<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Alex,<div><br><div><div>On 2012-11-02, at 1:17 PM, Alex Korobkin <<a href="mailto:korobkin+cups@gmail.com">korobkin+cups@gmail.com</a>> wrote:</div><blockquote type="cite"><div>Hi all, </div><div><br></div>I cannot seem to understand how the JobPrivateAccess and JobPrivateValues directives actually work. My CUPS 1.5.4 Linux server authenticates users against LDAP, and I want it to hide print job names, displaying it only to job owners and cups-admins. <div>
<br></div><div>My cupsd.conf has single policy, "default". Here is the what I specify in the policy:</div><div><br></div><div><div><font face="courier new, monospace"><Policy default></font></div><div><font face="courier new, monospace"> JobPrivateAccess @OWNER @cups-admins</font></div>
<div><font face="courier new, monospace"> JobPrivateValues job-name</font></div></div><div><br></div><div>However, job-name is displayed as Unknown (why not Withheld, btw?) to anyone, from anonymous to authenticated ones. I even modified page template and added this stance to be able to see how I'm authenticated to CUPS. </div>
<div><font face="courier new, monospace"><TD>{remote_user=?:You are authenticated as <strong>{remote_user}</strong></TD></font></div></blockquote><div><br></div>"Unknown" is the placeholder text added by the jobs.tmpl file and the command-line utilities (wherever they report the job-name value...)</div><div><br></div><div><blockquote type="cite"><div>It correctly shows my username, but never shows me any job names: neither my own ones, nor of everyone else. </div>
<div>I tried multiple variations of JobPrivateAccess directive, including just "JobPrivateAccess my_username" and "JobPrivateAccess default", but I never see a difference between authenticated and non-authenticated users. </div></blockquote><div><br></div>Can you provide logs (email direct to me if you like) showing the results from cupsdAuthorize? It looks like the web access is not authenticated.</div><div><br></div><div>Also, what Linux distribution are you using?</div><div><br></div><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; ">________________________________________________________________________<br>Michael Sweet, Senior Printing System Engineer, PWG Chair<br></span>
</div>
<br></div></body></html>