[cups.development] Re: [RFE] STR #1469: Pair authentication, Allow/Deny, Encryption with Port/SSLPort

[Ryan Lovett]

On Tue, Mar 14, 2006 at 12:00:42PM -0800, Ryan Lovett wrote:
> On Mon, Mar 13, 2006 at 09:56:39AM -0500, Michael Sweet wrote:
> > [STR Active]
> > 
> > Um, you should be able to use the following in CUPS 1.1.x:
> > 
> >     <Location /foo>
> >     Satisfy Any
> >     Order allow,deny
> >     Allow 11.22.33.0/24  # your one network
> >     AuthType Basic
> >     Encryption Required
> >     </Location>
> > 
> > If you connect from the 11.22.33 network, you are allowed without
> > providing a password, but the connection will always be encrypted.
> > 
> > In CUPS 1.2, you can drop the "Encryption Required" bit and let the
> > "DefaultEncryption" setting turn on encryption with authentication.
> > 
> > In short, I think we can do what you want already.
> > 
> > Link: http://www.cups.org/str.php?L1469
> > Version:  -feature
> 
> 
> Thank you for your response. After playing with this for a while, I was
> able to get it to work.
> 
> Apparently "Satisfy" has been in cups since 1.1.7; I wish I would have
> spotted this earlier.


One strange regression is that jobs received via authenticated connections
are no longer being logged to the page log. All jobs do have the "tickets"
in the spool area though. For example, 'lpstat -W completed ...' shows all
jobs whether they came in authenticated or not.

I'll do some more checking...

Ryan