[cups.bugs] [HIGH] STR #1822: IPv6 Access Control config problem

harry harry at schmalzbauer.de
Fri Jul 7 21:04:38 PDT 2006


[STR New]

When using IPv6 addresses for Location access control the correct full
address number isn't accepted, instead one must use the shortened form.
<Location /admin>
  AuthType Basic
  Require user @SYSTEM
  Order allow,deny
  Allow From ::1
  Allow From fec0::1:0:0:1:1
</Location>

Connecting from fec0:0:0:1:0:0:1:1 does work when address is written like
above! But:

Changing the following breaks the configuration:
fec0::1:0:0:1:1 -> fec0:0:0:1:0:0:1:1
Result: 403 Forbidden!

The latter must work since it's a mandatory form of writing IPv6
addresses.

Next problem is that I can't allow IPv6 Networks, just hosts.
fec0:0:0:1::/64 doesn't work nor have I found any other possibility to
allow connections from IPv6 Subnets

Link: http://www.cups.org/str.php?L1822
Version: 1.2.1





More information about the cups mailing list