[cups.general] CUPS and Kerberos - Problem with Authentication

[Michael Sweet]

On Jan 21, 2010, at 2:24 PM, Timo wrote:

> Once again, thank you for your reply.
> 
> To sum it up:
> 
> - CUPS needs MIT Kerberos 1.6.3 or any version of Heimdal Kerberos
> - and it has to be built AFTER a suitable Kerberos has been installed
> 
> I will try this and tell you if it succeeded (I would be so glad if so), there is the time difference between our countries so maybe, if I still encounter problems, I'll have to wait until the next day for replies. But, I am very happy that you try to help me, I really appreciate this.
> 
> Maybe this information about CUPS and Kerberos should be added to the official documentation, as far as I could see from the huge amount of people having the same problem as me, it could be a very useful hint.

Sigh...  The web interface has a link on the main page:

    http://localhost:631/
    http://localhost:631/help/kerberos.html

This same documentation is also linked from the cups.org home page:

    http://www.cups.org/
    http://www.cups.org/documentation.php/kerberos.html

See the "Using Kerberos Authentication" link.

> 
> Best Regards,
> Timo
> 
>> You'll need a new build of CUPS if you switch Kerberos
>> implementations...
>> 
>> On Jan 21, 2010, at 1:20 AM, Timo wrote:
>> 
>>> 
>>>> You need at least MIT Kerberos 1.6.3 or any version of Heimdal.
>>> 
>>> Ok, now I installed Heimdal Kerberos 1.2.1 and still get the same
>>> error messages:
>>> 
>>> D [21/Jan/2010:08:17:07 -0100] cupsdReadClient: 9 POST /admin/ HTTP/
>>> 1.1
>>> D [21/Jan/2010:08:17:07 -0100] cupsdAuthorize: No authentication
>>> data provided.
>>> D [21/Jan/2010:08:17:07 -0100] cupsdReadClient: 9 1.1 CUPS-Add-
>>> Modify-Class 1
>>> D [21/Jan/2010:08:17:07 -0100] CUPS-Add-Modify-Class ipp://localhost/
>>> classes/a
>>> D [21/Jan/2010:08:17:07 -0100] cupsdIsAuthorized: username=""
>>> D [21/Jan/2010:08:17:07 -0100] Returning HTTP Unauthorized for CUPS-
>>> Add-Modify-Class (ipp://localhost/classes/a) from localhost
>>> D [21/Jan/2010:08:17:07 -0100] cupsdSendHeader: 9 WWW-Authenticate:
>>> Negotiate
>>> D [21/Jan/2010:08:17:07 -0100] Script header: Status: 401
>>> 
>>> The ticket credentials are not passed to CUPS
>>> _______________________________________________
>>> cups mailing list
>>> cups at easysw.com
>>> http://lists.easysw.com/mailman/listinfo/cups
>> 
>> ___________________________________________________
>> Michael Sweet, Senior Printing System Engineer
>> 
>> 
>> 
> 
> _______________________________________________
> cups mailing list
> cups at easysw.com
> http://lists.easysw.com/mailman/listinfo/cups

___________________________________________________
Michael Sweet, Senior Printing System Engineer