[cups-devel] [UNKN] STR #4503: IPP backend not supporting multiple Authentication header fields

jbrauchle noreply at cups.org
Tue Oct 14 08:57:14 PDT 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

I am trying to print via IPP to a kerberized windows print server, but the
IPP backend always requests a username and password, instead of using
Negotiate authentication.


The problem seems to be that the windows print server returns the following
header:
- ----------------------
HTTP/1.1 401 Unauthorized
Content-Type	text/html
Server	Microsoft-IIS/8.5
WWW-Authenticate	Negotiate
WWW-Authenticate	NTLM
Date	Tue, 14 Oct 2014 15:26:11 GMT
Content-Length	1344
- ----------------------

I modified the ipp.c backend source code to debug print the authentication
header field contents, which show "NTLM" only.
Hence, the following ipp.c code lines
- ----------------------
       if (!strncmp(www_auth, "Negotiate", 9))
         auth_info_required = "negotiate";
       else if (www_auth[0])
         auth_info_required = "username,password";
- ----------------------
fail to use negotiate auth and always goes for username+password!

Link: https://www.cups.org/str.php?L4503
Version: 1.5.4
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=rSxg
-----END PGP SIGNATURE-----




More information about the cups mailing list