conf/cupsd.conf.in

   1 #
   2 # Configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
   3 # complete description of this file.
   4 #
   5
   6 # Log general information in error_log - change "@CUPS_LOG_LEVEL@" to "debug"
   7 # for troubleshooting...
   8 LogLevel @CUPS_LOG_LEVEL@
   9 @CUPS_PAGE_LOG_FORMAT@
  10
  11 # Only listen for connections from the local machine.
  12 Listen localhost:@DEFAULT_IPP_PORT@
  13 @CUPS_LISTEN_DOMAINSOCKET@
  14
  15 # Show shared printers on the local network.
  16 Browsing On
  17 BrowseLocalProtocols @CUPS_BROWSE_LOCAL_PROTOCOLS@
  18
  19 # Default authentication type, when authentication is required...
  20 DefaultAuthType Basic
  21
  22 # Web interface setting...
  23 WebInterface @CUPS_WEBIF@
  24
  25 # Restrict access to the server...
  26 <Location />
  27   Order allow,deny
  28 </Location>
  29
  30 # Restrict access to the admin pages...
  31 <Location /admin>
  32   Order allow,deny
  33 </Location>
  34
  35 # Restrict access to configuration files...
  36 <Location /admin/conf>
  37   AuthType Default
  38   Require user @SYSTEM
  39   Order allow,deny
  40 </Location>
  41
  42 # Restrict access to log files...
  43 <Location /admin/log>
  44   AuthType Default
  45   Require user @SYSTEM
  46   Order allow,deny
  47 </Location>
  48
  49 # Set the default printer/job policies...
  50 <Policy default>
  51   # Job/subscription privacy...
  52   JobPrivateAccess default
  53   JobPrivateValues default
  54   SubscriptionPrivateAccess default
  55   SubscriptionPrivateValues default
  56
  57   # Job-related operations must be done by the owner or an administrator...
  58   <Limit Create-Job Print-Job Print-URI Validate-Job>
  59     Order deny,allow
  60   </Limit>
  61
  62   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
  63     Require user @OWNER @SYSTEM
  64     Order deny,allow
  65   </Limit>
  66
  67   # All administration operations require an administrator to authenticate...
  68   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
  69     AuthType Default
  70     Require user @SYSTEM
  71     Order deny,allow
  72   </Limit>
  73
  74   # All printer operations require a printer operator to authenticate...
  75   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
  76     AuthType Default
  77     Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
  78     Order deny,allow
  79   </Limit>
  80
  81   # Only the owner or an administrator can cancel or authenticate a job...
  82   <Limit Cancel-Job CUPS-Authenticate-Job>
  83     Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
  84     Order deny,allow
  85   </Limit>
  86
  87   <Limit All>
  88     Order deny,allow
  89   </Limit>
  90 </Policy>
  91
  92 # Set the authenticated printer/job policies...
  93 <Policy authenticated>
  94   # Job/subscription privacy...
  95   JobPrivateAccess default
  96   JobPrivateValues default
  97   SubscriptionPrivateAccess default
  98   SubscriptionPrivateValues default
  99
 100   # Job-related operations must be done by the owner or an administrator...
 101   <Limit Create-Job Print-Job Print-URI Validate-Job>
 102     AuthType Default
 103     Order deny,allow
 104   </Limit>
 105
 106   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
 107     AuthType Default
 108     Require user @OWNER @SYSTEM
 109     Order deny,allow
 110   </Limit>
 111
 112   # All administration operations require an administrator to authenticate...
 113   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
 114     AuthType Default
 115     Require user @SYSTEM
 116     Order deny,allow
 117   </Limit>
 118
 119   # All printer operations require a printer operator to authenticate...
 120   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
 121     AuthType Default
 122     Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
 123     Order deny,allow
 124   </Limit>
 125
 126   # Only the owner or an administrator can cancel or authenticate a job...
 127   <Limit Cancel-Job CUPS-Authenticate-Job>
 128     AuthType Default
 129     Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
 130     Order deny,allow
 131   </Limit>
 132
 133   <Limit All>
 134     Order deny,allow
 135   </Limit>
 136 </Policy>
 137
 138 # Set the kerberized printer/job policies...
 139 <Policy kerberos>
 140   # Job/subscription privacy...
 141   JobPrivateAccess default
 142   JobPrivateValues default
 143   SubscriptionPrivateAccess default
 144   SubscriptionPrivateValues default
 145
 146   # Job-related operations must be done by the owner or an administrator...
 147   <Limit Create-Job Print-Job Print-URI Validate-Job>
 148     AuthType Negotiate
 149     Order deny,allow
 150   </Limit>
 151
 152   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
 153     AuthType Negotiate
 154     Require user @OWNER @SYSTEM
 155     Order deny,allow
 156   </Limit>
 157
 158   # All administration operations require an administrator to authenticate...
 159   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
 160     AuthType Default
 161     Require user @SYSTEM
 162     Order deny,allow
 163   </Limit>
 164
 165   # All printer operations require a printer operator to authenticate...
 166   <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
 167     AuthType Default
 168     Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
 169     Order deny,allow
 170   </Limit>
 171
 172   # Only the owner or an administrator can cancel or authenticate a job...
 173   <Limit Cancel-Job CUPS-Authenticate-Job>
 174     AuthType Negotiate
 175     Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@
 176     Order deny,allow
 177   </Limit>
 178
 179   <Limit All>
 180     Order deny,allow
 181   </Limit>
 182 </Policy>