[Bug 879625] Re: CUPS fails to request authentication when printing over IPP w/ TLS

Fri Dec 2 11:00:12 UTC 2011

This bug was fixed in the package cups - 1.5.0-13

---------------
cups (1.5.0-13) unstable; urgency=low

  [ Till Kamppeter ]
  * debian/patches/ipp-patch-r8950+.patch: Revert the IPP backend to the state
    of CUPS 1.4.x, as the 1.5.x versiuon has major regressions (LP: #877958,
    LP: #879625, LP: #881843, LP: #883585, Closes: #638521, CUPS STR #3966,
    CUPS STR #3967). This patch will get removed as soon as upstream has fixed
    all these regressions. As upstream did not announce any new features for
    the IPP backend in the release notes for 1.5.x, we assume that with this
    step no features will get lost.
  * debian/patches/dont-send-malformed-dbus-messages.patch: Do not send D-Bus
    notifications with too few parameters when there are parameters which
    cannot be added to the D-Bus request, especially invalid UTF-8 strings.
    This made gnome-session-daemon crash (LP: #893676, CUPS STR #3984).
  * debian/local/filters/cpdftocps: The cpdftocps filter (used for PostScript
    printers and for drivers with PPDs which are not PDF-aware) did not
    recognize the duplex setting correctly, making duplex not working on
    many common printers (LP: #897723).
  * debian/local/filters/cpdftocps: Cleaned up the header comments.

  [ Martin-Éric Racine ]
  * [cups.postrm]: purge /etc/cups/ssl/server.[crt|key] and /etc/cups/ssl.

  [ Martin Pitt ]
  * debian/compat: Bump from 5 to 9, this apparently was forgotten in the
    Multi-Arch transition.
 -- Martin Pitt <martin.pitt at ubuntu.com>   Fri, 02 Dec 2011 11:05:51 +0100

** Changed in: cups (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/879625

Title:
  CUPS fails to request authentication when printing over IPP w/ TLS

Status in “cups” package in Ubuntu:
  Fix Released
Status in “cups” source package in Oneiric:
  Fix Committed

Bug description:
  We have a CUPS server configured to allow printing over IPP w/ TLS.
  Printing requires the user to authenticate using basic authentication.

  When printers are set up in Ubuntu 11.04 and lower, the user is
  prompted to enter their username and password when they attempt to
  print.

  However, on upgrading to 11.04 (or doing a fresh install), the user no
  longer gets a prompt and the job does not go through.

  The error logs show some TLS errors, however printing proceeds
  normally if authentication is removed.

  Here is a relevant chunk from the error_log on the server (running
  1.4.3, but this was tested and duplicated on an ubuntu 11.10 server):

  D [20/Oct/2011:16:00:14 -0400] Report: clients=2
  D [20/Oct/2011:16:00:14 -0400] Report: jobs=6
  D [20/Oct/2011:16:00:14 -0400] Report: jobs-active=0
  D [20/Oct/2011:16:00:14 -0400] Report: printers=5
  D [20/Oct/2011:16:00:14 -0400] Report: printers-implicit=0
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-string-count=1029
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-alloc-bytes=8408
  D [20/Oct/2011:16:00:14 -0400] Report: stringpool-total-bytes=22432
  D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 POST /printers/Xerox_Color HTTP/1.1
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
  D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
  D [20/Oct/2011:16:00:14 -0400] cupsdIsAuthorized: username=""
  D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Not busy
  D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: skipping getpeercon()
  D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: 11 from XXX.XXX.XXX.107:631 (IPv4)
  D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 OPTIONS * HTTP/1.1
  D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
  D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
  E [20/Oct/2011:16:00:14 -0400] Unable to encrypt connection from XXX.XXX.XXX.107 - A TLS packet with unexpected length was received.
  D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: cups 1.5.0-8ubuntu2
  ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
  Uname: Linux 3.0.0-12-generic i686
  ApportVersion: 1.23-0ubuntu3
  Architecture: i386
  Date: Fri Oct 21 15:18:47 2011
  EcryptfsInUse: Yes
  InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release i386 (20091028.5)
  MachineType: Hewlett-Packard HP Compaq dc7900 Convertible Minitower
  Papersize: letter
  PpdFiles:
   McGill_Color: Xerox WorkCentre 7655, 2.6.0
   TEST_BURNSIDE1B28_5735_DP: Xerox WorkCentre 5655
   SMB_MCGILL_COLOR: Xerox WorkCentre 7655, 2.6.0
   McGill_Color-ks-dev: Xerox WorkCentre 7655, 2.6.0
   McGill_Mono: Xerox WorkCentre 5655
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_CA.UTF-8
   SHELL=/bin/bash
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.0.0-12-generic root=UUID=4bbca573-e47d-4d26-88a7-fd4eac5d4167 ro quiet splash vt.handoff=7
  SourcePackage: cups
  UpgradeStatus: Upgraded to oneiric on 2011-10-18 (3 days ago)
  dmi.bios.date: 03/05/2009
  dmi.bios.vendor: Hewlett-Packard
  dmi.bios.version: 786G1 v01.16
  dmi.board.asset.tag: CAC91402JW
  dmi.board.name: 3032h
  dmi.board.vendor: Hewlett-Packard
  dmi.chassis.asset.tag: CAC91402JW
  dmi.chassis.type: 6
  dmi.chassis.vendor: Hewlett-Packard
  dmi.modalias: dmi:bvnHewlett-Packard:bvr786G1v01.16:bd03/05/2009:svnHewlett-Packard:pnHPCompaqdc7900ConvertibleMinitower:pvr:rvnHewlett-Packard:rn3032h:rvr:cvnHewlett-Packard:ct6:cvr:
  dmi.product.name: HP Compaq dc7900 Convertible Minitower
  dmi.sys.vendor: Hewlett-Packard

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/879625/+subscriptions