cups: Chrome doesn't support concatenation of WWW-Authenticate values

Hi.

The login promt dialog is never displayed on the web interface since I moved from 2.2.6 to 2.2.7 on OpenBSD. I’m running with the “Fixed builds without PAM (Issue #5283)” patch. I can’t add printer or anything…

D [07/Apr/2018:17:12:53 +0200] [Client 148] POST /admin/ HTTP/1.1
D [07/Apr/2018:17:12:53 +0200] cupsdSetBusyState: newbusy="Active clients", busy="Not busy"
D [07/Apr/2018:17:12:53 +0200] [Client 148] Read: status=200, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 148] No authentication data provided.
D [07/Apr/2018:17:12:53 +0200] [CGI] argv[0] = "/usr/local/libexec/cups/cgi-bin/admin.cgi"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[0] = "CUPS_CACHEDIR=/var/cache/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[1] = "CUPS_DATADIR=/usr/local/share/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[2] = "CUPS_DOCROOT=/usr/local/share/doc/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[3] = "CUPS_FONTPATH=/usr/local/share/cups/fonts"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[4] = "CUPS_REQUESTROOT=/var/spool/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[5] = "CUPS_SERVERBIN=/usr/local/libexec/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[6] = "CUPS_SERVERROOT=/etc/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[7] = "CUPS_STATEDIR=/var/run/cups"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[8] = "HOME=/var/spool/cups/tmp"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[9] = "PATH=/usr/local/libexec/cups/filter:/usr/local/bin:/usr/local/sbin:/bin:/usr/bin"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[10] = "SERVER_ADMIN=root@peck.home.bsdfrog.org"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[11] = "SOFTWARE=CUPS/2.2.7"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[12] = "TMPDIR=/var/spool/cups/tmp"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[13] = "USER=root"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[14] = "CUPS_MAX_MESSAGE=2047"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[15] = "CUPS_SERVER=/var/run/cups/cups.sock"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[16] = "CUPS_ENCRYPTION=IfRequested"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[17] = "IPP_PORT=631"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[18] = "LANG=en_US.UTF8"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[19] = "REDIRECT_STATUS=1"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[20] = "GATEWAY_INTERFACE=CGI/1.1"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[21] = "SERVER_NAME=localhost"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[22] = "SERVER_PORT=631"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[23] = "REMOTE_ADDR=[v1.::1]"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[24] = "REMOTE_HOST=localhost"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[25] = "SCRIPT_NAME=/admin/"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[26] = "SCRIPT_FILENAME=/usr/local/share/doc/cups/admin/"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[27] = "SERVER_PROTOCOL=HTTP/1.1"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[28] = "HTTP_COOKIE=cookieconsent_status=dismiss; cookieconsent_status=dismiss; org.cups.sid=3b2299ace89dd9949d0d05f9b5377e83; _ga=GA1.1.400730187.1498486944; sessionLang=en; _gid=GA1.1.873084023.1498486944; sessionUrl=https%253A%2F%2Flocalhost%253A8043%2F"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[29] = "HTTP_USER_AGENT=Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[30] = "HTTP_REFERER=http://localhost:631/admin"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[31] = "REQUEST_METHOD=POST"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[32] = "CONTENT_LENGTH=60"
D [07/Apr/2018:17:12:53 +0200] [CGI] envp[33] = "CONTENT_TYPE=application/x-www-form-urlencoded"
D [07/Apr/2018:17:12:53 +0200] [CGI] Started /usr/local/libexec/cups/cgi-bin/admin.cgi (PID 46991)
I [07/Apr/2018:17:12:53 +0200] [Client 148] Started "/usr/local/libexec/cups/cgi-bin/admin.cgi" (pid=46991, file=23)
D [07/Apr/2018:17:12:53 +0200] [Client 148] Waiting for CGI data.
I [07/Apr/2018:17:12:53 +0200] Expiring subscriptions...
D [07/Apr/2018:17:12:53 +0200] [CGI] admin.cgi started...
D [07/Apr/2018:17:12:53 +0200] cupsdSetBusyState: newbusy="Active clients", busy="Active clients"
D [07/Apr/2018:17:12:53 +0200] [Client 154] Server address is "/var/run/cups/cups.sock".
D [07/Apr/2018:17:12:53 +0200] [Client 154] Accepted from localhost (Domain)
D [07/Apr/2018:17:12:53 +0200] [Client 154] Waiting for request.
D [07/Apr/2018:17:12:53 +0200] [CGI] http=0xa62aa71d000
D [07/Apr/2018:17:12:53 +0200] [CGI] cgiSetVariable: SECTION=\"admin\"
D [07/Apr/2018:17:12:53 +0200] [CGI] cgiSetVariable: REFRESH_PAGE=\"\"
D [07/Apr/2018:17:12:53 +0200] [CGI] org.cups.sid cookie is \"3b2299ace89dd9949d0d05f9b5377e83\"
D [07/Apr/2018:17:12:53 +0200] [CGI] cgiSetVariable: org.cups.sid=\"3b2299ace89dd9949d0d05f9b5377e83\"
D [07/Apr/2018:17:12:53 +0200] [CGI] cgiSetVariable: OP=\"add-printer\"
D [07/Apr/2018:17:12:53 +0200] [CGI] op=\"add-printer\"...
D [07/Apr/2018:17:12:53 +0200] [CGI] do_am_printer: DEVICE_URI=\"(null)\"
D [07/Apr/2018:17:12:53 +0200] [CGI] Getting list of devices...
D [07/Apr/2018:17:12:53 +0200] [Client 154] POST / HTTP/1.1
D [07/Apr/2018:17:12:53 +0200] cupsdSetBusyState: newbusy="Active clients", busy="Active clients"
D [07/Apr/2018:17:12:53 +0200] [Client 154] Read: status=200, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 154] No authentication data provided.
D [07/Apr/2018:17:12:53 +0200] [Client 154] Read: status=100, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 154] Read: status=100, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 154] Read: status=100, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 154] Read: status=100, state=6
D [07/Apr/2018:17:12:53 +0200] [Client 154] 2.0 CUPS-Get-Devices 1
D [07/Apr/2018:17:12:53 +0200] CUPS-Get-Devices
D [07/Apr/2018:17:12:53 +0200] cupsdIsAuthorized: username=""
D [07/Apr/2018:17:12:53 +0200] [Client 154] Returning HTTP Unauthorized for CUPS-Get-Devices (no URI) from localhost
D [07/Apr/2018:17:12:53 +0200] [Client 154] cupsdSendHeader: code=401, type="text/html", auth_type=0
D [07/Apr/2018:17:12:53 +0200] [Client 154] WWW-Authenticate: Basic realm=\"CUPS\", PeerCred, Local trc=\"y\"
D [07/Apr/2018:17:12:53 +0200] [CGI] cgi_passwd(prompt=\"Password for _cups on localhost? \") called!
D [07/Apr/2018:17:12:53 +0200] [Client 148] CGI data ready to be sent.
D [07/Apr/2018:17:12:53 +0200] [Client 154] HTTP_STATE_WAITING Closing for error 32 (Broken pipe)
D [07/Apr/2018:17:12:53 +0200] [Client 154] Closing connection.
D [07/Apr/2018:17:12:53 +0200] cupsdSetBusyState: newbusy="Active clients", busy="Active clients"
D [07/Apr/2018:17:12:53 +0200] [Client 148] con->http=0x83deb1bf000
D [07/Apr/2018:17:12:53 +0200] [Client 148] cupsdWriteClient error=0, used=0, state=HTTP_STATE_POST_SEND, data_encoding=HTTP_ENCODING_LENGTH, data_remaining=2147483647, response=0x0(), pipe_pid=46991, file=23
D [07/Apr/2018:17:12:53 +0200] [Client 148] Waiting for CGI data.
D [07/Apr/2018:17:12:53 +0200] [Client 148] Script header: Status: 401
D [07/Apr/2018:17:12:53 +0200] [Client 148] Script header: 
D [07/Apr/2018:17:12:53 +0200] [Client 148] Sending status 401 for CGI.
D [07/Apr/2018:17:12:53 +0200] [Client 148] cupsdSendHeader: code=401, type="text/html", auth_type=0
D [07/Apr/2018:17:12:53 +0200] [Client 148] WWW-Authenticate: Basic realm=\"CUPS\", Local
D [07/Apr/2018:17:12:53 +0200] [Client 148] Flushing write buffer.
D [07/Apr/2018:17:12:53 +0200] [Client 148] New state is HTTP_STATE_WAITING
D [07/Apr/2018:17:12:53 +0200] [Client 148] Waiting for request.
D [07/Apr/2018:17:12:53 +0200] [Client 148] Closing because Keep-Alive is disabled.
D [07/Apr/2018:17:12:53 +0200] [Client 148] Closing connection.
D [07/Apr/2018:17:12:53 +0200] cupsdSetBusyState: newbusy="Not busy", busy="Active clients"
D [07/Apr/2018:17:12:53 +0200] PID 46991 (/usr/local/libexec/cups/cgi-bin/admin.cgi) exited with no errors.

About this issue

Original URL
State: closed
Created 6 years ago
Comments: 17

Commits related to this issue

- Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289) — committed to apple/cups by michaelrsweet 6 years ago
Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289) — committed to apple/cups by michaelrsweet 6 years ago
Try again to mirror fix (Issue #5289) — committed to apple/cups by michaelrsweet 6 years ago

Most upvoted comments

[master 4feb1fe2e] - Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289)

[branch-2.2 2390f1d9e] Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289)

michaelrsweet on Apr 16, 2018