cupsd.conf(5) OpenPrinting cupsd.conf(5) (NAME) cupsd.conf - CUPS (DESCRIPTION) cupsd.conf CUPS cupsd(8) . /etc/cups . () . . . # . (TOP-LEVEL DIRECTIVES) cupsd(8) : AccessLogLevel config AccessLogLevel actions AccessLogLevel all AccessLog . "config" . "actions" "config" . "all" . "actions" . AutoPurgeJobs Yes AutoPurgeJobs No . "No" . BrowseDNSSDSubTypes_subtype[,...] Bonjour . "BrowseDNSSDSubTypes _cups,_print" CUPS IPP Everywhere . "_cups" CUPS . BrowseLocalProtocols all BrowseLocalProtocols dnssd BrowseLocalProtocols none . Bonjour "dnssd" "none" . BrowseWebIF Yes BrowseWebIF No CUPS () . "No" . Browsing Yes Browsing No . "No" . DefaultAuthType Basic . "Basic" . DefaultEncryption Never DefaultEncryption IfRequested DefaultEncryption Required . "Required" . DefaultLanguage locale . "en" . DefaultPaperSize Auto DefaultPaperSize None DefaultPaperSize sizename . "Auto" (locale) "None" . "Letter" "A4" . "Auto" . : PPD PWG. DefaultPolicy policy-name . "default" . DefaultShared Yes DefaultShared No . "Yes" . DirtyCleanInterval seconds . 0 . "30" . DNSSDHostNamehostname.example.com (FQDN) Bonjour . ".local" . ErrorPolicy abort-job ( ) . ErrorPolicy retry-current-job . ErrorPolicy retry-job . ErrorPolicy stop-printer . 'stop-printer' . FilterLimit limit (CPU) . 0 . PostScript 200 . PostScript (100) . . "0" . FilterNice nice-value ( nice(8)) . nice 0 ( ) 19 ( ) . 0 . HostNameLookups On HostNameLookups Off HostNameLookups Double . "Double" cupsd(8) . . "Off" . "On" "Double" . IdleExitTimeout seconds . "60" . : cupsd(8) ( -l) . JobKillDelay seconds . "300" . JobRetryInterval seconds . "retry-job" . "300" . JobRetryLimit count . "retry-job" . "5" . KeepAlive Yes KeepAlive No (keep-alive) HTTP . "Yes" . ... IPP Policy . IPP " IPP (IPP OPERATION NAMES)" . ... ... HTTP Location . HTTP " HTTP (HTTP METHOD NAMES)" . LimitRequestBody size IPP HTML . "0" . Listen ipv4-address:port Listen [ipv6-address]:port Listen *:port Listen /path/to/domain/socket . Listen . Listen Port . : "Listen *:port" "Port port" IP Listen IPv4 IPv6 . ... . " (LOCATION PATHS)" . LogDebugHistory number . LogLevel . LogLevel none LogLevel emerg LogLevel alert LogLevel crit LogLevel error LogLevel warn LogLevel notice LogLevel info LogLevel debug LogLevel debug2 ErrorLog . "none" "debug2" . "warn" . LogTimeFormat standard LogTimeFormat usecs . "standard" "usecs" . MaxClients number . "100" . MaxClientsPerHost number . MaxClients . MaxCopies number . "9999" . MaxHoldTime seconds "" (indefinite) . "0" . MaxJobs number . "0" . "500" . MaxJobsPerPrinter number . "0" MaxJobs . MaxJobsPerUser number . "0" MaxJobs . MaxJobTime seconds . <<>> "0" . "10800" ( ) . MaxLogSize size () . "0" . "1048576" ( ) . MaxSubscriptions number . "0" . "100" . MaxSubscriptionsPerJob number . "0" MaxSubscriptions . MaxSubscriptionsPerPrinter number . "0" MaxSubscriptions . MaxSubscriptionsPerUser number . "0" MaxSubscriptions . MultipleOperationTimeout seconds . "900" ( ) . ... . Port number . PreserveJobFiles Yes PreserveJobFiles No PreserveJobFiles seconds () . . "86400" ( ) . PreserveJobHistory Yes PreserveJobHistory No PreserveJobHistory seconds . . "Yes" MaxJobs . "Yes" . ReadyPaperSizes sizename[,...] <<>> () . . "Letter" "Letter,Legal,Tabloid,4x6,Env10" "A3,A4,A5,A6,EnvDL" . : PPD PWG. ReloadTimeout seconds . "30" . ServerAdmin email-address . "root@ServerName" . ServerAlias hostname [ ... hostname ] ServerAlias * ServerAlias Host HTTP . "*" DNS (DNS rebinding attacks) . "*" ServerAlias . ServerName hostname (FQDN) . hostname(1) . ServerTokens None ServerTokens ProductOnly ServerTokens Major ServerTokens Minor ServerTokens Minimal ServerTokens OS ServerTokens Full Server HTTP . "None" Server . "ProductOnly" "CUPS" . "Major" "CUPS/major IPP/2" . "Minor" "CUPS/major.minor IPP/2.1" . "Minimal" "CUPS/major.minor.patch IPP/2.1" . "OS" "CUPS/major.minor.path (osname osversion) IPP/2.1" . "Full" "CUPS/major.minor.path (osname osversion; architecture) IPP/2.1" . "Minimal" . SSLListen ipv4-address:port SSLListen [ipv6-address]:port SSLListen *:port . SSLOptions [AllowDH] [AllowRC4] [AllowSSL3] [DenyCBC] [DenyTLS1.0] [MaxTLS1.0] [MaxTLS1.1] [MaxTLS1.2] [MaxTLS1.3] [MinTLS1.0] [MinTLS1.1] [MinTLS1.2] [MinTLS1.3] [NoSystem] SSLOptions None ( /etc/cups/client.conf). CUPS TLS 1.0 . Allow . Deny . AllowDH - ( GNU TLS ). AllowRC4 RC4 . AllowSSL3 SSL 3.0 TLS 1.0 . DenyCBC CBC . DenyTLS1.0 TLS 1.0 - TLS 1.1 . MinTLS TLS . MaxTLS TLS . NoSystem . TLS 1.3 . SSLPort port . StrictConformance Yes StrictConformance No IPP . "No" . Timeout seconds (timeout) HTTP . "900" ( ) . WebInterface yes WebInterface no . "No" . HTTP (HTTP METHOD NAMES) HTTP cupsd(8) : GET CUPS . HEAD . OPTIONS (SSL/TLS) . POST IPP HTML CUPS . PUT . IPP (IPP OPERATION NAMES) IPP cupsd(8) : CUPS-Accept-Jobs . CUPS-Add-Modify-Class . CUPS-Add-Modify-Printer . CUPS-Authenticate-Job . CUPS-Delete-Class . CUPS-Delete-Printer . CUPS-Get-Classes . CUPS-Get-Default . CUPS-Get-Devices . CUPS-Get-Document . CUPS-Get-PPD PPD . CUPS-Get-PPDs PPD . CUPS-Get-Printers . CUPS-Move-Job . CUPS-Reject-Jobs . CUPS-Set-Default . Cancel-Job . Cancel-Jobs . Cancel-My-Jobs . Cancel-Subscription . Close-Job . Create-Job . Create-Job-Subscriptions . Create-Printer-Subscriptions . Get-Job-Attributes . Get-Jobs . Get-Notifications . Get-Printer-Attributes . Get-Subscription-Attributes . Get-Subscriptions . Hold-Job ( ). Hold-New-Jobs . Pause-Printer . Pause-Printer-After-Current-Job . Print-Job . Purge-Jobs . Release-Held-New-Jobs . Release-Job . Renew-Subscription . Restart-Job . Send-Document . Set-Job-Attributes . Set-Printer-Attributes . Validate-Job . (LOCATION PATHS) cupsd(8) : / (get-printers get-jobs ) /admin (add-printer delete-printer start- printer ) /admin/conf CUPS (cupsd.conf client.conf ) /admin/log CUPS (access_log error_log page_log) /classes /classes/name /jobs (hold- job release-job ) /jobs/id /printers /printers/name /printers/name.png /printers/name.ppd PPD LOCATION LIMIT (DIRECTIVES VALID WITHIN LOCATION AND LIMIT SECTIONS) Location Limit cupsd.conf : Allow all Allow none Allow host.domain.com Allow *.domain.com Allow ipv4-address Allow ipv4-address/netmask Allow ipv4-address/mm Allow [ipv6-address] Allow [ipv6-address]/mm Allow @IF(name) Allow @LOCAL . @IF(name) . @LOCAL -- (point-to-point) DSL VPN . Order Allow Deny . AuthType None AuthType Basic AuthType Default . "Default" DefaultAuthType . Deny all Deny none Deny host.domain.com Deny *.domain.com Deny ipv4-address Deny ipv4-address/netmask Deny ipv4-address/mm Deny [ipv6-address] Deny [ipv6-address]/mm Deny @IF(name) Deny @LOCAL . @IF(name) . @LOCAL -- (point-to-point) DSL VPN . Order Deny Allow . Encryption IfRequested Encryption Never Encryption Required . "IfRequested" . Order allow,deny . Allow Deny . Order deny,allow . Deny Allow . Require group group-name [ group-name ... ] . Require user {user-name|@group-name} ... . "@SYSTEM" SystemGroup cups-files.conf(5) . "@OWNER" . : 'root' . Require valid-user . Satisfy all Allow AuthType Deny Order Require . Satisfy any (AuthType/Require) (Allow/Deny/Order) . . POLICY (DIRECTIVES VALID WITHIN POLICY SECTIONS) Policy cupsd.conf : JobPrivateAccess all JobPrivateAccess default JobPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ... . ("default") "@OWNER @SYSTEM" . "@ACL" requesting-user-name-allowed requesting- user-name-denied . "@OWNER" . "@SYSTEM" SystemGroup cups-files.conf(5) . JobPrivateValues all JobPrivateValues default JobPrivateValues none JobPrivateValues attribute-name [ ... attribute-name ] . ("default") "job-name" "job-originating-host- name" "job-originating-user-name" "phone". SubscriptionPrivateAccess all SubscriptionPrivateAccess default SubscriptionPrivateAccess {user|@group|@ACL|@OWNER|@SYSTEM} ... . ("default") "@OWNER @SYSTEM" . "@ACL" requesting-user- name-allowed requesting-user-name-denied . "@OWNER" . "@SYSTEM" SystemGroup cups-files.conf(5) . SubscriptionPrivateValues all SubscriptionPrivateValues default SubscriptionPrivateValues none SubscriptionPrivateValues attribute-name [ ... attribute-name ] . ("default") "notify-events" "notify-pull-method" "notify-recipient-uri" "notify- subscriber-user-name" "notify-user-data". (DEPRECATED DIRECTIVES) CUPS : AuthType Negotiate (Kerberos) . Classification banner . "classified" "confidential" "secret" "topsecret" "unclassified" . . ClassifyOverride Yes ClassifyOverride No ( ) "job-sheets" . "No" . DefaultAuthType Negotiate . GSSServiceName name . "http." . PageLogFormat format-string PageLog . (%) . : "%%" . "%{name}" IPP . "%C" . "%P" . "%T" . "%j" (job ID) . "%p" . "%u" . . "%p %u %j %T %P %C %{job-billing} %{job-originating-host-name} %{job-name} %{media} %{sides}" . "%{job-impressions-completed}" () "%{job- media-sheets-completed}" . (NOTES) cupsd.conf (privilege escalation) cups-files.conf(5) . cupsd.conf . systemctl(8) macOS launchctl(8) . @LOCAL cupsd . (CONFORMING TO) cupsd.conf (Apache HTTP Server) . (EXAMPLES) : AccessLogLevel all LogLevel debug2 MaxLogSize 32m .10: Order allow,deny Allow from 10./8 AuthType Basic Require valid-user Satisfy any (SEE ALSO) classes.conf(5), cups-files.conf(5), cupsd(8), mime.convs(5), mime.types(5), printers.conf(5), subscriptions.conf(5), CUPS (http://localhost:631/help) (COPYRIGHT) Copyright (C) 2020-2025 by OpenPrinting. 2025-03-12 CUPS cupsd.conf(5)