[Pkg-cups-devel] Bug#663995: cups: Kerberos authentication doesn't work for admin interface

[Brian Potkin]

tags 663995 upstream
thanks



On Wed 14 Mar 2012 at 16:22:22 +0000, Sam Morris wrote:

> I'm trying to access the CUPS admin interface via a web browser. I can
> see the browser correctly getting a ticket for HTTP/host.example.com,
> and a corresponding entry is available in the server's keytab, however
> all protected pages merely display the Unauthorized message saying that
> I need to have a valid ticket.

[Snip most of /etc/cups/cupsd.conf]

> 	DefaultAuthType Negotiate

[Snip]

> A debug2 log of an authentication attempt is attached. You can see me
> correctly being authenticated via kerberos as sam at EXAMPLE.COM, but then
> there is the message "Authorized using Basic, expected Negotiate"
> followed by the Unauthorized response.

[Snip most of the log]

> E [14/Mar/2012:16:14:27 +0000] Authorized using Basic, expected Negotiate!
> D [14/Mar/2012:16:14:27 +0000] Returning HTTP Unauthorized for CUPS-Get-Devices (no URI) from localhost

If this is not the same bug as yours it's very close. It gives us
something to track.

   http://www.cups.org/str.php?L4140

Regards,

Brian.