2009-03-02 at 13:21 -0500, b.j. mcclure wrote:
http://worldforum.pardus-linux.nl/index.php?topic=1932.0 Is related to both of you.
http://www.linuxprinting.org/~till/printing-tutorial/tut.html#1_3 Cups basic config for netowrked printing.
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
10.40.90.14 is my IP address [roger@rwells-rh legacydp]$ nmap -sT -p 631 -PT 10.40.90.14
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:34 EST Interesting ports on rwells-rh (10.40.90.14): PORT STATE SERVICE 631/tcp closed ipp
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:47 EST Interesting ports on localhost.localdomain (127.0.0.1): PORT STATE SERVICE 631/tcp open ipp
Nmap finished: 1 IP address (1 host up) scanned in 0.017 seconds
I hope that there are some clues here
JohnStanley
In my situation I ran nmap from the effected box via ssh, i.e., on the box in question and 631 was still closed. If it had been open locally but closed remotely I would have suspected a router/switch issue.
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 12:23:44 up 19:17, 2 users, load average: 0.04, 0.02, 0.00
On Mon, 2009-03-02 at 12:28 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 11:50 -0500, Roger Wells wrote:
JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
I don't have an answer but I have to believe that your problem is related to mine (thread: cups & hp-toolbox) my machine: Linux rwells-rh 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux [root@rwells-rh legacydp]# /sbin/service hplip status hpiod (pid 6422) is running... hpssd (pid 6427) is running...
[root@rwells-rh legacydp]# /sbin/service cups status cupsd (pid 6453) is running...
10.40.90.14 is my IP address [roger@rwells-rh legacydp]$ nmap -sT -p 631 -PT 10.40.90.14
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:34 EST Interesting ports on rwells-rh (10.40.90.14): PORT STATE SERVICE 631/tcp closed ipp
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-03-02 11:47 EST Interesting ports on localhost.localdomain (127.0.0.1): PORT STATE SERVICE 631/tcp open ipp
Nmap finished: 1 IP address (1 host up) scanned in 0.017 seconds
I hope that there are some clues here
JohnStanley
This post was for you also: http://lists.centos.org/pipermail/centos/2009-March/072868.html
JohnStanley
On Mon, 2009-03-02 at 11:37 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
JohnStanley
Yes. See output in original post. Thanks.
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 12:20:30 up 19:14, 2 users, load average: 0.01, 0.01, 0.00
On Mon, 2009-03-02 at 12:21 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 11:37 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:20 -0500, b.j. mcclure wrote:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Do you have the Cups Service running? service cups status and service hplip status.
JohnStanley
Yes. See output in original post. Thanks.
I'm blind sometimes. Did you check the configuration file?: http://lists.centos.org/pipermail/centos/2009-March/072868.html
JohnStanley
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Qouted by me earlier:
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
"""It is configured by default to it has to be changed""" # Maybe they did not understand my wording of it? Should have said It has to be changed for networking. Posted a working networkable config also and linked the cups site also JohnStanley
on 3-2-2009 11:22 AM JohnS spake the following:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Qouted by me earlier:
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
"""It is configured by default to it has to be changed""" # Maybe they did not understand my wording of it? Should have said It has to be changed for networking. Posted a working networkable config also and linked the cups site also JohnStanley
Yeah... I saw your postings, but they were further down the thread as I was catching up this morning. Unfortunately, I had already sent my "2 cents" before I got down that far.
On Mon, 2009-03-02 at 11:56 -0800, Scott Silva wrote:
on 3-2-2009 11:22 AM JohnS spake the following:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Qouted by me earlier:
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
"""It is configured by default to it has to be changed""" # Maybe they did not understand my wording of it? Should have said It has to be changed for networking. Posted a working networkable config also and linked the cups site also JohnStanley
Yeah... I saw your postings, but they were further down the thread as I was catching up this morning. Unfortunately, I had already sent my "2 cents" before I got down that far.
No Problem :-)
On Mon, 2009-03-02 at 14:22 -0500, JohnS wrote:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Qouted by me earlier:
Interesting that when the local host address is used the port is open: [root@rwells-rh legacydp]# nmap -sT -p 631 -PT 127.0.0.1
"""It is configured by default to it has to be changed""" # Maybe they did not understand my wording of it? Should have said It has to be changed for networking. Posted a working networkable config also and linked the cups site also JohnStanley
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Thanks, B.J. CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 15:26:24 up 22:20, 4 users, load average: 0.10, 0.08, 0.03
On Mon, 2009-03-02 at 15:46 -0500, b.j. mcclure wrote:
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Correct
Lets get something straight. You "B.J" are using a machine to be a spooler for clients? 2 machines exactly? 2 machines acting as Spooler Servers? Correct? The main issue is Clients can not see (connect) to the machine because no open port. 1. Can the spooler machine in question print locally? 2. Whats the RPM version for cups
JohnStanley
On Mon, 2009-03-02 at 16:23 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:46 -0500, b.j. mcclure wrote:
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Correct
Lets get something straight. You "B.J" are using a machine to be a spooler for clients? 2 machines exactly? 2 machines acting as Spooler Servers? Correct? The main issue is Clients can not see (connect) to the machine because no open port.
- Can the spooler machine in question print locally?
- Whats the RPM version for cups
JohnStanley
Sorry for the confusion. I am replacing a box that acts as a print server for a LAN consisting of 11 machines, all running centos 5.2, and occasionally a lappie or two thrown in. The new box is/was the machine I had the issue on. It now appears to be "solved" after I scp'd the config file over for the second time. Not sure what I clutzed up the first time but the config file was apparently the issue. Since I overwrote the offending config file I have no way of knowing what the difference was. Looking at the working config file it appears to me to be box stock, as was the non-working one.
Thanks much for all the help and my apologies for being a bit pig-headed about the config file.
Cheers, B.J.
CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 16:33:09 up 23:27, 1 user, load average: 0.04, 0.09, 0.08
On Mon, 2009-03-02 at 16:44 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 16:23 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:46 -0500, b.j. mcclure wrote:
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Correct
Lets get something straight. You "B.J" are using a machine to be a spooler for clients? 2 machines exactly? 2 machines acting as Spooler Servers? Correct? The main issue is Clients can not see (connect) to the machine because no open port.
- Can the spooler machine in question print locally?
- Whats the RPM version for cups
JohnStanley
Sorry for the confusion. I am replacing a box that acts as a print server for a LAN consisting of 11 machines, all running centos 5.2, and occasionally a lappie or two thrown in. The new box is/was the machine I had the issue on. It now appears to be "solved" after I scp'd the config file over for the second time. Not sure what I clutzed up the first time but the config file was apparently the issue. Since I overwrote the offending config file I have no way of knowing what the difference was. Looking at the working config file it appears to me to be box stock, as was the non-working one.
Thanks much for all the help and my apologies for being a bit pig-headed about the config file.
Yea your a Pig Head because I wanted to see the original config file. Something had to be different. Next time use a tool called diff or zdiff. Ok I guess your not a Pig Head:-)
Just think you could have solved it today at 1:21PM EST! :-) Since it is working I have some huge PDFs that need printing. Where do I submit them?
JohnSanley
On Mon, 2009-03-02 at 16:58 -0500, JohnS wrote:
On Mon, 2009-03-02 at 16:44 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 16:23 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:46 -0500, b.j. mcclure wrote:
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Correct
Lets get something straight. You "B.J" are using a machine to be a spooler for clients? 2 machines exactly? 2 machines acting as Spooler Servers? Correct? The main issue is Clients can not see (connect) to the machine because no open port.
- Can the spooler machine in question print locally?
- Whats the RPM version for cups
JohnStanley
Sorry for the confusion. I am replacing a box that acts as a print server for a LAN consisting of 11 machines, all running centos 5.2, and occasionally a lappie or two thrown in. The new box is/was the machine I had the issue on. It now appears to be "solved" after I scp'd the config file over for the second time. Not sure what I clutzed up the first time but the config file was apparently the issue. Since I overwrote the offending config file I have no way of knowing what the difference was. Looking at the working config file it appears to me to be box stock, as was the non-working one.
Thanks much for all the help and my apologies for being a bit pig-headed about the config file.
Yea your a Pig Head because I wanted to see the original config file. Something had to be different. Next time use a tool called diff or zdiff. Ok I guess your not a Pig Head:-)
Yep, familiar with diff.
Just think you could have solved it today at 1:21PM EST! :-) Since it is working I have some huge PDFs that need printing. Where do I submit them?
Ha! I'm only the grunt here. Best I can do is send you a marker for a cool one.
JohnSanley
B.J. CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 17:08:50 up 1 day, 2 min, 1 user, load average: 0.07, 0.05, 0.01
On Mon, 2009-03-02 at 17:15 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 16:58 -0500, JohnS wrote:
On Mon, 2009-03-02 at 16:44 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 16:23 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:46 -0500, b.j. mcclure wrote:
I think the first problem is we have somehow merged two threads. The first was Mr. Wells issue which is different from mine. His port 631 is "open" when nmap is run from localhost but not when run against the IP. My port 631 is closed regardless of whether it is run from localhost or remotely against the IP. My cupsd.conf works. An identical machine co-located has an identical cupsd.conf and shares the same printer nicely on the same LAN. The same nmap configuration run against that machine shows port 631 open in both above cases. My conclusion, FWIW, is that it is not a cups config issue but a port issue.
Also, the cups site link confirms that @LOCAL means local network which is all I'm looking for. The laserjet 1300 has been supported for at least a few years now.
Correct
Lets get something straight. You "B.J" are using a machine to be a spooler for clients? 2 machines exactly? 2 machines acting as Spooler Servers? Correct? The main issue is Clients can not see (connect) to the machine because no open port.
- Can the spooler machine in question print locally?
- Whats the RPM version for cups
JohnStanley
Sorry for the confusion. I am replacing a box that acts as a print server for a LAN consisting of 11 machines, all running centos 5.2, and occasionally a lappie or two thrown in. The new box is/was the machine I had the issue on. It now appears to be "solved" after I scp'd the config file over for the second time. Not sure what I clutzed up the first time but the config file was apparently the issue. Since I overwrote the offending config file I have no way of knowing what the difference was. Looking at the working config file it appears to me to be box stock, as was the non-working one.
Thanks much for all the help and my apologies for being a bit pig-headed about the config file.
Yea your a Pig Head because I wanted to see the original config file. Something had to be different. Next time use a tool called diff or zdiff. Ok I guess your not a Pig Head:-)
Yep, familiar with diff.
Just think you could have solved it today at 1:21PM EST! :-) Since it is working I have some huge PDFs that need printing. Where do I submit them?
Ha! I'm only the grunt here. Best I can do is send you a marker for a cool one.
OK, I don't forget...Good Luck
JohnStanley
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Perhaps I misunderstand your suggestion but cupsd.conf is identical for the machine that works properly and the one upon which I cannot get port 631 open, even on localhost.
Thanks, B.J. CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 15:07:43 up 22:01, 4 users, load average: 0.14, 0.09, 0.02
On Mon, 2009-03-02 at 15:13 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Perhaps I misunderstand your suggestion but cupsd.conf is identical for the machine that works properly and the one upon which I cannot get port 631 open, even on localhost.
Try this: netstat -n -l -p | grep 631 Maybe a another process has it but I think you did say it did not come up with nmap? Last option I know to check would be to see if it has a socket file in /var/run/cups. It needs that before it will listen on port 631.
I've herd many people say the config is the same as the machine but why not just take it and try it on the one that want work, then service cups restart. Remember something there are no two machines ever alike!
JohnStanley
On Mon, 2009-03-02 at 15:31 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:13 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Perhaps I misunderstand your suggestion but cupsd.conf is identical for the machine that works properly and the one upon which I cannot get port 631 open, even on localhost.
Try this: netstat -n -l -p | grep 631 Maybe a another process has it but I think you did say it did not come up with nmap? Last option I know to check would be to see if it has a socket file in /var/run/cups. It needs that before it will listen on port 631.
Thanks for the suggestions.
[root@webserver ~]# netstat -n -l -p | grep 631 tcp 0 0 ::1:631 :::* LISTEN 6941/cupsd udp 0 0 0.0.0.0:631 0.0.0.0:* 6941/cupsd
Looks like cups has it and cups.sock does exist in /var/run/cups.
[root@webserver ~]# ls /var/run/cups certs cups.sock
I've herd many people say the config is the same as the machine but why not just take it and try it on the one that want work, then service cups restart. Remember something there are no two machines ever alike!
Of course you are right about no two machines being identical. I did as requested and copied the working config file to the non working box with no change. Port 631 still closed. I also ran nmap against the apparently closed port with the -P0 option and it shows "closed" as distinguished from filtered.
Thanks for the suggestions. B.J. CentOS 5.2, Linux 2.6.18-92.1.22.el5 x86_64 15:46:14 up 22:40, 4 users, load average: 0.09, 0.07, 0.06
On Mon, 2009-03-02 at 16:00 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 15:31 -0500, JohnS wrote:
On Mon, 2009-03-02 at 15:13 -0500, b.j. mcclure wrote:
On Mon, 2009-03-02 at 11:14 -0800, Scott Silva wrote:
on 3-2-2009 8:20 AM b.j. mcclure spake the following:
I have been trying to set up printer sharing on the LAN.All machines are CentOS 5.2 fully updated. The problem server is a fresh build. The box it is replacing worked fine for many months. The problem appears to be a closed port 631 on the new box. iptables and ip6tables are stopped as shown by the output below. To confirm I was using nmap correctly I ran it against the old server first which shows 631 open. No matter what I do to the new box (192.168.2.205) 631 remains closed. I was running it on the new box via ssh which I think eleminates any swithc/router issues.
Any thoughts gladly accepted. This must be something simple/stupid I have overlooked. Not much hair left to pull out. ;-/
Cups defaults to only being open on localhost. You have to edit the config file to open more up.
Perhaps I misunderstand your suggestion but cupsd.conf is identical for the machine that works properly and the one upon which I cannot get port 631 open, even on localhost.
Try this: netstat -n -l -p | grep 631 Maybe a another process has it but I think you did say it did not come up with nmap? Last option I know to check would be to see if it has a socket file in /var/run/cups. It needs that before it will listen on port 631.
Thanks for the suggestions.
[root@webserver ~]# netstat -n -l -p | grep 631 tcp 0 0 ::1:631 :::* LISTEN 6941/cupsd udp 0 0 0.0.0.0:631 0.0.0.0:* 6941/cupsd
That's hard to understand because its there.
Looks like cups has it and cups.sock does exist in /var/run/cups.
[root@webserver ~]# ls /var/run/cups certs cups.sock
I've herd many people say the config is the same as the machine but why not just take it and try it on the one that want work, then service cups restart. Remember something there are no two machines ever alike!
Of course you are right about no two machines being identical. I did as requested and copied the working config file to the non working box with no change. Port 631 still closed. I also ran nmap against the apparently closed port with the -P0 option and it shows "closed" as distinguished from filtered.
Shut down SE Linux. or put it in Permissive mode. Netstat shows it is there but something is a killing it. There seems to be Hundreds of posts pertaining to your problem. Going back all the way to 2003. Also there is reports in redhat bugzilla some solved and some not.
JohnStanley