[cups-devel] [UNKN] STR #4580: Documentation - Kerberos authentication

[Volkmar Glauche]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

I have set up CUPS to use Kerberos authentication. Although Kerberos setup
is site-specific, CUPS documentation could be improved by being more
specific in describing the necessary principals for command line and web
interface access:

Principal "host/cupsserver.mydomain.com" is used for command line access.
This is vaguely mentioned as "host principal", but could be renamed as
above to use kerberos terminology.

Another principal "HTTP/cupsserver.mydomain.com" (HTTP in capital letters)
is required for kerberos authentication to the web interface. I did not
find any document mentioning this, and it took me some time to get this
information from the log files on my kerberos KDC.

It would make kerberos setup much easier, if both principals were listed in
the documentation.

Link: https://www.cups.org/str.php?L4580
Version: 2.0-current
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=51pj
-----END PGP SIGNATURE-----