AuthType failover?

Michael Sweet mike at easysw.com
Tue Nov 20 07:39:53 PST 2007


John A. Murdie wrote:
>> John A. Murdie wrote:
>>
>>> Might it be possible to have the new CUPS server accept connections
>>> from the laptops - all on the same subnet - and have some use AuthType
>>> Basic and some AuthType Negotiate, simultaneously?
>> Have you ever looked at the difference of the directives
>>
>> Satisfy Any
>> Satisfy All
>>
>> inside <Location> and <Limit> sections inside cupsd.conf ?
> 
> Yes.
> 
>> ...
>>
>> Disclaimer: I've not yet tested this with multiple "AuthType" statements
>> (or it was long ago and I don't remember the results), but this may be
>> the way to try and achieve what you want.
> 
> I wondered precisely whether such an approach was intended to work or, if this was not documented anywhere, whether someone had tried it. Would the textual order of two AuthTypes in the same Limit cause the first to be tried first (rhetorical)? I had wondered first, however, whether successive Limit sections, the first with AuthType Negotiate, the second with AuthType Basic, might be the answer. I decided not, since a failure of the first would surely cause overall failure to authenticate.
> 
> I'll continue to experiment. The difficulty for me is to ensure that I have nothing which will interfere with the experiment, making me think that 'AuthType failover' won't work when in fact it might.

Only 1 AuthType (the last one) is used in a Location.

-- 
______________________________________________________________________
Michael Sweet, Easy Software Products           mike at easysw dot com
Internet Printing and Document Software          http://www.easysw.com




More information about the cups mailing list