conf/cupsd.conf.in

   1 #
   2 # "$Id: cupsd.conf.in 6720 2007-07-25 00:40:03Z mike $"
   3 #
   4 #   Sample configuration file for the Common UNIX Printing System (CUPS)
   5 #   scheduler.  See "man cupsd.conf" for a complete description of this
   6 #   file.
   7 #
   8
   9 # Log general information in error_log - change "info" to "debug" for
  10 # troubleshooting...
  11 LogLevel info
  12
  13 # Administrator user group...
  14 SystemGroup @CUPS_SYSTEM_GROUPS@
  15 @CUPS_SYSTEM_AUTHKEY@
  16
  17 # Only listen for connections from the local machine.
  18 Listen localhost:@DEFAULT_IPP_PORT@
  19 @CUPS_LISTEN_DOMAINSOCKET@
  20
  21 # Show shared printers on the local network.
  22 Browsing On
  23 BrowseOrder allow,deny
  24 BrowseAllow all
  25
  26 # Default authentication type, when authentication is required...
  27 DefaultAuthType Basic
  28
  29 # Restrict access to the server...
  30 <Location />
  31   Order allow,deny
  32 </Location>
  33
  34 # Restrict access to the admin pages...
  35 <Location /admin>
  36 @ENCRYPTION_REQUIRED@
  37   Order allow,deny
  38 </Location>
  39
  40 # Restrict access to configuration files...
  41 <Location /admin/conf>
  42   AuthType Default
  43   Require user @SYSTEM
  44   Order allow,deny
  45 </Location>
  46
  47 # Set the default printer/job policies...
  48 <Policy default>
  49   # Job-related operations must be done by the owner or an administrator...
  50   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
  51     Require user @OWNER @SYSTEM
  52     Order deny,allow
  53   </Limit>
  54
  55   # All administration operations require an administrator to authenticate...
  56   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  57     AuthType Default
  58     Require user @SYSTEM
  59     Order deny,allow
  60   </Limit>
  61
  62   # All printer operations require a printer operator to authenticate...
  63   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
  64     AuthType Default
  65     Require user @CUPS_DEFAULT_PRINTADMIN_AUTH@
  66     Order deny,allow
  67   </Limit>
  68
  69   # Only the owner or an administrator can cancel or authenticate a job...
  70   <Limit Cancel-Job CUPS-Authenticate-Job>
  71     Require user @OWNER @CUPS_DEFAULT_PRINTADMIN_AUTH@
  72     Order deny,allow
  73   </Limit>
  74
  75   <Limit All>
  76     Order deny,allow
  77   </Limit>
  78 </Policy>
  79
  80 # Set the authenticated printer/job policies...
  81 <Policy authenticated>
  82   # Job-related operations must be done by the owner or an administrator...
  83   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
  84     Require user @OWNER @SYSTEM
  85     Order deny,allow
  86     AuthType Default
  87     Satisfy any
  88   </Limit>
  89
  90   # All administration operations require an administrator to authenticate...
  91   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  92     AuthType Default
  93     Require user @SYSTEM
  94     Order deny,allow
  95   </Limit>
  96
  97   # All printer operations require a printer operator to authenticate...
  98   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
  99     AuthType Default
 100     Require user @CUPS_DEFAULT_PRINTADMIN_AUTH@
 101     Order deny,allow
 102   </Limit>
 103
 104   # Only the owner or an administrator can cancel or authenticate a job...
 105   <Limit Cancel-Job CUPS-Authenticate-Job>
 106     Require user @OWNER @CUPS_DEFAULT_PRINTADMIN_AUTH@
 107     Order deny,allow
 108     AuthType Default
 109     Satisfy any
 110   </Limit>
 111
 112   <Limit All>
 113     Order deny,allow
 114     AuthType Default
 115     Satisfy any
 116   </Limit>
 117 </Policy>
 118
 119 #
 120 # End of "$Id: cupsd.conf.in 6720 2007-07-25 00:40:03Z mike $".
 121 #