CUPS fails to request authentication when printing over IPP w/ TLS

[Chris Poupart]

We have a CUPS server configured to allow printing over IPP w/ TLS. Printing requires the user to authenticate using basic authentication.

When printers are set up in Ubuntu 11.04 and lower, the user is prompted to enter their username and password when they attempt to print.

However, on upgrading to 11.04 (or doing a fresh install), the user no longer gets a prompt and the job does not go through.

The error logs show some TLS errors, however printing proceeds normally if authentication is removed.

Here is a relevant chunk from the error_log on the server (running 1.4.3, but this was tested and duplicated on an ubuntu 11.10 server):

D [20/Oct/2011:16:00:14 -0400] Report: clients=2
D [20/Oct/2011:16:00:14 -0400] Report: jobs=6
D [20/Oct/2011:16:00:14 -0400] Report: jobs-active=0
D [20/Oct/2011:16:00:14 -0400] Report: printers=5
D [20/Oct/2011:16:00:14 -0400] Report: printers-implicit=0
D [20/Oct/2011:16:00:14 -0400] Report: stringpool-string-count=1029
D [20/Oct/2011:16:00:14 -0400] Report: stringpool-alloc-bytes=8408
D [20/Oct/2011:16:00:14 -0400] Report: stringpool-total-bytes=22432
D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 POST /printers/Xerox_Color HTTP/1.1
D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
D [20/Oct/2011:16:00:14 -0400] cupsdIsAuthorized: username=""
D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11
D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Not busy
D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: skipping getpeercon()
D [20/Oct/2011:16:00:14 -0400] cupsdAcceptClient: 11 from XXX.XXX.XXX.107:631 (IPv4)
D [20/Oct/2011:16:00:14 -0400] cupsdReadClient: 11 OPTIONS * HTTP/1.1
D [20/Oct/2011:16:00:14 -0400] cupsdSetBusyState: Active clients
D [20/Oct/2011:16:00:14 -0400] cupsdAuthorize: No authentication data provided.
E [20/Oct/2011:16:00:14 -0400] Unable to encrypt connection from XXX.XXX.XXX.107 - A TLS packet with unexpected length was received.
D [20/Oct/2011:16:00:14 -0400] cupsdCloseClient: 11

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: cups 1.5.0-8ubuntu2
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Uname: Linux 3.0.0-12-generic i686
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 21 15:18:47 2011
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release i386 (20091028.5)
MachineType: Hewlett-Packard HP Compaq dc7900 Convertible Minitower
Papersize: letter
PpdFiles:
 McGill_Color: Xerox WorkCentre 7655, 2.6.0
 TEST_BURNSIDE1B28_5735_DP: Xerox WorkCentre 5655
 SMB_MCGILL_COLOR: Xerox WorkCentre 7655, 2.6.0
 McGill_Color-ks-dev: Xerox WorkCentre 7655, 2.6.0
 McGill_Mono: Xerox WorkCentre 5655
ProcEnviron:
 PATH=(custom, user)
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.0.0-12-generic root=UUID=4bbca573-e47d-4d26-88a7-fd4eac5d4167 ro quiet splash vt.handoff=7
SourcePackage: cups
UpgradeStatus: Upgraded to oneiric on 2011-10-18 (3 days ago)
dmi.bios.date: 03/05/2009
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 786G1 v01.16
dmi.board.asset.tag: CAC91402JW
dmi.board.name: 3032h
dmi.board.vendor: Hewlett-Packard
dmi.chassis.asset.tag: CAC91402JW
dmi.chassis.type: 6
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr786G1v01.16:bd03/05/2009:svnHewlett-Packard:pnHPCompaqdc7900ConvertibleMinitower:pvr:rvnHewlett-Packard:rn3032h:rvr:cvnHewlett-Packard:ct6:cvr:
dmi.product.name: HP Compaq dc7900 Convertible Minitower
dmi.sys.vendor: Hewlett-Packard

[Till Kamppeter (till-kamppeter)]

Are you using the Unity or the GNOME shell (classic) desktop? If you are using the latter, can you switch to Unity and see whether printing works correctky there for you?

Can you check whether a system-config-printer-applet process is running on your system?

[Chris Poupart (chris-poupart)]

Hi. Running Unity and it does indeed appear as though 'system-config-printer-applet' is running.

I will add, if I print over smb to a windows server, I am still prompted to provide my username and password. This only fails over ipp.

I also tried the same setup on a brand new Ubuntu 11.10 setup, and the results were the same.

[Robert Bradley (robert-bradley1)]

Does this happen if you use IPP without TLS too?

[Chris Poupart (chris-poupart)]

Yes, the problem continues if I drop TLS. This is what I did to test:

On the server I removed the certificate information, and I put "DefaultEncryption Never"

Then on the client, just to be sure, I set the URI as such: ipp://192.168.122.65:631/printers/TestPrinter?encryption=never

Thus, the server should not request TLS, and the client should not request TLS.

The status on the client is this:

-------<start>------
processing since
Mon 31 Oct 2011 10:08:33 AM EDT
"Unable to get printer status."
-------<end>-------

After "pending" for a few minutes.

No errors in the server error log.

If I remove the authentication requirement, the job goes through no problem.

[Robert Bradley (robert-bradley1)]

Thanks Chris - I haven't started looking yet, but I should be able to recreate a similar setup here quite easily for testing (Lucid server, Oneiric client). With no TLS, it will be straightforward to see what is happening at the wire level too - but I don't expect that I will gain much from that.

[Robert Bradley (robert-bradley1)]

Chris, would you be willing to test the attached patch on your system and see if it works for you? In my test, test prints from the "Printing" applet did not prompt for the username/password, but printing from gedit etc. did prompt.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "Patch to set auth_info_required="username,password" in the places it was missed." of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-sponsors please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

[Chris Poupart (chris-poupart)]

I am not that familiar with patching. If I grab the source package, can I put this patch in "debian/patches", change the "changelog" and run a dpkg-buildpackage and expect the patch to be applied?

Or do I have to patch the ipp.c file first, then build the package?

Thanks!

[Robert Bradley (robert-bradley1)]

If I'm not mistaken, using dpkg-buildpackage would give you a source package that applies the patch, but you would still have to build the source anyway.

The way I did it is by doing:

mkdir cups-source
cd cups-source
apt-get source cups
cd cups-1.5.0
patch -p1 < patchfile
./configure
make
sudo make install

You'll need to install the po4a package first (and gcc etc.).

[Sebastien Bacher (seb128)]

Till, what do you think about the patch there?

[Duck Tayp (ducktayp)]

I seem to have the same problem:
I'm trying to print from an ubuntu machine (11.10) to a windows IPP server with authentication (IPP over http, without encryption). The client never asks for authentication details and printing fails. Running wireshark shows the print server returns an "HTTP 401 Unauthorized" response with a "WWW-Authenticate:" header that the client appears to ignore.

I tried printing (and setting up the printer) under unity and kubuntu -- both showed the same symptoms.

Compiling CUPS 1.5.0 with the patch above didn't help, but manually downgrading to 1.4.6 (from natty) did solve this problem (at least to the extent that the client asks for a username/password and successfully sends data to the print server).

[Robert Bradley (robert-bradley1)]

Duck Tayp: would it be possible for you to attach those wireshark logs please? I'm wondering if there's something going on like an unsupported authentication type (Digest authentication maybe?), in addition to the issue the last patch covered.

[Till Kamppeter (till-kamppeter)]

IPP backend reverted to the version of CUPS 1.4.x to fix bug 881843, bug 877958, bug 879625, and bug 883585 for the time being until the backend gets fixed upstream. Applied this to the Debian BZR repository of CUPS so that the fix will appear in the next CUPS package for Precise and also applied to a Stable Release Update (SRU) CUPS package for Oneiric which I have uploaded to -proposed. As soon as this package gets approved and ready for testing on Oneiric, a separate comment with testing instructions will get posted here. Please test the package then and report back here, so that we can make it an official update.

A debdiff of the SRU for Oneiric is attached.

Robert Bradley, thank you for all the work on these bugs and the downgrade patch for the IPP backend.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cups - 1.5.0-13

---------------
cups (1.5.0-13) unstable; urgency=low

  [ Till Kamppeter ]
  * debian/patches/ipp-patch-r8950+.patch: Revert the IPP backend to the state
    of CUPS 1.4.x, as the 1.5.x versiuon has major regressions (LP: #877958,
    LP: #879625, LP: #881843, LP: #883585, Closes: #638521, CUPS STR #3966,
    CUPS STR #3967). This patch will get removed as soon as upstream has fixed
    all these regressions. As upstream did not announce any new features for
    the IPP backend in the release notes for 1.5.x, we assume that with this
    step no features will get lost.
  * debian/patches/dont-send-malformed-dbus-messages.patch: Do not send D-Bus
    notifications with too few parameters when there are parameters which
    cannot be added to the D-Bus request, especially invalid UTF-8 strings.
    This made gnome-session-daemon crash (LP: #893676, CUPS STR #3984).
  * debian/local/filters/cpdftocps: The cpdftocps filter (used for PostScript
    printers and for drivers with PPDs which are not PDF-aware) did not
    recognize the duplex setting correctly, making duplex not working on
    many common printers (LP: #897723).
  * debian/local/filters/cpdftocps: Cleaned up the header comments.

  [ Martin-Éric Racine ]
  * [cups.postrm]: purge /etc/cups/ssl/server.[crt|key] and /etc/cups/ssl.

  [ Martin Pitt ]
  * debian/compat: Bump from 5 to 9, this apparently was forgotten in the
    Multi-Arch transition.
 -- Martin Pitt <email address hidden> Fri, 02 Dec 2011 11:05:51 +0100

[Martin Pitt (pitti)]

Hello Chris, or anyone else affected,

Accepted cups into oneiric-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Robert Bradley (robert-bradley1)]

I have filed this upstream at http://www.cups.org/str.php?L3985, so hopefully we can get this fixed in CUPS 1.5 without having to downgrade the IPP backend to 1.4.x (as the oneiric-proposed package does).

[Chris Poupart (chris-poupart)]

Unfortunately, I have been unable to confirm that this patch, and indeed that the package currently in proposed, actually fixes the problem.

I just built a fresh Oneiric machine, patched it, then installed cups, cups-clients and cups-bsd from oneiric-proposed.

After that, I tried adding a printer via the web interface (http://localhost:631), which fails. I was able to add a printer via the GUI, but when I attempt to print a test page using the printer GUI, that does not prompt me for authentication information, and then the job fails.

When trying to print from, say, Firefox, things still fail.

Next up, I will try downgrading CUPS as per Duck Tayp.

FYI, in our case, authentication is "basic", between two cups servers. No digest or anything else.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cups - 1.5.0-8ubuntu6

---------------
cups (1.5.0-8ubuntu6) oneiric-proposed; urgency=low

  * debian/patches/ipp-patch-r8950+.patch: Revert the IPP backend to the state
    of CUPS 1.4.x, as the 1.5.x versiuon has major regressions (LP: #877958,
    LP: #879625, LP: #881843, LP: #883585, Closes: #638521, CUPS STR #3966,
    CUPS STR #3967). This patch will get removed as soon as upstream has fixed
    all these regressions. As upstream did not announce any new features for
    the IPP backend in the release notes for 1.5.x, we assume that with this
    step no features will get lost.
  * debian/patches/dont-send-malformed-dbus-messages.patch: Do not send D-Bus
    notifications with too few parameters when there are parameters which
    cannot be added to the D-Bus request, especially invalid UTF-8 strings.
    This made gnome-session-daemon crash (LP: #893676, CUPS STR #3984).
  * debian/local/filters/cpdftocps: The cpdftocps filter (used for PostScript
    printers and for drivers with PPDs which are not PDF-aware) did not
    recognize the duplex setting correctly, making duplex not working on
    many common printers (LP: #897723).
  * debian/local/filters/cpdftocps: Cleaned up the header comments.
 -- Till Kamppeter <email address hidden> Tue, 29 Nov 2011 21:49:41 +0100

[Chris Poupart (chris-poupart)]

Just tested on a clean install, after an "apt-get update && apt-get upgrade" this package was installed form the standard repositories.

Unfortunately, it does not fix the problem, and as I stated in comment #18, it introduces new bugs such as the inability to add an IPP printer via the CUPS web interface.

Wish that I had better news. :(

[George Kappel (george-kappel)]

Seeing same issue, with latest updates from proposed applied

[Duck Tayp (ducktayp)]

This patch does not work for me either. The printing front-end does ask for a password now (at least when printing from evince), but a wireshark trace shows that the authentication info is not being sent to the server.

[Till Kamppeter (till-kamppeter)]

Seeems that the downgrade of the IPP CUPS backend does not cover this bug, meaning that the bug was already there in CUPS 1.4. Robert, do you have an idea how to fix this bug in Oneiric?

[Till Kamppeter (till-kamppeter)]

Re-opening as downgrade of the "ipp" CUPS backend does not cover this bug.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cups - 1.5.2-1

---------------
cups (1.5.2-1) precise; urgency=low

  [ Till Kamppeter ]
  * New upstream release
  * debian/patches/00svn_gif_overflow.patch,
    debian/patches/cups-driverd-recognize-cached-drv-generated-ppds.patch,
    debian/patches/dont-send-malformed-dbus-messages.patch,
    debian/patches/execute-commandtops-commands.patch,
    debian/patches/usb-backend-gracefully-fail-on-more-cases-of-bad-device-id.patch,
    debian/patches/usb-backend-skip-set-configuration-set-interface.patch:
    Removed, included upstream.
  * debian/patches/ipp-patch-r8950+.patch,
    debian/patches/ipp-backend-fails-to-trigger-authentication-prompts.patch,
    debian/patches/ipp-backend-missing-document-type.patch,
    debian/patches/ipp-backend-http-1.0-fallback-fix.patch: Replaced patch
    for downgrading to the IPP backend to the version of CUPS 1.4.x by patches
    for the current backend (LP: #879625, LP: #881843, CUPS STR #3985,
    CUPS STR #3986, CUPS STR #3988, thanks to Robert Bradley, robert dot
    bradley1 at gmail dot com, for the patches).
  * debian/patches/drop_unnecessary_dependencies.patch: Updated patch to
    add "-lm" to the linker command line, libcups uses the "fmod()" function
    now.
  * debian/patches/cups-avahi.patch,
    debian/patches/usb-backend-libusb-1.0.patch,
    debian/patches/printer-filtering.patch:
    Manually regenerated to adapt to upstream changes.
  * debian/patches/pidfile.patch,
    debian/patches/rootbackends-worldreadable.patch,
    debian/patches/colord-support.patch,
    debian/patches/airprint-support.patch,
    debian/patches/no-conffile-timestamp.patch,
    debian/patches/read-embedded-options-from-incoming-postscript-and-add-to-ipp-attrs.patch,
    debian/patches/do-not-broadcast-with-hostnames.patch,
    debian/patches/do-not-suppress-inputslot-setting-with-empty-ap-d-inputslot.patch,
    debian/patches/confdirperms.patch,
    debian/patches/show-compile-command-lines.patch,
    debian/patches/log-debug-history-nearly-unlimited.patch,
    debian/patches/dnssd-reg-array-linear-search.patch:
    Refreshed using quilt.
  * debian/patches/fix-supply-level-computation-for-percent-supply-unit.patch,
    debian/patches/fix-supply-levels-for-enumerated-prtmarkersupplieslevel.patch,
    debian/patches/fix-status-reports-when-supply-levels-grow.patch:
    The printer supply levels reported via SNMP, according to the printer MIB
    were not correctly interpreted (LP: #925086, CUPS STR #4016, thanks to
    Peter Hurley, peter at hurleysoftware dot com, for the patches).
  * debian/patches/add-status-reports-for-full-waste-trays-and-cleaner-unit-eol.patch:
    Added status reports for waste tray status and cleaner unit end-of-life
    (LP: #925086, CUPS STR #4017, thanks to Peter Hurley, peter at
    hurleysoftware dot com, for the patch).
  * debian/patches/match-marker-colorants-which-use-non-standard-string.patch:
    Try harder to match supply colorant values (LP: #925086, CUPS STR #4019,
    thanks to Peter Hurley, peter at hurleysoftware dot com, for the patch).
  * debian/patches/truncate-marker-supply-names-at-comma.patch: Commas in
    marker supply names mi...

[Gianluca Cecchi (gianluca-cecchi)]

Hello,
I would like to test a fix for Ubuntu 11.10. Currently it suffers the same bug.
Any link to download proposed fixes?
I tried enabling testing repos but no package with the fix available...

I'm working in parallel to solve the problem with Fedora 16 too, and I successfully tested a patched package.
See in case here:
https://bugzilla.redhat.com/show_bug.cgi?id=810007

Thanks in advance.
Gianluca

[Gianluca Cecchi (gianluca-cecchi)]

toc toc... any update on this?
the bugzilla I personally opened against Fedora 16 on 4/4/2012 has now an official resolution patch released in updates-testing repository; and update submitted for upcoming Fedora 17 too

Here I can't neither see an assignee nor a public proposed patch.....
Is this Ubuntu way of providing community support?

Hope to see some news, this bug is open 6 months now, with in theory a test patch released and with importance set to "high"...
At least change importance field if you don't mind to give a solution....
I'm going to tell my infrastructure team we have to mark newer distros of Ubuntu as not supported as client platform.
unfortunaltely printing services are not under my domain, and I have to go wth ipp over https ... ;-(

Thanks anyway
Gianluca

[Till Kamppeter (till-kamppeter)]

Sorry for the late reply. There were more urgent things coming up.

The CUPS patch mentioned in the Red Hat bug report is applied to our CUPS package. Our IPP backend is the SVN snapshot of March 14 and the said patch was introduced on Feb 14.

So we have even a bunch more fixes. I hope these do not introduce a regression.

So you most probably have the IPP backend of CUPS 1.5.2 plus the patch of SVN rev 10277. I have the state of SVN rev 10325. Most suspect for me for being the culprit of a regression is SVN rev 10287.

I recommend you to report a bug upstream (http://www.cups.org/str.php) telling that current SVN rev 10325 which is what Ubuntu uses causes the problem. Add references to the Red Hat bufg and tell that CUPS 1.5.2 + rev 10277 only works, so that the other patches between 1.5.2 and rev 10325 must have introduced a regression.

Please do all tests and traffic capturing which you have done for the Red Hat bug also on Precise and add the results to the upstream bug.

Post a link to the upstream bug here.

If this will get fixed upstream I will issue a Stable Release Update (SRU) for Precise to make the fix available for all users.

[Gianluca Cecchi (gianluca-cecchi)]

Thanks for feedback.
But I don't find a way to download and install the package/s you are referring to on my ubuntu 11.10.
Possbly me not being able to use launchpad correctly.
I only see this inside the "patches" box here:

 Patch to set auth_info_required="username,password" in the places it was missed. (edit)
 cups_1.5.0-8ubuntu5_1.5.0-8ubuntu6.debdiff (edit)

or do you mean that there isn't a prepackaged cups I can "simply" install and test on my Oneiric and instead I have to go with sources?
At the moment my Oneiric test desktop is fully updated and in update manager the software sources pre-released updates and unsupported updates are NOT activated. I manually installed this one and it doesn't work, that is what is inside oneiric-proposed repo

dpkg -l
gives
1.5.0-8ubuntu7

Or can I manually run on Ubuntu a command similar to this one I use on Fedora, when configuring a particular repo but not enabling it as default:

yum --enablerepo updates-testing update cups

Gianluca

[Gianluca Cecchi (gianluca-cecchi)]

Also, I understood that actually a bug upstream was already opened as in comment#17 ...
http://www.cups.org/str.php?L3985
Isn't it?

[Gianluca Cecchi (gianluca-cecchi)]

Sorry for the noise: passing from 1.5.0-8ubuntu6 to 1.5.0-8ubuntu7 in cups web nterface it doesn't show me the opportunity to set https as protocol for ipp.
Only ipp and http

[Till Kamppeter (till-kamppeter)]

You do not need any special packages. The bug is supposed to be fixed in Precise. Release is the coming Thursday, but if it is urgent installing its latest snapshot today should already be stable enough (or beta 2 and then installing all updates). For your testing simply update your Precise system to the current state, ending up with cups 1.5.2-9ubuntu1. This package has already all mentioned patches applied.

If it still fails then for the tests you did in the Red Hat bug report ipptool is needed, it is probably already installed, as under Ubuntu it is in the cups-client package. If some other tool is missing, entering the command line will show a message telling with which command you can install the missing tool.

Note that in Oneiric the last fix (1.5.2-1, comment #25) did not get backported.

You can also test with a Precise Live CD before upgrading your system to Precise. The fix should already be on the beta2 live CD.

[Gianluca Cecchi (gianluca-cecchi)]

My request was for Oneiric user base, because I have to support allo the students using Ubuntu right now and needing to access campus printers that are configured with ipp+https (and the printing system is not under my control, I'm a final user from this point of view).
Current mainstream is Oneiric, so I think priority should be given to it, not to beta version, aka Precise.
It is not so fair to say to my users to update to Precise to solve their printing problems....

[Gianluca Cecchi (gianluca-cecchi)]

I see that now the official default download is 12.04, and it should have the fix, correct?
I'm going to try "rolling update" my test desktop from Oeniric to Precise to see and confirm (any suggestions? supported in place?).
In the mean time, can anyone put some attention to a backport fix for Oneiric too?
Thanks in advance

Gianluca

[Duck Tayp (ducktayp)]

The upgrade to 12.04 didn't solve the problem for me (at least for kubuntu). The kde apps still don't ask for authentication (e.g., okular); gnome apps (e.g., evince) do ask for authentication, but it doesn't print and the print monitor shows the job as "Held". This is with 1.5.2-9ubuntu1.

[Tomi Silander (tomi-silander)]

Same for me with 12.04. The job is held for authentication, but the system does not ever open the window for authentication
after printing (attempt). However, selecting "authenticate" from the printer queue brings up the authentication dialog and after
filling user id and password the printing works.

[Gianluca Cecchi (gianluca-cecchi)]

Hello,
my update in place to 12.04 was successful.
I can now print.

From reading upstream, it seems that the first print job doesn't get authentication and you have to delete it..
hen you are able to print. So I proceeded this way:
- print from firefox
No authentication box
- in cups web administration page I see the job as failed
- delete job
- start another job in firefox
Now I get the authorization window and am able to print

NOTE: I don't know if it is a problem of the windows print server in place I'm using, but with the default settings the print job keeps staying in "waiting to complete". So that if you run another job, it stays on hold because the former has not completed. I found that putting the settings advised in my Fedora bugzilla solved the problem:
see https://bugzilla.redhat.com/show_bug.cgi?id=810007#c20

[Mathew Hodson (mhodson)]

The fixed package cups 1.5.2-1 has not made it to oneiric-proposed, so removing the verification-needed tag as there is nothing to verify.

[Rolf Leggewie (r0lf)]

oneiric has seen the end of its life and is no longer receiving any updates. Marking the oneiric task for this ticket as "Won't Fix".