<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Mar 10, 2010, at 1:40 AM, Christer Bernérus wrote:</div><blockquote type="cite"><div><font class="Apple-style-span" color="#000000">...<br></font>How is this supposed to work, really? How is the local CUPS scheduler supposed to get hold of the original submitter's credentials?<br></div></blockquote></div><div><br></div>The local cupsd gets a copy of the user's Kerberos credentials and then supplies them to the backend, which uses them when a challenge is received from the remote server.<div><br></div><div>On Mac OS X we use a special interface that allows us to do this without delegation on the local system, however other operating systems need delegated credentials, typically enabled via a policy setting on the KDC.<div><br></div><div>There are some known issues in CUPS 1.4.2, and fixes are attached to CUPS STR #3325:</div><div><br></div><div> <a href="http://www.cups.org/str.php?L3325">http://www.cups.org/str.php?L3325</a></div><div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Monaco; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>________________________________________________________________________</div><div>Michael Sweet, Senior Printing System Engineer, PWG Chair</div><div><br></div></div></span></span><br class="Apple-interchange-newline">
</div>
<br></div></div></body></html>