help/spec-ppd.html \
help/spec-raster.html \
help/spec-stp.html \
- help/translation.html \
- help/whatsnew.html
+ help/translation.html
#
<H2 CLASS="title"><A NAME="BEGIN">Where Do I Begin?</A></H2>
-<P>Click on the <A HREF="http://localhost:631/admin">Administration</A> tab at
-the top of this page. Click on the <VAR>Add Printer</VAR> button and follow the
-prompts.</P>
+<P>Click on the <var>Administration</var> tab at the top of this page. Click on the <var>Add Printer</var> button and follow the prompts.</P>
-<BLOCKQUOTE>When you are asked for a username and password, enter your login
-username and password or the "root" username and password. On MacOS X, the login
-username (or "short name") is typically your first and last name in
-lowercase.</BLOCKQUOTE>
+<BLOCKQUOTE>When you are asked for a username and password, enter your login username and password or the "root" username and password. On OS X<sup>®</sup>, the login username (or "short name") is typically your first and last name in lowercase.</BLOCKQUOTE>
<P>After the printer is added, CUPS will ask you to set the default printer
options (paper size, output mode, etc.) for the printer. Make any changes as
username and password information - this is the default on
MacOS X and systems with GNU TLS or OpenSSL installed.</P></LI>
- <LI>Digest authentication uses an MD5 checksum of the
- username, password, and domain ("CUPS"), so the original
- username and password is not sent over the network.
-
- <P>The current implementation does not authenticate the
- entire message and uses the client's IP address for the
- nonce value, making it possible to launch "man in the
- middle" and replay attacks from the same client.</P>
-
- <P><B>Recommendation:</B> Enable encryption to hide the
- username and password information.</P></LI>
-
<LI>Local certificate authentication passes 128-bit
"certificates" that identify an authenticated user.
Certificates are created on-the-fly from random data and
<P><B>Recommendation:</B> None.</P></LI>
- <LI>Flooding the network with broadcast packets on port
- 631.
-
- <P>It might be possible to disable browsing if this
- condition is detected by the CUPS software, however if
- there are large numbers of printers available on the
- network such an algorithm might think that an attack was
- occurring when instead a valid update was being
- received.</P>
-
- <P><B>Recommendation:</B> Block browse packets from
- foreign or untrusted networks using a router or
- firewall.</P></LI>
-
<LI>Sending partial IPP requests; specifically, sending
part of an attribute value and then stopping
transmission.
<H2 CLASS="title"><A NAME="ENCRYPTION">Encryption Issues</A></H2>
-<P>CUPS supports 128-bit SSL 3.0 and TLS 1.0 encryption of
-network connections via the OpenSSL, GNU TLS, and CDSA encryption
-libraries. In additional to the potential security issues posed
-by the SSL and TLS protocols, CUPS currently has the following
-additional issue:</P>
-
-<OL>
-
- <LI>Certification validation/revocation; currently CUPS
- does not validate or revoke server or client certificates
- when establishing a secure connection. This can
- potentially lead to "man in the middle" and
- impersonation/spoofing attacks over unsecured networks.
- Future versions of CUPS will support both validation and
- revocation of server certificates.
-
- <P><B>Recommendation:</B> Do not depend on encryption for
- security when connecting to servers over the Internet or
- untrusted WAN links.</P></LI>
-
-</OL>
+<P>CUPS supports 128-bit TLS encryption of network connections via the GNU TLS library, OS X Security framework, and Windows SSPI APIs. Secure deployment of TLS depends on proper certificate management and software maintenance.</P>
</BODY>
</HTML>
<PRE CLASS="command">
tools/testrpm
-sudo rpm -U /usr/src/redhat/RPMS/i386/cups*.rpm
+sudo rpm -U /usr/src/redhat/RPMS/{arm,i386,x64_64}/cups*.rpm
sudo tools/testosx
open cups.pkg
<H4>Config Files</H4>
-<P>The scheduler uses several configuration files to store the server settings (<A HREF="
ref-cupsd-conf.html">cupsd.conf</A>), available classes (<A HREF="ref-classes-conf.html">classes.conf</A>), available printers (<A HREF="ref-printers-conf.html">printers.conf</A>), current notification subscriptions (<A HREF="ref-subscriptions-conf.html">subscriptions.conf</A>), and supported file types and filters (<A HREF="man-mime.types.html">mime.types</A>, <A HREF="man-mime.convs.html">mime.convs</A>). In addition, PostScript Printer Description ("PPD") files or interface scripts are associated with each printer, and the scheduler has cache files for remote printers, PPD files, and current jobs to optimize the scheduler's startup speed and availability.</P>
+<P>The scheduler uses several configuration files to store the server settings (<A HREF="
man-cupsd.conf.html">cupsd.conf</A>), available classes (<A HREF="man-classes.conf.html">classes.conf</A>), available printers (<A HREF="man-printers.conf.html">printers.conf</A>), current notification subscriptions (<A HREF="man-subscriptions.conf.html">subscriptions.conf</A>), and supported file types and filters (<A HREF="man-mime.types.html">mime.types</A>, <A HREF="man-mime.convs.html">mime.convs</A>). In addition, PostScript Printer Description ("PPD") files or interface scripts are associated with each printer, and the scheduler has cache files for remote printers, PPD files, and current jobs to optimize the scheduler's startup speed and availability.</P>
<H4>Job Files</H4>
<H4>Log Files</H4>
-<P>The scheduler keeps three kinds of log files which are normally stored in the <VAR>/var/log/cups</VAR> directory. The <A HREF="ref-access_log.html">access_log</A> file lists every HTTP and IPP request that is processed by the scheduler. The <A HREF="ref-error_log.html">error_log</A> file contains messages from the scheduler and its helper applications that can be used
-to track down problems. The <A HREF="ref-page_log.html">page_log</A> file lists every page that is printed, allowing for simple print accounting.</P>
+<P>The scheduler keeps three kinds of log files which are normally stored in the <VAR>/var/log/cups</VAR> directory. The <A HREF="man-cupsd-logs.html">access_log</A> file lists every HTTP and IPP request that is processed by the scheduler. The <A HREF="man-cupsd-logs.html">error_log</A> file contains messages from the scheduler and its helper applications that can be used
+to track down problems. The <A HREF="man-cupsd-logs.html">page_log</A> file lists every page that is printed, allowing for simple print accounting.</P>
<P>Log files are rotated automatically by the scheduler when they reach the configured size limit, by default 1MB. If the limit is set to 0 then no rotation is performed in the scheduler - this mode is often used by Linux distributions so they can use the <B>logrotated(8)</B> program to rotate them instead.</P>
<dd>The client OPTIONALLY supplies one or more authentication values as specified by the "auth-info-required" attribute.
- <dt>"job-billing" (text(MAX)):<span class='info'>CUPS 1.1</span>
+ <dt>"job-billing" (text(MAX))<span class='info'>CUPS 1.1</span> or
+ "job-account-id (text(MAX))"<span class='info'>CUPS 1.7</span>:
<dd>The client OPTIONALLY supplies a billing string that is logged
with the page accounting information.
<dd>The client OPTIONALLY supplies one or more authentication values as specified by the "auth-info-required" attribute.
- <dt>"job-billing" (text(MAX)):<span class='info'>CUPS 1.1</span>
+ <dt>"job-billing" (text(MAX))<span class='info'>CUPS 1.1</span> or
+ "job-account-id (text(MAX))<span class='info'>CUPS 1.7</span>:
<dd>The client OPTIONALLY supplies a billing string that is logged
with the page accounting information.
<p>The job-billing attribute provides a text value to associate with a job
for billing purposes.
+<blockquote><b>Note:</b> This attribute has been superceded by the "job-account-id" attribute defined in PWG 5100.11: Job and Printer Extensions - Set 2.</blockquote>
+
<h4><a name="job-cancel-after">job-cancel-after (integer(1:MAX))</a><span class='info'>CUPS 2.0</span></h4>
<p>The job-cancel-after attribute provides the maximum number of seconds that are allowed for processing a job.</p>
<H1 CLASS="title">CUPS PDF Format</H1>
-<P>CUPS PDF files (application/vnd.cups-pdf) are device-dependent
-PDF/A files that contain a job ticket information. These files
-are typically produced by the CUPS <CODE>pdftopdf</CODE> filter
-which handles job ticket generation, imposition, page labeling,
-scaling, and other formatting options requested by the user. CUPS
-PDF files are intended for direct consumption by a PDF-capable
-printer, PDF RIP, or the <CODE>pdftops</CODE> filter.</P>
-
-<P>More information will be posted here as the PDF workflow
-filters are added to CUPS.</P>
+<P>CUPS PDF files (application/vnd.cups-pdf) are device-dependent PDF files that contain a job ticket information.</P>
</BODY>
</HTML>
+++ /dev/null
-<HTML>
-<!-- SECTION: Getting Started -->
-<HEAD>
- <TITLE>What's New in CUPS 1.7</TITLE>
- <LINK REL="STYLESHEET" TYPE="text/css" HREF="../cups-printable.css">
-</HEAD>
-<BODY>
-
-<H1 CLASS="title">What's New in CUPS 1.7</H1>
-
-<P>This page provides a high-level outline of the changes in CUPS 1.7. If you have never used CUPS before, read the <A HREF="overview.html">"Overview of CUPS"</A> document instead.</P>
-
-<P>CUPS 1.7 is primarily a "polish" release. Users will appreciate improved support for paid, PIN, and release printing, as well as expanded support for printers conforming to the <a href="http://www.pwg.org/ipp/everywhere.html">IPP Everywhere</a> specification. Full support for this functionality depends on additional software from your operating system vendor.</p>
-
-<P>When supported by the printer or the remote server, CUPS now compresses print data sent over the network to greatly improve print speed and reduce bandwidth usage. This happens automatically when printing through IPP and is available as an option when using the <code>ipptool</code> utility.</P>
-
-<P>Developers can now enumerate supported sizes and option values, as well as query a printer to discovery which media is loaded, making it possible to easily build customized user interfaces without the use of printer drivers or PPD files.</P>
-
-</BODY>
-</HTML>
<div class="body">
<div class="row">
<h1>CUPS @CUPS_VERSION@</h1>
- <p>CUPS is the standards-based, open source printing system developed by <a href="http://www.apple.com/">Apple Inc.</a> for OS<sup>®</sup> X and other UNIX<sup>®</sup>-like operating systems.</p>
+ <p>CUPS is the standards-based, open source printing system developed by <a href="http://www.apple.com/">Apple Inc.</a> for OS X<sup>®</sup> and other UNIX<sup>®</sup>-like operating systems.</p>
</div>
<div class="row">
<div class="thirds">
<h2>CUPS for Users</h2>
<p><a href="help/overview.html">Overview of CUPS</a></p>
<p><a href="help/options.html">Command-Line Printing and Options</a></p>
- <p><a href="help/whatsnew.html">What's New in CUPS 1.7</a></p>
<p><a href="http://www.cups.org/lists.php?LIST=cups">User Forum</a></p>
</div>
<div class="thirds">
<h2>CUPS for Administrators</h2>
<p><a href="admin">Adding Printers and Classes</a></p>
<p><a href="help/policies.html">Managing Operation Policies</a></p>
- <p><a href="help/accounting.html">Printer Accounting Basics</a></p>
- <p><a href="help/security.html">Server Security</a></p>
- <p><a href="help/kerberos.html">Using Kerberos Authentication</a></p>
<p><a href="help/network.html">Using Network Printers</a></p>
- <p><a href="help/ref-cupsd-conf.html">cupsd.conf Reference</a></p>
- <p><a href="http://www.cups.org/ppd.php">Find Printer Drivers</a></p>
+ <p><a href="help/man-cupsd.conf.html">cupsd.conf Reference</a></p>
</div>
<div class="thirds">
<h2>CUPS for Developers</h2>
<p><a href="help/api-cups.html">CUPS API</a></p>
<p><a href="help/api-filter.html">Filter and Backend Programming</a></p>
<p><a href="help/api-httpipp.html">HTTP and IPP APIs</a></p>
- <p><a href="help/api-ppd.html">PPD API</a></p>
- <p><a href="help/api-raster.html">Raster API</a></p>
- <p><a href="help/ref-ppdcfile.html">PPD Compiler Driver Information File Reference</a></p>
<p><a href="http://www.cups.org/lists.php?LIST=cups-devel">Developer Forum</a></p>
</div>
</div>
<H1>Online Help</H1>
-<P>This is the CUPS online help interface. Enter search words
-above or click on any of the documentation links to display
-online help information.</P>
-
-<P>If you are new to CUPS, read the "<a
-href="/help/overview.html">Overview of CUPS</a>" page. Veteran users
-should read the "<a href="/help/whatsnew.html">What's New in CUPS
-1.6</a>" page.</P>
-
-<P>The <A HREF="http://www.cups.org/">CUPS home page</A> also
-provides many resources including user discussion forums, answers
-to frequently-asked questions, and a form for submitting bug
-reports and feature requests.</P>}
+<P>This is the CUPS online help interface. Enter search words above or click on any of the documentation links to display online help information.</P>
+
+<P>If you are new to CUPS, read the "<a href="/help/overview.html">Overview of CUPS</a>" page.</P>
+
+<P>The <A HREF="http://www.cups.org/">CUPS home page</A> also provides many resources including user discussion forums, answers to frequently-asked questions, and a form for submitting bug reports and feature requests.</P>}
projects / thirdparty / cups.git / commitdiff
