View Issue Details

IDProjectCategoryView StatusLast Update
0015881CentOS-7sambapublic2019-02-28 11:36
Reporterdanjwalker 
PrioritynormalSeveritymajorReproducibilityalways
Status newResolutionopen 
Product Version7.6.1810 
Target VersionFixed in Version 
Summary0015881: Printing to a SMB queue with KRB5 authentication returns an error when using Samba 4.8.3
DescriptionFollowing the update to Samba 4.8.3 in Centos 7.6.1810 Kerberos printing no longer works correctly and instead returns an error in CUPS of "No valid device URI has been specified".

Issue isolated to Samba 4.8.3 packages (Centos 7.5.1804 with Samba packages updated to 4.8.3 from Centos 7.6.1810 base shows same behaviour).



Steps To Reproduce- Domain Join to Active Directory
- Configure kerberos, confirm smb shares can be mounted using kerberos tickets and that smbclient is working with Kerberos authentication
- Add print queue using lpadmin, set Authentication to "negotiate"

TEST RESULTS (please note printserver FQDN and my UID have been <redacted>)
______________________________________________________

Centos 7.5.1804 RESULTS
$ echo -en "\rsmbclient print test\r\f" | smbclient "//<printserverFQDN>/kyocera" -c "print -" -k
= SUCCESS

$ echo -en "\rsmbspool print test\r\f" | smbspool smb://<printserverFQDN>/kyocera 1 1 test 1 1
DEBUG: Connected using Kerberos...
= SUCCESS

$ echo -en "\rlpr print test\r\f" |lpr -P kyocera_on_<printserver>
= SUCCESS
(Extract from debug in /var/log/cups/error.log)
I [28/Feb/2019:10:29:51 +0000] [Job 3] Started filter /usr/lib/cups/filter/texttopaps (PID 122248)
I [28/Feb/2019:10:29:51 +0000] [Job 3] Started filter /usr/lib/cups/filter/pstops (PID 122249)
I [28/Feb/2019:10:29:51 +0000] [Job 3] Started backend /usr/lib/cups/backend/smb (PID 122250)
D [28/Feb/2019:10:29:51 +0000] [Job 3] SMBSPOOL_KRB5 - AUTH_INFO_REQUIRED=negotiate
D [28/Feb/2019:10:29:51 +0000] [Job 3] SMBSPOOL_KRB5 - Started with uid=0
D [28/Feb/2019:10:29:51 +0000] [Job 3] SMBSPOOL_KRB5 - Switching to gid=618
D [28/Feb/2019:10:29:51 +0000] [Job 3] SMBSPOOL_KRB5 - Switching to uid=<UID>
D [28/Feb/2019:10:29:51 +0000] [Job 3] SMBSPOOL_KRB5 - Setting KRB5CCNAME to 'KEYRING:persistent:<UID>'
D [28/Feb/2019:10:29:52 +0000] [Job 3] PID 122248 (/usr/lib/cups/filter/texttopaps) exited with no errors.
D [28/Feb/2019:10:29:52 +0000] [Job 3] Page = 595x842; 12,10 to 583,832
D [28/Feb/2019:10:29:52 +0000] [Job 3] slow_collate=0, slow_duplex=0, slow_order=0

______________________________________________________

Centos 7.6.1810 RESULTS
$ echo -en "\rsmbclient print test\r\f" | smbclient "//<printservername>/kyocera" -c "print -" -k
= SUCCESS

$ echo -en "\rsmbspool print test\r\f" | smbspool smb://<printservername>/kyocera 1 1 test 1 1
ERROR: Session setup failed: NT_STATUS_NOT_SUPPORTED
DEBUG: get_exit_code(cli=0x563e5e4d24e0, nt_status=NT_STATUS_NOT_SUPPORTED [c00000bb])
DEBUG: Connected using Kerberos...
= SUCCESS (With above errors)

$ echo -en "\rlpr print test\r\f" |lpr -P kyocera_on_<printservername>
= FAIL
(Extract from debug in /var/log/cups/error.log)
I [28/Feb/2019:10:34:16 +0000] [Job 31] Started filter /usr/lib/cups/filter/texttopaps (PID 64864)
I [28/Feb/2019:10:34:16 +0000] [Job 31] Started filter /usr/lib/cups/filter/pstops (PID 64865)
I [28/Feb/2019:10:34:16 +0000] [Job 31] Started backend /usr/lib/cups/backend/smb (PID 64866)
D [28/Feb/2019:10:34:16 +0000] [Job 31] SMBSPOOL_KRB5 - AUTH_INFO_REQUIRED=negotiate
D [28/Feb/2019:10:34:16 +0000] [Job 31] SMBSPOOL_KRB5 - Started with uid=0
D [28/Feb/2019:10:34:16 +0000] [Job 31] SMBSPOOL_KRB5 - Switching to gid=618
D [28/Feb/2019:10:34:16 +0000] [Job 31] SMBSPOOL_KRB5 - Switching to uid=<UID>
D [28/Feb/2019:10:34:16 +0000] [Job 31] SMBSPOOL_KRB5 - Setting KRB5CCNAME to 'KEYRING:persistent:<UID>'
E [28/Feb/2019:10:34:16 +0000] [Job 31] No valid device URI has been specified
D [28/Feb/2019:10:34:16 +0000] [Job 31] Set job-printer-state-message to "No valid device URI has been specified", current level=ERROR
D [28/Feb/2019:10:34:16 +0000] [Job 31] PID 64866 (/usr/lib/cups/backend/smb) stopped with status 1.
D [28/Feb/2019:10:34:16 +0000] [Job 31] Page = 595x842; 12,10 to 583,832
D [28/Feb/2019:10:34:16 +0000] [Job 31] slow_collate=0, slow_duplex=0, slow_order=0
D [28/Feb/2019:10:34:16 +0000] [Job 31] PID 64864 (/usr/lib/cups/filter/texttopaps) exited with no errors.
Additional InformationPossibly related to https://bugzilla.redhat.com/show_bug.cgi?id=1581481 ? - The suggested 'fix; of removing the "samba-krb5-printing" stops kerberos printing entirely in both smbspool and CUPS.
Tags7.6, active directory, cups, upstream
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-02-28 11:15 danjwalker New Issue
2019-02-28 11:15 danjwalker Tag Attached: 7.6
2019-02-28 11:15 danjwalker Tag Attached: active directory
2019-02-28 11:15 danjwalker Tag Attached: cups
2019-02-28 11:15 danjwalker Tag Attached: upstream