146debc2cSopenharmony_ci# 246debc2cSopenharmony_ci# Configuration file for the CUPS scheduler. See "man cupsd.conf" for a 346debc2cSopenharmony_ci# complete description of this file. 446debc2cSopenharmony_ci# 546debc2cSopenharmony_ci 646debc2cSopenharmony_ci# Log general information in error_log - change "warn" to "debug" 746debc2cSopenharmony_ci# for troubleshooting... 846debc2cSopenharmony_ciLogLevel debug2 946debc2cSopenharmony_ciPageLogFormat 1046debc2cSopenharmony_ci 1146debc2cSopenharmony_ci# Specifies the maximum size of the log files before they are rotated. The value "0" disables log rotation. 1246debc2cSopenharmony_ciMaxLogSize 10m 1346debc2cSopenharmony_ci 1446debc2cSopenharmony_ci# Default error policy for printers 1546debc2cSopenharmony_ciErrorPolicy abort-job 1646debc2cSopenharmony_ci 1746debc2cSopenharmony_ci# Only listen for connections from the local machine. 1846debc2cSopenharmony_ciListen localhost:1631 1946debc2cSopenharmony_ci#Listen /var/run/cups/cups.sock 2046debc2cSopenharmony_ci 2146debc2cSopenharmony_ci# Show shared printers on the local network. 2246debc2cSopenharmony_ciBrowsing No 2346debc2cSopenharmony_ciBrowseLocalProtocols 2446debc2cSopenharmony_ci 2546debc2cSopenharmony_ci# Default authentication type, when authentication is required... 2646debc2cSopenharmony_ciDefaultAuthType Basic 2746debc2cSopenharmony_ci 2846debc2cSopenharmony_ci# Web interface setting... 2946debc2cSopenharmony_ciWebInterface Yes 3046debc2cSopenharmony_ci 3146debc2cSopenharmony_ci# Timeout after cupsd exits if idle (applied only if cupsd runs on-demand - with -l) 3246debc2cSopenharmony_ciIdleExitTimeout 300 3346debc2cSopenharmony_ci 3446debc2cSopenharmony_ci# Restrict access to the server... 3546debc2cSopenharmony_ci<Location /> 3646debc2cSopenharmony_ci Allow all 3746debc2cSopenharmony_ci Order allow,deny 3846debc2cSopenharmony_ci</Location> 3946debc2cSopenharmony_ci 4046debc2cSopenharmony_ci# Restrict access to the admin pages... 4146debc2cSopenharmony_ci<Location /admin> 4246debc2cSopenharmony_ci Allow all 4346debc2cSopenharmony_ci Order allow,deny 4446debc2cSopenharmony_ci</Location> 4546debc2cSopenharmony_ci 4646debc2cSopenharmony_ci# Restrict access to configuration files... 4746debc2cSopenharmony_ci<Location /admin/conf> 4846debc2cSopenharmony_ci Allow all 4946debc2cSopenharmony_ci AuthType Default 5046debc2cSopenharmony_ci Require user @SYSTEM 5146debc2cSopenharmony_ci Order allow,deny 5246debc2cSopenharmony_ci</Location> 5346debc2cSopenharmony_ci 5446debc2cSopenharmony_ci# Restrict access to log files... 5546debc2cSopenharmony_ci<Location /admin/log> 5646debc2cSopenharmony_ci # AuthType Default 5746debc2cSopenharmony_ci # Require user @SYSTEM 5846debc2cSopenharmony_ci Order allow,deny 5946debc2cSopenharmony_ci</Location> 6046debc2cSopenharmony_ci 6146debc2cSopenharmony_ci# Set the default printer/job policies... 6246debc2cSopenharmony_ci<Policy default> 6346debc2cSopenharmony_ci # Job/subscription privacy... 6446debc2cSopenharmony_ci JobPrivateAccess default 6546debc2cSopenharmony_ci JobPrivateValues default 6646debc2cSopenharmony_ci SubscriptionPrivateAccess default 6746debc2cSopenharmony_ci SubscriptionPrivateValues default 6846debc2cSopenharmony_ci 6946debc2cSopenharmony_ci # Job-related operations must be done by the owner or an administrator... 7046debc2cSopenharmony_ci <Limit Create-Job Print-Job Print-URI Validate-Job> 7146debc2cSopenharmony_ci Order deny,allow 7246debc2cSopenharmony_ci </Limit> 7346debc2cSopenharmony_ci 7446debc2cSopenharmony_ci <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 7546debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 7646debc2cSopenharmony_ci Order deny,allow 7746debc2cSopenharmony_ci </Limit> 7846debc2cSopenharmony_ci 7946debc2cSopenharmony_ci # All administration operations require an administrator to authenticate... 8046debc2cSopenharmony_ci <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices> 8146debc2cSopenharmony_ci # AuthType Default 8246debc2cSopenharmony_ci # Require user @SYSTEM 8346debc2cSopenharmony_ci Order deny,allow 8446debc2cSopenharmony_ci </Limit> 8546debc2cSopenharmony_ci 8646debc2cSopenharmony_ci # All printer operations require a printer operator to authenticate... 8746debc2cSopenharmony_ci <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 8846debc2cSopenharmony_ci # AuthType Default 8946debc2cSopenharmony_ci # Require user @SYSTEM 9046debc2cSopenharmony_ci Order deny,allow 9146debc2cSopenharmony_ci </Limit> 9246debc2cSopenharmony_ci 9346debc2cSopenharmony_ci # Only the owner or an administrator can cancel or authenticate a job... 9446debc2cSopenharmony_ci <Limit Cancel-Job CUPS-Authenticate-Job> 9546debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 9646debc2cSopenharmony_ci Order deny,allow 9746debc2cSopenharmony_ci </Limit> 9846debc2cSopenharmony_ci 9946debc2cSopenharmony_ci <Limit All> 10046debc2cSopenharmony_ci Order deny,allow 10146debc2cSopenharmony_ci </Limit> 10246debc2cSopenharmony_ci</Policy> 10346debc2cSopenharmony_ci 10446debc2cSopenharmony_ci# Set the authenticated printer/job policies... 10546debc2cSopenharmony_ci<Policy authenticated> 10646debc2cSopenharmony_ci # Job/subscription privacy... 10746debc2cSopenharmony_ci JobPrivateAccess default 10846debc2cSopenharmony_ci JobPrivateValues default 10946debc2cSopenharmony_ci SubscriptionPrivateAccess default 11046debc2cSopenharmony_ci SubscriptionPrivateValues default 11146debc2cSopenharmony_ci 11246debc2cSopenharmony_ci # Job-related operations must be done by the owner or an administrator... 11346debc2cSopenharmony_ci <Limit Create-Job Print-Job Print-URI Validate-Job> 11446debc2cSopenharmony_ci # AuthType Default 11546debc2cSopenharmony_ci Order deny,allow 11646debc2cSopenharmony_ci </Limit> 11746debc2cSopenharmony_ci 11846debc2cSopenharmony_ci <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 11946debc2cSopenharmony_ci # AuthType Default 12046debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 12146debc2cSopenharmony_ci Order deny,allow 12246debc2cSopenharmony_ci </Limit> 12346debc2cSopenharmony_ci 12446debc2cSopenharmony_ci # All administration operations require an administrator to authenticate... 12546debc2cSopenharmony_ci <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 12646debc2cSopenharmony_ci # AuthType Default 12746debc2cSopenharmony_ci # Require user @SYSTEM 12846debc2cSopenharmony_ci Order deny,allow 12946debc2cSopenharmony_ci </Limit> 13046debc2cSopenharmony_ci 13146debc2cSopenharmony_ci # All printer operations require a printer operator to authenticate... 13246debc2cSopenharmony_ci <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 13346debc2cSopenharmony_ci # AuthType Default 13446debc2cSopenharmony_ci # Require user @SYSTEM 13546debc2cSopenharmony_ci Order deny,allow 13646debc2cSopenharmony_ci </Limit> 13746debc2cSopenharmony_ci 13846debc2cSopenharmony_ci # Only the owner or an administrator can cancel or authenticate a job... 13946debc2cSopenharmony_ci <Limit Cancel-Job CUPS-Authenticate-Job> 14046debc2cSopenharmony_ci # AuthType Default 14146debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 14246debc2cSopenharmony_ci Order deny,allow 14346debc2cSopenharmony_ci </Limit> 14446debc2cSopenharmony_ci 14546debc2cSopenharmony_ci <Limit All> 14646debc2cSopenharmony_ci Order deny,allow 14746debc2cSopenharmony_ci </Limit> 14846debc2cSopenharmony_ci</Policy> 14946debc2cSopenharmony_ci 15046debc2cSopenharmony_ci# Set the kerberized printer/job policies... 15146debc2cSopenharmony_ci<Policy kerberos> 15246debc2cSopenharmony_ci # Job/subscription privacy... 15346debc2cSopenharmony_ci JobPrivateAccess default 15446debc2cSopenharmony_ci JobPrivateValues default 15546debc2cSopenharmony_ci SubscriptionPrivateAccess default 15646debc2cSopenharmony_ci SubscriptionPrivateValues default 15746debc2cSopenharmony_ci 15846debc2cSopenharmony_ci # Job-related operations must be done by the owner or an administrator... 15946debc2cSopenharmony_ci <Limit Create-Job Print-Job Print-URI Validate-Job> 16046debc2cSopenharmony_ci # AuthType Negotiate 16146debc2cSopenharmony_ci Order deny,allow 16246debc2cSopenharmony_ci </Limit> 16346debc2cSopenharmony_ci 16446debc2cSopenharmony_ci <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document> 16546debc2cSopenharmony_ci # AuthType Negotiate 16646debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 16746debc2cSopenharmony_ci Order deny,allow 16846debc2cSopenharmony_ci </Limit> 16946debc2cSopenharmony_ci 17046debc2cSopenharmony_ci # All administration operations require an administrator to authenticate... 17146debc2cSopenharmony_ci <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default> 17246debc2cSopenharmony_ci # AuthType Default 17346debc2cSopenharmony_ci # Require user @SYSTEM 17446debc2cSopenharmony_ci Order deny,allow 17546debc2cSopenharmony_ci </Limit> 17646debc2cSopenharmony_ci 17746debc2cSopenharmony_ci # All printer operations require a printer operator to authenticate... 17846debc2cSopenharmony_ci <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs> 17946debc2cSopenharmony_ci # AuthType Default 18046debc2cSopenharmony_ci # Require user @SYSTEM 18146debc2cSopenharmony_ci Order deny,allow 18246debc2cSopenharmony_ci </Limit> 18346debc2cSopenharmony_ci 18446debc2cSopenharmony_ci # Only the owner or an administrator can cancel or authenticate a job... 18546debc2cSopenharmony_ci <Limit Cancel-Job CUPS-Authenticate-Job> 18646debc2cSopenharmony_ci # AuthType Negotiate 18746debc2cSopenharmony_ci # Require user @OWNER @SYSTEM 18846debc2cSopenharmony_ci Order deny,allow 18946debc2cSopenharmony_ci </Limit> 19046debc2cSopenharmony_ci 19146debc2cSopenharmony_ci <Limit All> 19246debc2cSopenharmony_ci Order deny,allow 19346debc2cSopenharmony_ci </Limit> 19446debc2cSopenharmony_ci</Policy>