[cups] Authenticated and unauthenticated queues

[Rick Cochran]

Michael,

If you check my cupsd.conf you will find that I have a permissive <Location />.

If I do not include the <Location printers> stanza, printing using "Policy 
default" (i.e. authenticated) does not work.  I get exactly one "HTTP 
Unauthorized for Send-Document" in the server log.

I have been trying permutations and combinations all day.

Yours,
-Rick

On 7/22/15, 11:02 AM, Michael Sweet wrote:
> Rick,
>
> You'll need a core <Location /> section for access control to the entire server, and then use the <Policy name> sections to control access to printers.
>
> See:
>
>      http://www.cups.org/documentation.php/policies.html
>
>
>> On Jul 22, 2015, at 10:28 AM, Rick Cochran <rcc2 at cornell.edu> wrote:
>>
>> Michael,
>>
>> Thanks for your quick response!
>>
>> I forgot to mention:
>>
>> If I remove the Location stanza below, printing does not work for either authenticated or unauthenticated queues.
>>
>> If I place the Location stanza within a Policy definition, cupsd gives me a syntax error.
>>
>> So basically, I don't know how to do what you suggest.
>>
>> Am I missing any elements in my Limit stanzas?
>>
>> Yours,
>> -Rick
>>
>>
>> On 7/22/15, 8:50 AM, Michael Sweet wrote:
>>> Rick,
>>>
>>> Put the AuthType and Require lines in the Policy definition.  Putting it on /printers applies those requirements to all printers.
>>>
>>>
>>>> On Jul 21, 2015, at 7:03 PM, Rick Cochran <rcc2 at cornell.edu> wrote:
>>>>
>>>> Hi,
>>>>
>>>> I need to have both authenticated and unauthenticated queues.  The attached cupsd.conf _almost_ works.  The problem is in the following stanza:
>>>>
>>>> <Location /printers>
>>>>   AuthType Basic
>>>>   Encryption Required
>>>>   Order deny,allow
>>>>   Allow localhost
>>>> #  Require user @SYSTEM
>>>> </Location>
>>>>
>>>> If I set the AuthType to "Basic" as above, the authenticated queues work and the unauthenticated queues do not work.
>>>>
>>>> If I set the AuthType to "None", the unauthenticated queues work and the authenticated queues do not work.
>>>>
>>>> By "work", I mean prompt for ID/password (or not) and actually print.
>>>>
>>>> By "do not work", I mean the server just sits there and does not fully accept the print job.
>>>>
>>>> I use "-op-policy=noauth" when creating the unauthenticated queues.
>>>>
>>>> Any help would be appreciated.
>>>>
>>>> Thanks,
>>>> -Rick
>>>> <cupsd.conf.txt>_______________________________________________
>>>> cups mailing list
>>>> cups at cups.org
>>>> https://www.cups.org/mailman/listinfo/cups
>>>
>>> _________________________________________________________
>>> Michael Sweet, Senior Printing System Engineer, PWG Chair
>>>
>>> _______________________________________________
>>> cups mailing list
>>> cups at cups.org
>>> https://www.cups.org/mailman/listinfo/cups
>>>
>> _______________________________________________
>> cups mailing list
>> cups at cups.org
>> https://www.cups.org/mailman/listinfo/cups
>
> _________________________________________________________
> Michael Sweet, Senior Printing System Engineer, PWG Chair
>
> _______________________________________________
> cups mailing list
> cups at cups.org
> https://www.cups.org/mailman/listinfo/cups
>