[cups.bugs] [LOW] STR #2906: CUPS doesn't handle secure Linux passwords

Michael Sweet msweet at apple.com
Fri Aug 15 15:12:22 PDT 2008


[STR Closed w/o Resolution]

First, HTTP limits the characters that can be used in a password - nothing
we can do about that.

Second, the function we use for command-line authentication (getpass) has
variable limits based on the OS - it can be as little as 8 characters and
as many as 8192 characters.

The current limit for Basic authentication is 32 bytes for passwords. 
There is already a feature request for increasing this limit (STR #2856),
and you can already use things like Digest and Kerberos authentication to
get around that limit.

Link: http://www.cups.org/str.php?L2906
Version: 1.3.8
Fix Version: None





More information about the cups mailing list