[GLLUG] CUPS policy settings

[Richard Houser]

I'm afraid I can't give you the answer that you want, but are you sure 
that you really want to restrict users from printing to remote printers?
In most cases, I'd just assume it would be preferable to just remove 
excess printers from the default printer lists or force the appropriate 
defaults at login?

I'm planning on migrating my CUPS setup into a one spanning two 
physically separate networks connected by a low bandwidth IPSEC link 
over the Internet.  In my case, I want to allow users to print across 
that link, but make it difficult to accidentally do so (as moving a 20MB 
printout over a 5-10KBps link will hurt a bit).

Anyhow, best of luck to you in this setup.  I wouldn't mind hearing 
about the solution you settle on, either.

Michael George wrote:
> I'm curious if any of you have done complex setup of CUPS, like for an 
> enterprise...  What we did for CRMC was interesting and cool and all 
> that,but I need something a bit different.
> 
> Currently, we are using Netware to manage printer policies for the 
> accounts in our building so that people only see listed in their apps 
> the printers to which they are allowed to print.
> 
> I know CUPS has the Policy section in their config files that can be 
> configured to limit access to job submission to printers with pretty 
> fine-grained control.  Only works for local unix users, but I can kinda 
> live with that for now.
> 
> My question is, has anyone here used these policies successfully?  If 
> so, when someone tries to print from an app like OOo, does their list of 
> possible printers include only those to which they can submit a job, or 
> does it include all printers and they will get an error if they submit 
> to a forbidden one?
>