Datasheet

“main” (Installation and Administration) — 2004/6/25 — 13:29 — page 307 — #333

Printer Operation

Generalized Functionality for BrowseAllow and BrowseDeny

The access permissions set for BrowseAllow and BrowseDeny apply to

all kinds of packages sent to cupsd. The default settings in /etc/cups/

cupsd.conf are as follows:

BrowseAllow @LOCAL

BrowseDeny All

and

Order Deny,Allow

Deny From All

Allow From 127.0.0.1

Allow From 127.0.0.2

Allow From @LOCAL

</Location>

In this way, only LOCAL hosts can access cupsd on a CUPS server. LOCAL

hosts are hosts whose IP addresses belong to a non-PPP interface (more

precisely: interfaces whose IFF_POINTOPOINT ﬂags are not set) and

whose IP addresses belong to the same network as the CUPS server. Pack-

ets from all other hosts are rejected immediately.

cupsd Activated by Default

In a standard installation, cupsd is activated automatically, enabling com-

fortable access to the queues of CUPS network servers without any addi-

tional manual actions. The two ﬁrst items are vital preconditions for this

feature, as otherwise the security would not be sufﬁcient for an automatic

activation of cupsd.

13.6.3 PPD Files in SUSE Packages

Printer Conﬁguration with PPD Files Only

The YaST printer conﬁguration sets up the queues for CUPS using only the

PPD ﬁles installed in /usr/share/cups/model/ on the system. To de-

termine the suitable PPD ﬁles for the respective printer model, YaST com-

pares the vendor and model determined during the hardware detection

with the vendors and models in all PPD ﬁles available in /usr/share/

307

SUSE LINUX Enterprise Server