summaryrefslogtreecommitdiffstats
path: root/doc/kdeprint/cups-config.docbook
blob: 3196c9af3e5179ab1755a2fdb187319ad44f7c90 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672
1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834
1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897
1898
1899
1900
1901
1902
1903
1904
1905
1906
1907
1908
1909
1910
1911
1912
1913
1914
1915
1916
1917
1918
1919
1920
1921
1922
1923
1924
1925
1926
1927
1928
1929
1930
1931
1932
1933
1934
1935
1936
1937
1938
1939
1940
1941
1942
1943
1944
1945
1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
1958
1959
1960
1961
1962
1963
1964
1965
1966
1967
1968
1969
1970
1971
1972
1973
1974
1975
1976
1977
1978
1979
1980
1981
1982
1983
1984
1985
1986
1987
1988
1989
1990
1991
1992
1993
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
2028
2029
2030
2031
2032
2033
2034
2035
2036
2037
2038
2039
2040
2041
2042
2043
2044
2045
2046
2047
2048
2049
2050
2051
2052
2053
2054
2055
2056
2057
2058
2059
2060
2061
2062
2063
2064
2065
2066
2067
2068
2069
2070
2071
2072
<chapter id="cups-configuration">
<title>Print Server Configuration: CUPS</title>

<para>Start the print server configuration (now that you have chosen
&CUPS;, this is equivalent to the configuration of the &CUPS; daemon) by
clicking on the appropriate button. You can find it by moving the mouse
slowly over the buttons and reading the tooltips. It should be the 11th
from the left , or third from the right; its icon is a
<guiicon>wrench</guiicon>.</para>

<para>The &CUPS; Server Configuration window pops up. It gives you a
structured view of all the settings that apply to the &CUPS; daemon. The
configuration file for that daemon is normally located in
<filename>/etc/cups/cupsd.conf</filename>. This is a plain
<acronym>ASCII</acronym> file with a syntax similar to the configuration
file of the <application>Apache</application> web server. It is a good
idea to create a backup copy, just in case something goes wrong with the
configuration through &kdeprint;/&CUPS; Server Configuration
dialogs:</para>

<screen><userinput><command>cp</command> <filename>/etc/cups/cupsd.conf</filename> <filename>/etc/cups/cupsd.conf.bak</filename></userinput></screen>

<para>As this graphical user interface to edit the configuration file is
such a new feature, you should have the second chance of resorting to
the original file. So back it up, please.</para>

<sect1 id="quick-help">
<title>Quick Help</title>

<para>One very nice feature is the <quote>Quick Help</quote>
available. If you click on the little question mark (<guiicon>What's
this?</guiicon>) on your window title bar, you'll see the cursor
changing its form.  Now click on a <command>cupsd</command>
configuration setting field to find out what it means and what your
options are. In most cases you should understand the meaning
immediately, otherwise turn to the excellent &CUPS; documentation. (If
your &CUPS; Daemon is running, you have it online on your own host at
<ulink
url="http://localhost:631/documentation.html">http://localhost:631/documentation.html</ulink>.</para>
<para>If &CUPS; is not running, but installed on your system you could
find it in your own host's file system.  The exact location depends on
your &OS;, but on &Linux; the default is <filename
class="directory">/usr/share/doc/cups/</filename> or
<filename class="directory">
/usr/share/doc/cups/documentation.html</filename>.</para>

</sect1>
<sect1 id="longer-help">
<title>Longer Help</title>

<para>For the best, most detailed and most recent information you should
always refer to the original &CUPS; documentation.  &CUPS; is, much like
&kde; in a rapid development process.  There are constantly new features
being added. New features might for times be only configurable by
directly editing the configuration files. The &kdeprint; &GUI; might not
have caught up with &CUPS; development.</para>

<para>Just in case you want to look at the original configuration files
of your &CUPS; system -- they are here:</para>

<note>
<para>These paths are based on the default installation.  Your &OS;
may have installed them to a different prefix, for example, <filename
class="directory">/usr/local/</filename>, but the hierarchy should
still match that shown below.</para>
</note>

<variablelist>
<varlistentry>
<term><filename class="directory">/etc/cups/</filename></term>
<listitem>
<para>The folder with the configuration files</para>
</listitem>
</varlistentry>

<varlistentry>
<term><filename>/etc/cups/cupsd.conf</filename></term>
<listitem>
<para>The configuration file for the &CUPS; daemon</para>
</listitem>
</varlistentry>

<varlistentry>
<term><filename>/etc/cups/printers.conf</filename></term>
<listitem>
<para>The configuration file that contains the information about your
locally installed printers.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><filename class="directory">/etc/cups/ppd/</filename></term>
<listitem>
<para>The folder with &PPD; files of your installed
printers.</para>
</listitem>
</varlistentry>
</variablelist>

<para>The following links only work if your &CUPS; daemon is up and
running.  To access all the original &CUPS; documentation, go
to:</para>

<variablelist>
<varlistentry>
<term><ulink url="http://localhost:631/documentation.html">
http://localhost:631/documentation.html</ulink></term>
<listitem>
<para>A page with all the links to the other documents.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><ulink url="http://localhost:631/sam.html">
http://localhost:631/sam.html</ulink></term>
<listitem>
<para>Direct access to the &CUPS; Software Administrator Manual
in <acronym>HTML</acronym> format.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><ulink url="http://localhost:631/sam.pdf">
http://localhost:631/sam.pdf</ulink></term>
<listitem>
<para>Direct access to the &CUPS; Software Administrator Manual in
<acronym>PDF</acronym> format.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><ulink url="http://www.cups.org/documentation.html">
http://www.cups.org/documentation.html</ulink></term>
<listitem>
<para>The latest on line documentation from the &CUPS; web
site.</para>
</listitem>
</varlistentry>
</variablelist>
<para>The following links give you access to the same files (probably
icons and graphics will be missing) even if your CUPS daemon is not up
and running. You need, however, CUPS installed on your system. (Some
distributions might place the files somewhere else -- you're on your
own then to find out where...) To access all the original CUPS
documentation, go to:</para>

<para>This documentation is available even when the &CUPS; daemon is
not installed, although you may find images and icons are missing when
you view the <acronym>HTML</acronym> files.</para>

<para>As noted above, the hierarchy below should be intact, but your
&OS; may have installed &CUPS; to a different location.</para>

<variablelist>
<varlistentry>
<term><filename>/usr/share/doc/cups/documentation.html</filename></term>
<listitem>
<para>A page with all the links to the other documents.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><filename>/usr/share/doc/cups/sam.html</filename></term>
<listitem>
<para>Direct access to the &CUPS; Software Administrator Manual in
<acronym>HTML</acronym> format.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><filename>/usr/share/doc/cups/sam.pdf</filename></term>
<listitem>
<para>Direct access to the &CUPS; Software Administrator Manual in
<acronym>PDF</acronym> format.</para>
</listitem>
</varlistentry>
</variablelist>

<para>There are a few WebSites and Newsgroups discussing &CUPS; (and
&Linux; Printing in General) and giving help to newbies at:</para>

<variablelist>
<varlistentry>
<term><ulink url="http://www.cups.org/newsgroups.php">
http://www.cups.org/newsgroups.php</ulink></term>
<listitem>
<para>The &CUPS; website.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><ulink url="http://www.linuxprinting.org/newsportal/">
http://www.linuxprinting.org/newsportal/</ulink></term>
<listitem>
<para>LinuxPrinting.org, the home of the Linuxprinting HOWTO and the
&Linux; Printer Database</para>
</listitem>
</varlistentry>
</variablelist>

<para>And finally, there will be a WebSite for &kdeprint; and related
documentation, at <ulink url="http://kdeprint.sourceforge.net/">
http://kdeprint.sourceforge.net/</ulink></para>

<para>In the next section I will step you through most of the
configuration options of &kdeprint; with &CUPS;.</para>

</sect1>
<sect1 id="explaining-different-gui-elements">
<title>Explaining different elements of the &GUI;</title>

<sect2>
<title>Upper Window: View on Printers, both Real and Virtual</title>

<para>This section is not yet complete</para>

<itemizedlist>
<listitem>
<para>Tree view, icon view and list view</para>
</listitem>
<listitem>
<para>The icons of the task bar</para>
</listitem>
<listitem>
<para>Different fonts for different printers</para>
</listitem>
<listitem>
<para>Different printer icons mean different things</para>
</listitem>
</itemizedlist>

</sect2>

<sect2>
<title>Lower Window: Tabbed View of Details</title>

<para>This section is not yet complete.</para>

<itemizedlist>
<listitem>
<para>The icons of the task bar</para>
</listitem>
<listitem>
<para>The Tabs</para>
</listitem>
<listitem>
<para>Changing printer settings</para>
</listitem>
</itemizedlist>

</sect2>

</sect1>


<sect1 id="welcome-to-cups-server-configuration">
<title>Welcome to the &CUPS; Server Configuration</title>

<para>This is the Welcome Screen for your server configuration
dialogs. Clicking onto one of the items of the tree view on left
side of the screen opens the appropriate part of the configuration
settings.</para>

<para>Every setting has a default value. The defaults let &CUPS;
normally work as a fully functional client. The clients listen on
TCP/IP Port 631 for infos broadcast by &CUPS; servers on the
<acronym>LAN</acronym>. This information let the clients print
immediately after receiving them, without installing any driver or
configuring any printer on the clients.</para>

<para>To configure a &CUPS; server (which is broadcasting its service
to the <acronym>LAN</acronym>) you need to change settings from the
defaults.</para>

<para>The dialog to configure the &CUPS; server: welcome screen. </para>
<screenshot>
<screeninfo>CUPS server configuration dialog: welcome screen</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration1_welcome.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to configure the &CUPS; server: welcome
screen</phrase></textobject>
<caption><para>The dialog to configure the &CUPS; server: welcome
screen</para></caption>
</mediaobject>
</screenshot>

<para>To select the default setting of any item just enable the
checkbox on the right side of the screen. To set an item to a
different value, disable the checkbox and then go on to do the setting
you want on the left side of the screen.</para>

<para>The complete server configuration includes:</para>

<itemizedlist>
<listitem>
<para><link linkend="server-general-configuration"><guilabel>Server</guilabel>
General Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="server-logging-configuration">Server
<guilabel>Log</guilabel>ging Configuration</link></para>
</listitem>
<listitem>
<para><link
linkend="server-directories-configuration">Server
<guilabel>Folders</guilabel> and Path Definitions</link></para>
</listitem>
<listitem>
<para><link linkend="server-configuration">Server
<guilabel>HTTP</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="server-encryption-support-configuration">Server
<guilabel>Encryption</guilabel> and Certificate Support
Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="server-miscellaneous-configuration">Server
<guilabel>Misc</guilabel>ellaneous Configuration</link></para>
</listitem>
<listitem>
<para><guilabel>Network</guilabel> General Configuration</para>
</listitem>
<listitem>
<para><link linkend="network-clients-configuration">Network
<guilabel>Clients</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link
linkend="browsing-general-configuration"><guilabel>Browsing</guilabel>
General Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="browsing-connection-configuration">Browsing
<guilabel>Connection</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link
linkend="browsing-masks-configuration">Browsing
<guilabel>Masks</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="browsing-timeouts-configuration">Browsing
<guilabel>Timeouts</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link linkend="browsing-relay-configuration">Browsing
<guilabel>Relay</guilabel> Configuration</link></para>
</listitem>
<listitem>
<para><link
linkend="security-configuration"><guilabel>Security</guilabel>
Configuration</link></para>
</listitem>
</itemizedlist>

<para>Each of these configuration items will be described in the
following sections of the manual.</para>

</sect1>

<sect1 id="server-general-configuration">
<title>Server General Configuration</title>

<para>The server general configuration is done on this screen. It
includes:</para>

<itemizedlist>
<listitem><para><guilabel>Server name</guilabel></para></listitem>
<listitem><para><guilabel>Administrators email</guilabel></para></listitem>
<listitem><para><guilabel>Server user</guilabel></para></listitem>
<listitem><para><guilabel>Server group</guilabel></para></listitem>
<listitem><para><guilabel>Remote user name</guilabel></para></listitem>
</itemizedlist>

<para>The tab window to configure the &CUPS; server general settings
lets you the change the default values. Click on the little question
mark and then on one of the fields to get a <quote>Quick Help</quote>
about the meaning of the setting.</para>

<para>If you are unsure, leave alone and turn to the original &CUPS;
documentation first.  If your &CUPS; daemon is already running, it is
readable from the &konqueror; by pointing it to &URL; <ulink
url="http://localhost:631/documentation.html">
http://localhost:631/documentation.html</ulink>.</para>

<para>There, first <quote>make friends</quote> with the Software
Administrator Manual. Otherwise, for example, if the &CUPS; daemon is
not running, try looking in your local file system, by default at
<filename class="directory">/usr/share/doc/cups/</filename> or
<filename>/usr/share/doc/cups/documentation.html</filename>.</para>

<screenshot>
<screeninfo>&CUPS; server general configuration dialog: ServerName, AdminMail,
ServerUser, ServerGroup, RemoteUserName</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration2_general.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to configure the &CUPS; server general settings:
ServerName, AdminMail, ServerUser, ServerGroup, RemoteUserName
</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Server Name</guilabel></term>
<listitem>
<para>The hostname of your server, as advertised to the world. By
default, &CUPS; will use the hostname of the system.  To set the
default server usd by clients, see the
<filename>client.conf</filename> file.</para>

<informalexample>
<para>For example, enter <userinput>myhost.domain.com</userinput></para>
</informalexample>

<para>This is the hostname that is reported to clients. Should you
ever encounter strange problems in accessing the server, put here its
<acronym>IP</acronym> address for troubleshooting. This way you
eliminate any potential name resolution problems; and you can more
easily nail the real problem down.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Administrators email</guilabel></term>
<listitem>
<para>This is the email address to send all complaints or problems
to.  By default &CUPS; will use <quote>root@hostname</quote>.</para>

<informalexample>
<para>For example, enter
<userinput>root@myhost.com</userinput>.</para>
</informalexample>

<note>
<para>Contrary to what the quickhelp suggests, it is also legal to
send an email full of praise and enthusiasm about &CUPS; and
&kdeprint; to the server administrator.</para>
</note>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Server User</guilabel></term>
<listitem>
<para>The user the server runs under.  Normally this must be
<systemitem class="username">lp</systemitem>, however you can
configure things for another user if needed.</para>

<note>
<para>The server must be initially run as root to support the default
<acronym>IPP</acronym> port of 631.  It changes users whenever an
external program is run.</para>
</note>

<informalexample>
<para>Enter for example <userinput>lp</userinput>.</para>
</informalexample>

<para>This is the &UNIX; user account for filters and
<acronym>CGI</acronym> programs to run under. <acronym>CGI</acronym>
programs are responsible for showing you the nice web administration
interface accessible via <ulink
url="http://localhost:631/">http://localhost:631/</ulink>).</para>

<warning>
<para>There is no need to set the <guilabel>User</guilabel> directive
to <systemitem class="username">root</systemitem>, so never do this,
as it only involves dangers. Should anyone discover security
vulnerabilities in one of the used file filters, printer drivers or
<acronym>CGI</acronym> programs, he could remotely execute arbitrary
commands on your system with root user privileges. Always use an
unprivileged account for the server directive
<guilabel>User</guilabel>.</para>
</warning>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Server group</guilabel></term>
<listitem>
<para>The group the server runs under.  Normally this must be
<systemitem class="groupname">lpadmin</systemitem>, however you can
configure things for another group as needed.</para>

<informalexample>
<para>Enter for example <userinput>lpadmin</userinput>.</para>
</informalexample>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Remote user name</guilabel></term>
<listitem>
<para>The name of the user assigned to unauthenticated accesses from
remote systems.  By default <userinput>remroot</userinput>.</para>

<para>This name will appear in log files and in queries about the job
owner &etc;, for all resources and locations of the &CUPS; server that
are configured to allow access <emphasis>without</emphasis>
authentication.  Authenticated entries will carry the authenticated
names.</para>
</listitem>
</varlistentry>
</variablelist>
</sect1>

<sect1 id="server-logging-configuration">
<title>Server Logging Configuration</title>

<para>The server logging configuration is done on this screen. It
includes:</para>

<itemizedlist>
<listitem><para><guilabel>Access log file</guilabel> setting</para></listitem>
<listitem><para><guilabel>Error log file</guilabel> setting</para></listitem>
<listitem><para><guilabel>Page log</guilabel> file setting</para></listitem>
<listitem><para><guilabel>Log level</guilabel> setting</para></listitem>
<listitem><para><guilabel>Max log file size</guilabel>
setting</para></listitem>
</itemizedlist>

<para>This is an important screen for you. Should you ever encounter
problems: here is the place to set the Log level to
<quote>debug</quote>, restart the &CUPS; daemon and then look at the
Error log file defined here for entries that might give you an insight
to the trouble.</para>

<screenshot>
<screeninfo>&CUPS; server configuration dialog: <guilabel>Server
logging</guilabel>  </screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration3_logging.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to configure the &CUPS; server: <guilabel>Server
logging</guilabel></phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Access log file</guilabel></term>
<listitem>
<para>This is where accesses to the server are logged.  If this does
not start with a leading <literal>/</literal>, then it is assumed to
be relative to the server root.</para>

<para>You can also use the special name <userinput>syslog</userinput>
to send the output to the syslog file or daemon.</para>

<informalexample>
<para>Enter a path, for example
<userinput><filename>/var/log/cups/acces_log</filename></userinput>.</para>
</informalexample>

<para>The format of this file is stored in the so-called <quote>Common
Log Format</quote>. This way you can use programs such as
<application>Webalyzer</application> or any other Web access reporting
tool to generate reports on the &CUPS; server activities.</para>

<para>To include the server name in the file name use a
<token>%s</token> in the name. Example:
<userinput><filename>/var/log/cups/access_log-%s</filename></userinput>.</para>

<screen><prompt>kurt@transmeta:~ ></prompt><userinput><command>tail</command> <parameter>/var/log/cups/access_log</parameter></userinput>
<computeroutput>
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST /printers/ HTTP/1.1" 200 109
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST /admin/ HTTP/1.1" 401 0
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST / HTTP/1.1" 200 210
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "GET /ppd/DANKA_P450.ppd HTTP/1.1" 200 51021
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST /jobs/ HTTP/1.1" 200 246
10.160.16.45 - - [04/Aug/2001:20:11:39 +0100] "GET /printers/DANKA_P450 HTTP/1.0" 200 0
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST / HTTP/1.1" 200 80
127.0.0.1    - - [04/Aug/2001:20:11:39 +0100] "POST / HTTP/1.1" 200 139
10.160.16.45 - - [04/Aug/2001:20:11:40 +0100] "GET /cups.css HTTP/1.0" 200 198
127.0.0.1    - - [04/Aug/2001:20:11:40 +0100] "POST / HTTP/1.1" 200 139
10.160.16.45 - - [04/Aug/2001:20:11:39 +0100] "GET /printers/DANKA_P450 HTTP/1.0" 200 7319
10.160.16.45 - - [04/Aug/2001:20:11:40 +0100] "GET /images/title-logo.gif HTTP/1.0" 200 5729
</computeroutput></screen>

<para>You see a separate line for each single access, showing the
<acronym>IP</acronym> address of the accessing client, date and time
of access, method of access (<command>POST</command> or
<command>GET</command>), the requested ressource, the &HTTP; version
used by the client, status code and the number of transferred
bytes. Status code <errorcode>200</errorcode> means
<errorname>successful-OK</errorname> the <errorcode>401</errorcode> in
the above example was an <errorname>unauthorized access</errorname>
which was denied. For a detailed explanation of the log format go to
<ulink url="http://localhost:631/sam.html#7_6_1">the &CUPS; Software
Administrator Manual</ulink>.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Error log file</guilabel></term>
<listitem>
<para>If this does not start with a leading <literal>/</literal>, then
it is assumed to be relative to the server root.  The default setting
is <filename>/var/log/cups/error_log</filename>.</para>

<para>You can also use the special name <userinput>syslog</userinput>
to send the output to the syslog file or daemon.</para>

<informalexample>
<para>Enter the path, for example
<userinput><filename>/var/log/cups/error_log</filename></userinput>.</para>
</informalexample>

<para>The error log excerpt below shows you the part logged for printing the test page
with the default setting of <guilabel>Log level</guilabel> to
<quote>info</quote>.  For an explanation of the <guilabel>Log
Level</guilabel> setting see further below.</para>

<screen><prompt>kurt@transmeta:~ ></prompt><userinput><command> tail </command> <parameter>/var/log/cups/error_log</parameter></userinput>
<computeroutput>
I [04/Aug/2001:23:15:10 +0100] Job 213 queued on 'DANKA_P450' by 'root'
I [04/Aug/2001:23:15:10 +0100] Started filter /usr/lib/cups/filter/pstops (PID 18891) for job 213.
I [04/Aug/2001:23:15:10 +0100] Started backend /usr/lib/cups/backend/lpd (PID 18892) for job 213.
</computeroutput></screen>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Page log file</guilabel></term>
<listitem>
<para>If this does not start with a leading <literal>/</literal> then
it is assumed to be relative to the server root.  The default is
<filename>/var/log/cups/page_log</filename></para>

<para>You can also use the special name <userinput>syslog</userinput>
to send the output to the syslog file or daemon.</para>

<informalexample>
<para>Enter the path, for example
<userinput><filename>/var/log/cups/page_log</filename></userinput>.</para>
</informalexample>
<para>The page log file has a line for every single page of every job
printed.</para>

<para> Here is what some entries look like:</para>

<screen><prompt>kurt@transmeta:~ ></prompt><userinput><command> tail </command> <parameter>/var/log/cups/page_log</parameter></userinput>
<computeroutput>
GIMP_print_stp_HP kdetest 201 [03/Aug/2001:03:18:03 +0100] 4 1
GIMP_print_stp_HP kdetest 201 [03/Aug/2001:03:18:03 +0100] 5 1
GIMP_print_stp_HP kdetest 202 [03/Aug/2001:11:46:49 +0100] 1 1
GIMP_print_stp_HP kdetest 203 [03/Aug/2001:11:46:54 +0100] 1 1
DANKA_infotec_P450 kurt 204 [04/Aug/2001:03:29:00 +0100] 1 33
DANKA_infotec_P450 kurt 204 [04/Aug/2001:03:29:00 +0100] 2 33
DANKA_infotec_P450 kurt 204 [04/Aug/2001:03:29:00 +0100] 3 33
DANKA_infotec_P450 kurt 204 [04/Aug/2001:03:29:00 +0100] 4 33
DANKA_infotec_P450 root 205 [04/Aug/2001:19:12:34 +0100] 1 14
DANKA_infotec_P450 root 206 [04/Aug/2001:19:15:20 +0100] 1 1
</computeroutput></screen>

<para>In this excerpt of the file you find information on the name of
the printers (<systemitem
class="resource">GIMP_print_stp_HP</systemitem> and <systemitem
class="resource">DANKA_infotec_P450</systemitem>) used through this
server, the user names (<systemitem
class="username">kdetest</systemitem>, <systemitem
class="username">kurt</systemitem> and <systemitem
class="username">root</systemitem>), the job-IDs (<quote>201</quote>
to <quote>205</quote>), time of printing, page number inside the job
and the number of copies for the pages.  For example, job-ID 204 had 4
pages and 33 copies printed, job-ID 205 had 14 copies of just 1 page)
.</para>

<note>
<para>&CUPS; is dependent (for its calculation of the number of pages
in a job) on passing the &PostScript; through the
<quote>pstops</quote> filter.  See the <link
linkend="architecture-diagram">&kivio; Flowchart</link> on the &CUPS;
filter architecture for an idea about were this filter fits into the
whole printing process).  More, <command>pstops</command> depends for
the counting on a <acronym>DSC</acronym> conforming
(<acronym>DSC</acronym> is Document Structuring Conventions, a
standard defined by Adobe) to be sent by the client.  In most cases
this is working.</para>

<para>However, this page accounting does not work for any
<quote>raw</quote> printer queues (as those, by definition, don't use
any filtering on the &CUPS; host and are by-passing
<command>pstops</command>.) Every job going through a
<quote>raw</quote> queue is counted as a 1-page-job (with possibly
multiple copies). This is especially true for all Jobs send from
&Microsoft; &Windows; clients via <application>Samba</application> to
the &CUPS; server, as those jobs are already arriving in the correct
format for the printer, because the clients use the original printer
driver.</para>
</note>

<note>
<para>I am still looking for someone who will write a nice &CUPS; page
log analysing tool. It should generate a report with a graphical
output similar to the <application>Webalizer</application>'s access
log reports. This way you could have nice statistics to be used for
accounting about usage of printers, load dependent on daytime or
weekday, users &etc; Anyone?</para>
</note>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Log level</guilabel></term>
<listitem>
<para>This setting controls the number of messages logged to the error
log file.  It can be one of the following:</para>

<variablelist>
<varlistentry>
<term>debug2</term>
<listitem>
<para>Log everything.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>debug</term>
<listitem>
<para>Log almost everything.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>info</term>
<listitem>
<para>Log all requests and state changes.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>warn</term>
<listitem>
<para>Log errors and warnings.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>error</term>
<listitem>
<para>Log only errors.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>none</term>
<listitem>
<para>Log nothing.</para>
</listitem>
</varlistentry>

</variablelist>

<para>If you need to troubleshoot (or if you want to study the inner
workings of &CUPS;), set the log level to debug or debug2. Then the
error_log will have a lot more entries (not just errors, but also
informational entries).</para> 

<para>You can use this to watch <quote>live</quote> what &CUPS; is
doing when you send a print job. In a &konsole; type:</para>

<screen><prompt>kurt@transmeta:~ ></prompt><userinput><command>tail</command> <option>-f</option> <option>-n</option><parameter>100</parameter> <parameter>/var/log/cups/error_log</parameter></userinput></screen>

<para>This will give you the last 100 lines (<option>-n</option>
<parameter>100</parameter>) of the file onto the screen and a
<quote>realtime</quote> update (<option>-f</option>)of what is
happening. The following listing shows the printing of a test page
(some pieces have been cut off for space reasons... Try it yourself if
you need more info):</para>

<screen><computeroutput> 
I [04/Aug/2001:23:15:12 +0100] Job 214 queued on 'DANKA_P450' by 'root'
D [04/Aug/2001:23:15:12 +0100] StartJob(214, 08426fe0) 
D [04/Aug/2001:23:15:12 +0100] StartJob() id = 214, file = 0/1 
D [04/Aug/2001:23:15:12 +0100] job-sheets=none,none 
D [04/Aug/2001:23:15:12 +0100] banner_page = 0 
D [04/Aug/2001:23:15:12 +0100] StartJob: argv = "DANKA_P450","214","root","KDE Print Test",
[....]  
D [04/Aug/2001:23:15:12 +0100] StartJob: envp = "PATH=/usr/lib/cups/filter:/bin:/usr/bin", [....]  
D [04/Aug/2001:23:15:12 +0100] StartJob: statusfds = 5, 6 
D [04/Aug/2001:23:15:12 +0100] StartJob: filterfds[1] = 7, -1 
D [04/Aug/2001:23:15:12 +0100] StartJob: filter = "/usr/lib/cups/filter/pstops" 
D [04/Aug/2001:23:15:12 +0100] StartJob: filterfds[0] = 8, 9 
D [04/Aug/2001:23:15:12 +0100] start_process("/usr/lib/cups/filter/pstops", [....]  
I [04/Aug/2001:23:15:12 +0100] Started filter /usr/lib/cups/filter/pstops (PID 18991) for job 214.  
D [04/Aug/2001:23:15:12 +0100] StartJob: backend = "/usr/lib/cups/backend/lpd" 
D [04/Aug/2001:23:15:12 +0100] StartJob: filterfds[1] = -1, 7 
D [04/Aug/2001:23:15:12 +0100] start_process("/usr/lib/cups/backend/lpd", [....]  
I [04/Aug/2001:23:15:12 +0100] Started backend /usr/lib/cups/backend/lpd (PID 18992) for job 214.
D [04/Aug/2001:23:15:12 +0100] Page = 595x842; 15,16 to 580,833 [....]  </computeroutput></screen> 

<para>The lines tagged <quote>D</quote> at the beginning are debug
level entries, the ones tagged <quote>I</quote> are there in
<quote>info</quote> level.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Max log file size</guilabel></term>
<listitem>

<para>Controls the maximum size of each log file before they are
rotated.  Defaults to 1048576 (1 Mb).  Set this to 0 to disable log
rotation.</para>

<informalexample>
<para>Enter an size in bytes, for example <userinput>1048576</userinput></para>
</informalexample>

</listitem>
</varlistentry>
</variablelist>
</sect1>

<sect1 id="server-directories-configuration">
<title>Server Folders Configuration</title>

<para>The dialog to configure the &CUPS; server.  Different
folders are to be set here. Normally you don't need to change
anything in this section. In case you play around with fancy
(TrueType, &PostScript; or other) fonts on your system, this qis the
place to do the settings for using those fonts when printing.  Server
folder settings include:</para>

<itemizedlist>
<listitem>
<para><guilabel>Executables</guilabel>: where to find the server
executables</para>
</listitem>
<listitem>
<para><guilabel>Configuration</guilabel>: where to find the server
configuration files</para>
</listitem>
<listitem>
<para><guilabel>Data</guilabel>: where to find the server data
files</para>
</listitem>
<listitem>
<para><guilabel>Temporary files</guilabel>: where to put the server
temporary print files </para>
</listitem>
<listitem>
<para><guilabel>Temporary Requests</guilabel>: where to find the
server </para>
</listitem>
<listitem>
<para><guilabel>Font Path</guilabel>: where to find the
server fonts</para>
</listitem>
</itemizedlist>
<screenshot>
<screeninfo>&CUPS; server configuration dialog: &HTTP; configuration</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration4_directories.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to configure the &CUPS; server: &HTTP; configuration</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Executables</guilabel></term>
<listitem>
<para>The root folder for the scheduler executables.  By default
this is <filename class="directory">/usr/lib/cups</filename> (or
<filename class="directory">/usr/lib32/cups</filename> on IRIX
6.5)</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Configuration</guilabel></term>
<listitem>
<para>The root folder for the scheduler.  By default, <filename
class="directory">/etc/cups</filename>.</para>
<para>On the authors SuSE system, this is <filename
class="directory">/usr/share/doc/cups</filename>.  It contains all the
<acronym>HTML</acronym> or <acronym>PDF</acronym> documentation for
&CUPS; which is available through the Web interface at <ulink
url="http://localhost:631/documentation.html">
http://localhost:631/documentation.html</ulink></para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Data</guilabel></term>
<listitem>
<para>The root folder for the &CUPS; data files.  By default this
is <filename class="directory">/usr/share/cups</filename></para>
<para>It contains such things as banners, charsets, data, drivers,
fonts, and <command>pstoraster</command> templates.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Temporary files</guilabel></term>
<listitem>
<para>The folder to put temporary files in.  This folder must be
writable by the user defined on the previous screen.  This defaults to
either <filename class="directory">/var/spool/cups/tmp</filename> or
the value of the <envar>TMPDIR</envar> environment variable.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Temporary Requests</guilabel></term>
<listitem>
<para>The folder where request files are stored.  By default this
is <filename class="directory">/var/spool/cups</filename></para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Font path</guilabel></term>
<listitem>
<para>The place to configure the &CUPS; server for handling your fancy
fonts (TrueType or &PostScript;).  &CUPS; will look here for fonts to
embed in printfiles.  This currently only affects the
<command>pstoraster</command> filter, and the default is <filename
class="directory">/usr/share/cups/fonts</filename>.</para>

<para>To specify more than one folder, list them with double colons as
separator. Do it like this:</para>

<informalexample>
<para><userinput>/path/to/first/fontdir/:/path/to/second/fontdir/:/path/to/last/fontdir/</userinput></para>
</informalexample>

<para>For the Font path directive to work as intended, the application
that wants to print needs to:</para>

<itemizedlist>
<listitem>
<para>Either correctly reference its desired fonts in the header of the
generated &PostScript;</para>
</listitem>
<listitem>
<para>Or embed the font into the &PostScript; file.</para>
</listitem>
</itemizedlist>

<para><emphasis>Referencing</emphasis> the font by name leaves it up
to the <acronym>RIP</acronym> and print device to respect and actually
use it. <acronym>RIP</acronym> or printer <emphasis>can</emphasis>
only use the desired font, if it is available on the system.</para>

<para> In the case of a &PostScript; printer, this needs to be a
printer-resident font. If the printers doesn't have this font, it will
try and replace it by an adequately similar font.</para>

<para>In the case of a non &PostScript; printer, this is done by
&CUPS; and its <acronym>RIP</acronym>-ing filtering system. &CUPS;
will use the font path directive to grab the correct font when
<acronym>RIP</acronym>-ing the &PostScript; in the
<command>pstoraster</command> filter. </para>

<para>In the case of a &PostScript; output device, &CUPS; is just
spooling the file (actually, it is passing it through the
<command>pstops</command> filter for accounting or n-up purposes), not
<quote>working</quote> on it. Therefore, if you print to a
&PostScript; printer it is solely the printer's responsibility to use
the font asked for. It can't, if the font is neither loaded into the
printer nor embedded in the &PostScript;.
</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>
<sect1 id="server-configuration">
<title>Server <acronym>HTTP</acronym>
Configuration</title>

<para>The dialog to configure the &CUPS; server &HTTP; settings
is shown here. </para>
<para>&CUPS; server &HTTP; settings are the following ones: </para>
<itemizedlist>
<listitem><para>the <guilabel>Document folder</guilabel></para></listitem>
<listitem><para>the <guilabel>Default Language</guilabel></para></listitem>
<listitem><para>the <guilabel>Default Charset</guilabel></para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server &HTTP; settings
</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration5_HTTP.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server &HTTP; settings
</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Document folder</guilabel></term>
<listitem>
<para>The root folder for &HTTP; documents that are served.  By
default the compiled in folder, <filename
class="directory">/usr/share/cups/doc-root</filename></para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Default Language</guilabel></term>
<listitem>
<para>The default language, if not specified by the browser.  If not
specified, the current locale is used.</para>
<informalexample>
<para>Use the two letter locale codes, for example
<userinput>en</userinput> or <userinput>de</userinput>.</para>
</informalexample>
<!-- available languages? -->
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Default charset</guilabel></term>
<listitem>
<para>The default character set to use. If not specified, this
defaults to UTF-8.  This can also be overridden directly in the
<acronym>HTML</acronym> documents.</para>
</listitem>
</varlistentry>
</variablelist>
</sect1>

<sect1 id="server-encryption-support-configuration">
<title><guilabel>Server encryption support configuration</guilabel></title>

<para>This is the dialog to configure the &CUPS; server security
settings. The server encryption support settings are these: </para>

<itemizedlist>
<listitem><para><guilabel>Server certificate</guilabel>: the file to
read containing the server's certificate</para></listitem> 
<listitem><para>Server key: the file to read containing the server's
key</para></listitem>
</itemizedlist>
<screenshot>
<screeninfo>&CUPS; server configuration dialog: security overview</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration6_encryption.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to configure the &CUPS; server: security settings</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Server certificate</guilabel></term>
<listitem>
<para>The file to read containing the server's certificate.  Defaults
to <filename>/etc/cups/ssl/server.crt</filename>.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Server key</guilabel></term>
<listitem>
<para>The file to read containing the server's key.  Defaults to
<filename>/etc/cups/ssl/server.key</filename></para>
</listitem>
</varlistentry>
</variablelist>

</sect1>

<sect1 id="server-miscellaneous-configuration">
<title>Server Miscellaneous Configuration</title>

<para>The dialog to configure the &CUPS; server miscellaneous settings
is shown here. The following server settings are done through this
screen:</para>

<itemizedlist>
<listitem><para><guilabel>Preserve job history</guilabel>: whether to
preserve a job history for later re-view</para></listitem>
<listitem><para><guilabel>Preserve job files</guilabel>: whether to
preserve fully <acronym>RIP</acronym>-ed job files for later
re-print</para></listitem>  
<listitem><para><guilabel>Printcap file</guilabel>: setting the name
of and the path to a printcap file</para></listitem>
<listitem><para><guilabel>RIP Cache</guilabel>: setting the size of
the <acronym>RIP</acronym> cache in memory</para></listitem>
<listitem><para><guilabel>Filter Limit</guilabel>: defining a filter
limit</para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server miscellaneous settings</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration7_miscellanious.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server miscellaneous
settings</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Preserve job history (after completion)</guilabel></term>
<listitem>
<para>Whether or not to preserve the job history after a job is
completed, canceled, or stopped.  The default is yes</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Preserve job file (after completion)</guilabel></term>
<listitem>
<para>Whether or not to preserve the job files after a job is
completed, canceled, or stopped. The default is no.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Printcap file</guilabel></term>
<listitem>
<para>The name of the printcap file.  The default is no filename.
Leave this blank, to disable printcap file generation.</para>
<para>The printcap setting is only needed to satisfy older
applications in need of such a file.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>RIP cache</guilabel></term>
<listitem>
<para>The amount of memory that each <acronym>RIP</acronym> should use
to cache bitmaps.  The value can be any real number, followed by
<quote>k</quote> for kilobytes, <quote>m</quote> for megabytes,
<quote>g</quote>for gigabytes, or <quote>t</quote> for tiles, where
one tile is 256 x 256 pixels.  The default value is 8m.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Filter limit</guilabel></term>
<listitem>
<para>Sets the maximum cost of all job filters that can be run at the
same time.  A limit of 0 means no limit.  A typical job may need a
filter limit of at least 200.  Limits less than the minimum required
by a job force a single job to be printed at any time.  The default
limit is 0 (unlimited).</para>
</listitem>
</varlistentry>
</variablelist>
</sect1>

<sect1 id="network-general-configuration">
<title>Network General Configuration</title>

<para>The dialog to configure the &CUPS; server network settings is
shown here. It includes:</para>

<itemizedlist>
<listitem><para><guilabel>Look for hostname on IP
addresses</guilabel></para></listitem>
<listitem><para><guilabel>Port</guilabel></para></listitem>
<listitem><para><guilabel>Max request size</guilabel></para></listitem>
<listitem><para><guilabel>Timeout</guilabel></para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server network settings</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration8_networkgeneral.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server network
settings</phrase></textobject>
</mediaobject>
</screenshot>
<variablelist>
<varlistentry>
<term><guilabel>Look for hostname on IP addresses</guilabel></term>
<listitem>
<para>Whether or not to do lookups on <acronym>IP</acronym> addresses
to get a fully-qualified hostname.  This defaults to off, for
performance reasons.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Port</guilabel></term>
<listitem>
<para>Enter here Ports and addresses that the server will listen to.
The default port 631 is reserved for the Internet Printing Protocol,
and is what we use here.</para>
<para>You can have multiple entries, to listen to more than one port
or address, or to restrict access.</para>
<note>
<para>Unfortunately, most web browsers don't support
<acronym>TLS</acronym> or &HTTP; upgrades for encryption.  If you want
to support web-based encryption, you'll probably need to listen on
port 443, the <acronym>HTTPS</acronym> port.</para>
</note>
<para>Use the <guibutton>Add</guibutton> and
<guibutton>Remove</guibutton> buttons to add and remove entries from
the list.</para>
<informalexample>
<para>You can enter ports on their own, &eg;
<userinput>631</userinput>, or hostnames with ports, &eg;
<userinput>myhost:80</userinput> or <userinput>1.2.3.4:631</userinput>.</para>
</informalexample>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Max request size</guilabel></term>
<listitem>
<para>Controls the maximum size of &HTTP; requests and print files.
The default setting is 0, which disables this feature.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Timeout</guilabel></term>
<listitem>
<para>The timeout (in seconds) before requests time out.  The default
is 300 seconds.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>

<sect1 id="network-clients-configuration">
<title>Network Clients Configuration</title>

<para>The dialog to configure the &CUPS; network client settings is
shown here. It includes:</para>

<itemizedlist>
<listitem><para><guilabel>Accept "Keep Alive"
requests</guilabel></para></listitem>
<listitem><para>KeepAliveTimeout:</para> </listitem>
<listitem><para>MaxClients: </para></listitem>
</itemizedlist>
<screenshot>
<screeninfo>dialog to configure the &CUPS; network client settings</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration9_networkclients.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; network client settings</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Accept "Keep Alive" requests</guilabel></term>
<listitem>
<para>Whether or not to support the Keep-Alive connection option. The
default is on.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Keep alive timeout</guilabel></term>
<listitem>
<para>The timeout (in seconds) before Keep-Alive connections are
automatically closed.  The default is 60 seconds.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Max number of clients</guilabel></term>
<listitem>
<para>Controls the maximum number of simultaneous clients that will be
handled.  Defaults to 100.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>

<sect1 id="browsing-general-configuration">
<title>Browsing General Configuration</title>

<para>The dialog to configure the &CUPS; browsing general settings
is shown here. It includes: </para>

<itemizedlist>
<listitem><para><guilabel>Enable browsing</guilabel></para></listitem>
<listitem><para><guilabel>Use short names when
possible</guilabel></para></listitem>
<listitem><para><guilabel>Use implicit
classes</guilabel></para></listitem>
</itemizedlist>


<screenshot>
<screeninfo>Dialog to configure the &CUPS; browsing general
settings</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration10_browsinggeneral.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; browsing general
settings</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Enable browsing</guilabel></term>
<listitem>
<para>Whether or not to broadcast printer information to other &CUPS;
servers.  Enabled by default.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Use short names when possible</guilabel></term>
<listitem>
<para>Whether or not to use <quote>short</quote> names for remote
printers when possible (&eg; <systemitem
class="resource">printer</systemitem> instead of <systemitem
class="resource">printer@host</systemitem>).  Enabled by
default.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Use implicit classes</guilabel></term>
<listitem>
<para>Whether or not to use implicit classes.</para>
<para>Printer classes can be specified explicitly, in the
<filename>classes.conf</filename> file, implicitly based upon the
printers available on the <acronym>LAN</acronym>, or both.</para>
<para>When Implicit classes are enabled, printers on the
<acronym>LAN</acronym> with the same name (&eg; <systemitem
class="resource">Acme-LaserPrint-1000</systemitem>) will be put into
a class with the same name.  This allows you to setup multiple
redundant queues on a <acronym>LAN</acronym> without a lot of
administrative difficulties.  If a user sends a job to <systemitem
class="resource">Acme-LaserPrint-1000</systemitem>, the job will go to
the first available queue.</para>
<para>This option is enabled by default.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>
<sect1 id="browsing-connection-configuration">
<title>Browsing Connection Configuration</title>

<para>The dialog to configure the &CUPS; server browsing connection is
shown here. Browsing connection settings include:</para>

<itemizedlist>
<listitem><para><guilabel>Broadcast addresses</guilabel>: The
(<acronym>UDP</acronym>) broadcast address to transmit printer
information to</para></listitem>
<listitem><para><guilabel>Broadcast Port</guilabel>: The port number
to use for broadcasting</para></listitem> 
<listitem><para><guilabel>Poll addresses</guilabel>: The address(es)
to poll for information about printers on servers that might not
broadcast (or whose broadcasts might not reach your
<acronym>LAN</acronym> due to routers in between).</para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server browsing
connection</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration11_browsingconnections.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server browsing
connection</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Broadcast addresses</guilabel></term>
<listitem>
<para>After pressing the <guibutton>Add</guibutton> button, you will
see the following dialog to enter a new value for outgoing
broadcasting browse packets. It is the same kind of dialog as for
adding other &CUPS; server addresses to be polled for printer
information.</para>

<screenshot>
<screeninfo>Dialog to enter a new value for broadcasting browse
packets to</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfig_browsingmasks_add_button.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to enter a new value for broadcasting browse packets
to</phrase></textobject>
</mediaobject>
</screenshot>

<para>This option specifies a broadcast address to be used.  By
default, browsing information is broadcast to all active
interfaces.</para>

<note>
<para>&HP-UX; 10.20 and earlier do not properly handle broadcast
unless you have a Class A, B, C or D netmask (&ie;, there is no
<acronym>CIDR</acronym> support).</para>
</note>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Broadcast port</guilabel></term>
<listitem>
<para>The port used for <acronym>UDP</acronym> broadcasts.  By default
this is the <acronym>IPP</acronym> port; if you change this, you need
to do it on all servers.  Only one BrowsePort is recognized.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Poll addresses</guilabel></term>
<listitem>
<para>Poll the named server(s) for printers.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>
<sect1 id="browsing-masks-configuration">
<title>Browsing Masks Configuration</title>

<para>The dialog to configure the &CUPS; server allowed and/or denied browse
packets from other servers is shown here. </para>

<itemizedlist>
<listitem><para><guilabel>Browse allow</guilabel>: </para></listitem>
<listitem><para><guilabel>Browse deny</guilabel>: </para></listitem>
<listitem><para><guilabel>Browse order</guilabel>: </para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server allowed and/or
denied browse packets from other servers</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration11_browsingmasks.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server allowed and/or denied
browse packets from other servers</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Add Browse Address</guilabel> dialog</term>
<listitem>
<para>The dialog to enter a new value for the address of another
&CUPS; server to accept browse packets from is shown here. It is opened
by clicking on the <guibutton>Add...</guibutton> button beside the
field named <guilabel>Browse Allow:</guilabel>. It is the same dialog
as for adding <quote>denied</quote> broadcast sending
addresses.</para>

<para>The dialog to enter a new value for the address of another
&CUPS; server to accept browse packets from is shown here.</para>

<screenshot>
<screeninfo>Dialog to enter a new value for the address of another
&CUPS; server to accept browse packets from</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfig_browsingmasks_add_button.png"
format="PNG" /></imageobject>
<textobject>
<phrase>Dialog to enter a new value for the address of another &CUPS;
server to accept browse packets from</phrase></textobject>
</mediaobject>
</screenshot>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Browse allow</guilabel> and <guilabel>Browse
deny</guilabel></term>
<listitem>
<para><guilabel>Browse allow</guilabel> specifies an address mask to
allow for incoming browser packets.  The default is to allow packets
from all addresses.</para>
<para><guilabel>Browse deny</guilabel> specifies an address mask to
deny for incoming browser packets.  The default is to deny packets
from no addresses.</para>
<para>Both <guilabel>Browse allow</guilabel> and <guilabel>Browse
deny</guilabel> accept the following notations for addresses:</para>

<informalexample>
<itemizedlist>
<listitem>
<para><userinput>All</userinput></para>
</listitem>
<listitem>
<para><userinput>None</userinput></para>
</listitem>
<listitem>
<para><userinput>*.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>host.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm</userinput></para>
</listitem>
</itemizedlist>
</informalexample>

<para>The hostname/domain name restrictions will only work if you have
turned hostname lookups on!</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Browse order</guilabel></term>
<listitem>
<para>Specifies the order of the allow/deny comparisons.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>

<sect1 id="browsing-timeouts-configuration">
<title>Browsing Timeouts Configuration</title>

<para>The dialog to configure the &CUPS; server browse timeout settings
is shown here. Browse timeout settings include:</para>
<itemizedlist>
<listitem><para><guilabel>Browse Interval</guilabel></para></listitem>
<listitem><para><guilabel>Browse Timeout</guilabel></para></listitem>
</itemizedlist>
<screenshot>
<screeninfo>Dialog to configure the &CUPS; server browse timeout
settings</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration12_browsingtimeouts.png"
format="PNG"/></imageobject>
<textobject>
<phrase>dialog to configure the &CUPS; server browse timeout
settings</phrase></textobject>
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term><guilabel>Browse interval</guilabel></term>
<listitem>
<para>The time between browsing updates in seconds.  The default is 30
seconds.</para>
<para>Note that browsing information is sent whenever a printer's
state changes as well, so this represents the maximum time between
updates.</para>
<para>Set this to 0 to disable outgoing broadcasts so your local
printers are not advertised, but you can still see printers on other
hosts.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Browse timeouts</term>
<listitem>
<para>The timeout (in seconds) for network printers - if we don't get
an update within this time, the printer will be removed from the
printer list.</para>
<para>This number definitely should not be less than the browse
interval period, for obvious reasons.  Defaults to 300 seconds.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>
<sect1 id="browsing-relay-configuration">
<title>Browsing Relay Configuration</title>

<para>The dialog to configure the &CUPS; server as a browsing relay is
shown here. Browsing relay settings include:</para>

<itemizedlist>
<listitem><para><guilabel>Browser packets relay</guilabel></para></listitem>
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server as a browsing
relay</screeninfo> 
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration14_browsingrelay.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server as a browsing
relay</phrase></textobject> 
</mediaobject>
</screenshot>

<variablelist>
<varlistentry>
<term>Add Browse Relay dialog</term>
<listitem>
<para>The dialog to enter a new value for an address pair to define
browsing relaying between a &CUPS; server and a network is shown
here.</para>

<screenshot>
<screeninfo>The dialog to enter a new value for an address pair to
define browsing relaying between a &CUPS; server and a
network</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfig_browse_relay_add_button.png"
format="PNG"/></imageobject>
<textobject>
<phrase>The dialog to enter a new value for an address pair to define
browsing relaying between a &CUPS; server and a
network</phrase></textobject>
</mediaobject>
</screenshot>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Browser packets relay</guilabel></term>
<listitem>
<para>Relay browser packets from one address or network to
another.</para>
</listitem>
</varlistentry>
</variablelist>

</sect1>

<sect1 id="security-configuration">
<title>Security Configuration</title>

<para>The dialog to configure the &CUPS; server security settings for
any of the defined server locations is shown here. It contains the
following settings, which may be defined separately for any valid
resource (or location) of the &CUPS; server:</para>

<itemizedlist>
<listitem><para>System Group:</para></listitem>
<listitem><para>Access Permissions: </para></listitem>
<listitem><para>Auth Type:</para></listitem>
<listitem><para>Auth Class:</para></listitem>
<listitem><para>Auth Group Name:</para></listitem>
<listitem><para>Encryption:</para></listitem>
<listitem><para>Allow:</para></listitem>
<listitem><para>Deny:</para></listitem>
<listitem><para>Order:</para></listitem>
</itemizedlist>

<para>Valid resources (or locations) of the &CUPS; server are:</para>

<itemizedlist>
<listitem><para>Server Root Location: <systemitem
class="resource">/</systemitem> </para></listitem> 
<listitem><para>Server Administration Location: <systemitem
class="resource">/admin</systemitem></para></listitem>
<listitem><para>All printers on the server: <systemitem
class="resource">/printers</systemitem></para></listitem>
<listitem><para>Any individual printer on the server:
&eg; <systemitem
class="resource">/printers/infotec_P320</systemitem></para></listitem> 
<listitem><para>All printer classes on the server: <systemitem
class="resource">/classes</systemitem>:</para></listitem> 
<listitem><para>Any individual printer class on the server:
&eg; <systemitem
class="resource">/classes/all_infotecs_P320_or_P450</systemitem></para></listitem> 
</itemizedlist>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server security settings
for any of the defined server locations</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration_securityoverview.png"
format="PNG"/></imageobject>
<textobject>
<phrase>dialog to configure the &CUPS; server security settings for
any of the defined server locations</phrase></textobject>

</mediaobject>
</screenshot>

<note>
<para>For all locations that are not defined separately the setting of
the location <quote>above</quote> it is valid.</para>

<para>For example, you have a printer named <systemitem
class="resource">infotec_P450</systemitem> with no set security
options. Then the security of the location <systemitem
class="resource">/printers</systemitem> will take the responsibility
for this printer as it is a sub-location of<systemitem
class="resource">/printers</systemitem>. If, in turn there is no
security set for <systemitem class="resource">/printers</systemitem>,
then the security for <systemitem class="resource">/</systemitem> (the
general security) of the server takes responsibility. Either you have
set this for your purpose or the compiled-in default value takes
over.</para>
</note>

<variablelist>
<varlistentry>
<term>SystemGroup</term>
<listitem>
<para>The group name for <systemitem
class="groupname">System</systemitem> or printer administration
access.  The default varies depending on the operating system, but
will be <systemitem class="groupname">lpadmin</systemitem>, <systemitem
class="groupname">system</systemitem> or <systemitem
class="groupname">root</systemitem> (checked for in that order).</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Access Permissions</term>
<listitem>
<para>Access permissions for each folder served by the scheduler.
Locations are relative to the document root.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Authorization Type</term>
<listitem>
<para>The authorization to use:</para>

<variablelist>
<varlistentry>
<term>None</term>
<listitem>
<para>Perform no authentication.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Basic</term>
<listitem>
<para>Perform authentication using the &HTTP; Basic method.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Digest</term>
<listitem>
<para>Perform authentication using the &HTTP; Digest method.</para>
</listitem>
</varlistentry>
</variablelist>

<note>
<para>Local certificate authentication can be substituted by the
client for Basic or Digest, when connecting to the localhost
interface.</para>
</note>
</listitem>
</varlistentry>

<varlistentry>
<term>Authorization Class</term>
<listitem>
<para>The authorization class.  Currently only
<quote>Anonymous</quote>, <quote>User</quote>, <quote>System</quote>
(valid user belonging to the group set as system group), and
<quote>group</quote> (valid user belonging to the specified group) are
supported.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Authorization Group Name</term>
<listitem>
<para>The group name for <quote>Group</quote> authorization</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Encryption</term>
<listitem>
<para>Whether or not to use encryption.  This depends on having the
<application>OpenSSL</application> linked into the &CUPS; library and
scheduler.</para>
<para>Possible values are:</para>
<variablelist>
<varlistentry>
<term>Always</term>
<listitem>
<para>Always use encryption (<acronym>SSL</acronym>)</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Never</term>
<listitem>
<para>Never use encryption.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>Required</term>
<listitem>
<para>Use <acronym>TLS</acronym> encryption upgrade.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>IfRequested</term>
<listitem>
<para>Use encryption if the server requests it.</para>
</listitem>
</varlistentry>
</variablelist>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Allow</guilabel></term>
<listitem>
<para>Allows access from the specified hostname, domain,
<acronym>IP</acronym> address or network.  Possible values are:</para>

<informalexample>
<itemizedlist>
<listitem>
<para><userinput>All</userinput></para>
</listitem>
<listitem>
<para><userinput>None</userinput></para>
</listitem>
<listitem>
<para><userinput>*.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>host.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm</userinput></para>
</listitem>
</itemizedlist>
</informalexample>

<para>The host and domain address require that you enable hostname
lookups, as described earlier.</para>
</listitem>
</varlistentry>

<varlistentry>
<term><guilabel>Deny</guilabel></term>
<listitem>
<para>Denies access from the specified hostname, domain,
<acronym>IP</acronym> address or network.  Possible values are:</para>
<informalexample>
<itemizedlist>
<listitem>
<para><userinput>All</userinput></para>
</listitem>
<listitem>
<para><userinput>None</userinput></para>
</listitem>
<listitem>
<para><userinput>*.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>host.domain.com</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.*</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm</userinput></para>
</listitem>
<listitem>
<para><userinput>nnn.nnn.nnn.nnn/mmm.mmm.mmm.mmm</userinput></para>
</listitem>
</itemizedlist>
</informalexample>
<para>The host and domain address require that you enable hostname
lookups, as described earlier.</para>
</listitem>
</varlistentry>

<varlistentry>
<term>Order</term>
<listitem>
<para>The order of the allow and deny processing.</para>
</listitem>
</varlistentry>
</variablelist>
</sect1>

<sect1 id="example-how-define-security-for-all-printers">
<title>Example: How To Define The Security For All Printers</title>

<para>The dialog to configure the &CUPS; server security settings is
discussed here. We use the example to add security definitions other
than the default ones for the resource named <systemitem
class="resource">all printers</systemitem>. For the &CUPS; web server,
this is the location you access through <ulink
url="http://localhost:631/printers/">
http://localhost:631/printers/</ulink> or (remotely) through <ulink
url="http://cups.server.name:631/printers/">
http://cups.server.name:631/printers/</ulink></para>

<para>The first screenshot shows the general location for this
setting. <guilabel>Select</guilabel> <guibutton>Add</guibutton> or
<guibutton>Modify</guibutton> a resource for which you want to decide
about its security settings.</para>

<screenshot>
<screeninfo>Dialog to configure the &CUPS; server security
settings</screeninfo><mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration15a_resourceallprinters_defineaccess.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to configure the &CUPS; server security
settings</phrase></textobject>
</mediaobject>
</screenshot>

<para>This dialog is to add a new resource.  It looks similar if you
want to modify an already existing resource. Here are the general
options:</para>

<screenshot>
<screeninfo>Dialog to add a new resource.</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration15b_resourceallprinters_defineaccess.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to add a new resource.</phrase></textobject>
</mediaobject>
</screenshot>

<para>.This is the second part or the dialog is to add a new
ressource.  It looks similar if you want to modify an already existing
resource. Here you define the actual access masks for the resource in
question. </para>

<screenshot>
<screeninfo>Dialog to add a new resource.</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration15c_resourceallprinters_defineaccess.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Dialog to add a new resource.</phrase></textobject>
</mediaobject>
</screenshot>
<screenshot>
<screeninfo>Resource dialog</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration_resourceadminaccessmasks.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Resource dialog</phrase></textobject>
</mediaobject>
</screenshot>

<screenshot>
<screeninfo>Resource dialog</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration_resourceadminaddprinters.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Resource dialog</phrase></textobject>
</mediaobject>
</screenshot>

<screenshot>
<screeninfo>Resource dialog</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration_resourceadminaddprinters_defineaccess.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Resource dialog</phrase></textobject>
</mediaobject>
</screenshot>

<screenshot>
<screeninfo>Resource dialog</screeninfo>
<mediaobject>
<imageobject>
<imagedata fileref="cupsserverconfiguration_resourceadminauthorization.png"
format="PNG"/></imageobject>
<textobject>
<phrase>Resource dialog</phrase></textobject>
</mediaobject>
</screenshot>

</sect1>

</chapter>