Location /admin/conf

Opher Shachar ophers at ladpc.co.il
Sun Dec 24 01:34:59 PST 2006


> Opher Shachar wrote:
> > Hi,
> >    The default cupsd.conf file has an entry for <Location /admin/conf> but in all template files (I have version 1.2.7 installed) nothing points at /admin/conf...
>
> /admin/conf maps to ServerRoot (/etc/cups) and is used to access and
> update configuration files like cupsd.conf.

In admin.tmpl the HREF attribute of edit-configuration-file button is set to "/admin?op=config-server" which under the default configuration does not require authentication. Is that by design?

To restrict access to root only I changed the above in admin.tmpl to "/admin/conf?op=config-server" and in edit-config.tmpl the form's ACTION to "/admin/conf". This works, the question is: Is that the right (safe) way?

Thanks,
Opher Shachar.




More information about the cups mailing list