[CentOS] Strange unexplainable CUPS problem after upgrade to 5.10

Sun Nov 10 16:01:13 UTC 2013
Robert Heller <heller at deepsoft.com>

I manage a bunch of workstations at the Wendell Free Library.  They are all 
diskless, boot via PXE and mount all of their file systems via NFS from a 
server.  All of the machines are 32-bit and run CentOS (fully up-to-date 
running 5.10).  There are two printers with queues managed on the server.  The 
server 'shares' these printers on the local LAN (eg with all of the 
workstations).  After the upgrade to 5.10, *one* of the machine no longer sees 
the printers.  *Nothing* is different about its configuration files, since 
these files are mounted via NFS from the server, *like all of the other 
workstations*.  The other workstations all see the printers shared by the 
server. I don't understand what is going on here. And cannot find the problem.

lpstat -t on the server yields:

scheduler is running
system default destination: BlackandWhiteLaserjet
device for BlackandWhiteLaserjet: socket://192.168.1.246:9100
device for Officejet_Color: socket://192.168.1.253
BlackandWhiteLaserjet accepting requests since Tue 19 Jun 2012 03:27:17 PM EDT
Officejet_Color accepting requests since Tue 24 Jul 2012 04:43:33 PM EDT
printer BlackandWhiteLaserjet is idle.  enabled since Tue 19 Jun 2012 03:27:17 PM EDT
printer Officejet_Color is idle.  enabled since Tue 24 Jul 2012 04:43:33 PM EDT

lpstat -t on the bum workstation yields:

lpstat: No destinations added.
lpstat: No destinations added.
lpstat: No destinations added.
lpstat: No destinations added.
scheduler is running
no system default destination

and lpstat -t on a working workstation yields:

scheduler is running
system default destination: BlackandWhiteLaserjet
device for BlackandWhiteLaserjet: ipp://192.168.1.254:631/printers/BlackandWhiteLaserjet
device for Officejet_Color: ipp://192.168.1.254:631/printers/Officejet_Color
BlackandWhiteLaserjet accepting requests since Sun 10 Nov 2013 10:26:03 AM EST
Officejet_Color accepting requests since Sun 10 Nov 2013 10:26:04 AM EST
printer BlackandWhiteLaserjet is idle.  enabled since Sun 10 Nov 2013 10:26:03 AM EST
printer Officejet_Color is idle.  enabled since Sun 10 Nov 2013 10:26:04 AM EST

The server's /etc/cups/cupsd.conf looks like this:

LogLevel debug2
SystemGroup sys root admin
# Allow remote access
Port 631
Listen /var/run/cups/cups.sock
# Enable printer sharing and shared printers.
Browsing On
BrowseOrder allow,deny
# (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.)
BrowseAllow @LOCAL
BrowseAddress @LOCAL
DefaultAuthType Basic
<Location />
  # Allow shared printing and remote administration...
  Order allow,deny
  Allow all
</Location>
<Location /admin>
  Allow from localhost
  Allow from 192.168.1.27
  Allow from 192.168.1.28
  Allow from 192.168.1.29
  Allow from 192.168.1.5
  # Allow remote administration...
  Order allow,deny
  Allow all
</Location>
<Location /admin/conf>
  AuthType Basic
  Require user @SYSTEM
  Allow localhost
  # Allow remote access to the configuration files...
  Order allow,deny
  Allow all
</Location>
<Policy default>
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
    AuthType Basic
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  <Limit CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>
  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

and the cupsd.conf (shared by ALL of the workstations) looks like this:

#
# "$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $"
#
#   Sample configuration file for the Common UNIX Printing System (CUPS)
#   scheduler.  See "man cupsd.conf" for a complete description of this
#   file.
#
MaxLogSize 2000000000

# Log general information in error_log - change "info" to "debug" for
# troubleshooting...
LogLevel debug

# Administrator user group...
SystemGroup sys root


# Allow remote access
Port 631
Listen /var/run/cups/cups.sock
# Only listen for connections from the local machine.
#Listen localhost:631
#Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
# (Change '@LOCAL' to 'ALL' if using directed broadcasts from another subnet.)
BrowseAllow @LOCAL
BrowseAllow 192.168.1.27
BrowseAllow 192.168.1.28
BrowseAllow 192.168.1.29
BrowseAllow 192.168.1.5
BrowseAllow 192.168.1.254
BrowseAllow 10.163.1
BrowseAddress @LOCAL
 
# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Restrict access to the server...
<Location />
  Order allow,deny
  Allow localhost
  Allow from 192.168.1.27
  Allow from 192.168.1.28
  Allow from 192.168.1.29
  Allow from 192.168.1.5 
  Allow from 192.168.1.254
  Allow from 10.163.1

</Location>

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
  Allow localhost
  Allow from 192.168.1.27
  Allow from 192.168.1.28
  Allow from 192.168.1.29
  Allow from 192.168.1.5 
  Allow from 192.168.1.254
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

# Set the default printer/job policies...
<Policy default>
  # Job-related operations must be done by the owner or an administrator...
  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

#
# End of "$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $".
#


-- 
Robert Heller             -- 978-544-6933 / heller at deepsoft.com
Deepwoods Software        -- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments