1# 2# Configuration file for the CUPS scheduler. See "man cupsd.conf" for a 3# complete description of this file. 4# 5 6# Log general information in error_log - change "warn" to "debug" 7# for troubleshooting... 8LogLevel debug2 9PageLogFormat 10 11# Specifies the maximum size of the log files before they are rotated. The value "0" disables log rotation. 12MaxLogSize 10m 13 14# Default error policy for printers 15ErrorPolicy stop-printer 16 17# Only listen for connections from the local machine. 18Listen localhost:1631 19#Listen /var/run/cups/cups.sock 20 21# Show shared printers on the local network. 22Browsing No 23BrowseLocalProtocols 24 25# Default authentication type, when authentication is required... 26DefaultAuthType Basic 27 28# Web interface setting... 29WebInterface Yes 30 31# Timeout after cupsd exits if idle (applied only if cupsd runs on-demand - with -l) 32IdleExitTimeout 300 33 34# Restrict access to the server... 35<Location /> 36 Allow all 37 Order allow,deny 38</Location> 39 40# Restrict access to the admin pages... 41<Location /admin> 42 Allow all 43 Order allow,deny 44</Location> 45 46# Restrict access to configuration files... 47<Location /admin/conf> 48 Allow all 49 AuthType Default 50 Require user @SYSTEM 51 Order allow,deny 52</Location> 53 54# Restrict access to log files... 55<Location /admin/log> 56 # AuthType Default 57 # Require user @SYSTEM 58 Order allow,deny 59</Location> 60 61# Set the default printer/job policies... 62<Policy default> 63 # Job/subscription privacy... 64 JobPrivateAccess default 65 JobPrivateValues default 66 SubscriptionPrivateAccess default 67 SubscriptionPrivateValues default 68 69 # Job-related operations must be done by the owner or an administrator... 70 <Limit Create-Job Print-Job Print-URI Validate-Job> 71 Order deny,allow 72 </Limit> 73 74 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 75 # Require user @OWNER @SYSTEM 76 Order deny,allow 77 </Limit> 78 79 # All administration operations require an administrator to authenticate... 80 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> 81 # AuthType Default 82 # Require user @SYSTEM 83 Order deny,allow 84 </Limit> 85 86 # All printer operations require a printer operator to authenticate... 87 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 88 # AuthType Default 89 # Require user @SYSTEM 90 Order deny,allow 91 </Limit> 92 93 # Only the owner or an administrator can cancel or authenticate a job... 94 <Limit Cancel-Job CUPS-Authenticate-Job> 95 # Require user @OWNER @SYSTEM 96 Order deny,allow 97 </Limit> 98 99 <Limit All> 100 Order deny,allow 101 </Limit> 102</Policy> 103 104# Set the authenticated printer/job policies... 105<Policy authenticated> 106 # Job/subscription privacy... 107 JobPrivateAccess default 108 JobPrivateValues default 109 SubscriptionPrivateAccess default 110 SubscriptionPrivateValues default 111 112 # Job-related operations must be done by the owner or an administrator... 113 <Limit Create-Job Print-Job Print-URI Validate-Job> 114 # AuthType Default 115 Order deny,allow 116 </Limit> 117 118 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 119 # AuthType Default 120 # Require user @OWNER @SYSTEM 121 Order deny,allow 122 </Limit> 123 124 # All administration operations require an administrator to authenticate... 125 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 126 # AuthType Default 127 # Require user @SYSTEM 128 Order deny,allow 129 </Limit> 130 131 # All printer operations require a printer operator to authenticate... 132 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 133 # AuthType Default 134 # Require user @SYSTEM 135 Order deny,allow 136 </Limit> 137 138 # Only the owner or an administrator can cancel or authenticate a job... 139 <Limit Cancel-Job CUPS-Authenticate-Job> 140 # AuthType Default 141 # Require user @OWNER @SYSTEM 142 Order deny,allow 143 </Limit> 144 145 <Limit All> 146 Order deny,allow 147 </Limit> 148</Policy> 149 150# Set the kerberized printer/job policies... 151<Policy kerberos> 152 # Job/subscription privacy... 153 JobPrivateAccess default 154 JobPrivateValues default 155 SubscriptionPrivateAccess default 156 SubscriptionPrivateValues default 157 158 # Job-related operations must be done by the owner or an administrator... 159 <Limit Create-Job Print-Job Print-URI Validate-Job> 160 # AuthType Negotiate 161 Order deny,allow 162 </Limit> 163 164 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 165 # AuthType Negotiate 166 # Require user @OWNER @SYSTEM 167 Order deny,allow 168 </Limit> 169 170 # All administration operations require an administrator to authenticate... 171 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 172 # AuthType Default 173 # Require user @SYSTEM 174 Order deny,allow 175 </Limit> 176 177 # All printer operations require a printer operator to authenticate... 178 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 179 # AuthType Default 180 # Require user @SYSTEM 181 Order deny,allow 182 </Limit> 183 184 # Only the owner or an administrator can cancel or authenticate a job... 185 <Limit Cancel-Job CUPS-Authenticate-Job> 186 # AuthType Negotiate 187 # Require user @OWNER @SYSTEM 188 Order deny,allow 189 </Limit> 190 191 <Limit All> 192 Order deny,allow 193 </Limit> 194</Policy>