Bug#703424: Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
Control: tags -moreinfo +fixed Initial tests of cups 1.6.2 indicate that this bug is fixed, and that Kerberos authentication now works properly. I will reopen this report if any glitches are noted during testing over the next few weeks. Thanks! -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#703424: Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
Control: tags -1 +moreinfo Hi Timothy, and thanks for your bugreport, Le mardi, 19 mars 2013 14.32:33, Timothy Pearson a écrit : When using the Web interface to CUPS in a Kerberized environment, CUPS fails to pass Kerberos authentication information to the local IPP socket. This manifests as access being denied to any pages which access printer information, even though the user logged in via Kerberos has been granted access to both the pages and printers in question. The CUPS error log shows that it has rejected unauthenticated access to the printers in question, even though the prior access to the Web printer list page was successfully authenticated. This appears to be a regression introduced when resolving Bug 640939, specifically this patch removes the ability for CUPS to pass Kerberos login credentials to the local IPP socket: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=105;filename=cups-1.5.3-2. 14-nmu.diff;att=1;bug=640939 Can you confirm that this still applies to CUPS 1.6.2 (as uploaded to unstable)? Thanks in advance, cheers, OdyX -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#703424: Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
Control: tags -1 +moreinfo Hi Timothy, and thanks for your bugreport, Can you confirm that this still applies to CUPS 1.6.2 (as uploaded to unstable)? Thanks in advance, cheers, OdyX I will see what I can do in the next couple of weeks. The machine in question is slated for deployment to production, so I will probably need to test on a clone (thus the delay). Tim -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#703424: Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
Package: cups Version: 1.5.3-2.16 When using the Web interface to CUPS in a Kerberized environment, CUPS fails to pass Kerberos authentication information to the local IPP socket. This manifests as access being denied to any pages which access printer information, even though the user logged in via Kerberos has been granted access to both the pages and printers in question. The CUPS error log shows that it has rejected unauthenticated access to the printers in question, even though the prior access to the Web printer list page was successfully authenticated. This appears to be a regression introduced when resolving Bug 640939, specifically this patch removes the ability for CUPS to pass Kerberos login credentials to the local IPP socket: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=105;filename=cups-1.5.3-2.14-nmu.diff;att=1;bug=640939 Unfortunately, simply reverting that patch introduces another problem, specifically an inability to access any administrative pages and this line appearing in the error log: [CGI] cgi_passwd(prompt=Password for lp on localhost? ) called! Therefore, it would seem that a more selective approach to passing the Kerberos credentials to the local IPP socket is in order. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
