[Desktop-packages] [Bug 1849346] Re: [snap] kerberos GSSAPI no longer works after deb->snap transition
If you force people into a snap package at least there should be no loss in functionality. I have linked the snapd project so maybe someone from there could have a look. ** Also affects: snapd Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1849346 Title: [snap] kerberos GSSAPI no longer works after deb->snap transition Status in Mozilla Firefox: New Status in snapd: New Status in chromium-browser package in Ubuntu: Triaged Status in firefox package in Ubuntu: Triaged Bug description: I configure AuthServerWhitelist as documented: https://www.chromium.org/developers/design-documents/http- authentication and can see my whitelisted domains in chrome://policy/ but websites that used to work with SPNEGO/GSSAPI/kerberos no longer work. I'm guessing the snap needs some sort of permission to use the kerberos ticket cache (or the plumbing to do so doesn't exist...). I can confirm that Chrome has the desired behavior. To manage notifications about this bug go to: https://bugs.launchpad.net/firefox/+bug/1849346/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 788167] Re: CUPS cannot print to Kerberos-authenticated SMB print queue
Still not possible to print to via SMB shared printer with kerberos authentication. "No valid Kerberos credential cache found!" Ubuntu 20.04.3 Cups 2.3.1 smbclient 4.11.6-Ubuntu -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/788167 Title: CUPS cannot print to Kerberos-authenticated SMB print queue Status in cups package in Ubuntu: Confirmed Status in Debian: Fix Released Bug description: Binary package hint: cups That was investigated on maverick (cups 1.4.4) and natty (cups 1.4.6). CUPS in Ubuntu cannot authenticate using Kerberos to an SMB print queue, such as one in an Active Directory. This is because the smb backend is being invoked as user lp, and this user cannot access the Kerberos credential cache of the user who submitted the job. When trying to print, the job is held for authentication, and a dialog prompting for username/password is being shown. On Windows (and possibly other OS), the user would not be prompted if he has a ticket in the Kerberos realm (ie, "logged on to the domain") he is trying to print to. The CUPS smb backend on Ubuntu is the smbspool binary provided by Samba. When run as a user, it will pick the Kerberos credential cache by itself and authenticate seamlessly. Otherwise, it will read the KRB5CCNAME environment variable and try to use that when possible. There is two possible solutions to that: - Invoke the smb backend as root and pass it the KRB5CCNAME environment variable pointing to the user's Kerberos credential cache. CUPS execute the backend as user lp if it is world-executable, which is currently the case on Ubuntu. User lp do not have the permission to read the user's credential cache, hence why the smb backend would need to be executed as root (by removing the world-executable bit). Also, CUPS does not currently set KRB5CCNAME before invoking the smb backend (see http://www.cups.org/str.php?L3847). - Execute smbspool as the user submitting the job. I presume we would have the same problem with other backend that would do Kerberos authentication, although I do not know of a specific one. I have only tested and investigated with the smb backend. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups/+bug/788167/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1828401] Re: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks cups printing of pdf
Thanks guys! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups-filters in Ubuntu. https://bugs.launchpad.net/bugs/1828401 Title: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks cups printing of pdf Status in cups-filters package in Ubuntu: Fix Released Status in cups-filters source package in Xenial: Fix Released Status in cups-filters source package in Bionic: Fix Released Status in cups-filters source package in Cosmic: Fix Released Bug description: Distributor ID: Ubuntu Description: Ubuntu 18.04.2 LTS Release: 18.04 Codename: bionic PROBLEM: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks printing pdf on cups error in cups logs: ... D [09/May/2019:13:44:33 +0200] [Job 68] GPL Ghostscript 9.26: Unrecoverable error, exit code 1 D [09/May/2019:13:44:33 +0200] [Job 68] Process is dying with \"Unable to determine number of pages, page count: -1 D [09/May/2019:13:44:33 +0200] [Job 68] \", exit stat 3 ... details of this bug here: https://bugs.archlinux.org/task/62251 POSSIBLE SOLUTION: release an update of cups-filters to 1.22.5 WORKAROUND: downgrade ghostscript to 9.22~dfsg+1-0ubuntu1 sudo apt install ghostscript=9.22~dfsg+1-0ubuntu1 libgs9=9.22~dfsg+1-0ubuntu1 libgs9-common=9.22~dfsg+1-0ubuntu1 ghostscript-x=9.22~dfsg+1-0ubuntu1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1828401/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1828401] [NEW] 9.26~dfsg+0-0ubuntu0.18.04.9 breaks cups printing of pdf
Public bug reported: Distributor ID: Ubuntu Description:Ubuntu 18.04.2 LTS Release:18.04 Codename: bionic PROBLEM: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks printing pdf on cups error in cups logs: ... D [09/May/2019:13:44:33 +0200] [Job 68] GPL Ghostscript 9.26: Unrecoverable error, exit code 1 D [09/May/2019:13:44:33 +0200] [Job 68] Process is dying with \"Unable to determine number of pages, page count: -1 D [09/May/2019:13:44:33 +0200] [Job 68] \", exit stat 3 ... details of this bug here: https://bugs.archlinux.org/task/62251 POSSIBLE SOLUTION: release an update of cups-filters to 1.22.5 WORKAROUND: downgrade ghostscript to 9.22~dfsg+1-0ubuntu1 sudo apt install ghostscript=9.22~dfsg+1-0ubuntu1 libgs9=9.22~dfsg+1-0ubuntu1 libgs9-common=9.22~dfsg+1-0ubuntu1 ghostscript-x=9.22~dfsg+1-0ubuntu1 ** Affects: ghostscript (Ubuntu) Importance: Undecided Status: New ** Tags: cups-filters ghostscript -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to ghostscript in Ubuntu. https://bugs.launchpad.net/bugs/1828401 Title: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks cups printing of pdf Status in ghostscript package in Ubuntu: New Bug description: Distributor ID: Ubuntu Description: Ubuntu 18.04.2 LTS Release: 18.04 Codename: bionic PROBLEM: 9.26~dfsg+0-0ubuntu0.18.04.9 breaks printing pdf on cups error in cups logs: ... D [09/May/2019:13:44:33 +0200] [Job 68] GPL Ghostscript 9.26: Unrecoverable error, exit code 1 D [09/May/2019:13:44:33 +0200] [Job 68] Process is dying with \"Unable to determine number of pages, page count: -1 D [09/May/2019:13:44:33 +0200] [Job 68] \", exit stat 3 ... details of this bug here: https://bugs.archlinux.org/task/62251 POSSIBLE SOLUTION: release an update of cups-filters to 1.22.5 WORKAROUND: downgrade ghostscript to 9.22~dfsg+1-0ubuntu1 sudo apt install ghostscript=9.22~dfsg+1-0ubuntu1 libgs9=9.22~dfsg+1-0ubuntu1 libgs9-common=9.22~dfsg+1-0ubuntu1 ghostscript-x=9.22~dfsg+1-0ubuntu1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/1828401/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
