<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">What version of CUPS?<div><br></div><div>What version of Kerberos?</div><div><br></div><div>What operating system/Linux distribution?</div><div><br><div><div>On Dec 27, 2010, at 12:21 AM, Matt Kinni wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div bgcolor="#ffffff" text="#333333">
<font size="+1"><font face="Helvetica, Arial, sans-serif">Hello, I'm
trying to print to a printer on a remote cups queue with
kerberos, using my local queue's "browse" function.<br>
<br>
On the server with the printer attached, I have the relevant
info in the config files:<br>
<br>
--->in /etc/cups/printers.conf:<br>
<br>
<Printer Officejet_6000_E609n><br>
AuthInfoRequired negotiate<br>
<br>
--->in /etc/cups/cupsd.conf:<br>
<br>
<Policy default><br>
<Limit Create-Job Print-Job Print-URI><br>
AuthType Negotiate<br>
Require user matt<br>
<br>
On my client laptop, if I connect to the remote queue directly,
(eg. by adding "ServerName remoteserver:631" in the clients.conf
file), the print jobs properly authenticate with kerberos<br>
<br>
However, if I try to print using my local cups which discovers
the remote printer automatically using the browse function, the
following occurs:<br>
<br>
1. system-config-printer opens up a basic authentication dialog
asking for a user name and password (which makes no sense
because it's not using basic auth): <a class="moz-txt-link-freetext" href="http://imgur.com/Hd7gO.png">http://imgur.com/Hd7gO.png</a>
<-screenshot<br>
<br>
2. regardless of what information I enter into the first dialog,
a second dialog opens asking for a password only for auth type
negotiate, which also doesn't make sense:
<a class="moz-txt-link-freetext" href="http://imgur.com/QnjL6.png">http://imgur.com/QnjL6.png</a> <-screenshot<br>
<br>
So what has to be done for my local cups to automatically use my
kerberos credentials when contacting the remote server? I know
if works if I connect to the remote server directly, but that's
extremely inconvenient to do on a print job by print job basis.<br>
</font></font><br>
<pre class="moz-signature" cols="90">--
Matthew Kinni
Cal Poly State University
2640 Canyon Circle
San Luis Obispo, CA 93410
Cell: 925-817-0934
OpenPGP: 0x2351657A
</pre>
</div>
_______________________________________________<br>cups mailing list<br><a href="mailto:cups@easysw.com">cups@easysw.com</a><br>http://lists.easysw.com/mailman/listinfo/cups<br></blockquote></div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div>________________________________________________________________________<br>Michael Sweet, Senior Printing System Engineer, PWG Chair<br></div></span>
</div>
<br></div></body></html>