]>
Commit | Line | Data |
---|---|---|
ef416fc2 | 1 | # |
80693400 | 2 | # Configuration file for the CUPS scheduler. See "man cupsd.conf" for a |
18ecb428 | 3 | # complete description of this file. |
ef416fc2 | 4 | # |
5 | ||
1f0275e3 MS |
6 | # Log general information in error_log - change "@CUPS_LOG_LEVEL@" to "debug" |
7 | # for troubleshooting... | |
8 | LogLevel @CUPS_LOG_LEVEL@ | |
c9dcc485 | 9 | @CUPS_PAGE_LOG_FORMAT@ |
ef416fc2 | 10 | |
ef416fc2 | 11 | # Only listen for connections from the local machine. |
12 | Listen localhost:@DEFAULT_IPP_PORT@ | |
13 | @CUPS_LISTEN_DOMAINSOCKET@ | |
14 | ||
15 | # Show shared printers on the local network. | |
16 | Browsing On | |
c168a833 | 17 | BrowseLocalProtocols @CUPS_BROWSE_LOCAL_PROTOCOLS@ |
ef416fc2 | 18 | |
19 | # Default authentication type, when authentication is required... | |
20 | DefaultAuthType Basic | |
21 | ||
229681c1 MS |
22 | # Web interface setting... |
23 | WebInterface @CUPS_WEBIF@ | |
24 | ||
ef416fc2 | 25 | # Restrict access to the server... |
26 | <Location /> | |
27 | Order allow,deny | |
ef416fc2 | 28 | </Location> |
29 | ||
30 | # Restrict access to the admin pages... | |
31 | <Location /admin> | |
32 | Order allow,deny | |
ef416fc2 | 33 | </Location> |
34 | ||
35 | # Restrict access to configuration files... | |
36 | <Location /admin/conf> | |
bc44d920 | 37 | AuthType Default |
ef416fc2 | 38 | Require user @SYSTEM |
39 | Order allow,deny | |
ef416fc2 | 40 | </Location> |
41 | ||
fcad6032 MS |
42 | # Restrict access to log files... |
43 | <Location /admin/log> | |
44 | AuthType Default | |
45 | Require user @SYSTEM | |
46 | Order allow,deny | |
47 | </Location> | |
48 | ||
ef416fc2 | 49 | # Set the default printer/job policies... |
50 | <Policy default> | |
10d09e33 MS |
51 | # Job/subscription privacy... |
52 | JobPrivateAccess default | |
53 | JobPrivateValues default | |
54 | SubscriptionPrivateAccess default | |
c779abb0 | 55 | SubscriptionPrivateValues default |
10d09e33 | 56 | |
cc0d019f | 57 | # Job-related operations must be done by the owner or an administrator... |
c7017ecc MS |
58 | <Limit Create-Job Print-Job Print-URI Validate-Job> |
59 | Order deny,allow | |
60 | </Limit> | |
61 | ||
aaf19ab0 | 62 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> |
ef416fc2 | 63 | Require user @OWNER @SYSTEM |
64 | Order deny,allow | |
65 | </Limit> | |
66 | ||
cc0d019f | 67 | # All administration operations require an administrator to authenticate... |
ae71f5de | 68 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> |
bc44d920 | 69 | AuthType Default |
ef416fc2 | 70 | Require user @SYSTEM |
71 | Order deny,allow | |
72 | </Limit> | |
73 | ||
355e94dc | 74 | # All printer operations require a printer operator to authenticate... |
10d09e33 | 75 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> |
355e94dc | 76 | AuthType Default |
b9faaae1 | 77 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ |
355e94dc MS |
78 | Order deny,allow |
79 | </Limit> | |
80 | ||
ef416fc2 | 81 | # Only the owner or an administrator can cancel or authenticate a job... |
10d09e33 | 82 | <Limit Cancel-Job CUPS-Authenticate-Job> |
b9faaae1 | 83 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ |
ef416fc2 | 84 | Order deny,allow |
85 | </Limit> | |
86 | ||
87 | <Limit All> | |
88 | Order deny,allow | |
89 | </Limit> | |
90 | </Policy> | |
91 | ||
839a51c8 MS |
92 | # Set the authenticated printer/job policies... |
93 | <Policy authenticated> | |
10d09e33 MS |
94 | # Job/subscription privacy... |
95 | JobPrivateAccess default | |
96 | JobPrivateValues default | |
97 | SubscriptionPrivateAccess default | |
c779abb0 | 98 | SubscriptionPrivateValues default |
10d09e33 | 99 | |
839a51c8 | 100 | # Job-related operations must be done by the owner or an administrator... |
c7017ecc | 101 | <Limit Create-Job Print-Job Print-URI Validate-Job> |
c5571a1d MS |
102 | AuthType Default |
103 | Order deny,allow | |
104 | </Limit> | |
105 | ||
aaf19ab0 | 106 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> |
75bd9771 | 107 | AuthType Default |
839a51c8 MS |
108 | Require user @OWNER @SYSTEM |
109 | Order deny,allow | |
839a51c8 MS |
110 | </Limit> |
111 | ||
112 | # All administration operations require an administrator to authenticate... | |
113 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> | |
114 | AuthType Default | |
115 | Require user @SYSTEM | |
116 | Order deny,allow | |
117 | </Limit> | |
118 | ||
119 | # All printer operations require a printer operator to authenticate... | |
10d09e33 | 120 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> |
839a51c8 | 121 | AuthType Default |
b9faaae1 | 122 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ |
839a51c8 MS |
123 | Order deny,allow |
124 | </Limit> | |
125 | ||
126 | # Only the owner or an administrator can cancel or authenticate a job... | |
10d09e33 | 127 | <Limit Cancel-Job CUPS-Authenticate-Job> |
75bd9771 | 128 | AuthType Default |
b9faaae1 | 129 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ |
839a51c8 | 130 | Order deny,allow |
839a51c8 MS |
131 | </Limit> |
132 | ||
133 | <Limit All> | |
75bd9771 | 134 | Order deny,allow |
839a51c8 MS |
135 | </Limit> |
136 | </Policy> | |
5048d3ba MS |
137 | |
138 | # Set the kerberized printer/job policies... | |
139 | <Policy kerberos> | |
140 | # Job/subscription privacy... | |
141 | JobPrivateAccess default | |
142 | JobPrivateValues default | |
143 | SubscriptionPrivateAccess default | |
144 | SubscriptionPrivateValues default | |
145 | ||
146 | # Job-related operations must be done by the owner or an administrator... | |
147 | <Limit Create-Job Print-Job Print-URI Validate-Job> | |
148 | AuthType Negotiate | |
149 | Order deny,allow | |
150 | </Limit> | |
151 | ||
152 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> | |
153 | AuthType Negotiate | |
154 | Require user @OWNER @SYSTEM | |
155 | Order deny,allow | |
156 | </Limit> | |
157 | ||
158 | # All administration operations require an administrator to authenticate... | |
159 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> | |
160 | AuthType Default | |
161 | Require user @SYSTEM | |
162 | Order deny,allow | |
163 | </Limit> | |
164 | ||
165 | # All printer operations require a printer operator to authenticate... | |
166 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> | |
167 | AuthType Default | |
168 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
169 | Order deny,allow | |
170 | </Limit> | |
171 | ||
172 | # Only the owner or an administrator can cancel or authenticate a job... | |
173 | <Limit Cancel-Job CUPS-Authenticate-Job> | |
174 | AuthType Negotiate | |
175 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
176 | Order deny,allow | |
177 | </Limit> | |
178 | ||
179 | <Limit All> | |
180 | Order deny,allow | |
181 | </Limit> | |
182 | </Policy> |