1# 2# Configuration file for the CUPS scheduler. See "man cupsd.conf" for a 3# complete description of this file. 4# 5 6# Log general information in error_log - change "@CUPS_LOG_LEVEL@" to "debug" 7# for troubleshooting... 8LogLevel @CUPS_LOG_LEVEL@ 9@CUPS_PAGE_LOG_FORMAT@ 10 11# Only listen for connections from the local machine. 12Listen localhost:@DEFAULT_IPP_PORT@ 13@CUPS_LISTEN_DOMAINSOCKET@ 14 15# Show shared printers on the local network. 16Browsing On 17BrowseLocalProtocols @CUPS_BROWSE_LOCAL_PROTOCOLS@ 18 19# Default authentication type, when authentication is required... 20DefaultAuthType Basic 21 22# Web interface setting... 23WebInterface @CUPS_WEBIF@ 24 25# Restrict access to the server... 26<Location /> 27 Order allow,deny 28</Location> 29 30# Restrict access to the admin pages... 31<Location /admin> 32 Order allow,deny 33</Location> 34 35# Restrict access to configuration files... 36<Location /admin/conf> 37 AuthType Default 38 Require user @SYSTEM 39 Order allow,deny 40</Location> 41 42# Restrict access to log files... 43<Location /admin/log> 44 AuthType Default 45 Require user @SYSTEM 46 Order allow,deny 47</Location> 48 49# Set the default printer/job policies... 50<Policy default> 51 # Job/subscription privacy... 52 JobPrivateAccess default 53 JobPrivateValues default 54 SubscriptionPrivateAccess default 55 SubscriptionPrivateValues default 56 57 # Job-related operations must be done by the owner or an administrator... 58 <Limit Create-Job Print-Job Print-URI Validate-Job> 59 Order deny,allow 60 </Limit> 61 62 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 63 Require user @OWNER @SYSTEM 64 Order deny,allow 65 </Limit> 66 67 # All administration operations require an administrator to authenticate... 68 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> 69 AuthType Default 70 Require user @SYSTEM 71 Order deny,allow 72 </Limit> 73 74 # All printer operations require a printer operator to authenticate... 75 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 76 AuthType Default 77 Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 78 Order deny,allow 79 </Limit> 80 81 # Only the owner or an administrator can cancel or authenticate a job... 82 <Limit Cancel-Job CUPS-Authenticate-Job> 83 Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 84 Order deny,allow 85 </Limit> 86 87 <Limit All> 88 Order deny,allow 89 </Limit> 90</Policy> 91 92# Set the authenticated printer/job policies... 93<Policy authenticated> 94 # Job/subscription privacy... 95 JobPrivateAccess default 96 JobPrivateValues default 97 SubscriptionPrivateAccess default 98 SubscriptionPrivateValues default 99 100 # Job-related operations must be done by the owner or an administrator... 101 <Limit Create-Job Print-Job Print-URI Validate-Job> 102 AuthType Default 103 Order deny,allow 104 </Limit> 105 106 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 107 AuthType Default 108 Require user @OWNER @SYSTEM 109 Order deny,allow 110 </Limit> 111 112 # All administration operations require an administrator to authenticate... 113 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 114 AuthType Default 115 Require user @SYSTEM 116 Order deny,allow 117 </Limit> 118 119 # All printer operations require a printer operator to authenticate... 120 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 121 AuthType Default 122 Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 123 Order deny,allow 124 </Limit> 125 126 # Only the owner or an administrator can cancel or authenticate a job... 127 <Limit Cancel-Job CUPS-Authenticate-Job> 128 AuthType Default 129 Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 130 Order deny,allow 131 </Limit> 132 133 <Limit All> 134 Order deny,allow 135 </Limit> 136</Policy> 137 138# Set the kerberized printer/job policies... 139<Policy kerberos> 140 # Job/subscription privacy... 141 JobPrivateAccess default 142 JobPrivateValues default 143 SubscriptionPrivateAccess default 144 SubscriptionPrivateValues default 145 146 # Job-related operations must be done by the owner or an administrator... 147 <Limit Create-Job Print-Job Print-URI Validate-Job> 148 AuthType Negotiate 149 Order deny,allow 150 </Limit> 151 152 <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 153 AuthType Negotiate 154 Require user @OWNER @SYSTEM 155 Order deny,allow 156 </Limit> 157 158 # All administration operations require an administrator to authenticate... 159 <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 160 AuthType Default 161 Require user @SYSTEM 162 Order deny,allow 163 </Limit> 164 165 # All printer operations require a printer operator to authenticate... 166 <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 167 AuthType Default 168 Require user @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 169 Order deny,allow 170 </Limit> 171 172 # Only the owner or an administrator can cancel or authenticate a job... 173 <Limit Cancel-Job CUPS-Authenticate-Job> 174 AuthType Negotiate 175 Require user @OWNER @CUPS_DEFAULT_PRINTOPERATOR_AUTH@ 176 Order deny,allow 177 </Limit> 178 179 <Limit All> 180 Order deny,allow 181 </Limit> 182</Policy> 183