From: mike
-DefaultAuthType Basic -DefaultAuthType BasicDigest -DefaultAuthType Digest -DefaultAuthType Negotiate -- -
The DefaultAuthType
directive specifies the type
-of authentication to use for IPP operations that require a
-username. The default is Basic
.
-AccessLog /var/log/cups/access_log -AccessLog /var/log/cups/access_log-%s -AccessLog syslog -- -
The AccessLog
directive sets the name of the
-access log file. If the filename is not absolute then it is
-assumed to be relative to the ServerRoot
directory. The
-access log file is stored in "common log format" and can be used
-by any web access reporting tool to generate a report on CUPS
-server activity.
The server name can be included in the filename by using
-%s
in the name.
The special name "syslog" can be used to send the access -information to the system log instead of a plain file.
- -The default access log file is -@CUPS_LOGDIR@/access_log.
- -The default is to not allow classification overrides.
--ConfigFilePerm 0644 -ConfigFilePerm 0640 -- -
The ConfigFilePerm
directive specifies the permissions to use when the scheduler writes configuration and cache files, typically in response to IPP or HTTP requests. The default is @CUPS_CONFIG_FILE_PERM@.
Note: - -- - -The permissions for the printers.conf file are always masked to only allow access from the scheduler user (typically root). This is done because printer device URIs sometimes contain sensitive authentication information that should not be generally known on the system. There is no way to disable this security feature.
- -
-DataDir /usr/share/cups -- -
The DataDir
directive sets the directory to use
-for data files.
The default value is 30
(30 seconds).
-DocumentRoot /usr/share/doc/cups -DocumentRoot /foo/bar/doc/cups -- -
The DocumentRoot
directive specifies the location
-of web content for the HTTP server in CUPS. If an absolute path
-is not specified then it is assumed to be relative to the ServerRoot
directory. The
-default directory is @CUPS_DOCROOT@.
Documents are first looked up in a sub-directory for the
-primary language requested by the client (e.g.
-@CUPS_DOCROOT@/fr/...) and then directly under
-the DocumentRoot
directory (e.g.
-@CUPS_DOCROOT@/...), so it is possible to
-localize the web content by providing subdirectories for each
-language needed.
IfRequested
for all locations.
--ErrorLog /var/log/cups/error_log -ErrorLog /var/log/cups/error_log-%s -ErrorLog syslog -- -
The ErrorLog
directive sets the name of the error
-log file. If the filename is not absolute then it is assumed to
-be relative to the ServerRoot
directory. The
-default error log file is @CUPS_LOGDIR@/error_log.
The server name can be included in the filename by using
-%s
in the name.
The special name "syslog" can be used to send the error -information to the system log instead of a plain file.
- --FatalErrors none -FatalErrors all -FatalErrors browse -FatalErrors config -FatalErrors listen -FatalErrors log -FatalErrors permissions -FatalErrors all -permissions -FatalErrors config permissions log -- -
The FatalErrors
directive determines whether certain kinds of
-errors are fatal. The following kinds of errors are currently recognized:
none
- No errors are fatalall
- All of the errors below are fatalbrowse
- Browsing initialization errors are fatal,
- for example failed binding to the CUPS browse port or failed connections
- to LDAP serversconfig
- Configuration file syntax errors are
- fatallisten
- Listen or Port errors are fatal, except for
- IPv6 failures on the loopback or "any" addresseslog
- Log file creation or write errors are fatalpermissions
- Bad startup file permissions are
- fatal, for example shared SSL certificate and key files with world-
- read permissionsMultiple errors can be listed, and the form "-kind" can be used with
-all
to remove specific kinds of errors. The default setting is
-@CUPS_FATAL_ERRORS@
.
-FileDevice Yes -FileDevice No -- -
The FileDevice
directive determines whether the
-scheduler allows new printers to be added using device URIs of
-the form file:/filename
. File devices are most often
-used to test new printer drivers and do not support raw file
-printing.
The default setting is No
.
Note: - -- -File devices are managed by the scheduler. Since the -scheduler normally runs as the root user, file devices -can be used to overwrite system files and potentially -gain unauthorized access to the system. If you must -create printers using file devices, we recommend that -you set the
- -FileDevice
directive to -Yes
for only as long as you need to add the -printers to the system, and then reset the directive to -No
.
-FontPath /foo/bar/fonts -FontPath /usr/share/cups/fonts:/foo/bar/fonts -- -
The FontPath
directive specifies the font path to
-use when searching for fonts. The default font path is
-/usr/share/cups/fonts
.
-Group lp -Group nobody -- -
The Group
directive specifies the UNIX group that
-filter and CGI programs run as. The default group is
-system-specific but is usually lp
or
-nobody
.
The Include
directive includes the named file in
the cupsd.conf
file. If no leading path is provided,
the file is assumed to be relative to the ServerRoot
directory.
ServerRoot
directory.
-LogFilePerm 0644 -LogFilePerm 0600 -- -
The LogFilePerm
directive specifies the
-permissions to use when writing log files. The default
-is @CUPS_LOG_FILE_PERM@.
The LogLevel
directive specifies the level of
-logging for the ErrorLog
+logging for the ErrorLog
file. The following values are recognized (each level logs
everything under the preceding levels):
Location
or Limit
section.
--PageLog /var/log/cups/page_log -PageLog /var/log/cups/page_log-%s -PageLog syslog -- -
The PageLog
directive sets the name of the page
-log file. If the filename is not absolute then it is assumed to
-be relative to the ServerRoot
directory. The
-default page log file is @CUPS_LOGDIR@/page_log.
The server name can be included in the filename by using
-%s
in the name.
The special name "syslog" can be used to send the page -information to the system log instead of a plain file.
- -