[cups-devel] [UNKN] STR #4682: IPP Basic authentication fails without <Location /printers> stanza

Rick Cochran noreply at cups.org
Thu Jul 23 10:47:44 PDT 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

My RHEL6 server says I have CUPS 1.4.2-67.  I wonder what that is in the
real world.

My client is OS X 10.10.4.

I am trying to use SSL-encrypted IPP Basic authentication with pam_ldap and
Active directory.  It works fine as long as I have the following stanza in
the server's cupsd.conf:

<Location /printers>
  AuthType Basic
  Encryption Required
  Order deny,allow
  Allow from localhost
#  Require user @SYSTEM
</Location>

If I remove that stanza, printing fails.  The Mac says, "Paused on server -
Waiting for job to complete." and it never does.

The relevant sections of the "LogLevel debug2" log are here:

Working:
D [23/Jul/2015:11:02:47 -0400] Send-Document
http://net-print-test2.cit.cornell.edu:631/printers/ansel-pc
d [23/Jul/2015:11:02:47 -0400] send_document(0x7f480bcc79c0[12],
http://net-print-test2.cit.cornell.edu:631/printers/ansel-pc)
d [23/Jul/2015:11:02:47 -0400] validate_user(job=43, con=12, owner="rcc2",
username=0x7fff1848b630, userlen=1024)
d [23/Jul/2015:11:02:47 -0400] cupsdFindPolicyOp(p=0x7f480bd61990,
op=6(Send-Document))
d [23/Jul/2015:11:02:47 -0400] cupsdFindPolicyOp: Found exact match...
d [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized:
con->uri="/printers/ansel-pc", con->best=0x7f480bd5f050((null))
d [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized: owner="rcc2"
d [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized: level=CUPSD_AUTH_USER,
type=Basic, satisfy=CUPSD_AUTH_SATISFY_ALL, num_names=0
d [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized: op=6(Send-Document)
d [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized: auth=CUPSD_AUTH_ALLOW...
D [23/Jul/2015:11:02:47 -0400] cupsdIsAuthorized: username="rcc2"

Failing:
D [23/Jul/2015:11:03:36 -0400] Send-Document
http://net-print-test2.cit.cornell.edu:631/printers/ansel-pc
d [23/Jul/2015:11:03:36 -0400] send_document(0x7f480bcc79c0[12],
http://net-print-test2.cit.cornell.edu:631/printers/ansel-pc)
d [23/Jul/2015:11:03:36 -0400] validate_user(job=44, con=12, owner="rcc2",
username=0x7fff1848b630, userlen=1024)
d [23/Jul/2015:11:03:36 -0400] cupsdFindPolicyOp(p=0x7f480bcacd30,
op=6(Send-Document))
d [23/Jul/2015:11:03:36 -0400] cupsdFindPolicyOp: Found exact match...
d [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized:
con->uri="/printers/ansel-pc", con->best=0x7f480bcbe430((null))
d [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized: owner="rcc2"
d [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized: level=CUPSD_AUTH_USER,
type=Basic, satisfy=CUPSD_AUTH_SATISFY_ALL, num_names=0
d [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized: op=6(Send-Document)
d [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized: auth=CUPSD_AUTH_ALLOW...
D [23/Jul/2015:11:03:36 -0400] cupsdIsAuthorized: username=""
D [23/Jul/2015:11:03:36 -0400] Returning HTTP Unauthorized for
Send-Document
(http://net-print-test2.cit.cornell.edu:631/printers/ansel-pc) from
10.17.28.60

I have attached the server's cupsd.conf and printers.conf, and the full log
file.

Link: https://www.cups.org/str.php?L4682
Version: 1.4.2
Attachment: https://www.cups.org/strfiles.php/3538/cupsd.conf
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=3Fwi
-----END PGP SIGNATURE-----




More information about the cups-devel mailing list