Patrick Powell wrote:
>
> > From lprng Tue May 14 08:07:42 2002
> > Date: Tue, 14 May 2002 10:15:47 -0400
> > From: Rick Cochran <[EMAIL PROTECTED]>
> > To: lprng <[EMAIL PROTECTED]>
> > Subject: LPRng: client fails to report kerberos authentication errors
> >
> > Now that I have upgraded the version of LPRng (3.7.?) supplied with Red
> > Hat 7.2 to 3.8.12, and fixed the problems I have previously reported, I
> > can successfully submit a print job using kerberos authentication.
> >
> > However, there are still some serious problems. One is that submitting
> > a print job without having kerberos tickets yields the following:
> >
> > > lpr -A -Pk-ccc1@irene ~/test.ps
> > Status Information:
> > sending job 'root@arctura+217' to k-ccc1@irene
> > connecting to 'irene', attempt 1
> > connected to 'irene'
> >
> > Authentication fails, the job is removed, the error message is peculiar
> > to say the least.
> >
> > Something like "authentication failed" would be good.
> >
> > -Rick
> >
> > --
> > |Rick Cochran phone: 607-255-7618|
> > |Cornell CIT - Systems & Operations - Net-Print FAX: 607-255-8521|
> > |730 Rhodes Hall, Ithaca, N.Y. 14853 email: [EMAIL PROTECTED]|
>
> Try the following patch and tell me if it fixes the problem:
>
> *** LPRng-3.8.12.orig/src/common/krb5_auth.c Mon May 6 09:03:44 2002
> --- LPRng-3.8.12/src/common/krb5_auth.c Mon Jun 10 10:46:38 2002
> ***************
> *** 1469,1476 ****
> status, error );
> if( status && error[0] == 0 ){
> SNPRINTF( error, errlen)
> ! "pgp authenticated transfer to remote host failed");
> }
> if( error[0] ){
> DEBUG2("Krb5_send: writing error to file '%s'", error );
> if( safestrlen(error) < errlen-2 ){
> --- 1469,1477 ----
> status, error );
> if( status && error[0] == 0 ){
> SNPRINTF( error, errlen)
> ! "kerberos authenticated transfer to remote host failed");
> }
> + #if 0
> if( error[0] ){
> DEBUG2("Krb5_send: writing error to file '%s'", error );
> if( safestrlen(error) < errlen-2 ){
> ***************
> *** 1486,1491 ****
> --- 1487,1493 ----
> close( fd ); fd = -1;
> error[0] = 0;
> }
> + #endif
> error:
> return(status);
> }
OK. Now I get:
arctura> lpr -A -Pk-ccc1@irene ~/test.ps
Status Information:
sending job 'rcc2@arctura+787' to k-ccc1@irene
connecting to 'irene', attempt 1
connected to 'irene'
Send_auth_transfer: on client krb5_cc_get_principal failed - No
credentials cache found
job 'rcc2@arctura+787' transfer to k-ccc1@irene failed
on client krb5_cc_get_principal failed - No credentials cache found
This is much better. At least the users have a fighting chance now.
Thanks,
-Rick
--
|Rick Cochran phone: 607-255-7618|
|Cornell CIT - Systems & Operations - Net-Print FAX: 607-255-8521|
|730 Rhodes Hall, Ithaca, N.Y. 14853 email: [EMAIL PROTECTED]|
-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
