"Satisfy Any" no longer working?

[Ryan Lovett]

We configured a central CUPS server to allow anyone to print from the local subnet and authenticated users to print from everywhere else. This was on cups-1.2.10 on Solaris.

With cups-1.3.7 this no longer seems to work. I'd like to get confirmation from the forums that our configuration is correct before filing a bug.

<Location />
  Satisfy Any
  # Allow shared printing and remote administration...
  Order allow,deny
  Allow @LOCAL
  Allow a.b.c.0/24
  Allow w.x.y.z
#  AuthType Basic
#  Encryption Required
</Location>

The above works for local network printing, but not remote. (as expected) Remote access to the web interface gives a 403. When I uncomment AuthType and Encryption, remote users can then access the web interface but local network run into trouble. lpstat can see all the printers, but queued jobs never print. In the server error_log I see:

D [10/Jul/2008:16:32:48 -0700] cupsdReadClient: 8 POST /printers/lp HTTP/1.1
D [10/Jul/2008:16:32:48 -0700] cupsdAuthorize: No authentication data provided.
D [10/Jul/2008:16:32:48 -0700] cupsdIsAuthorized: username=""
D [10/Jul/2008:16:32:48 -0700] Print-Job ipp://cups.server.org:631/printers/lp
E [10/Jul/2008:16:32:48 -0700] Print-Job: Unauthorized
D [10/Jul/2008:16:32:48 -0700] cupsdSendError: 8 code=401 (Unauthorized)

It seems that "Satisfy Any" is not matching on the Allow lines. Is my configuration correct?