Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

According to the cupsd.conf documentation, one should be able to "require authentication for remote access, but allow local access without authentication." There doesn't appear to be any other documentation on this subject.

I tried putting the following in my cupsd.conf:

<Location />
  # Restrict access to the server...
  Allow from 192.168.1.0/24
  Require valid-user
  Satisfy any
  Order allow,deny
</Location>

It doesn't work for me.

Has anyone gotten this to work? Is there an example cupsd.conf available with this configuration?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Add the following lines to you snippet:

Allow from localhost
Allow from 127.0.0.1
Deny from all

and change the Order line to

Order deny,allow

so it reads:

<Location />
   # Restrict access to the server 'root' location...
   Allow from 192.168.1.1/24
   Allow from localhost
   Allow from 127.0.0.1
   Deny from all
   Require valid-user
   Satisfy any
   Order deny,allow
 </Location>

Should this not be sufficient, add the same settings for the <Location /printers> and the </Location /admin>:

<Location /printers>
   # Restrict access to the server's shared printers...
   Allow from 192.168.1.1/24
   Allow from localhost
   Allow from 127.0.0.1
   deny from all
   Require valid-user
   Satisfy any
   Order deny,allow
 </Location>
share|improve this answer
    
@Jeff Strunk: thanks for the correction; this version is correct now (I remember vaguely, that I lost internet connections towards my editing session. Maybe before my last 'save' completed...). –  Kurt Pfeifle Dec 13 '11 at 18:55
    
Although not asked in the question, it would be nice if SSL would be required for remote access but not for local access. Is it easy to modify for that? –  Erik Sjölund May 7 '12 at 8:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.