1cupsd.conf(5) Apple Inc. cupsd.conf(5)
2
6 cupsd.conf - server configuration file for cups
7
9 The cupsd.conf file configures the CUPS scheduler, cupsd(8). It is
10 normally located in the /etc/cups directory. Note: File, directory,
11 and user configuration directives that used to be allowed in the
12 cupsd.conf file are now stored in the cups-files.conf(5) file instead
13 in order to prevent certain types of privilege escalation attacks.
14 Each line in the file can be a configuration directive, a blank line,
16 or a comment. Configuration directives typically consist of a name and
17 zero or more values separated by whitespace. The configuration direc‐
18 tive name and values are case-insensitive. Comment lines start with
19 the # character.
20 TOP-LEVEL DIRECTIVES
22 The following top-level directives are understood by cupsd(8):
23 AccessLogLevel config
25 AccessLogLevel actions
27 AccessLogLevel all
29 Specifies the logging level for the AccessLog file. The "config"
30 level logs when printers and classes are added, deleted, or modi‐
31 fied and when configuration files are accessed or updated. The
32 "actions" level logs when print jobs are submitted, held,
33 released, modified, or canceled, and any of the conditions for
34 "config". The "all" level logs all requests. The default access
35 log level is "actions".
36 AutoPurgeJobs Yes
38 AutoPurgeJobs No
40 Specifies whether to purge job history data automatically when it
41 is no longer required for quotas. The default is "No".
42 BrowseLocalProtocols all
44 BrowseLocalProtocols dnssd
46 BrowseLocalProtocols none
48 Specifies which protocols to use for local printer sharing. The
49 default is "dnssd" on systems that support Bonjour and "none" oth‐
50 erwise.
51 BrowseWebIF Yes
53 BrowseWebIF No
55 Specifies whether the CUPS web interface is advertised. The
56 default is "No".
57 Browsing Yes
59 Browsing No
61 Specifies whether shared printers are advertised. The default is
62 "No".
63 DefaultAuthType Basic
65 DefaultAuthType Negotiate
67 Specifies the default type of authentication to use. The default
68 is "Basic".
69 DefaultEncryption Never
71 DefaultEncryption IfRequested
73 DefaultEncryption Required
75 Specifies whether encryption will be used for authenticated
76 requests. The default is "Required".
77 DefaultLanguage locale
79 Specifies the default language to use for text and web content.
80 The default is "en".
81 DefaultPaperSize Auto
83 DefaultPaperSize None
85 DefaultPaperSize sizename
87 Specifies the default paper size for new print queues. "Auto" uses
88 a locale-specific default, while "None" specifies there is no
89 default paper size. Specific size names are typically "Letter" or
90 "A4". The default is "Auto".
91 DefaultPolicy policy-name
93 Specifies the default access policy to use. The default access
94 policy is "default".
95 DefaultShared Yes
97 DefaultShared No
99 Specifies whether local printers are shared by default. The
100 default is "Yes".
101 DirtyCleanInterval seconds
103 Specifies the delay for updating of configuration and state files.
104 A value of 0 causes the update to happen as soon as possible, typ‐
105 ically within a few milliseconds. The default value is "30".
106 ErrorPolicy abort-job
108 Specifies that a failed print job should be aborted (discarded)
109 unless otherwise specified for the printer.
110 ErrorPolicy retry-current-job
112 Specifies that a failed print job should be retried immediately
113 unless otherwise specified for the printer.
114 ErrorPolicy retry-job
116 Specifies that a failed print job should be retried at a later
117 time unless otherwise specified for the printer.
118 ErrorPolicy stop-printer
120 Specifies that a failed print job should stop the printer unless
121 otherwise specified for the printer. The 'stop-printer' error pol‐
122 icy is the default.
123 FilterLimit limit
125 Specifies the maximum cost of filters that are run concurrently,
126 which can be used to minimize disk, memory, and CPU resource prob‐
127 lems. A limit of 0 disables filter limiting. An average print to
128 a non-PostScript printer needs a filter limit of about 200. A
129 PostScript printer needs about half that (100). Setting the limit
130 below these thresholds will effectively limit the scheduler to
131 printing a single job at any time. The default limit is "0".
132 FilterNice nice-value
134 Specifies the scheduling priority ( nice(8) value) of filters that
135 are run to print a job. The nice value ranges from 0, the highest
136 priority, to 19, the lowest priority. The default is 0.
137 GSSServiceName name
139 Specifies the service name when using Kerberos authentication.
140 The default service name is "http."
141 HostNameLookups On
143 HostNameLookups Off
145 HostNameLookups Double
147 Specifies whether to do reverse lookups on connecting clients.
148 The "Double" setting causes cupsd(8) to verify that the hostname
149 resolved from the address matches one of the addresses returned
150 for that hostname. Double lookups also prevent clients with
151 unregistered addresses from connecting to your server. The
152 default is "Off" to avoid the potential server performance prob‐
153 lems with hostname lookups. Only set this option to "On" or "Dou‐
154 ble" if absolutely required.
155 IdleExitTimeout seconds
157 Specifies the length of time to wait before shutting down due to
158 inactivity. The default is "60" seconds. Note: Only applicable
159 when cupsd(8) is run on-demand (e.g., with -l).
160 JobKillDelay seconds
162 Specifies the number of seconds to wait before killing the filters
163 and backend associated with a canceled or held job. The default
164 is "30".
165 JobRetryInterval seconds
167 Specifies the interval between retries of jobs in seconds. This
168 is typically used for fax queues but can also be used with normal
169 print queues whose error policy is "retry-job" or "retry-current-
170 job". The default is "30".
171 JobRetryLimit count
173 Specifies the number of retries that are done for jobs. This is
174 typically used for fax queues but can also be used with normal
175 print queues whose error policy is "retry-job" or "retry-current-
176 job". The default is "5".
177 KeepAlive Yes
179 KeepAlive No
181 Specifies whether to support HTTP keep-alive connections. The
182 default is "Yes".
183 KeepAliveTimeout seconds
185 Specifies how long an idle client connection remains open. The
186 default is "30".
187 <Limit operation ...> ... </Limit>
189 Specifies the IPP operations that are being limited inside a Pol‐
190 icy section. IPP operation names are listed below in the section
191 "IPP OPERATION NAMES".
192 <Limit method ...> ... </Limit>
194 <LimitExcept method ...> ... </LimitExcept>
196 Specifies the HTTP methods that are being limited inside a Loca‐
197 tion section. HTTP method names are listed below in the section
198 "HTTP METHOD NAMES".
199 LimitRequestBody size
201 Specifies the maximum size of print files, IPP requests, and HTML
202 form data. The default is "0" which disables the limit check.
203 Listen ipv4-address:port
205 Listen [ipv6-address]:port
207 Listen *:port
209 Listen /path/to/domain/socket
211 Listens to the specified address and port or domain socket path
212 for connections. Multiple Listen directives can be provided to
213 listen on multiple addresses. The Listen directive is similar to
214 the Port directive but allows you to restrict access to specific
215 interfaces or networks.
216 ListenBackLog number
218 Specifies the number of pending connections that will be allowed.
219 This normally only affects very busy servers that have reached the
220 MaxClients limit, but can also be triggered by large numbers of
221 simultaneous connections. When the limit is reached, the operat‐
222 ing system will refuse additional connections until the scheduler
223 can accept the pending ones. The default is the OS-defined
224 default limit, typically either "5" for older operating systems or
225 "128" for newer operating systems.
226 <Location /path> ... </Location>
228 Specifies access control for the named location. Paths are docu‐
229 mented below in the section "LOCATION PATHS".
230 LogDebugHistory number
232 Specifies the number of debugging messages that are retained for
233 logging if an error occurs in a print job. Debug messages are
234 logged regardless of the LogLevel setting.
235 LogLevel none
237 LogLevel emerg
239 LogLevel alert
241 LogLevel crit
243 LogLevel error
245 LogLevel warn
247 LogLevel notice
249 LogLevel info
251 LogLevel debug
253 LogLevel debug2
255 Specifies the level of logging for the ErrorLog file. The value
256 "none" stops all logging while "debug2" logs everything. The
257 default is "warn".
258 LogTimeFormat standard
260 LogTimeFormat usecs
262 Specifies the format of the date and time in the log files. The
263 value "standard" is the default and logs whole seconds while
264 "usecs" logs microseconds.
265 MaxClients number
267 Specifies the maximum number of simultaneous clients that are
268 allowed by the scheduler. The default is "100".
269 MaxClientsPerHost number
271 Specifies the maximum number of simultaneous clients that are
272 allowed from a single address. The default is the MaxClients
273 value.
274 MaxCopies number
276 Specifies the maximum number of copies that a user can print of
277 each job. The default is "9999".
278 MaxHoldTime seconds
280 Specifies the maximum time a job may remain in the "indefinite"
281 hold state before it is canceled. The default is "0" which dis‐
282 ables cancellation of held jobs.
283 MaxJobs number
285 Specifies the maximum number of simultaneous jobs that are
286 allowed. Set to "0" to allow an unlimited number of jobs. The
287 default is "500".
288 MaxJobsPerPrinter number
290 Specifies the maximum number of simultaneous jobs that are allowed
291 per printer. The default is "0" which allows up to MaxJobs jobs
292 per printer.
293 MaxJobsPerUser number
295 Specifies the maximum number of simultaneous jobs that are allowed
296 per user. The default is "0" which allows up to MaxJobs jobs per
297 user.
298 MaxJobTime seconds
300 Specifies the maximum time a job may take to print before it is
301 canceled. Set to "0" to disable cancellation of "stuck" jobs.
302 The default is "10800" (3 hours).
303 MaxLogSize size
305 Specifies the maximum size of the log files before they are
306 rotated. The value "0" disables log rotation. The default is
307 "1048576" (1MB).
308 MultipleOperationTimeout seconds
310 Specifies the maximum amount of time to allow between files in a
311 multiple file print job. The default is "300" (5 minutes).
312 <Policy name> ... </Policy>
314 Specifies access control for the named policy.
315 Port number
317 Listens to the specified port number for connections.
318 PreserveJobFiles Yes
320 PreserveJobFiles No
322 PreserveJobFiles seconds
324 Specifies whether job files (documents) are preserved after a job
325 is printed. If a numeric value is specified, job files are pre‐
326 served for the indicated number of seconds after printing. The
327 default is "86400" (preserve 1 day).
328 PreserveJobHistory Yes
330 PreserveJobHistory No
332 PreserveJobHistory seconds
334 Specifies whether the job history is preserved after a job is
335 printed. If a numeric value is specified, the job history is pre‐
336 served for the indicated number of seconds after printing. If
337 "Yes", the job history is preserved until the MaxJobs limit is
338 reached. The default is "Yes".
339 ReloadTimeout seconds
341 Specifies the amount of time to wait for job completion before
342 restarting the scheduler. The default is "30".
343 ServerAdmin email-address
345 Specifies the email address of the server administrator. The
346 default value is "root@ServerName".
347 ServerAlias hostname [ ... hostname ]
349 ServerAlias *
351 The ServerAlias directive is used for HTTP Host header validation
352 when clients connect to the scheduler from external interfaces.
353 Using the special name "*" can expose your system to known
354 browser-based DNS rebinding attacks, even when accessing sites
355 through a firewall. If the auto-discovery of alternate names does
356 not work, we recommend listing each alternate name with a Server‐
357 Alias directive instead of using "*".
358 ServerName hostname
360 Specifies the fully-qualified hostname of the server. The default
361 is the value reported by the hostname(1) command.
362 ServerTokens None
364 ServerTokens ProductOnly
366 ServerTokens Major
368 ServerTokens Minor
370 ServerTokens Minimal
372 ServerTokens OS
374 ServerTokens Full
376 Specifies what information is included in the Server header of
377 HTTP responses. "None" disables the Server header. "ProductOnly"
378 reports "CUPS". "Major" reports "CUPS 2". "Minor" reports "CUPS
379 2.0". "Minimal" reports "CUPS 2.0.0". "OS" reports "CUPS 2.0.0
380 (UNAME)" where UNAME is the output of the uname(1) command.
381 "Full" reports "CUPS 2.0.0 (UNAME) IPP/2.0". The default is "Min‐
382 imal".
383 SSLListen ipv4-address:port
385 SSLListen [ipv6-address]:port
387 SSLListen *:port
389 Listens on the specified address and port for encrypted connec‐
390 tions.
391 SSLOptions [AllowDH] [AllowRC4] [AllowSSL3] [DenyCBC] [DenyTLS1.0]
393 SSLOptions None
395 Sets encryption options. By default, CUPS only supports encryp‐
396 tion using TLS v1.0 or higher using known secure cipher suites.
397 Security is reduced when Allow options are used. Security is
398 enhanced when Deny options are used. The AllowDH option enables
399 cipher suites using plain Diffie-Hellman key negotiation (not sup‐
400 ported on systems using GNU TLS). The AllowRC4 option enables the
401 128-bit RC4 cipher suites, which are required for some older
402 clients. The AllowSSL3 option enables SSL v3.0, which is required
403 for some older clients that do not support TLS v1.0. The DenyCBC
404 option disables all CBC cipher suites. The DenyTLS1.0 option dis‐
405 ables TLS v1.0 support - this sets the minimum protocol version to
406 TLS v1.1.
407 SSLPort port
409 Listens on the specified port for encrypted connections.
410 StrictConformance Yes
412 StrictConformance No
414 Specifies whether the scheduler requires clients to strictly
415 adhere to the IPP specifications. The default is "No".
416 Timeout seconds
418 Specifies the HTTP request timeout. The default is "300" (5 min‐
419 utes).
420 WebInterface yes
422 WebInterface no
424 Specifies whether the web interface is enabled. The default is
425 "No".
426 HTTP METHOD NAMES
428 The following HTTP methods are supported by cupsd(8):
429 GET Used by a client to download icons and other printer resources and
431 to access the CUPS web interface.
432 HEAD Used by a client to get the type, size, and modification date of
434 resources.
435 OPTIONS
437 Used by a client to establish a secure (SSL/TLS) connection.
438 POST Used by a client to submit IPP requests and HTML forms from the
440 CUPS web interface.
441 PUT Used by a client to upload configuration files.
443 IPP OPERATION NAMES
445 The following IPP operations are supported by cupsd(8):
446 CUPS-Accept-Jobs
448 Allows a printer to accept new jobs.
449 CUPS-Add-Modify-Class
451 Adds or modifies a printer class.
452 CUPS-Add-Modify-Printer
454 Adds or modifies a printer.
455 CUPS-Authenticate-Job
457 Releases a job that is held for authentication.
458 CUPS-Delete-Class
460 Deletes a printer class.
461 CUPS-Delete-Printer
463 Deletes a printer.
464 CUPS-Get-Classes
466 Gets a list of printer classes.
467 CUPS-Get-Default
469 Gets the server default printer or printer class.
470 CUPS-Get-Devices
472 Gets a list of devices that are currently available.
473 CUPS-Get-Document
475 Gets a document file for a job.
476 CUPS-Get-PPD
478 Gets a PPD file.
479 CUPS-Get-PPDs
481 Gets a list of installed PPD files.
482 CUPS-Get-Printers
484 Gets a list of printers.
485 CUPS-Move-Job
487 Moves a job.
488 CUPS-Reject-Jobs
490 Prevents a printer from accepting new jobs.
491 CUPS-Set-Default
493 Sets the server default printer or printer class.
494 Cancel-Job
496 Cancels a job.
497 Cancel-Jobs
499 Cancels one or more jobs.
500 Cancel-My-Jobs
502 Cancels one or more jobs creates by a user.
503 Cancel-Subscription
505 Cancels a subscription.
506 Close-Job
508 Closes a job that is waiting for more documents.
509 Create-Job
511 Creates a new job with no documents.
512 Create-Job-Subscriptions
514 Creates a subscription for job events.
515 Create-Printer-Subscriptions
517 Creates a subscription for printer events.
518 Get-Job-Attributes
520 Gets information about a job.
521 Get-Jobs
523 Gets a list of jobs.
524 Get-Notifications
526 Gets a list of event notifications for a subscription.
527 Get-Printer-Attributes
529 Gets information about a printer or printer class.
530 Get-Subscription-Attributes
532 Gets information about a subscription.
533 Get-Subscriptions
535 Gets a list of subscriptions.
536 Hold-Job
538 Holds a job from printing.
539 Hold-New-Jobs
541 Holds all new jobs from printing.
542 Pause-Printer
544 Stops processing of jobs by a printer or printer class.
545 Pause-Printer-After-Current-Job
547 Stops processing of jobs by a printer or printer class after the
548 current job is finished.
549 Print-Job
551 Creates a new job with a single document.
552 Purge-Jobs
554 Cancels one or more jobs and deletes the job history.
555 Release-Held-New-Jobs
557 Allows previously held jobs to print.
558 Release-Job
560 Allows a job to print.
561 Renew-Subscription
563 Renews a subscription.
564 Restart-Job
566 Reprints a job, if possible.
567 Send-Document
569 Adds a document to a job.
570 Set-Job-Attributes
572 Changes job information.
573 Set-Printer-Attributes
575 Changes printer or printer class information.
576 Validate-Job
578 Validates options for a new job.
579 LOCATION PATHS
581 The following paths are commonly used when configuring cupsd(8):
582 / The path for all get operations (get-printers, get-jobs, etc.)
584 /admin
586 The path for all administration operations (add-printer, delete-
587 printer, start-printer, etc.)
588 /admin/conf
590 The path for access to the CUPS configuration files (cupsd.conf,
591 client.conf, etc.)
592 /admin/log
594 The path for access to the CUPS log files (access_log, error_log,
595 page_log)
596 /classes
598 The path for all printer classes
599 /classes/name
601 The resource for the named printer class
602 /jobs
604 The path for all jobs (hold-job, release-job, etc.)
605 /jobs/id
607 The path for the specified job
608 /printers
610 The path for all printers
611 /printers/name
613 The path for the named printer
614 /printers/name.png
616 The icon file path for the named printer
617 /printers/name.ppd
619 The PPD file path for the named printer
620 DIRECTIVES VALID WITHIN LOCATION AND LIMIT SECTIONS
622 The following directives may be placed inside Location and Limit sec‐
623 tions in the cupsd.conf file:
624 Allow all
626 Allow none
628 Allow host.domain.com
630 Allow *.domain.com
632 Allow ipv4-address
634 Allow ipv4-address/netmask
636 Allow ipv4-address/mm
638 Allow [ipv6-address]
640 Allow [ipv6-address]/mm
642 Allow @IF(name)
644 Allow @LOCAL
646 Allows access from the named hosts, domains, addresses, or inter‐
647 faces. The Order directive controls whether Allow lines are eval‐
648 uated before or after Deny lines.
649 AuthType None
651 AuthType Basic
653 AuthType Default
655 AuthType Negotiate
657 Specifies the type of authentication required. The value
658 "Default" corresponds to the DefaultAuthType value.
659 Deny all
661 Deny none
663 Deny host.domain.com
665 Deny *.domain.com
667 Deny ipv4-address
669 Deny ipv4-address/netmask
671 Deny ipv4-address/mm
673 Deny [ipv6-address]
675 Deny [ipv6-address]/mm
677 Deny @IF(name)
679 Deny @LOCAL
681 Denies access from the named hosts, domains, addresses, or inter‐
682 faces. The Order directive controls whether Deny lines are evalu‐
683 ated before or after Allow lines.
684 Encryption IfRequested
686 Encryption Never
688 Encryption Required
690 Specifies the level of encryption that is required for a particu‐
691 lar location. The default value is "IfRequested".
692 Order allow,deny
694 Specifies that access is denied by default. Allow lines are then
695 processed followed by Deny lines to determine whether a client may
696 access a particular resource.
697 Order deny,allow
699 Specifies that access is allowed by default. Deny lines are then
700 processed followed by Allow lines to determine whether a client
701 may access a particular resource.
702 Require group group-name [ group-name ... ]
704 Specifies that an authenticated user must be a member of one of
705 the named groups.
706 Require user {user-name|@group-name} ...
708 Specifies that an authenticated user must match one of the named
709 users or be a member of one of the named groups. The group name
710 "@SYSTEM" corresponds to the list of groups defined by the System‐
711 Group directive in the cups-files.conf(5) file. The group name
712 "@OWNER" corresponds to the owner of the resource, for example the
713 person that submitted a print job. Note: The 'root' user is not
714 special and must be granted privileges like any other user
715 account.
716 Require valid-user
718 Specifies that any authenticated user is acceptable.
719 Satisfy all
721 Specifies that all Allow, AuthType, Deny, Order, and Require con‐
722 ditions must be satisfied to allow access.
723 Satisfy any
725 Specifies that any a client may access a resource if either the
726 authentication (AuthType/Require) or address (Allow/Deny/Order)
727 conditions are satisfied. For example, this can be used to
728 require authentication only for remote accesses.
729 DIRECTIVES VALID WITHIN POLICY SECTIONS
731 The following directives may be placed inside Policy sections in the
732 cupsd.conf file:
733 JobPrivateAccess all
735 JobPrivateAccess default
737 JobPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ...
739 Specifies an access list for a job's private values. The
740 "default" access list is "@OWNER @SYSTEM". "@ACL" maps to the
741 printer's requesting-user-name-allowed or requesting-user-name-
742 denied values. "@OWNER" maps to the job's owner. "@SYSTEM" maps
743 to the groups listed for the SystemGroup directive in the cups-
744 files.conf(5) file.
745 JobPrivateValues all
747 JobPrivateValues default
749 JobPrivateValues none
751 JobPrivateValues attribute-name [ ... attribute-name ]
753 Specifies the list of job values to make private. The "default"
754 values are "job-name", "job-originating-host-name", "job-originat‐
755 ing-user-name", and "phone".
756 SubscriptionPrivateAccess all
758 SubscriptionPrivateAccess default
760 SubscriptionPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ...
762 Specifies an access list for a subscription's private values. The
763 "default" access list is "@OWNER @SYSTEM". "@ACL" maps to the
764 printer's requesting-user-name-allowed or requesting-user-name-
765 denied values. "@OWNER" maps to the job's owner. "@SYSTEM" maps
766 to the groups listed for the SystemGroup directive in the cups-
767 files.conf(5) file.
768 SubscriptionPrivateValues all
770 SubscriptionPrivateValues default
772 SubscriptionPrivateValues none
774 SubscriptionPrivateValues attribute-name [ ... attribute-name ]
776 Specifies the list of subscription values to make private. The
777 "default" values are "notify-events", "notify-pull-method",
778 "notify-recipient-uri", "notify-subscriber-user-name", and
779 "notify-user-data".
780 DEPRECATED DIRECTIVES
782 The following directives are deprecated and will be removed in a future
783 release of CUPS:
784 Classification banner
786 Specifies the security classification of the server. Any valid
787 banner name can be used, including "classified", "confidential",
788 "secret", "topsecret", and "unclassified", or the banner can be
789 omitted to disable secure printing functions. The default is no
790 classification banner.
791 ClassifyOverride Yes
793 ClassifyOverride No
795 Specifies whether users may override the classification (cover
796 page) of individual print jobs using the "job-sheets" option. The
797 default is "No".
798 PageLogFormat format-string
800 Specifies the format of PageLog lines. Sequences beginning with
801 percent (%) characters are replaced with the corresponding infor‐
802 mation, while all other characters are copied literally. The fol‐
803 lowing percent sequences are recognized:
804 "%%" inserts a single percent character.
806 "%{name}" inserts the value of the specified IPP attribute.
807 "%C" inserts the number of copies for the current page.
808 "%P" inserts the current page number.
809 "%T" inserts the current date and time in common log format.
810 "%j" inserts the job ID.
811 "%p" inserts the printer name.
812 "%u" inserts the username.
813 The default is the empty string, which disables page logging. The
815 string "%p %u %j %T %P %C %{job-billing} %{job-originating-host-
816 name} %{job-name} %{media} %{sides}" creates a page log with the
817 standard items.
818 RIPCache size
820 Specifies the maximum amount of memory to use when converting doc‐
821 uments into bitmaps for a printer. The default is "128m".
822
824 The cupsd.conf file format is based on the Apache HTTP Server configu‐
825 ration file format.
826
828 Log everything with a maximum log file size of 32 megabytes:
829 AccessLogLevel all
831 LogLevel debug2
832 MaxLogSize 32m
833 Require authentication for accesses from outside the 10. network:
835 <Location />
837 Order allow,deny
838 Allow from 10./8
839 AuthType Basic
840 Require valid-user
841 Satisfy any
842 </Location>
843
845 classes.conf(5), cups-files.conf(5), cupsd(8), mime.convs(5),
846 mime.types(5), printers.conf(5), subscriptions.conf(5), CUPS Online
847 Help (http://localhost:631/help)
848
850 Copyright © 2007-2018 by Apple Inc.
85124 April 2018 CUPS cupsd.conf(5)