|
Packit |
2fc92b |
.\"
|
|
Packit |
2fc92b |
.\" cupsd.conf man page for CUPS.
|
|
Packit |
2fc92b |
.\"
|
|
Packit |
2fc92b |
.\" Copyright 2007-2017 by Apple Inc.
|
|
Packit |
2fc92b |
.\" Copyright 1997-2006 by Easy Software Products.
|
|
Packit |
2fc92b |
.\"
|
|
Packit |
2fc92b |
.\" These coded instructions, statements, and computer programs are the
|
|
Packit |
2fc92b |
.\" property of Apple Inc. and are protected by Federal copyright
|
|
Packit |
2fc92b |
.\" law. Distribution and use rights are outlined in the file "LICENSE.txt"
|
|
Packit |
2fc92b |
.\" which should have been included with this file. If this file is
|
|
Packit |
2fc92b |
.\" file is missing or damaged, see the license at "http://www.cups.org/".
|
|
Packit |
2fc92b |
.\"
|
|
Packit |
2fc92b |
.TH cupsd.conf 5 "CUPS" "19 October 2017" "Apple Inc."
|
|
Packit |
2fc92b |
.SH NAME
|
|
Packit |
2fc92b |
cupsd.conf \- server configuration file for cups
|
|
Packit |
2fc92b |
.SH DESCRIPTION
|
|
Packit |
2fc92b |
The
|
|
Packit |
2fc92b |
.I cupsd.conf
|
|
Packit |
2fc92b |
file configures the CUPS scheduler,
|
|
Packit |
2fc92b |
.BR cupsd (8).
|
|
Packit |
2fc92b |
It is normally located in the
|
|
Packit |
2fc92b |
.I /etc/cups
|
|
Packit |
2fc92b |
directory.
|
|
Packit |
2fc92b |
\fBNote:\fR File, directory, and user configuration directives that used to be allowed in the \fBcupsd.conf\fR file are now stored in the
|
|
Packit |
2fc92b |
.BR cups-files.conf (5)
|
|
Packit |
2fc92b |
file instead in order to prevent certain types of privilege escalation attacks.
|
|
Packit |
2fc92b |
.LP
|
|
Packit |
2fc92b |
Each line in the file can be a configuration directive, a blank line, or a comment.
|
|
Packit |
2fc92b |
Configuration directives typically consist of a name and zero or more values separated by whitespace.
|
|
Packit |
2fc92b |
The configuration directive name and values are case-insensitive.
|
|
Packit |
2fc92b |
Comment lines start with the # character.
|
|
Packit |
2fc92b |
.SS TOP-LEVEL DIRECTIVES
|
|
Packit |
2fc92b |
The following top-level directives are understood by
|
|
Packit |
2fc92b |
.BR cupsd (8):
|
|
Packit |
2fc92b |
.\"#AccessLogLevel
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAccessLogLevel config\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAccessLogLevel actions\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAccessLogLevel all\fR
|
|
Packit |
2fc92b |
Specifies the logging level for the AccessLog file.
|
|
Packit |
2fc92b |
The "config" level logs when printers and classes are added, deleted, or modified and when configuration files are accessed or updated.
|
|
Packit |
2fc92b |
The "actions" level logs when print jobs are submitted, held, released, modified, or canceled, and any of the conditions for "config".
|
|
Packit |
2fc92b |
The "all" level logs all requests.
|
|
Packit |
2fc92b |
The default access log level is "actions".
|
|
Packit |
2fc92b |
.\"#AutoPurgeJobs
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAutoPurgeJobs Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAutoPurgeJobs No\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies whether to purge job history data automatically when it is no longer required for quotas.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.\"#BrowseLocalProtocols
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowseLocalProtocols all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowseLocalProtocols dnssd\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowseLocalProtocols none\fR
|
|
Packit |
2fc92b |
Specifies which protocols to use for local printer sharing.
|
|
Packit |
2fc92b |
The default is "dnssd" on systems that support Bonjour and "none" otherwise.
|
|
Packit |
2fc92b |
.\"#BrowseWebIF
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowseWebIF Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowseWebIF No\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies whether the CUPS web interface is advertised.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.\"#Browsing
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowsing Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBBrowsing No\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies whether shared printers are advertised.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.\"#DefaultAuthType
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultAuthType Basic\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultAuthType Negotiate\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies the default type of authentication to use.
|
|
Packit |
2fc92b |
The default is "Basic".
|
|
Packit |
2fc92b |
.\"#DefaultEncryption
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultEncryption Never\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultEncryption IfRequested\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultEncryption Required\fR
|
|
Packit |
2fc92b |
Specifies whether encryption will be used for authenticated requests.
|
|
Packit |
2fc92b |
The default is "Required".
|
|
Packit |
2fc92b |
.\"#DefaultLanguage
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultLanguage \fIlocale\fR
|
|
Packit |
2fc92b |
Specifies the default language to use for text and web content.
|
|
Packit |
2fc92b |
The default is "en".
|
|
Packit |
2fc92b |
.\"#DefaultPaperSize
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultPaperSize Auto\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultPaperSize None\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultPaperSize \fIsizename\fR
|
|
Packit |
2fc92b |
Specifies the default paper size for new print queues. "Auto" uses a locale-specific default, while "None" specifies there is no default paper size.
|
|
Packit |
2fc92b |
Specific size names are typically "Letter" or "A4".
|
|
Packit |
2fc92b |
The default is "Auto".
|
|
Packit |
2fc92b |
.\"#DefaultPolicy
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultPolicy \fIpolicy-name\fR
|
|
Packit |
2fc92b |
Specifies the default access policy to use.
|
|
Packit |
2fc92b |
The default access policy is "default".
|
|
Packit |
2fc92b |
.\"#DefaultShared
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultShared Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDefaultShared No\fR
|
|
Packit |
2fc92b |
Specifies whether local printers are shared by default.
|
|
Packit |
2fc92b |
The default is "Yes".
|
|
Packit |
2fc92b |
.\"#DirtyCleanInterval
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDirtyCleanInterval \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the delay for updating of configuration and state files.
|
|
Packit |
2fc92b |
A value of 0 causes the update to happen as soon as possible, typically within a few milliseconds.
|
|
Packit |
2fc92b |
The default value is "30".
|
|
Packit |
2fc92b |
.\"#ErrorPolicy
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBErrorPolicy abort-job\fR
|
|
Packit |
2fc92b |
Specifies that a failed print job should be aborted (discarded) unless otherwise specified for the printer.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBErrorPolicy retry-job\fR
|
|
Packit |
2fc92b |
Specifies that a failed print job should be retried at a later time unless otherwise specified for the printer.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBErrorPolicy retry-this-job\fR
|
|
Packit |
2fc92b |
Specifies that a failed print job should be retried immediately unless otherwise specified for the printer.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBErrorPolicy stop-printer\fR
|
|
Packit |
2fc92b |
Specifies that a failed print job should stop the printer unless otherwise specified for the printer. The 'stop-printer' error policy is the default.
|
|
Packit |
2fc92b |
.\"#FilterLimit
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBFilterLimit \fIlimit\fR
|
|
Packit |
2fc92b |
Specifies the maximum cost of filters that are run concurrently, which can be used to minimize disk, memory, and CPU resource problems.
|
|
Packit |
2fc92b |
A limit of 0 disables filter limiting.
|
|
Packit |
2fc92b |
An average print to a non-PostScript printer needs a filter limit of about 200.
|
|
Packit |
2fc92b |
A PostScript printer needs about half that (100).
|
|
Packit |
2fc92b |
Setting the limit below these thresholds will effectively limit the scheduler to printing a single job at any time.
|
|
Packit |
2fc92b |
The default limit is "0".
|
|
Packit |
2fc92b |
.\"#FilterNice
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBFilterNice \fInice-value\fR
|
|
Packit |
2fc92b |
Specifies the scheduling priority (
|
|
Packit |
2fc92b |
.BR nice (8)
|
|
Packit |
2fc92b |
value) of filters that are run to print a job.
|
|
Packit |
2fc92b |
The nice value ranges from 0, the highest priority, to 19, the lowest priority.
|
|
Packit |
2fc92b |
The default is 0.
|
|
Packit |
2fc92b |
.\"#GSSServiceName
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBGSSServiceName \fIname\fR
|
|
Packit |
2fc92b |
Specifies the service name when using Kerberos authentication.
|
|
Packit |
2fc92b |
The default service name is "http."
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
.\"#HostNameLookups
|
|
Packit |
2fc92b |
\fBHostNameLookups On\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBHostNameLookups Off\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBHostNameLookups Double\fR
|
|
Packit |
2fc92b |
Specifies whether to do reverse lookups on connecting clients.
|
|
Packit |
2fc92b |
The "Double" setting causes
|
|
Packit |
2fc92b |
.BR cupsd (8)
|
|
Packit |
2fc92b |
to verify that the hostname resolved from the address matches one of the addresses returned for that hostname.
|
|
Packit |
2fc92b |
Double lookups also prevent clients with unregistered addresses from connecting to your server.
|
|
Packit |
2fc92b |
The default is "Off" to avoid the potential server performance problems with hostname lookups.
|
|
Packit |
2fc92b |
Only set this option to "On" or "Double" if absolutely required.
|
|
Packit |
2fc92b |
.\"#IdleExitTimeout
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBIdleExitTimeout \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the length of time to wait before shutting down due to inactivity.
|
|
Packit |
2fc92b |
The default is "60" seconds.
|
|
Packit |
2fc92b |
Note: Only applicable when
|
|
Packit |
2fc92b |
.BR cupsd (8)
|
|
Packit |
2fc92b |
is run on-demand (e.g., with \fB-l\fR).
|
|
Packit |
2fc92b |
.\"#JobKillDelay
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobKillDelay \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the number of seconds to wait before killing the filters and backend associated with a canceled or held job.
|
|
Packit |
2fc92b |
The default is "30".
|
|
Packit |
2fc92b |
.\"#JobRetryInterval
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobRetryInterval \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the interval between retries of jobs in seconds.
|
|
Packit |
2fc92b |
This is typically used for fax queues but can also be used with normal print queues whose error policy is "retry-job" or "retry-current-job".
|
|
Packit |
2fc92b |
The default is "30".
|
|
Packit |
2fc92b |
.\"#JobRetryLimit
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobRetryLimit \fIcount\fR
|
|
Packit |
2fc92b |
Specifies the number of retries that are done for jobs.
|
|
Packit |
2fc92b |
This is typically used for fax queues but can also be used with normal print queues whose error policy is "retry-job" or "retry-current-job".
|
|
Packit |
2fc92b |
The default is "5".
|
|
Packit |
2fc92b |
.\"#KeepAlive
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBKeepAlive Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBKeepAlive No\fR
|
|
Packit |
2fc92b |
Specifies whether to support HTTP keep-alive connections.
|
|
Packit |
2fc92b |
The default is "Yes".
|
|
Packit |
2fc92b |
.\"#KeepAliveTimeout
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBKeepAliveTimeout \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies how long an idle client connection remains open.
|
|
Packit |
2fc92b |
The default is "30".
|
|
Packit |
2fc92b |
.\"#LimitIPP
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fB<Limit \fIoperation \fR...\fB> \fR... \fB</Limit>\fR
|
|
Packit |
2fc92b |
Specifies the IPP operations that are being limited inside a Policy section. IPP operation names are listed below in the section "IPP OPERATION NAMES".
|
|
Packit |
2fc92b |
.\"#Limit
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fB<Limit \fImethod \fR...\fB> \fR... \fB</Limit>\fR
|
|
Packit |
2fc92b |
.\"#LimitExcept
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fB<LimitExcept \fImethod \fR...\fB> \fR... \fB</LimitExcept>\fR
|
|
Packit |
2fc92b |
Specifies the HTTP methods that are being limited inside a Location section. HTTP method names are listed below in the section "HTTP METHOD NAMES".
|
|
Packit |
2fc92b |
.\"#LimitRequestBody
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLimitRequestBody \fIsize\fR
|
|
Packit |
2fc92b |
Specifies the maximum size of print files, IPP requests, and HTML form data.
|
|
Packit |
2fc92b |
The default is "0" which disables the limit check.
|
|
Packit |
2fc92b |
.\"#Listen
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBListen \fIipv4-address\fB:\fIport\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBListen [\fIipv6-address\fB]:\fIport\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBListen *:\fIport\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBListen \fI/path/to/domain/socket\fR
|
|
Packit |
2fc92b |
Listens to the specified address and port or domain socket path for connections.
|
|
Packit |
2fc92b |
Multiple Listen directives can be provided to listen on multiple addresses.
|
|
Packit |
2fc92b |
The Listen directive is similar to the Port directive but allows you to restrict access to specific interfaces or networks.
|
|
Packit |
2fc92b |
.\"#ListenBackLog
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBListenBackLog \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the number of pending connections that will be allowed.
|
|
Packit |
2fc92b |
This normally only affects very busy servers that have reached the MaxClients limit, but can also be triggered by large numbers of simultaneous connections.
|
|
Packit |
2fc92b |
When the limit is reached, the operating system will refuse additional connections until the scheduler can accept the pending ones.
|
|
Packit |
2fc92b |
The default is the OS-defined default limit, typically either "5" for older operating systems or "128" for newer operating systems.
|
|
Packit |
2fc92b |
.\"#Location
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fB<Location \fI/path\fB> \fR... \fB</Location>\fR
|
|
Packit |
2fc92b |
Specifies access control for the named location.
|
|
Packit |
2fc92b |
Paths are documented below in the section "LOCATION PATHS".
|
|
Packit |
2fc92b |
.\"#LogDebugHistory
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogDebugHistory \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the number of debugging messages that are retained for logging if an error occurs in a print job. Debug messages are logged regardless of the LogLevel setting.
|
|
Packit |
2fc92b |
.\"#LogLevel
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRnone
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRemerg
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRalert
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRcrit
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRerror
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRwarn
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRnotice
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRinfo
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRdebug
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogLevel \fRdebug2
|
|
Packit |
2fc92b |
Specifies the level of logging for the ErrorLog file.
|
|
Packit |
2fc92b |
The value "none" stops all logging while "debug2" logs everything.
|
|
Packit |
2fc92b |
The default is "warn".
|
|
Packit |
2fc92b |
.\"#LogTimeFormat
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogTimeFormat \fRstandard
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBLogTimeFormat \fRusecs
|
|
Packit |
2fc92b |
Specifies the format of the date and time in the log files.
|
|
Packit |
2fc92b |
The value "standard" is the default and logs whole seconds while "usecs" logs microseconds.
|
|
Packit |
2fc92b |
.\"#MaxClients
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxClients \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of simultaneous clients that are allowed by the scheduler.
|
|
Packit |
2fc92b |
The default is "100".
|
|
Packit |
2fc92b |
.\"#MaxClientPerHost
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxClientsPerHost \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of simultaneous clients that are allowed from a
|
|
Packit |
2fc92b |
single address.
|
|
Packit |
2fc92b |
The default is the MaxClients value.
|
|
Packit |
2fc92b |
.\"#MaxCopies
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxCopies \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of copies that a user can print of each job.
|
|
Packit |
2fc92b |
The default is "9999".
|
|
Packit |
2fc92b |
.\"#MaxHoldTime
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxHoldTime \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the maximum time a job may remain in the "indefinite" hold state before it is canceled.
|
|
Packit |
2fc92b |
The default is "0" which disables cancellation of held jobs.
|
|
Packit |
2fc92b |
.\"#MaxJobs
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxJobs \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of simultaneous jobs that are allowed.
|
|
Packit |
2fc92b |
Set to "0" to allow an unlimited number of jobs.
|
|
Packit |
2fc92b |
The default is "500".
|
|
Packit |
2fc92b |
.\"#MaxJobsPerPrinter
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxJobsPerPrinter \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of simultaneous jobs that are allowed per printer.
|
|
Packit |
2fc92b |
The default is "0" which allows up to MaxJobs jobs per printer.
|
|
Packit |
2fc92b |
.\"#MaxJobsPerUser
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxJobsPerUser \fInumber\fR
|
|
Packit |
2fc92b |
Specifies the maximum number of simultaneous jobs that are allowed per user.
|
|
Packit |
2fc92b |
The default is "0" which allows up to MaxJobs jobs per user.
|
|
Packit |
2fc92b |
.\"#MaxJobTime
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxJobTime \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the maximum time a job may take to print before it is canceled.
|
|
Packit |
2fc92b |
Set to "0" to disable cancellation of "stuck" jobs.
|
|
Packit |
2fc92b |
The default is "10800" (3 hours).
|
|
Packit |
2fc92b |
.\"#MaxLogSize
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMaxLogSize \fIsize\fR
|
|
Packit |
2fc92b |
Specifies the maximum size of the log files before they are rotated.
|
|
Packit |
2fc92b |
The value "0" disables log rotation.
|
|
Packit |
2fc92b |
The default is "1048576" (1MB).
|
|
Packit |
2fc92b |
.\"#MultipleOperationTimeout
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBMultipleOperationTimeout \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the maximum amount of time to allow between files in a multiple file print job.
|
|
Packit |
2fc92b |
The default is "300" (5 minutes).
|
|
Packit Bot |
120068 |
.\"#PassEnv
|
|
Packit Bot |
120068 |
.TP 5
|
|
Packit Bot |
120068 |
\fBPassEnv \fIvariable \fR[ ... \fIvariable \fR]
|
|
Packit Bot |
120068 |
Passes the specified environment variable(s) to child processes.
|
|
Packit |
2fc92b |
.\"#Policy
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fB<Policy \fIname\fB> \fR... \fB</Policy>\fR
|
|
Packit |
2fc92b |
Specifies access control for the named policy.
|
|
Packit |
2fc92b |
.\"#Port
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPort \fInumber\fR
|
|
Packit |
2fc92b |
Listens to the specified port number for connections.
|
|
Packit |
2fc92b |
.\"#PreserveJobFiles
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobFiles Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobFiles No\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobFiles \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies whether job files (documents) are preserved after a job is printed.
|
|
Packit |
2fc92b |
If a numeric value is specified, job files are preserved for the indicated number of seconds after printing.
|
|
Packit |
2fc92b |
The default is "86400" (preserve 1 day).
|
|
Packit |
2fc92b |
.\"#PreserveJobHistory
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobHistory Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobHistory No\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPreserveJobHistory \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies whether the job history is preserved after a job is printed.
|
|
Packit |
2fc92b |
If a numeric value is specified, the job history is preserved for the indicated number of seconds after printing.
|
|
Packit |
2fc92b |
If "Yes", the job history is preserved until the MaxJobs limit is reached.
|
|
Packit |
2fc92b |
The default is "Yes".
|
|
Packit |
2fc92b |
.\"#ReloadTimeout
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBReloadTimeout \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the amount of time to wait for job completion before restarting the scheduler.
|
|
Packit |
2fc92b |
The default is "30".
|
|
Packit |
2fc92b |
.\"#ServerAdmin
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerAdmin \fIemail-address\fR
|
|
Packit |
2fc92b |
Specifies the email address of the server administrator.
|
|
Packit |
2fc92b |
The default value is "root@ServerName".
|
|
Packit |
2fc92b |
.\"#ServerAlias
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerAlias \fIhostname \fR[ ... \fIhostname \fR]
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerAlias *\fR
|
|
Packit |
2fc92b |
The ServerAlias directive is used for HTTP Host header validation when clients connect to the scheduler from external interfaces.
|
|
Packit |
2fc92b |
Using the special name "*" can expose your system to known browser-based DNS rebinding attacks, even when accessing sites through a firewall.
|
|
Packit |
2fc92b |
If the auto-discovery of alternate names does not work, we recommend listing each alternate name with a ServerAlias directive instead of using "*".
|
|
Packit |
2fc92b |
.\"#ServerName
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerName \fIhostname\fR
|
|
Packit |
2fc92b |
Specifies the fully-qualified hostname of the server.
|
|
Packit |
2fc92b |
The default is the value reported by the
|
|
Packit |
2fc92b |
.BR hostname (1)
|
|
Packit |
2fc92b |
command.
|
|
Packit |
2fc92b |
.\"#ServerTokens
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens None\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens ProductOnly\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens Major\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens Minor\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens Minimal\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens OS\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBServerTokens Full\fR
|
|
Packit |
2fc92b |
Specifies what information is included in the Server header of HTTP responses.
|
|
Packit |
2fc92b |
"None" disables the Server header.
|
|
Packit |
2fc92b |
"ProductOnly" reports "CUPS".
|
|
Packit |
2fc92b |
"Major" reports "CUPS 2".
|
|
Packit |
2fc92b |
"Minor" reports "CUPS 2.0".
|
|
Packit |
2fc92b |
"Minimal" reports "CUPS 2.0.0".
|
|
Packit |
2fc92b |
"OS" reports "CUPS 2.0.0 (UNAME)" where UNAME is the output of the
|
|
Packit |
2fc92b |
.BR uname (1)
|
|
Packit |
2fc92b |
command.
|
|
Packit |
2fc92b |
"Full" reports "CUPS 2.0.0 (UNAME) IPP/2.0".
|
|
Packit |
2fc92b |
The default is "Minimal".
|
|
Packit Bot |
120068 |
.\"#SetEnv
|
|
Packit Bot |
120068 |
.TP 5
|
|
Packit Bot |
120068 |
\fBSetEnv \fIvariable value\fR
|
|
Packit Bot |
120068 |
Set the specified environment variable to be passed to child processes.
|
|
Packit |
2fc92b |
.\"#SSLListen
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSSLListen \fIipv4-address\fB:\fIport\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSSLListen [\fIipv6-address\fB]:\fIport\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSSLListen *:\fIport\fR
|
|
Packit |
2fc92b |
Listens on the specified address and port for encrypted connections.
|
|
Packit |
2fc92b |
.\"#SSLOptions
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit Bot |
120068 |
\fBSSLOptions \fR[\fIAllowDH\fR] [\fIAllowRC4\fR] [\fIAllowSSL3\fR] [\fIDenyCBC\fR] [\fIDenyTLS1.0\fR]
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSSLOptions None\fR
|
|
Packit Bot |
120068 |
Sets encryption options.
|
|
Packit |
2fc92b |
By default, CUPS only supports encryption using TLS v1.0 or higher using known secure cipher suites.
|
|
Packit |
2fc92b |
Security is reduced when \fIAllow\fR options are used.
|
|
Packit |
2fc92b |
Security is enhanced when \fIDeny\fR options are used.
|
|
Packit |
2fc92b |
The \fIAllowDH\fR option enables cipher suites using plain Diffie-Hellman key negotiation (not supported on systems using GNU TLS).
|
|
Packit |
2fc92b |
The \fIAllowRC4\fR option enables the 128-bit RC4 cipher suites, which are required for some older clients.
|
|
Packit |
2fc92b |
The \fIAllowSSL3\fR option enables SSL v3.0, which is required for some older clients that do not support TLS v1.0.
|
|
Packit |
2fc92b |
The \fIDenyCBC\fR option disables all CBC cipher suites.
|
|
Packit |
2fc92b |
The \fIDenyTLS1.0\fR option disables TLS v1.0 support - this sets the minimum protocol version to TLS v1.1.
|
|
Packit |
2fc92b |
.\"#SSLPort
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSSLPort \fIport\fR
|
|
Packit |
2fc92b |
Listens on the specified port for encrypted connections.
|
|
Packit |
2fc92b |
.\"#StrictConformance
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBStrictConformance Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBStrictConformance No\fR
|
|
Packit |
2fc92b |
Specifies whether the scheduler requires clients to strictly adhere to the IPP specifications.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.\"#Timeout
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBTimeout \fIseconds\fR
|
|
Packit |
2fc92b |
Specifies the HTTP request timeout.
|
|
Packit |
2fc92b |
The default is "300" (5 minutes).
|
|
Packit |
2fc92b |
.\"#WebInterface
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBWebInterface yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBWebInterface no\fR
|
|
Packit |
2fc92b |
Specifies whether the web interface is enabled.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.SS HTTP METHOD NAMES
|
|
Packit |
2fc92b |
The following HTTP methods are supported by
|
|
Packit |
2fc92b |
.BR cupsd (8):
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
GET
|
|
Packit |
2fc92b |
Used by a client to download icons and other printer resources and to access the CUPS web interface.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
HEAD
|
|
Packit |
2fc92b |
Used by a client to get the type, size, and modification date of resources.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
OPTIONS
|
|
Packit |
2fc92b |
Used by a client to establish a secure (SSL/TLS) connection.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
POST
|
|
Packit |
2fc92b |
Used by a client to submit IPP requests and HTML forms from the CUPS web interface.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
PUT
|
|
Packit |
2fc92b |
Used by a client to upload configuration files.
|
|
Packit |
2fc92b |
.SS IPP OPERATION NAMES
|
|
Packit |
2fc92b |
The following IPP operations are supported by
|
|
Packit |
2fc92b |
.BR cupsd (8):
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Accept\-Jobs
|
|
Packit |
2fc92b |
Allows a printer to accept new jobs.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Add\-Modify\-Class
|
|
Packit |
2fc92b |
Adds or modifies a printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Add\-Modify\-Printer
|
|
Packit |
2fc92b |
Adds or modifies a printer.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Authenticate\-Job
|
|
Packit |
2fc92b |
Releases a job that is held for authentication.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Delete\-Class
|
|
Packit |
2fc92b |
Deletes a printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Delete\-Printer
|
|
Packit |
2fc92b |
Deletes a printer.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-Classes
|
|
Packit |
2fc92b |
Gets a list of printer classes.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-Default
|
|
Packit |
2fc92b |
Gets the server default printer or printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-Devices
|
|
Packit |
2fc92b |
Gets a list of devices that are currently available.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-Document
|
|
Packit |
2fc92b |
Gets a document file for a job.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-PPD
|
|
Packit |
2fc92b |
Gets a PPD file.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-PPDs
|
|
Packit |
2fc92b |
Gets a list of installed PPD files.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Get\-Printers
|
|
Packit |
2fc92b |
Gets a list of printers.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Move\-Job
|
|
Packit |
2fc92b |
Moves a job.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Reject\-Jobs
|
|
Packit |
2fc92b |
Prevents a printer from accepting new jobs.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
CUPS\-Set\-Default
|
|
Packit |
2fc92b |
Sets the server default printer or printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Cancel\-Job
|
|
Packit |
2fc92b |
Cancels a job.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Cancel\-Jobs
|
|
Packit |
2fc92b |
Cancels one or more jobs.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Cancel\-My\-Jobs
|
|
Packit |
2fc92b |
Cancels one or more jobs creates by a user.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Cancel\-Subscription
|
|
Packit |
2fc92b |
Cancels a subscription.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Close\-Job
|
|
Packit |
2fc92b |
Closes a job that is waiting for more documents.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Create\-Job
|
|
Packit |
2fc92b |
Creates a new job with no documents.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Create\-Job\-Subscriptions
|
|
Packit |
2fc92b |
Creates a subscription for job events.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Create\-Printer\-Subscriptions
|
|
Packit |
2fc92b |
Creates a subscription for printer events.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Job\-Attributes
|
|
Packit |
2fc92b |
Gets information about a job.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Jobs
|
|
Packit |
2fc92b |
Gets a list of jobs.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Notifications
|
|
Packit |
2fc92b |
Gets a list of event notifications for a subscription.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Printer\-Attributes
|
|
Packit |
2fc92b |
Gets information about a printer or printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Subscription\-Attributes
|
|
Packit |
2fc92b |
Gets information about a subscription.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Get\-Subscriptions
|
|
Packit |
2fc92b |
Gets a list of subscriptions.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Hold\-Job
|
|
Packit |
2fc92b |
Holds a job from printing.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Hold\-New\-Jobs
|
|
Packit |
2fc92b |
Holds all new jobs from printing.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Pause\-Printer
|
|
Packit |
2fc92b |
Stops processing of jobs by a printer or printer class.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Pause\-Printer\-After\-Current\-Job
|
|
Packit |
2fc92b |
Stops processing of jobs by a printer or printer class after the current job is finished.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Print\-Job
|
|
Packit |
2fc92b |
Creates a new job with a single document.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Purge\-Jobs
|
|
Packit |
2fc92b |
Cancels one or more jobs and deletes the job history.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Release\-Held\-New\-Jobs
|
|
Packit |
2fc92b |
Allows previously held jobs to print.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Release\-Job
|
|
Packit |
2fc92b |
Allows a job to print.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Renew\-Subscription
|
|
Packit |
2fc92b |
Renews a subscription.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Restart\-Job
|
|
Packit |
2fc92b |
Reprints a job, if possible.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Send\-Document
|
|
Packit |
2fc92b |
Adds a document to a job.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Set\-Job\-Attributes
|
|
Packit |
2fc92b |
Changes job information.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Set\-Printer\-Attributes
|
|
Packit |
2fc92b |
Changes printer or printer class information.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
Validate\-Job
|
|
Packit |
2fc92b |
Validates options for a new job.
|
|
Packit |
2fc92b |
.SS LOCATION PATHS
|
|
Packit |
2fc92b |
The following paths are commonly used when configuring
|
|
Packit |
2fc92b |
.BR cupsd (8):
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/
|
|
Packit |
2fc92b |
The path for all get operations (get-printers, get-jobs, etc.)
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/admin
|
|
Packit |
2fc92b |
The path for all administration operations (add-printer, delete-printer, start-printer, etc.)
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/admin/conf
|
|
Packit |
2fc92b |
The path for access to the CUPS configuration files (cupsd.conf, client.conf, etc.)
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/admin/log
|
|
Packit |
2fc92b |
The path for access to the CUPS log files (access_log, error_log, page_log)
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/classes
|
|
Packit |
2fc92b |
The path for all printer classes
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/classes/name
|
|
Packit |
2fc92b |
The resource for the named printer class
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/jobs
|
|
Packit |
2fc92b |
The path for all jobs (hold-job, release-job, etc.)
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/jobs/id
|
|
Packit |
2fc92b |
The path for the specified job
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/printers
|
|
Packit |
2fc92b |
The path for all printers
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/printers/name
|
|
Packit |
2fc92b |
The path for the named printer
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/printers/name.png
|
|
Packit |
2fc92b |
The icon file path for the named printer
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
/printers/name.ppd
|
|
Packit |
2fc92b |
The PPD file path for the named printer
|
|
Packit |
2fc92b |
.SS DIRECTIVES VALID WITHIN LOCATION AND LIMIT SECTIONS
|
|
Packit |
2fc92b |
The following directives may be placed inside Location and Limit sections in the \fBcupsd.conf\fR file:
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow none\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow \fIhost.domain.com\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow *.\fIdomain.com\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow \fIipv4-address\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow \fIipv4-address\fB/\fInetmask\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow \fIipv4-address\fB/\fImm\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow [\fIipv6-address\fB]\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow [\fIipv6-address\fB]/\fImm\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow @IF(\fIname\fB)\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAllow @LOCAL\fR
|
|
Packit |
2fc92b |
Allows access from the named hosts, domains, addresses, or interfaces.
|
|
Packit |
2fc92b |
The Order directive controls whether Allow lines are evaluated before or after Deny lines.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAuthType None\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAuthType Basic\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAuthType Default\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBAuthType Negotiate\fR
|
|
Packit |
2fc92b |
Specifies the type of authentication required.
|
|
Packit |
2fc92b |
The value "Default" corresponds to the DefaultAuthType value.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny none\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny \fIhost.domain.com\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny *.\fIdomain.com\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny \fIipv4-address\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny \fIipv4-address\fB/\fInetmask\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny \fIipv4-address\fB/\fImm\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny [\fIipv6-address\fB]\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny [\fIipv6-address\fB]/\fImm\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny @IF(\fIname\fB)\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBDeny @LOCAL\fR
|
|
Packit |
2fc92b |
Denies access from the named hosts, domains, addresses, or interfaces.
|
|
Packit |
2fc92b |
The Order directive controls whether Deny lines are evaluated before or after Allow lines.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBEncryption IfRequested\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBEncryption Never\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBEncryption Required\fR
|
|
Packit |
2fc92b |
Specifies the level of encryption that is required for a particular location.
|
|
Packit |
2fc92b |
The default value is "IfRequested".
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBOrder allow,deny\fR
|
|
Packit |
2fc92b |
Specifies that access is denied by default. Allow lines are then processed followed by Deny lines to determine whether a client may access a particular resource.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBOrder deny,allow\fR
|
|
Packit |
2fc92b |
Specifies that access is allowed by default. Deny lines are then processed followed by Allow lines to determine whether a client may access a particular resource.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBRequire group \fIgroup-name \fR[ \fIgroup-name \fR... ]
|
|
Packit |
2fc92b |
Specifies that an authenticated user must be a member of one of the named groups.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBRequire user {\fIuser-name\fR|\fB@\fIgroup-name\fR} ...
|
|
Packit |
2fc92b |
Specifies that an authenticated user must match one of the named users or be a member of one of the named groups.
|
|
Packit |
2fc92b |
The group name "@SYSTEM" corresponds to the list of groups defined by the SystemGroup directive in the
|
|
Packit |
2fc92b |
.BR cups-files.conf (5)
|
|
Packit |
2fc92b |
file.
|
|
Packit |
2fc92b |
The group name "@OWNER" corresponds to the owner of the resource, for example the person that submitted a print job.
|
|
Packit |
2fc92b |
Note: The 'root' user is not special and must be granted privileges like any other user account.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBRequire valid-user\fR
|
|
Packit |
2fc92b |
Specifies that any authenticated user is acceptable.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSatisfy all\fR
|
|
Packit |
2fc92b |
Specifies that all Allow, AuthType, Deny, Order, and Require conditions must be satisfied to allow access.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSatisfy any\fR
|
|
Packit |
2fc92b |
Specifies that any a client may access a resource if either the authentication (AuthType/Require) or address (Allow/Deny/Order) conditions are satisfied.
|
|
Packit |
2fc92b |
For example, this can be used to require authentication only for remote accesses.
|
|
Packit |
2fc92b |
.SS DIRECTIVES VALID WITHIN POLICY SECTIONS
|
|
Packit |
2fc92b |
The following directives may be placed inside Policy sections in the \fBcupsd.conf\fR file:
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateAccess all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateAccess default\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateAccess \fR{\fIuser\fR|\fB@\fIgroup\fR|\fB@ACL\fR|\fB@OWNER\fR|\fB@SYSTEM\fR} ...
|
|
Packit |
2fc92b |
Specifies an access list for a job's private values.
|
|
Packit |
2fc92b |
The "default" access list is "@OWNER @SYSTEM".
|
|
Packit |
2fc92b |
"@ACL" maps to the printer's requesting-user-name-allowed or requesting-user-name-denied values.
|
|
Packit |
2fc92b |
"@OWNER" maps to the job's owner.
|
|
Packit |
2fc92b |
"@SYSTEM" maps to the groups listed for the SystemGroup directive in the
|
|
Packit |
2fc92b |
.BR cups-files.conf (5)
|
|
Packit |
2fc92b |
file.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateValues all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateValues default\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateValues none\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBJobPrivateValues \fIattribute-name \fR[ ... \fIattribute-name \fR]
|
|
Packit |
2fc92b |
Specifies the list of job values to make private.
|
|
Packit |
2fc92b |
The "default" values are "job-name", "job-originating-host-name", "job-originating-user-name", and "phone".
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateAccess all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateAccess default\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateAccess \fR{\fIuser\fR|\fB@\fIgroup\fR|\fB@ACL\fR|\fB@OWNER\fR|\fB@SYSTEM\fR} ...
|
|
Packit |
2fc92b |
Specifies an access list for a subscription's private values.
|
|
Packit |
2fc92b |
The "default" access list is "@OWNER @SYSTEM".
|
|
Packit |
2fc92b |
"@ACL" maps to the printer's requesting-user-name-allowed or requesting-user-name-denied values.
|
|
Packit |
2fc92b |
"@OWNER" maps to the job's owner.
|
|
Packit |
2fc92b |
"@SYSTEM" maps to the groups listed for the SystemGroup directive in the
|
|
Packit |
2fc92b |
.BR cups-files.conf (5)
|
|
Packit |
2fc92b |
file.
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateValues all\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateValues default\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateValues none\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBSubscriptionPrivateValues \fIattribute-name \fR[ ... \fIattribute-name \fR]
|
|
Packit |
2fc92b |
Specifies the list of subscription values to make private.
|
|
Packit |
2fc92b |
The "default" values are "notify-events", "notify-pull-method", "notify-recipient-uri", "notify-subscriber-user-name", and "notify-user-data".
|
|
Packit |
2fc92b |
.SS DEPRECATED DIRECTIVES
|
|
Packit |
2fc92b |
The following directives are deprecated and will be removed in a future release of CUPS:
|
|
Packit |
2fc92b |
.\"#Classification
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBClassification \fIbanner\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies the security classification of the server.
|
|
Packit |
2fc92b |
Any valid banner name can be used, including "classified", "confidential", "secret", "topsecret", and "unclassified", or the banner can be omitted to disable secure printing functions.
|
|
Packit |
2fc92b |
The default is no classification banner.
|
|
Packit |
2fc92b |
.\"#ClassifyOverride
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBClassifyOverride Yes\fR
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBClassifyOverride No\fR
|
|
Packit |
2fc92b |
.br
|
|
Packit |
2fc92b |
Specifies whether users may override the classification (cover page) of individual print jobs using the "job-sheets" option.
|
|
Packit |
2fc92b |
The default is "No".
|
|
Packit |
2fc92b |
.\"#PageLogFormat
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBPageLogFormat \fIformat-string\fR
|
|
Packit |
2fc92b |
Specifies the format of PageLog lines.
|
|
Packit |
2fc92b |
Sequences beginning with percent (%) characters are replaced with the corresponding information, while all other characters are copied literally.
|
|
Packit |
2fc92b |
The following percent sequences are recognized:
|
|
Packit |
2fc92b |
.nf
|
|
Packit |
2fc92b |
|
|
Packit |
2fc92b |
"%%" inserts a single percent character.
|
|
Packit |
2fc92b |
"%{name}" inserts the value of the specified IPP attribute.
|
|
Packit |
2fc92b |
"%C" inserts the number of copies for the current page.
|
|
Packit |
2fc92b |
"%P" inserts the current page number.
|
|
Packit |
2fc92b |
"%T" inserts the current date and time in common log format.
|
|
Packit |
2fc92b |
"%j" inserts the job ID.
|
|
Packit |
2fc92b |
"%p" inserts the printer name.
|
|
Packit |
2fc92b |
"%u" inserts the username.
|
|
Packit |
2fc92b |
|
|
Packit |
2fc92b |
.fi
|
|
Packit |
2fc92b |
The default is the empty string, which disables page logging.
|
|
Packit |
2fc92b |
The string "%p %u %j %T %P %C %{job-billing} %{job-originating-host-name} %{job-name} %{media} %{sides}" creates a page log with the standard items.
|
|
Packit |
2fc92b |
.\"#RIPCache
|
|
Packit |
2fc92b |
.TP 5
|
|
Packit |
2fc92b |
\fBRIPCache \fIsize\fR
|
|
Packit |
2fc92b |
Specifies the maximum amount of memory to use when converting documents into bitmaps for a printer.
|
|
Packit |
2fc92b |
The default is "128m".
|
|
Packit |
2fc92b |
.SH CONFORMING TO
|
|
Packit |
2fc92b |
The \fBcupsd.conf\fR file format is based on the Apache HTTP Server configuration file format.
|
|
Packit |
2fc92b |
.SH EXAMPLES
|
|
Packit |
2fc92b |
Log everything with a maximum log file size of 32 megabytes:
|
|
Packit |
2fc92b |
.nf
|
|
Packit |
2fc92b |
|
|
Packit |
2fc92b |
AccessLogLevel all
|
|
Packit |
2fc92b |
LogLevel debug2
|
|
Packit |
2fc92b |
MaxLogSize 32m
|
|
Packit |
2fc92b |
|
|
Packit |
2fc92b |
.fi
|
|
Packit |
2fc92b |
Require authentication for accesses from outside the 10. network:
|
|
Packit |
2fc92b |
.nf
|
|
Packit |
2fc92b |
|
|
Packit |
2fc92b |
<Location />
|
|
Packit |
2fc92b |
Order allow,deny
|
|
Packit |
2fc92b |
Allow from 10./8
|
|
Packit |
2fc92b |
AuthType Basic
|
|
Packit |
2fc92b |
Require valid-user
|
|
Packit |
2fc92b |
Satisfy any
|
|
Packit |
2fc92b |
</Location>
|
|
Packit |
2fc92b |
.fi
|
|
Packit |
2fc92b |
.SH SEE ALSO
|
|
Packit |
2fc92b |
.BR classes.conf (5),
|
|
Packit |
2fc92b |
.BR cups-files.conf (5),
|
|
Packit |
2fc92b |
.BR cupsd (8),
|
|
Packit |
2fc92b |
.BR mime.convs (5),
|
|
Packit |
2fc92b |
.BR mime.types (5),
|
|
Packit |
2fc92b |
.BR printers.conf (5),
|
|
Packit |
2fc92b |
.BR subscriptions.conf (5),
|
|
Packit |
2fc92b |
CUPS Online Help (http://localhost:631/help)
|
|
Packit |
2fc92b |
.SH COPYRIGHT
|
|
Packit |
2fc92b |
Copyright \[co] 2007-2017 by Apple Inc.
|