File 0004-Fix-authorization-check-for-kerberos-local-connectio.patch of Package cups.17820

From ca4e8d68e01536636fe8611d5d20a68ebf5e147d Mon Sep 17 00:00:00 2001
From: Samuel Cabrero <scabrero@suse.de>
Date: Thu, 24 Aug 2017 16:22:23 +0200
Subject: [PATCH] Fix authorization check for kerberos local connections

Signed-off-by: Samuel Cabrero <scabrero@suse.de>
---
 scheduler/auth.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/scheduler/auth.c b/scheduler/auth.c
index 35b70f394..2ab9ff4ac 100644
--- a/scheduler/auth.c
+++ b/scheduler/auth.c
@@ -1990,6 +1990,9 @@ cupsdIsAuthorized(cupsd_client_t *con,	/* I - Connection */
 
 
     if (con->type != type && type != CUPSD_AUTH_NONE &&
+#ifdef AF_LOCAL
+        (_httpAddrFamily(con->http.hostaddr) != AF_LOCAL) &&
+#endif /* AF_LOCAL */
 #ifdef HAVE_GSSAPI
         (type != CUPSD_AUTH_NEGOTIATE || con->gss_uid <= 0) &&
 #endif /* HAVE_GSSAPI */
-- 
2.14.1