[cups.bugs] [MOD] STR #2581: GSSAPI doesn't support multi-realm

[Michael Sweet]

William Yang wrote:
> 
> Ah okay, the documentation was not very clear as to what it meant when 
> it said multi-realm setups wouldn't work.  Could this be an RFE, then?

As far as I know, there is no way for us to support multiple realms
via GSSAPI.  If the KDC accepts credentials from another realm, then
the GSSAPI auth will succeed, otherwise there is no way for us to
know which realm to authenticate against (we don't get the realm
until we authenticate...)

> I'm not sure why my version of CUPS is "modified".

Because you said:

     CUPS was compiled to use the host keytab entry (instead of
     looking for an ipp service keytab entry; this is for purposes
     of convenience).


>     ----- Original Message -----
>     *From:* Michael Sweet <mailto:msweet at apple.com>
>     *To:* William Yang <mailto:wyang at tjhsst.edu>
>     *Cc:* William Yang <mailto:wyang at tjhsst.edu> ; cups-bugs at easysw.com
>     <mailto:cups-bugs at easysw.com>
>     *Sent:* Wednesday, October 31, 2007 10:04 PM
>     *Subject:* Re: [MOD] STR #2581: GSSAPI doesn't support multi-realm
> 
> 
>     [STR Closed w/o Resolution]
> 
>     We already document that multi-realm setups probably won't work, and we
>     also can't help you if you are using a modified version of CUPS.
> 
>     Link: http://www.cups.org/str.php?L2581
>     Version: 1.3.3
>     Fix Version: None
> 


-- 
______________________________________________________________________
Michael Sweet, Easy Software Products           mike at easysw dot com
Internet Printing and Publishing Software        http://www.easysw.com