[cups.general] "Satisfy Any" in cupsd.conf

[Michael R Sweet]

Kev Latimer wrote:
> ...
> Thanks for the quick response!  I'm having a play with using policies
> to accomplish this now, albeit with similar results.  Would I be
> right in thinking that the Satisfy Any issue probably exists in my
> version of cups, as well as 1.4-current, as described in STR #2782,
> and I'm not going to achieve the desired result just by using
> policies?

The current 1.3.x and 1.4.x subversion repositories and the current
1.4.x developer snapshot contain the fix.  The next 1.3.x stable
release will also contain the fix.

 > ...
> Staying only tenuously on-topic, all I need this directive for is to
> allow a script on a machine to execute cups commands on various
> servers across our network.  However, there doesn't seem to be a way
> to include a password on the cups command line, it's an interactive
> prompt.  Is there any way to work around this?

Sorry, unfortunately no.  The closest you can get is to disable
authentication entirely and only allow access from specific
networks/hosts, but for obvious reasons I don't recommend that.

Some people use ssh to tunnel a local connection to the remote
server, at which point you could only allow admin ops from localhost.
That would be slightly more secure, as long as you have local users
you can trust (or don't have any local users on the servers...)

-- 
______________________________________________________________________
Michael R Sweet                        Senior Printing System Engineer