1cupsd.conf(5)                     Apple Inc.                     cupsd.conf(5)
2
3
4

NAME

6       cupsd.conf - server configuration file for cups
7

DESCRIPTION

9       The  cupsd.conf  file  configures  the CUPS scheduler, cupsd(8).  It is
10       normally located in the /etc/cups directory.   Note:  File,  directory,
11       and  user  configuration  directives  that  used  to  be allowed in the
12       cupsd.conf file are now stored in the cups-files.conf(5)  file  instead
13       in order to prevent certain types of privilege escalation attacks.
14
15       Each  line  in the file can be a configuration directive, a blank line,
16       or a comment.  Configuration directives typically consist of a name and
17       zero  or more values separated by whitespace.  The configuration direc‐
18       tive name and values are case-insensitive.  Comment  lines  start  with
19       the # character.
20
21   TOP-LEVEL DIRECTIVES
22       The following top-level directives are understood by cupsd(8):
23
24       AccessLogLevel config
25
26       AccessLogLevel actions
27
28       AccessLogLevel all
29            Specifies  the logging level for the AccessLog file.  The "config"
30            level logs when printers and classes are added, deleted, or  modi‐
31            fied  and  when  configuration files are accessed or updated.  The
32            "actions"  level  logs  when  print  jobs  are  submitted,   held,
33            released,  modified,  or  canceled,  and any of the conditions for
34            "config".  The "all" level logs all requests.  The default  access
35            log level is "actions".
36
37       AutoPurgeJobs Yes
38
39       AutoPurgeJobs No
40            Specifies  whether to purge job history data automatically when it
41            is no longer required for quotas.  The default is "No".
42
43       BrowseLocalProtocols all
44
45       BrowseLocalProtocols dnssd
46
47       BrowseLocalProtocols none
48            Specifies which protocols to use for local printer  sharing.   The
49            default is "dnssd" on systems that support Bonjour and "none" oth‐
50            erwise.
51
52       BrowseWebIF Yes
53
54       BrowseWebIF No
55            Specifies whether the  CUPS  web  interface  is  advertised.   The
56            default is "No".
57
58       Browsing Yes
59
60       Browsing No
61            Specifies  whether shared printers are advertised.  The default is
62            "No".
63
64       DefaultAuthType Basic
65
66       DefaultAuthType Negotiate
67            Specifies the default type of authentication to use.  The  default
68            is "Basic".
69
70       DefaultEncryption Never
71
72       DefaultEncryption IfRequested
73
74       DefaultEncryption Required
75            Specifies  whether  encryption  will  be  used  for  authenticated
76            requests.  The default is "Required".
77
78       DefaultLanguage locale
79            Specifies the default language to use for text  and  web  content.
80            The default is "en".
81
82       DefaultPaperSize Auto
83
84       DefaultPaperSize None
85
86       DefaultPaperSize sizename
87            Specifies the default paper size for new print queues. "Auto" uses
88            a locale-specific default, while  "None"  specifies  there  is  no
89            default paper size.  Specific size names are typically "Letter" or
90            "A4".  The default is "Auto".
91
92       DefaultPolicy policy-name
93            Specifies the default access policy to use.   The  default  access
94            policy is "default".
95
96       DefaultShared Yes
97
98       DefaultShared No
99            Specifies  whether  local  printers  are  shared  by default.  The
100            default is "Yes".
101
102       DirtyCleanInterval seconds
103            Specifies the delay for updating of configuration and state files.
104            A value of 0 causes the update to happen as soon as possible, typ‐
105            ically within a few milliseconds.  The default value is "30".
106
107       ErrorPolicy abort-job
108            Specifies that a failed print job should  be  aborted  (discarded)
109            unless otherwise specified for the printer.
110
111       ErrorPolicy retry-job
112            Specifies  that  a  failed  print job should be retried at a later
113            time unless otherwise specified for the printer.
114
115       ErrorPolicy retry-this-job
116            Specifies that a failed print job should  be  retried  immediately
117            unless otherwise specified for the printer.
118
119       ErrorPolicy stop-printer
120            Specifies  that  a failed print job should stop the printer unless
121            otherwise specified for the printer. The 'stop-printer' error pol‐
122            icy is the default.
123
124       FilterLimit limit
125            Specifies  the  maximum cost of filters that are run concurrently,
126            which can be used to minimize disk, memory, and CPU resource prob‐
127            lems.  A limit of 0 disables filter limiting.  An average print to
128            a non-PostScript printer needs a filter limit  of  about  200.   A
129            PostScript printer needs about half that (100).  Setting the limit
130            below these thresholds will effectively  limit  the  scheduler  to
131            printing a single job at any time.  The default limit is "0".
132
133       FilterNice nice-value
134            Specifies the scheduling priority ( nice(8) value) of filters that
135            are run to print a job.  The nice value ranges from 0, the highest
136            priority, to 19, the lowest priority.  The default is 0.
137
138       GSSServiceName name
139            Specifies  the  service  name  when using Kerberos authentication.
140            The default service name is "http."
141
142       HostNameLookups On
143
144       HostNameLookups Off
145
146       HostNameLookups Double
147            Specifies whether to do reverse  lookups  on  connecting  clients.
148            The  "Double"  setting causes cupsd(8) to verify that the hostname
149            resolved from the address matches one of  the  addresses  returned
150            for  that  hostname.   Double  lookups  also  prevent clients with
151            unregistered  addresses  from  connecting  to  your  server.   The
152            default  is  "Off" to avoid the potential server performance prob‐
153            lems with hostname lookups.  Only set this option to "On" or "Dou‐
154            ble" if absolutely required.
155
156       IdleExitTimeout seconds
157            Specifies  the  length of time to wait before shutting down due to
158            inactivity.  The default is "60" seconds.  Note:  Only  applicable
159            when cupsd(8) is run on-demand (e.g., with -l).
160
161       JobKillDelay seconds
162            Specifies the number of seconds to wait before killing the filters
163            and backend associated with a canceled or held job.   The  default
164            is "30".
165
166       JobRetryInterval seconds
167            Specifies  the  interval between retries of jobs in seconds.  This
168            is typically used for fax queues but can also be used with  normal
169            print  queues whose error policy is "retry-job" or "retry-current-
170            job".  The default is "30".
171
172       JobRetryLimit count
173            Specifies the number of retries that are done for jobs.   This  is
174            typically  used  for  fax  queues but can also be used with normal
175            print queues whose error policy is "retry-job" or  "retry-current-
176            job".  The default is "5".
177
178       KeepAlive Yes
179
180       KeepAlive No
181            Specifies  whether  to  support  HTTP keep-alive connections.  The
182            default is "Yes".
183
184       KeepAliveTimeout seconds
185            Specifies how long an idle client connection  remains  open.   The
186            default is "30".
187
188       <Limit operation ...> ... </Limit>
189            Specifies  the IPP operations that are being limited inside a Pol‐
190            icy section. IPP operation names are listed below in  the  section
191            "IPP OPERATION NAMES".
192
193       <Limit method ...> ... </Limit>
194
195       <LimitExcept method ...> ... </LimitExcept>
196            Specifies  the  HTTP methods that are being limited inside a Loca‐
197            tion section. HTTP method names are listed below  in  the  section
198            "HTTP METHOD NAMES".
199
200       LimitRequestBody size
201            Specifies  the maximum size of print files, IPP requests, and HTML
202            form data.  The default is "0" which disables the limit check.
203
204       Listen ipv4-address:port
205
206       Listen [ipv6-address]:port
207
208       Listen *:port
209
210       Listen /path/to/domain/socket
211            Listens to the specified address and port or  domain  socket  path
212            for  connections.   Multiple  Listen directives can be provided to
213            listen on multiple addresses.  The Listen directive is similar  to
214            the  Port  directive but allows you to restrict access to specific
215            interfaces or networks.
216
217       ListenBackLog number
218            Specifies the number of pending connections that will be  allowed.
219            This normally only affects very busy servers that have reached the
220            MaxClients limit, but can also be triggered by  large  numbers  of
221            simultaneous  connections.  When the limit is reached, the operat‐
222            ing system will refuse additional connections until the  scheduler
223            can  accept  the  pending  ones.   The  default  is the OS-defined
224            default limit, typically either "5" for older operating systems or
225            "128" for newer operating systems.
226
227       <Location /path> ... </Location>
228            Specifies  access control for the named location.  Paths are docu‐
229            mented below in the section "LOCATION PATHS".
230
231       LogDebugHistory number
232            Specifies the number of debugging messages that are  retained  for
233            logging  if  an  error  occurs  in a print job. Debug messages are
234            logged regardless of the LogLevel setting.
235
236       LogLevel none
237
238       LogLevel emerg
239
240       LogLevel alert
241
242       LogLevel crit
243
244       LogLevel error
245
246       LogLevel warn
247
248       LogLevel notice
249
250       LogLevel info
251
252       LogLevel debug
253
254       LogLevel debug2
255            Specifies the level of logging for the ErrorLog file.   The  value
256            "none"  stops  all  logging  while  "debug2" logs everything.  The
257            default is "warn".
258
259       LogTimeFormat standard
260
261       LogTimeFormat usecs
262            Specifies the format of the date and time in the log  files.   The
263            value  "standard"  is  the  default  and  logs whole seconds while
264            "usecs" logs microseconds.
265
266       MaxClients number
267            Specifies the maximum number  of  simultaneous  clients  that  are
268            allowed by the scheduler.  The default is "100".
269
270       MaxClientsPerHost number
271            Specifies  the  maximum  number  of  simultaneous clients that are
272            allowed from a single address.   The  default  is  the  MaxClients
273            value.
274
275       MaxCopies number
276            Specifies  the  maximum  number of copies that a user can print of
277            each job.  The default is "9999".
278
279       MaxHoldTime seconds
280            Specifies the maximum time a job may remain  in  the  "indefinite"
281            hold  state  before it is canceled.  The default is "0" which dis‐
282            ables cancellation of held jobs.
283
284       MaxJobs number
285            Specifies  the  maximum  number  of  simultaneous  jobs  that  are
286            allowed.   Set  to  "0" to allow an unlimited number of jobs.  The
287            default is "500".
288
289       MaxJobsPerPrinter number
290            Specifies the maximum number of simultaneous jobs that are allowed
291            per  printer.   The default is "0" which allows up to MaxJobs jobs
292            per printer.
293
294       MaxJobsPerUser number
295            Specifies the maximum number of simultaneous jobs that are allowed
296            per  user.  The default is "0" which allows up to MaxJobs jobs per
297            user.
298
299       MaxJobTime seconds
300            Specifies the maximum time a job may take to print  before  it  is
301            canceled.   Set  to  "0"  to disable cancellation of "stuck" jobs.
302            The default is "10800" (3 hours).
303
304       MaxLogSize size
305            Specifies the maximum size  of  the  log  files  before  they  are
306            rotated.   The  value  "0"  disables log rotation.  The default is
307            "1048576" (1MB).
308
309       MultipleOperationTimeout seconds
310            Specifies the maximum amount of time to allow between files  in  a
311            multiple file print job.  The default is "300" (5 minutes).
312
313       <Policy name> ... </Policy>
314            Specifies access control for the named policy.
315
316       Port number
317            Listens to the specified port number for connections.
318
319       PreserveJobFiles Yes
320
321       PreserveJobFiles No
322
323       PreserveJobFiles seconds
324            Specifies  whether job files (documents) are preserved after a job
325            is printed.  If a numeric value is specified, job files  are  pre‐
326            served  for  the  indicated number of seconds after printing.  The
327            default is "86400" (preserve 1 day).
328
329       PreserveJobHistory Yes
330
331       PreserveJobHistory No
332
333       PreserveJobHistory seconds
334            Specifies whether the job history is  preserved  after  a  job  is
335            printed.  If a numeric value is specified, the job history is pre‐
336            served for the indicated number of  seconds  after  printing.   If
337            "Yes",  the  job  history  is preserved until the MaxJobs limit is
338            reached.  The default is "Yes".
339
340       ReloadTimeout seconds
341            Specifies the amount of time to wait  for  job  completion  before
342            restarting the scheduler.  The default is "30".
343
344       ServerAdmin email-address
345            Specifies  the  email  address  of  the server administrator.  The
346            default value is "root@ServerName".
347
348       ServerAlias hostname [ ... hostname ]
349
350       ServerAlias *
351            The ServerAlias directive is used for HTTP Host header  validation
352            when  clients  connect  to the scheduler from external interfaces.
353            Using the special  name  "*"  can  expose  your  system  to  known
354            browser-based  DNS  rebinding  attacks,  even when accessing sites
355            through a firewall.  If the auto-discovery of alternate names does
356            not  work, we recommend listing each alternate name with a Server‐
357            Alias directive instead of using "*".
358
359       ServerName hostname
360            Specifies the fully-qualified hostname of the server.  The default
361            is the value reported by the hostname(1) command.
362
363       ServerTokens None
364
365       ServerTokens ProductOnly
366
367       ServerTokens Major
368
369       ServerTokens Minor
370
371       ServerTokens Minimal
372
373       ServerTokens OS
374
375       ServerTokens Full
376            Specifies  what  information  is  included in the Server header of
377            HTTP responses.  "None" disables the Server header.  "ProductOnly"
378            reports  "CUPS".  "Major" reports "CUPS 2".  "Minor" reports "CUPS
379            2.0".  "Minimal" reports "CUPS 2.0.0".  "OS" reports  "CUPS  2.0.0
380            (UNAME)"  where  UNAME  is  the  output  of  the uname(1) command.
381            "Full" reports "CUPS 2.0.0 (UNAME) IPP/2.0".  The default is "Min‐
382            imal".
383
384       SSLListen ipv4-address:port
385
386       SSLListen [ipv6-address]:port
387
388       SSLListen *:port
389            Listens  on  the  specified address and port for encrypted connec‐
390            tions.
391
392
393       SSLOptions   [AllowDH]    [AllowRC4]    [AllowSSL3]    [DenyCBC]
394       [DenyTLS1.0]  [MaxTLS1.0]  [MaxTLS1.1]  [MaxTLS1.2]  [MaxTLS1.3]
395       [MinTLS1.0] [MinTLS1.1] [MinTLS1.2] [MinTLS1.3]
396
397       SSLOptions None
398            Sets encryption options  (only  in  /etc/cups/client.conf).
399            By default, CUPS only supports encryption using TLS v1.0 or
400            higher using  known  secure  cipher  suites.   Security  is
401            reduced  when Allow options are used.  Security is enhanced
402            when Deny options are used.   The  AllowDH  option  enables
403            cipher  suites  using  plain Diffie-Hellman key negotiation
404            (not supported on systems using  GNU  TLS).   The  AllowRC4
405            option  enables  the  128-bit  RC4 cipher suites, which are
406            required for some  older  clients.   The  AllowSSL3  option
407            enables  SSL v3.0, which is required for some older clients
408            that do not support TLS v1.0.  The DenyCBC option  disables
409            all  CBC cipher suites.  The DenyTLS1.0 option disables TLS
410            v1.0 support - this sets the minimum  protocol  version  to
411            TLS v1.1.  The inTLS options set the minimum TLS version to
412            support.  The axTLS options set the maximum TLS version  to
413            support.  Not all operating systems support TLS 1.3 at this
414            time.
415
416       SSLPort port
417            Listens on the specified port for encrypted connections.
418
419       StrictConformance Yes
420
421       StrictConformance No
422            Specifies  whether  the  scheduler  requires   clients   to
423            strictly  adhere to the IPP specifications.  The default is
424            "No".
425
426       Timeout seconds
427            Specifies the HTTP request timeout.  The default  is  "300"
428            (5 minutes).
429
430       WebInterface yes
431
432       WebInterface no
433            Specifies  whether  the  web  interface  is  enabled.   The
434            default is "No".
435
436   HTTP METHOD NAMES
437       The following HTTP methods are supported by cupsd(8):
438
439       GET  Used by a  client  to  download  icons  and  other  printer
440            resources and to access the CUPS web interface.
441
442       HEAD Used  by  a  client to get the type, size, and modification
443            date of resources.
444
445       OPTIONS
446            Used by a client to establish a  secure  (SSL/TLS)  connec‐
447            tion.
448
449       POST Used by a client to submit IPP requests and HTML forms from
450            the CUPS web interface.
451
452       PUT  Used by a client to upload configuration files.
453
454   IPP OPERATION NAMES
455       The following IPP operations are supported by cupsd(8):
456
457       CUPS-Accept-Jobs
458            Allows a printer to accept new jobs.
459
460       CUPS-Add-Modify-Class
461            Adds or modifies a printer class.
462
463       CUPS-Add-Modify-Printer
464            Adds or modifies a printer.
465
466       CUPS-Authenticate-Job
467            Releases a job that is held for authentication.
468
469       CUPS-Delete-Class
470            Deletes a printer class.
471
472       CUPS-Delete-Printer
473            Deletes a printer.
474
475       CUPS-Get-Classes
476            Gets a list of printer classes.
477
478       CUPS-Get-Default
479            Gets the server default printer or printer class.
480
481       CUPS-Get-Devices
482            Gets a list of devices that are currently available.
483
484       CUPS-Get-Document
485            Gets a document file for a job.
486
487       CUPS-Get-PPD
488            Gets a PPD file.
489
490       CUPS-Get-PPDs
491            Gets a list of installed PPD files.
492
493       CUPS-Get-Printers
494            Gets a list of printers.
495
496       CUPS-Move-Job
497            Moves a job.
498
499       CUPS-Reject-Jobs
500            Prevents a printer from accepting new jobs.
501
502       CUPS-Set-Default
503            Sets the server default printer or printer class.
504
505       Cancel-Job
506            Cancels a job.
507
508       Cancel-Jobs
509            Cancels one or more jobs.
510
511       Cancel-My-Jobs
512            Cancels one or more jobs creates by a user.
513
514       Cancel-Subscription
515            Cancels a subscription.
516
517       Close-Job
518            Closes a job that is waiting for more documents.
519
520       Create-Job
521            Creates a new job with no documents.
522
523       Create-Job-Subscriptions
524            Creates a subscription for job events.
525
526       Create-Printer-Subscriptions
527            Creates a subscription for printer events.
528
529       Get-Job-Attributes
530            Gets information about a job.
531
532       Get-Jobs
533            Gets a list of jobs.
534
535       Get-Notifications
536            Gets a list of event notifications for a subscription.
537
538       Get-Printer-Attributes
539            Gets information about a printer or printer class.
540
541       Get-Subscription-Attributes
542            Gets information about a subscription.
543
544       Get-Subscriptions
545            Gets a list of subscriptions.
546
547       Hold-Job
548            Holds a job from printing.
549
550       Hold-New-Jobs
551            Holds all new jobs from printing.
552
553       Pause-Printer
554            Stops processing of jobs by a printer or printer class.
555
556       Pause-Printer-After-Current-Job
557            Stops processing of jobs by  a  printer  or  printer  class
558            after the current job is finished.
559
560       Print-Job
561            Creates a new job with a single document.
562
563       Purge-Jobs
564            Cancels one or more jobs and deletes the job history.
565
566       Release-Held-New-Jobs
567            Allows previously held jobs to print.
568
569       Release-Job
570            Allows a job to print.
571
572       Renew-Subscription
573            Renews a subscription.
574
575       Restart-Job
576            Reprints a job, if possible.
577
578       Send-Document
579            Adds a document to a job.
580
581       Set-Job-Attributes
582            Changes job information.
583
584       Set-Printer-Attributes
585            Changes printer or printer class information.
586
587       Validate-Job
588            Validates options for a new job.
589
590   LOCATION PATHS
591       The following paths are commonly used when configuring cupsd(8):
592
593       /    The  path  for  all get operations (get-printers, get-jobs,
594            etc.)
595
596       /admin
597            The path for all  administration  operations  (add-printer,
598            delete-printer, start-printer, etc.)
599
600       /admin/conf
601            The  path  for  access  to  the  CUPS  configuration  files
602            (cupsd.conf, client.conf, etc.)
603
604       /admin/log
605            The path for access to  the  CUPS  log  files  (access_log,
606            error_log, page_log)
607
608       /classes
609            The path for all printer classes
610
611       /classes/name
612            The resource for the named printer class
613
614       /jobs
615            The path for all jobs (hold-job, release-job, etc.)
616
617       /jobs/id
618            The path for the specified job
619
620       /printers
621            The path for all printers
622
623       /printers/name
624            The path for the named printer
625
626       /printers/name.png
627            The icon file path for the named printer
628
629       /printers/name.ppd
630            The PPD file path for the named printer
631
632   DIRECTIVES VALID WITHIN LOCATION AND LIMIT SECTIONS
633       The following directives may be placed inside Location and Limit
634       sections in the cupsd.conf file:
635
636       Allow all
637
638       Allow none
639
640       Allow host.domain.com
641
642       Allow *.domain.com
643
644       Allow ipv4-address
645
646       Allow ipv4-address/netmask
647
648       Allow ipv4-address/mm
649
650       Allow [ipv6-address]
651
652       Allow [ipv6-address]/mm
653
654       Allow @IF(name)
655
656       Allow @LOCAL
657            Allows access from the named hosts, domains, addresses,  or
658            interfaces.   The  Order  directive  controls whether Allow
659            lines are evaluated before or after Deny lines.
660
661       AuthType None
662
663       AuthType Basic
664
665       AuthType Default
666
667       AuthType Negotiate
668            Specifies the type of authentication required.   The  value
669            "Default" corresponds to the DefaultAuthType value.
670
671       Deny all
672
673       Deny none
674
675       Deny host.domain.com
676
677       Deny *.domain.com
678
679       Deny ipv4-address
680
681       Deny ipv4-address/netmask
682
683       Deny ipv4-address/mm
684
685       Deny [ipv6-address]
686
687       Deny [ipv6-address]/mm
688
689       Deny @IF(name)
690
691       Deny @LOCAL
692            Denies  access from the named hosts, domains, addresses, or
693            interfaces.  The  Order  directive  controls  whether  Deny
694            lines are evaluated before or after Allow lines.
695
696       Encryption IfRequested
697
698       Encryption Never
699
700       Encryption Required
701            Specifies  the  level  of encryption that is required for a
702            particular location.  The default value is "IfRequested".
703
704       Order allow,deny
705            Specifies that access is denied by default. Allow lines are
706            then  processed followed by Deny lines to determine whether
707            a client may access a particular resource.
708
709       Order deny,allow
710            Specifies that access is allowed by default. Deny lines are
711            then processed followed by Allow lines to determine whether
712            a client may access a particular resource.
713
714       Require group group-name [ group-name ... ]
715            Specifies that an authenticated user must be  a  member  of
716            one of the named groups.
717
718       Require user {user-name|@group-name} ...
719            Specifies  that an authenticated user must match one of the
720            named users or be a member of one of the named groups.  The
721            group  name  "@SYSTEM"  corresponds  to  the list of groups
722            defined  by  the  SystemGroup  directive   in   the   cups-
723            files.conf(5) file.  The group name "@OWNER" corresponds to
724            the owner of the resource, for example the person that sub‐
725            mitted  a  print job.  Note: The 'root' user is not special
726            and must be granted privileges like any other user account.
727
728       Require valid-user
729            Specifies that any authenticated user is acceptable.
730
731       Satisfy all
732            Specifies  that  all  Allow,  AuthType,  Deny,  Order,  and
733            Require conditions must be satisfied to allow access.
734
735       Satisfy any
736            Specifies that any a client may access a resource if either
737            the   authentication    (AuthType/Require)    or    address
738            (Allow/Deny/Order)  conditions are satisfied.  For example,
739            this can be used to require authentication only for  remote
740            accesses.
741
742   DIRECTIVES VALID WITHIN POLICY SECTIONS
743       The following directives may be placed inside Policy sections in
744       the cupsd.conf file:
745
746       JobPrivateAccess all
747
748       JobPrivateAccess default
749
750       JobPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ...
751            Specifies an access list for a job's private  values.   The
752            "default"  access list is "@OWNER @SYSTEM".  "@ACL" maps to
753            the printer's requesting-user-name-allowed  or  requesting-
754            user-name-denied values.  "@OWNER" maps to the job's owner.
755            "@SYSTEM" maps to the groups  listed  for  the  SystemGroup
756            directive in the cups-files.conf(5) file.
757
758       JobPrivateValues all
759
760       JobPrivateValues default
761
762       JobPrivateValues none
763
764       JobPrivateValues attribute-name [ ... attribute-name ]
765            Specifies  the  list  of  job  values to make private.  The
766            "default"  values  are  "job-name",  "job-originating-host-
767            name", "job-originating-user-name", and "phone".
768
769       SubscriptionPrivateAccess all
770
771       SubscriptionPrivateAccess default
772
773       SubscriptionPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ...
774            Specifies  an access list for a subscription's private val‐
775            ues.   The  "default"  access  list  is  "@OWNER  @SYSTEM".
776            "@ACL"  maps  to the printer's requesting-user-name-allowed
777            or requesting-user-name-denied values.   "@OWNER"  maps  to
778            the  job's  owner.  "@SYSTEM" maps to the groups listed for
779            the SystemGroup directive in the cups-files.conf(5) file.
780
781       SubscriptionPrivateValues all
782
783       SubscriptionPrivateValues default
784
785       SubscriptionPrivateValues none
786
787       SubscriptionPrivateValues attribute-name [ ... attribute-name ]
788            Specifies the list of subscription values to make  private.
789            The  "default"  values  are  "notify-events", "notify-pull-
790            method",  "notify-recipient-uri",  "notify-subscriber-user-
791            name", and "notify-user-data".
792
793   DEPRECATED DIRECTIVES
794       The following directives are deprecated and will be removed in a
795       future release of CUPS:
796
797       Classification banner
798            Specifies the security classification of the  server.   Any
799            valid  banner  name  can  be  used, including "classified",
800            "confidential", "secret", "topsecret", and  "unclassified",
801            or  the  banner  can  be omitted to disable secure printing
802            functions.  The default is no classification banner.
803
804       ClassifyOverride Yes
805
806       ClassifyOverride No
807            Specifies whether users  may  override  the  classification
808            (cover  page)  of  individual  print  jobs  using the "job-
809            sheets" option.  The default is "No".
810
811       PageLogFormat format-string
812            Specifies the format of PageLog lines.  Sequences beginning
813            with  percent  (%)  characters are replaced with the corre‐
814            sponding information, while all other characters are copied
815            literally.  The following percent sequences are recognized:
816
817                "%%" inserts a single percent character.
818                "%{name}" inserts the value of the specified IPP attribute.
819                "%C" inserts the number of copies for the current page.
820                "%P" inserts the current page number.
821                "%T" inserts the current date and time in common log format.
822                "%j" inserts the job ID.
823                "%p" inserts the printer name.
824                "%u" inserts the username.
825
826            The  default  is the empty string, which disables page log‐
827            ging.  The string "%p %u %j %T %P %C %{job-billing}  %{job-
828            originating-host-name}  %{job-name} %{media} %{sides}" cre‐
829            ates a page log with the standard items.
830
831       RIPCache size
832            Specifies the maximum amount of memory to use when convert‐
833            ing  documents  into bitmaps for a printer.  The default is
834            "128m".
835

CONFORMING TO

837       The cupsd.conf file format is based on the  Apache  HTTP  Server
838       configuration file format.
839

EXAMPLES

841       Log everything with a maximum log file size of 32 megabytes:
842
843           AccessLogLevel all
844           LogLevel debug2
845           MaxLogSize 32m
846
847       Require  authentication  for  accesses from outside the 10. net‐
848       work:
849
850           <Location />
851           Order allow,deny
852           Allow from 10./8
853           AuthType Basic
854           Require valid-user
855           Satisfy any
856           </Location>
857

SEE ALSO

859       classes.conf(5),  cups-files.conf(5),  cupsd(8),  mime.convs(5),
860       mime.types(5),   printers.conf(5),  subscriptions.conf(5),  CUPS
861       Online Help (http://localhost:631/help)
862
864       Copyright © 2007-2017 by Apple Inc.
865
866
867
86819 October 2017                      CUPS                        cupsd.conf(5)
Impressum