[Bug 879625] Re: CUPS fails to request authentication when printing over IPP w/ TLS

Fri Dec 2 10:18:58 UTC 2011

IPP backend reverted to the version of CUPS 1.4.x to fix bug 881843, bug
877958, bug 879625, and bug 883585 for the time being until the backend
gets fixed upstream. Applied this to the Debian BZR repository of CUPS
so that the fix will appear in the next CUPS package for Precise and
also applied to a Stable Release Update (SRU) CUPS package for Oneiric
which I have uploaded to -proposed. As soon as this package gets
approved and ready for testing on Oneiric, a separate comment with
testing instructions will get posted here. Please test the package then
and report back here, so that we can make it an official update.

A debdiff of the SRU for Oneiric is attached.

Robert Bradley, thank you for all the work on these bugs and the
downgrade patch for the IPP backend.

** Changed in: cups (Ubuntu)
       Status: Incomplete => Fix Committed

** Changed in: cups (Ubuntu)
   Importance: Undecided => High

** Also affects: cups (Ubuntu Oneiric)
   Importance: Undecided
       Status: New

** Changed in: cups (Ubuntu Oneiric)
       Status: New => Fix Committed

** Changed in: cups (Ubuntu Oneiric)
   Importance: Undecided => High

** Changed in: cups (Ubuntu Oneiric)
    Milestone: None => oneiric-updates

** Patch added: "cups_1.5.0-8ubuntu5_1.5.0-8ubuntu6.debdiff"
   https://bugs.launchpad.net/ubuntu/+source/cups/+bug/879625/+attachment/2615931/+files/cups_1.5.0-8ubuntu5_1.5.0-8ubuntu6.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/879625

Title:
  CUPS fails to request authentication when printing over IPP w/ TLS

Status in “cups” package in Ubuntu:
  Fix Committed
Status in “cups” source package in Oneiric:
  Fix Committed

Bug description:
  We have a CUPS server configured to allow printing over IPP w/ TLS.
  Printing requires the user to authenticate using basic authentication.

  When printers are set up in Ubuntu 11.04 and lower, the user is
  prompted to enter their username and password when they attempt to
  print.

  However, on upgrading to 11.04 (or doing a fresh install), the user no
  longer gets a prompt and the job does not go through.

  The error logs show some TLS errors, however printing proceeds
  normally if authentication is removed.

  Here is a relevant chunk from the error_log on the server (running
  1.4.3, but this was tested and duplicated on an ubuntu 11.10 server):

  D [20/Oct/2011:16:00:14 -0400] Report: clients=2
  D [20/Oct/2011:16:00:14 -0400] Report: jobs=6
  D [20/Oct/2011:16:00:14 -0400] Report: jobs-active=0
  D [20/Oct/2011:16:00:14 -0400] Report: printers=5
  D [20/Oct/2011:16:00:14 -0400] Report: printers-implicit=0
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-string-count=1029
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-alloc-bytes=8408
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-total-bytes=22432
  D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 POST /printers/Xerox_Color HTTP/1.1
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
  D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
  D [20/Oct/2011:16:00:14 -0400] cupsdIsAuthorized: username=""
  D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Not busy
  D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: skipping getpeercon()
  D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: 11 from XXX.XXX.XXX.107:631 (IPv4)
  D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 OPTIONS * HTTP/1.1
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
  D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
  E [20/Oct/2011:16:00:14 -0400] Unable to encrypt connection from XXX.XXX.XXX.107 - A TLS packet with unexpected length was received.
  D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: cups 1.5.0-8ubuntu2
  ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
  Uname: Linux 3.0.0-12-generic i686
  ApportVersion: 1.23-0ubuntu3
  Architecture: i386
  Date: Fri Oct 21 15:18:47 2011
  EcryptfsInUse: Yes
  InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release i386 (20091028.5)
  MachineType: Hewlett-Packard HP Compaq dc7900 Convertible Minitower
  Papersize: letter
  PpdFiles:
   McGill_Color: Xerox WorkCentre 7655, 2.6.0
   TEST_BURNSIDE1B28_5735_DP: Xerox WorkCentre 5655
   SMB_MCGILL_COLOR: Xerox WorkCentre 7655, 2.6.0
   McGill_Color-ks-dev: Xerox WorkCentre 7655, 2.6.0
   McGill_Mono: Xerox WorkCentre 5655
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_CA.UTF-8
   SHELL=/bin/bash
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.0.0-12-generic root=UUID=4bbca573-e47d-4d26-88a7-fd4eac5d4167 ro quiet splash vt.handoff=7
  SourcePackage: cups
  UpgradeStatus: Upgraded to oneiric on 2011-10-18 (3 days ago)
  dmi.bios.date: 03/05/2009
  dmi.bios.vendor: Hewlett-Packard
  dmi.bios.version: 786G1 v01.16
  dmi.board.asset.tag: CAC91402JW
  dmi.board.name: 3032h
  dmi.board.vendor: Hewlett-Packard
  dmi.chassis.asset.tag: CAC91402JW
  dmi.chassis.type: 6
  dmi.chassis.vendor: Hewlett-Packard
  dmi.modalias: dmi:bvnHewlett-Packard:bvr786G1v01.16:bd03/05/2009:svnHewlett-Packard:pnHPCompaqdc7900ConvertibleMinitower:pvr:rvnHewlett-Packard:rn3032h:rvr:cvnHewlett-Packard:ct6:cvr:
  dmi.product.name: HP Compaq dc7900 Convertible Minitower
  dmi.sys.vendor: Hewlett-Packard

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/879625/+subscriptions