Re: [Dorset] CUPS authentication question

2013-12-10 Thread Tim Allen
Hi Tim On 09/12/13 12:57, Tim Waugh wrote: On Fri, 2013-12-06 at 14:10 +, Tim Allen wrote: Log on to CUPS Jobs web page as user1. All jobs (user1 and any other user) show Name Unknown, User Withheld for each job. This is correct for default JobPrivateValues (from manual, The "default" valu

Re: [Dorset] CUPS authentication question

2013-12-09 Thread Tim Waugh
On Fri, 2013-12-06 at 14:10 +, Tim Allen wrote: > Here's the relevant sections of cupsd.conf: > > DefaultAuthType Basic > WebInterface Yes > > >Order allow,deny >Allow @LOCAL > > > >AuthType Default >Require valid-user >Order allow,deny >Allow @LOCAL > > > >

Re: [Dorset] CUPS authentication question

2013-12-06 Thread Tim Allen
Hi Tim On 06/12/13 12:09, Tim Waugh wrote: On Fri, 2013-12-06 at 10:49 +, Tim Allen wrote: It looks like JobPrivateAccess is broke (basically ignored) in 1.5, setting JobPrivateValues none at least gets back to pre-1.5 behaviour. I'm not sure why you think it isn't working. Can you give a

Re: [Dorset] CUPS authentication question

2013-12-06 Thread Tim Waugh
On Fri, 2013-12-06 at 10:49 +, Tim Allen wrote: > It looks like JobPrivateAccess is broke (basically ignored) in 1.5, > setting JobPrivateValues none at least gets back to pre-1.5 behaviour. I'm not sure why you think it isn't working. Can you give an example that doesn't behave as you expect

Re: [Dorset] CUPS authentication question

2013-12-06 Thread Tim Allen
Hi Tim On 06/12/13 10:04, Tim Waugh wrote: On Thu, 2013-12-05 at 21:02 +, Tim Allen wrote: Yes, so my understanding is that any job not owned by the authenticated user (who is not a member of lpadmin) should show as withheld, No -- the "JobPrivateValues" attributes would. But they are "n

Re: [Dorset] CUPS authentication question

2013-12-06 Thread Tim Waugh
On Thu, 2013-12-05 at 21:02 +, Tim Allen wrote: > Yes, so my understanding is that any job not owned by the authenticated > user (who is not a member of lpadmin) should show as withheld, No -- the "JobPrivateValues" attributes would. But they are "none", so JobPrivateAccess has no effect.

Re: [Dorset] CUPS authentication question

2013-12-05 Thread Tim Allen
Hi Tim On 05/12/13 15:13, Tim Waugh wrote: On Thu, 2013-12-05 at 08:40 +, Tim Allen wrote: JobPrivateAccess default This is saying that the access list for the private values is default, i.e. "@OWNER @SYSTEM". Yes, so my understanding is that any job not owned by the authenticated

Re: [Dorset] CUPS authentication question

2013-12-05 Thread Tim Waugh
On Thu, 2013-12-05 at 08:40 +, Tim Allen wrote: >JobPrivateAccess default This is saying that the access list for the private values is default, i.e. "@OWNER @SYSTEM". What's the list of private values that are so protected?: >JobPrivateValues none There are none, so everything is u

Re: [Dorset] CUPS authentication question

2013-12-05 Thread Tim Allen
Hi Tim On 04/12/13 16:37, Tim Waugh wrote: On Wed, 2013-12-04 at 09:38 +, Tim Allen wrote: Thanks, that's pointed me in the right direction. But the remaining question is, how do I get the to be triggered? With Which policy is used is set on a per-queue basis. It's the "printer-op-policy

Re: [Dorset] CUPS authentication question

2013-12-05 Thread Tim Allen
On 04/12/13 12:28, Peter Merchant wrote: On 04/12/13 09:57, Tim Allen wrote: On 04/12/13 09:38, Tim Allen wrote: Hi Tim On 03/12/13 16:39, Tim Waugh wrote: On Tue, 2013-12-03 at 16:25 +, Tim Allen wrote: Hi All Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature to

Re: [Dorset] CUPS authentication question

2013-12-04 Thread Tim Waugh
On Wed, 2013-12-04 at 09:38 +, Tim Allen wrote: > Thanks, that's pointed me in the right direction. But the remaining > question is, how do I get the to be triggered? With Which policy is used is set on a per-queue basis. It's the "printer-op-policy". So to get a particular queue to use the

Re: [Dorset] CUPS authentication question

2013-12-04 Thread Peter Merchant
On 04/12/13 09:57, Tim Allen wrote: On 04/12/13 09:38, Tim Allen wrote: Hi Tim On 03/12/13 16:39, Tim Waugh wrote: On Tue, 2013-12-03 at 16:25 +, Tim Allen wrote: Hi All Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature to hide job details on the web interface vi

Re: [Dorset] CUPS authentication question

2013-12-04 Thread Tim Allen
On 04/12/13 09:38, Tim Allen wrote: Hi Tim On 03/12/13 16:39, Tim Waugh wrote: On Tue, 2013-12-03 at 16:25 +, Tim Allen wrote: Hi All Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature to hide job details on the web interface via JobPrivateAccess and JobPrivateValues

Re: [Dorset] CUPS authentication question

2013-12-04 Thread Tim Allen
Hi Tim On 03/12/13 16:39, Tim Waugh wrote: On Tue, 2013-12-03 at 16:25 +, Tim Allen wrote: Hi All Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature to hide job details on the web interface via JobPrivateAccess and JobPrivateValues. With the following in cupsd.conf:

Re: [Dorset] CUPS authentication question

2013-12-03 Thread Tim Waugh
On Tue, 2013-12-03 at 16:25 +, Tim Allen wrote: > Hi All > > Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature > to hide job details on the web interface via JobPrivateAccess and > JobPrivateValues. With the following in cupsd.conf: > > # Restrict access to the server

[Dorset] CUPS authentication question

2013-12-03 Thread Tim Allen
Hi All Playing around with CUPS 1.5.3 on Debian Squeeze. 1.5 has a nice feature to hide job details on the web interface via JobPrivateAccess and JobPrivateValues. With the following in cupsd.conf: # Restrict access to the server... AuthType Default Require valid-user Order allow,deny