]>
Commit | Line | Data |
---|---|---|
1 | # | |
2 | # Configuration file for the CUPS scheduler. See "man cupsd.conf" for a | |
3 | # complete description of this file. | |
4 | # | |
5 | ||
6 | # Log general information in error_log - change "@CUPS_LOG_LEVEL@" to "debug" | |
7 | # for troubleshooting... | |
8 | LogLevel @CUPS_LOG_LEVEL@ | |
9 | @CUPS_PAGE_LOG_FORMAT@ | |
10 | ||
11 | # Only listen for connections from the local machine. | |
12 | Listen localhost:@DEFAULT_IPP_PORT@ | |
13 | @CUPS_LISTEN_DOMAINSOCKET@ | |
14 | ||
15 | # Show shared printers on the local network. | |
16 | Browsing On | |
17 | BrowseLocalProtocols @CUPS_BROWSE_LOCAL_PROTOCOLS@ | |
18 | ||
19 | # Default authentication type, when authentication is required... | |
20 | DefaultAuthType Basic | |
21 | ||
22 | # Web interface setting... | |
23 | WebInterface @CUPS_WEBIF@ | |
24 | ||
25 | # Restrict access to the server... | |
26 | <Location /> | |
27 | Order allow,deny | |
28 | </Location> | |
29 | ||
30 | # Restrict access to the admin pages... | |
31 | <Location /admin> | |
32 | Order allow,deny | |
33 | </Location> | |
34 | ||
35 | # Restrict access to configuration files... | |
36 | <Location /admin/conf> | |
37 | AuthType Default | |
38 | Require user @SYSTEM | |
39 | Order allow,deny | |
40 | </Location> | |
41 | ||
42 | # Restrict access to log files... | |
43 | <Location /admin/log> | |
44 | AuthType Default | |
45 | Require user @SYSTEM | |
46 | Order allow,deny | |
47 | </Location> | |
48 | ||
49 | # Set the default printer/job policies... | |
50 | <Policy default> | |
51 | # Job/subscription privacy... | |
52 | JobPrivateAccess default | |
53 | JobPrivateValues default | |
54 | SubscriptionPrivateAccess default | |
55 | SubscriptionPrivateValues default | |
56 | ||
57 | # Job-related operations must be done by the owner or an administrator... | |
58 | <Limit Create-Job Print-Job Print-URI Validate-Job> | |
59 | Order deny,allow | |
60 | </Limit> | |
61 | ||
62 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> | |
63 | Require user @OWNER @SYSTEM | |
64 | Order deny,allow | |
65 | </Limit> | |
66 | ||
67 | # All administration operations require an administrator to authenticate... | |
68 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> | |
69 | AuthType Default | |
70 | Require user @SYSTEM | |
71 | Order deny,allow | |
72 | </Limit> | |
73 | ||
74 | # All printer operations require a printer operator to authenticate... | |
75 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> | |
76 | AuthType Default | |
77 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
78 | Order deny,allow | |
79 | </Limit> | |
80 | ||
81 | # Only the owner or an administrator can cancel or authenticate a job... | |
82 | <Limit Cancel-Job CUPS-Authenticate-Job> | |
83 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
84 | Order deny,allow | |
85 | </Limit> | |
86 | ||
87 | <Limit All> | |
88 | Order deny,allow | |
89 | </Limit> | |
90 | </Policy> | |
91 | ||
92 | # Set the authenticated printer/job policies... | |
93 | <Policy authenticated> | |
94 | # Job/subscription privacy... | |
95 | JobPrivateAccess default | |
96 | JobPrivateValues default | |
97 | SubscriptionPrivateAccess default | |
98 | SubscriptionPrivateValues default | |
99 | ||
100 | # Job-related operations must be done by the owner or an administrator... | |
101 | <Limit Create-Job Print-Job Print-URI Validate-Job> | |
102 | AuthType Default | |
103 | Order deny,allow | |
104 | </Limit> | |
105 | ||
106 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> | |
107 | AuthType Default | |
108 | Require user @OWNER @SYSTEM | |
109 | Order deny,allow | |
110 | </Limit> | |
111 | ||
112 | # All administration operations require an administrator to authenticate... | |
113 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> | |
114 | AuthType Default | |
115 | Require user @SYSTEM | |
116 | Order deny,allow | |
117 | </Limit> | |
118 | ||
119 | # All printer operations require a printer operator to authenticate... | |
120 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> | |
121 | AuthType Default | |
122 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
123 | Order deny,allow | |
124 | </Limit> | |
125 | ||
126 | # Only the owner or an administrator can cancel or authenticate a job... | |
127 | <Limit Cancel-Job CUPS-Authenticate-Job> | |
128 | AuthType Default | |
129 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
130 | Order deny,allow | |
131 | </Limit> | |
132 | ||
133 | <Limit All> | |
134 | Order deny,allow | |
135 | </Limit> | |
136 | </Policy> | |
137 | ||
138 | # Set the kerberized printer/job policies... | |
139 | <Policy kerberos> | |
140 | # Job/subscription privacy... | |
141 | JobPrivateAccess default | |
142 | JobPrivateValues default | |
143 | SubscriptionPrivateAccess default | |
144 | SubscriptionPrivateValues default | |
145 | ||
146 | # Job-related operations must be done by the owner or an administrator... | |
147 | <Limit Create-Job Print-Job Print-URI Validate-Job> | |
148 | AuthType Negotiate | |
149 | Order deny,allow | |
150 | </Limit> | |
151 | ||
152 | <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> | |
153 | AuthType Negotiate | |
154 | Require user @OWNER @SYSTEM | |
155 | Order deny,allow | |
156 | </Limit> | |
157 | ||
158 | # All administration operations require an administrator to authenticate... | |
159 | <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> | |
160 | AuthType Default | |
161 | Require user @SYSTEM | |
162 | Order deny,allow | |
163 | </Limit> | |
164 | ||
165 | # All printer operations require a printer operator to authenticate... | |
166 | <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> | |
167 | AuthType Default | |
168 | Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
169 | Order deny,allow | |
170 | </Limit> | |
171 | ||
172 | # Only the owner or an administrator can cancel or authenticate a job... | |
173 | <Limit Cancel-Job CUPS-Authenticate-Job> | |
174 | AuthType Negotiate | |
175 | Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ | |
176 | Order deny,allow | |
177 | </Limit> | |
178 | ||
179 | <Limit All> | |
180 | Order deny,allow | |
181 | </Limit> | |
182 | </Policy> |