Answered own question again.
"Bad URI" was a Red Herring.
Someone (I can't imagine who) put the following in several stanzas in the
cupsd.conf file several months ago during preliminary testing, and then forgot:
Require user rcc2
Nothing like embarrassing oneself in public.
-Rick
On 3/12/15, 12:05 PM, Rick Cochran wrote:
Answered own question.
Now using:
#%PAM-1.0
auth required pam_krb5.so*no_user_check*
account required pam_permit.so
I'm now getting this in the CUPS error log:
D [12/Mar/2015:11:59:01 -0400] cupsdAuthorize: Authorized as user23 using Basic
D [12/Mar/2015:11:59:01 -0400] cupsdIsAuthorized: username="user23"
D [12/Mar/2015:11:59:01 -0400] cupsdCloseClient: 12
D [12/Mar/2015:11:59:01 -0400] SSL shutdown successful!
D [12/Mar/2015:11:59:01 -0400] cupsdSetBusyState: Not busy
E [12/Mar/2015:11:59:01 -0400] Bad URI "��v�S�" in request!
On 3/12/15, 11:20 AM, Rick Cochran wrote:
Sorry to bother with this, but google is not helping.
I am trying to authenticate CUPS printing for everyone in an AD via
Kerberos. I am not able to craft a /etc/pam.d/cups which allows people who
do not have unix accounts on the server to print.
Removing the "account" line does not solve the problem (even I can't print
then).
Here is my current /etc/pam.d/cups:
#%PAM-1.0
auth required pam_krb5.so
account required pam_permit.so
Here are some log entries:
Mar 12 09:04:49 poblano08 cupsd: pam_krb5[12720]: error resolving user name
'user23' to uid/gid pair
Mar 12 09:04:49 poblano08 cupsd: pam_krb5[12720]: error getting information
about 'user23'
Perhaps my cupsd.conf needs a change.
Help would be appreciated.
Yours,
-Rick
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list ([email protected])
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/printing/rcc2%40cornell.edu
This email sent [email protected]
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list ([email protected])
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/printing/archive%40mail-archive.com
This email sent to [email protected]
