Bug#640939: Please test solution for Kerberos problem

["Didier 'OdyX' Raboud" <odyx@debian.org>]

Hi Wolfgang, and thanks for your testing and investigation so far;

Le lundi, 10 décembre 2012 20.23:36, Wolfgang Schweer a écrit :
> [ cups source package 1.5.3-2.9, debian/cups.postinst ]
> 
> The attached patch seems to work for me. Please test it (as outlined in
> message #49 by Brian).
> 
> "-h localhost" was changed to "-h /var/run/cups/cups.sock" a while ago
> (15 Sep 2009: cups.postinst and init script).
> 
> Don't know if changing it back for cups.postinst would cause any
> problem -- my tests revealed none so far.

I am far from confident enough in this patch to apply it so late in the 
freeze. So I reported the bug upstream: http://www.cups.org/str.php?L4140

As you have a working test-case, could you possibly:
- test cups from unstable with the attached patch on top;
- test cups from experimental (1.6.1) ?

(If you prefer, I can provide you binary builds of cups for amd64/i386 with 
the patch if that's easier for you…)

Thanks in advance, cheers, 

OdyX
-- 
OdyX

--- a/scheduler/client.c
+++ b/scheduler/client.c
@@ -2588,14 +2588,7 @@
 	       con->http.hostname);
 #ifdef HAVE_GSSAPI
     else if (auth_type == CUPSD_AUTH_NEGOTIATE)
-    {
-#  ifdef AF_LOCAL
-      if (_httpAddrFamily(con->http.hostaddr) == AF_LOCAL)
-        strlcpy(auth_str, "Basic realm=\"CUPS\"", sizeof(auth_str));
-      else
-#  endif /* AF_LOCAL */
       strlcpy(auth_str, "Negotiate", sizeof(auth_str));
-    }
 #endif /* HAVE_GSSAPI */
 
     if (con->best && auth_type != CUPSD_AUTH_NEGOTIATE &&