Bug#703424: marked as done (Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information)
Your message dated Mon, 1 Jul 2013 18:23:57 +0200
with message-id <201307011823.57423.odyx@debian.org>
and subject line Re: Bug#703424: Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
has caused the Debian Bug report #703424,
regarding Regression: CUPS Web interface fails to authenticate Kerberos access to IPP information
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
703424: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703424
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: cups
Version: 1.5.3-2.16
When using the Web interface to CUPS in a Kerberized environment, CUPS
fails to pass Kerberos authentication information to the local IPP socket.
This manifests as access being denied to any pages which access printer
information, even though the user logged in via Kerberos has been granted
access to both the pages and printers in question. The CUPS error log
shows that it has rejected unauthenticated access to the printers in
question, even though the prior access to the Web printer list page was
successfully authenticated.
This appears to be a regression introduced when resolving Bug 640939,
specifically this patch removes the ability for CUPS to pass Kerberos
login credentials to the local IPP socket:
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=105;filename=cups-1.5.3-2.14-nmu.diff;att=1;bug=640939
Unfortunately, simply reverting that patch introduces another problem,
specifically an inability to access any administrative pages and this line
appearing in the error log:
[CGI] cgi_passwd(prompt="Password for lp on localhost? ") called!
Therefore, it would seem that a more selective approach to passing the
Kerberos credentials to the local IPP socket is in order.
--- End Message ---
--- Begin Message ---
Version: 1.6.2-1
Le lundi, 1 juillet 2013 17.02:04, Timothy Pearson a écrit :
> Control: tags -moreinfo +fixed
>
> Initial tests of cups 1.6.2 indicate that this bug is fixed, and that
> Kerberos authentication now works properly. I will reopen this
> report if any glitches are noted during testing over the next few
> weeks.
Marking that bug as properly fixed in 1.6.2 then; thanks for testing.
Cheers, OdyX
--- End Message ---
Reply to: