According to the cupsd.conf documentation, one should be able to "require authentication for remote access, but allow local access without authentication." There doesn't appear to be any other documentation on this subject.
I tried putting the following in my cupsd.conf:
<Location />
# Restrict access to the server...
Allow from 192.168.1.0/24
Require valid-user
Satisfy any
Order allow,deny
</Location>
It doesn't work for me.
Has anyone gotten this to work? Is there an example cupsd.conf available with this configuration?