GNOME Bugzilla – Bug 553690
Authentication support for CUPS backend
Last modified: 2018-02-10 03:41:20 UTC
The attached patch adds authentication support in the GTK+ CUPS backend. For now it only works with authentication mechanisms that don't require password prompting (in other words, GSSAPI). Successfully tested against CUPS using GSSAPI.
Created attachment 119340 [details] [review] Patch to add authentication support to CUPS backend
There are some other authentication related patches in bug 384940, that need to be looked at together with this.
I attempted to apply the patch provided with Gnome bug report on my gtk2 version (gtk2-2.10.4-20). Authentication seems to succeed, but print failed. On the client side, I obtain a "Too many failed attempts" error. The server log contains: Feb 24 18:12:16 server cupsd[26585]: get_gss_creds: Attempting to acquire credentials for ipp@server.fr... Feb 24 18:12:16 server cupsd[26585]: get_gss_creds: Credentials acquired successfully for ipp@server.fr. Feb 24 18:12:16 server cupsd[26585]: cupsdAuthorize: Authorized as user@server.fr using Negotiate
What is the state of this. I know we did get some authentication support in the cups backend in the meantime, but that may only be basic, not gss. Marek ?
With libcups version above 1.4.4 kerberos is now working again (1.4.0->1.4.3 did not). I had to export CUPS_GSSSERVICENAME=HTTP and then Evince manages to print just fine. So it seems to me this bug should be closed.
We're moving to gitlab! As part of this move, we are closing bugs that haven't seen activity in more than 5 years. If this issue is still imporant to you and still relevant with GTK+ 3.22 or master, please consider creating a gitlab issue for it.