[cups.general] local cupsd does not pass kerberos credentials to remote cups server for authentication

[Matt Kinni]

Hello, I'm trying to print to a printer on a remote cups queue with kerberos, using my
local queue's "browse" function.

On the server with the printer attached, I have the relevant info in the config files:

--->in /etc/cups/printers.conf:

<Printer Officejet_6000_E609n>
AuthInfoRequired negotiate

--->in /etc/cups/cupsd.conf:

<Policy default>
  <Limit Create-Job Print-Job Print-URI>
      AuthType Negotiate
      Require user matt

On my client laptop, if I connect to the remote queue directly, (eg. by adding "ServerName
remoteserver:631" in the clients.conf file), the print jobs properly authenticate with
kerberos

However, if I try to print using my local cups which discovers the remote printer
automatically using the browse function, the following occurs:

1. system-config-printer opens up a basic authentication dialog asking for a user name and
password (which makes no sense because it's not using basic auth):
http://imgur.com/Hd7gO.png <-screenshot

2. regardless of what information I enter into the first dialog, a second dialog opens
asking for a password only for auth type negotiate, which also doesn't make sense:
http://imgur.com/QnjL6.png <-screenshot

So what has to be done for my local cups to automatically use my kerberos credentials when
contacting the remote server?  I know if works if I connect to the remote server directly,
but that's extremely inconvenient to do on a print job by print job basis.

-- 
Matthew Kinni
Cal Poly State University
2640 Canyon Circle
San Luis Obispo, CA 93410
Cell: 925-817-0934
OpenPGP: 0x2351657A

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cups.org/pipermail/cups/attachments/20101226/292b8add/attachment-0001.html>