[cups.general] Kerberos in CUPS 1.5

[Michael Sweet]

I'm still working on the updated Kerberos documentation, but in short the new implementation of Kerberos in CUPS no longer depends on delegation of credentials. Instead, when you print to a Kerberized queue we run the IPP backend as the printing user so you no longer need any special network configuration on the client to make things work - if you can run "kinit" (or the equivalent) then it will "just work". A similar change will need to happen in Samba.

A side-effect of the new implementation is that we no longer support Kerberized "relay" queues, e.g.: CUPS -> CUPS -> Windows (SMB), but they never worked reliably anyways...

On Jun 20, 2011, at 4:10 AM, bse wrote:

> I have a vague memory that someone mentioned that there is some changes in 1.5 that affects printing with Kerberos.
> 
> Is there any documentation of this, or can anyone give a quick information?
> 
> //Bse
> 
> _______________________________________________
> cups mailing list
> cups at easysw.com
> http://lists.easysw.com/mailman/listinfo/cups

________________________________________________________________________
Michael Sweet, Senior Printing System Engineer, PWG Chair