[cups.general] since 1.2 -> 1.3 upgrade: "Authorized using Basic, expected Digest!"

[Jukka Salmi]

Jukka Salmi --> cups (2008-06-23 12:14:04 +0200):
> Hello,
> 
> since I upgraded my CUPS installation from 1.2.12 to 1.3.7, adding a
> printer fails: CUPS prompts for user name and password, I enter it,
> according to syslog authentication succeeds, but then CUPS prompts
> again for user name and password, and again and again...
> 
> My cupsd.conf contains
> 
> 	[...]
> 	SystemGroup lp
> 	DefaultAuthType Digest
> 	
> 	[...]
> 	<Location /admin/conf>
> 	  AuthType Default
> 	  Require user @SYSTEM
> 	  Order allow,deny
> 	  Allow from [...]
> 	</Location>
> 	[...]
> 	
> 	<Policy default>
> 	  [...]
> 	  <Limit CUPS-Add-Modify-Printer [...]>
> 	    AuthType Default
> 	    Require user @SYSTEM
> 	    Order deny,allow
> 	  </Limit>
> 	  [...]
> 	</Policy>
> 
> and there's a passwd.md5 file created by lppasswd(1) containing an
> entry for user lp in the CUPS config directory.
> 
> The following is what syslog receives from CUPS after I enter the
> (correct) user name and password _once_ (CUPS seems to authenticate
> several times):
> 
> cupsdReadClient: 9 POST /admin HTTP/1.1
> cupsdAuthorize: Authorized as lp using Digest
> [CGI] /usr/pkg/libexec/cups/cgi-bin/admin.cgi started - PID = 23146
> Started "/usr/pkg/libexec/cups/cgi-bin/admin.cgi" (pid=23146)
> cupsdSendCommand: 9 file=10
> REQUEST 212.254.26.77 - lp "POST /admin HTTP/1.1" 200 1743 - - 
> [CGI] admin.cgi started...
> cupsdAcceptClient: 7 from localhost (Domain)
> [CGI] http=0x8069000
> [CGI] op="add-printer"...
> [CGI] do_am_printer: DEVICE_URI="lpd://clam.salmi.ch/"
> cupsdReadClient: 7 POST /admin/ HTTP/1.1
> cupsdAuthorize: No authentication data provided.
> CUPS-Add-Modify-Printer ipp://localhost/printers/T620
> cupsdIsAuthorized: username=""
> CUPS-Add-Modify-Printer: Unauthorized
> REQUEST localhost - - "POST /admin/ HTTP/1.1" 401 268 CUPS-Add-Modify-Printer successful-ok 
> cupsdSendError: 7 code=401 (Unauthorized)
> cupsdSendHeader: WWW-Authenticate: Digest realm="CUPS", nonce="localhost"
> cupsdCloseClient: 7
> cupsdAcceptClient: 7 from localhost (Domain)
> cupsdReadClient: 7 POST /admin/ HTTP/1.1
> cupsdAuthorize: Authorized as lp using Local
> CUPS-Add-Modify-Printer ipp://localhost/printers/T620
> cupsdIsAuthorized: username="lp"
> Authorized using Basic, expected Digest!
> CUPS-Add-Modify-Printer: Unauthorized
> REQUEST localhost - lp "POST /admin/ HTTP/1.1" 401 268 CUPS-Add-Modify-Printer successful-ok 
> cupsdSendError: 7 code=401 (Unauthorized)
> cupsdSendHeader: WWW-Authenticate: Digest realm="CUPS", nonce="localhost"
> cupsdCloseClient: 7
> cupsdAcceptClient: 7 from localhost (Domain)
> cupsdReadClient: 7 POST /admin/ HTTP/1.1
> cupsdAuthorize: Authorized as lp using Local
> CUPS-Add-Modify-Printer ipp://localhost/printers/T620
> cupsdIsAuthorized: username="lp"
> Authorized using Basic, expected Digest!
> CUPS-Add-Modify-Printer: Unauthorized
> REQUEST localhost - lp "POST /admin/ HTTP/1.1" 401 268 CUPS-Add-Modify-Printer successful-ok 
> cupsdSendError: 7 code=401 (Unauthorized)
> cupsdSendHeader: WWW-Authenticate: Digest realm="CUPS", nonce="localhost"
> cupsdCloseClient: 7
> cupsdAcceptClient: 7 from localhost (Domain)
> cupsdReadClient: 7 POST /admin/ HTTP/1.1
> cupsdAuthorize: Authorized as lp using Local
> CUPS-Add-Modify-Printer ipp://localhost/printers/T620
> cupsdIsAuthorized: username="lp"
> Authorized using Basic, expected Digest!
> CUPS-Add-Modify-Printer: Unauthorized
> REQUEST localhost - lp "POST /admin/ HTTP/1.1" 401 268 CUPS-Add-Modify-Printer successful-ok 
> cupsdSendError: 7 code=401 (Unauthorized)
> cupsdSendHeader: WWW-Authenticate: Digest realm="CUPS", nonce="localhost"
> PID 23146 (/usr/pkg/libexec/cups/cgi-bin/admin.cgi) exited with no errors.
> cupsdCloseClient: 7
> [CGI] cgi_passwd(prompt="Password for lp on localhost? ") called!
> REQUEST 212.254.26.77 - lp "POST /admin HTTP/1.1" 401 1743 - - 
> cupsdSendError: 9 code=401 (Unauthorized)
> cupsdSendHeader: WWW-Authenticate: Digest realm="CUPS", nonce="212.254.26.77"
> REQUEST 212.254.26.77 - lp "POST /admin HTTP/1.1" 200 1743 - - 
> cupsdCloseClient: 9

I couldn't solve this problem so far, but reproduce it on various
systems.  However, using BasicDigest instead of Digest authentification
at least works around the problem.


Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~