From: Rose <83477269+AtariDreams@users.noreply.github.com>
Date: Thu, 3 Nov 2022 23:14:49 +0000 (-0400)
Subject: Change cupsd.conf to force authentication when accessing administration
X-Git-Tag: v2.4.3~91^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F518%2Fhead;p=thirdparty%2Fcups.git

Change cupsd.conf to force authentication when accessing administration

With the current default configuration, anyone can request to Find New Printers without being authenticated and with no way to be authenticated. Without authentication cups does not detects printers on the network. The person might not realize that it's because authentication is missing. It seems natural to always offer to authenticate when accessing the administration page.

Co-Authored-By: Dominic Mayers <dominic.mayers@meditationstudies.org>
---

diff --git a/conf/cupsd.conf.in b/conf/cupsd.conf.in
index f69aa39030..31ecacb110 100644
--- a/conf/cupsd.conf.in
+++ b/conf/cupsd.conf.in
@@ -38,6 +38,8 @@ IdleExitTimeout @EXIT_TIMEOUT@
 
 # Restrict access to the admin pages...
 <Location /admin>
+  AuthType Default
+  Require user @SYSTEM
   Order allow,deny
 </Location>