[cups.bugs] [MOD] STR #2695: Kerberos authentication fails with large tickets

John Hodrien johnh at comp.leeds.ac.uk
Wed Jan 30 10:24:18 PST 2008


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Kerberos authentication is likely to fail with Active Directory tickets due
to their relatively large size, and limited allowed sizes within CUPS.

A fix has already been made to cups/auth.c, but cupsdSendHeader() in
scheduler/client.c looks to be similarly restricted, as it looks like it
uses a 2048 byte buffer.

I also wasn't sure whether you wanted to lose the test for the token
length being zero from cups/auth.c.

Here's a patch as a starting point anyhows.

Link: http://www.cups.org/str.php?L2695
Version: 1.3-current
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch
Type: application/octet-stream
Size: 1212 bytes
Desc: not available
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20080130/503ada36/attachment.obj>


More information about the cups-devel mailing list