LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Kerberos Killed CUPS Printing (https://www.linuxquestions.org/questions/linux-security-4/kerberos-killed-cups-printing-4175445442/)

baranow 01-13-2013 04:23 PM

Kerberos Killed CUPS Printing
 
In the CUPS print server I accidently enabled Kerberos authentication. I cannot now use the CUPS server as I get locked out by Kerberos. Is there some way out of this mess?

I'm using a new Debian weezy test install.

Kustom42 01-14-2013 02:06 PM

Yes there is an easy way, use the cupsctl binary...

http://www.cups.org/documentation.php/kerberos.html - Overview with an example, this shows you the command syntax setting it to "Negotiate" which enables Kerberos.

http://linux.die.net/man/5/cupsd.conf - Man page with all of the options for DefaultAuthType.


If you have more specific questions, i.e. what auth type to choose let us know.

baranow 01-14-2013 07:41 PM

Problem solved!

CUPS denied access because Kerberos would not authorize access.

Had to remove Kerberos then CUPS, then reinstall CUPS.

I never wanted Kerberos, but accidently checked the box for it in the CUPS Advanced settings. This locked me out completely.

The alternative would be to properly install and configure Kerberos to get CUPS to accept me, but I don't need Kerberos.

Another problem is that HP print drivers that worked before with Debian 6 won't work with Weezy.

Thanks for the help. What I thought was going to be a nightmare turns out to be quite easy once you RTM.

Kustom42 01-15-2013 10:34 AM

An another note, if you are using debian you can use dpkg-reconfigure to reconfigure the cups package without having to reinstall it if you want to get back to original default install settings.

baranow 01-15-2013 11:31 AM

Yes, that was the solution that I was first looking for; how to reconfig without removing packages. Thank you.


All times are GMT -5. The time now is 09:08 AM.