Version: (using KDE KDE 3.4.2) Installed from: Fedora RPMs OS: Linux When browsing SMB printers from kaddprinterwizard, kerberos tokens are not used to authenticate to sharing servers.
support for that has been added recently to smb:/ btw, not sure what kdeprint does though
Created attachment 12827 [details] use Kerberos to browse SMB printers
Stephan Kulow a dit : > ------- Additional Comments From coolo kde org 2005-10-03 10:46 ------- > support for that has been added recently to smb:/ btw, not sure what > kdeprint does though Yes, I've seen it, but kdeprint doesn't use the libsmbclient, hence my patch. Btw, it seems that the way it has been added to kio_smb raises the following problem: when one wants to connect to a share using another account (with a URL like smb://user2@resource), the Kerberos token of user1 (Linux logged in user) is silently used, this is why I used the approach you can see in my patch at http://bugs.kde.org/show_bug.cgi?id=108324, could you please comment on this choice? Best regards.
I have some blob of code from Linspire for getting libsmbclient used in kdeprint. It needs combing, but I hope to get to it soon. I think at that point I'll be able to get inspiration from kio_smb for kerberos support and perhaps forget about the patch you attached. I can't comment on your question about usager of user1 token with smb://user2@machine connection. I don't have enough knowledge. And that discussion should go on on kfm-devel, not here. Thanks!
Cristian, can you open source that code? Perhaps we could help there ;)
Cristian, any way to get hold of the libsmbclient integration code?
CUPS trunk got Kerberized via a Google SoC project (actually it was Jelmer Vernoij from the Samba Team who was the Soc student). Likely, this new Kerberos support will be going into the CUPS 1.3 release. Up to now (that includes CUPS 1.2.x), it uses for its smb:// backend to print to a Windows shared printer a symlink to the smbspool utility that ships with *Samba*, not CUPS. And smbspool doesnt support any secure authentication scheme to acces a Windows printer. It would be pretty pointless to have Kerberos support in KDEPrint's Add Printer Wizard for SMB printer discovery, if we then can't create queue for CUPS that is allowed to also *print* to the discovered printer. Once CUPS 1.3 is ready for beta testing, it gets more serious. Coolo, Dirk -- does KDE 3.5.5 (or earlier? which?) fully support being a peer in a kerberized environment?
Is this still valid with kde4 and the qt printing changes? I'm still not able to use kerberos authentication on smb print shares, but is kdeprint still around?
KDEPrint is obsolete, unmaintained and will never be revived. Closing all open bugs.