Kerberos Authentication on Linux

[Jörg Herzinger]

Hello,

> Check patches for bug ID 3325, 3518, 3519
> Include all service principals that you want to use in the keytab file.
> HTTP (for browsers), ipp (for CUPS)
> Also configure your browser to send krb ticket,
>
> //Bse

Thanks, that cleared some issues for me, but I still didn't get it working. I just want some of my users to administer the queues and such, so HTTP for browsers will be the only one I need. How do I tell cups now about the keytab since the config option does not exist any more in 1.4?
I tried adding KRB5CCNAME=/etc/cups/HTTP.cups.g2.keytab to /etc/default/cups but this seems to have changed nothing.
My browser (Firefox) should send auth data (network.negotiate-auth.trusted-uris set to https://) and my cups is accessed via https://cups.g2/.