I'm trying to set up LPRng as a replacement for some existing spooling
software.  Our current software stores printing permissions on a
per-printer basis, and we take advantage of that.  I'm not sure how to do
the same thing with LPRng.

I'd like to have a single spooler for two sets of printers with different
permissions.  For one set (let's call them private1, private2, etc.), I
only want to accept jobs from a small number of subnets (say 128.2.1.0/24
and 128.2.3.0/24).  For the other set (public1, public2, etc.), I want to
accept jobs from a very broad set of subnets (say 128.2.0.0/16 and
128.192.0.0/16).  (In case it's not clear, these are just example names
and addresses.  Reality's more complex.)

It seems like the sort of thing that lpd.perms would handle.  Presumably,
I could do something like

DEFAULT ACCEPT
REJECT SERVICE=X NOT HOST 128.2.1.0/24,128.2.3.0/24 PRINTER=private1
REJECT SERVICE=X NOT HOST 128.2.1.0/24,128.2.3.0/24 PRINTER=private2
REJECT SERVICE=X NOT HOST 128.2.0.0/16.128.182.0.0/16 PRINTER=public1
REJECT SERVICE=X NOT HOST 128.2.0.0/16.128.182.0.0/16 PRINTER=public2
etc.

The problems:

First, is lpd.perms the right place to set these permissions?  Would it
be better to set printer-specific permissions elsewhere?

Second, the PRINTER= option isn't mentioned directly in the documentation,
but shows up in the examples, so I'm not sure that it's still valid or
that I'm using it correctly.

Finally, I'd like to define a class of printers (e.g.
"publicgroup=public1,public2,public3") and then set permissions for the
entire group at the same time.  I don't see a way to do that (and it's
certainly not necessary), but I want to ensure that it's not there before
I generate an lpd.perms that's more complicated than necessary.


Willie Beegle
Computing Services
Carnegie Mellon University

-- 
"I can't give you a brain, so I'll give you a diploma." - The Great Oz


-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address

If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body.  For the impatient,
to subscribe to a list with name LIST,  send mail to [EMAIL PROTECTED]
with:                           | example:
subscribe LIST <mailaddr>       |  subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr>     |  unsubscribe lprng [EMAIL PROTECTED]

If you have major problems,  send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------

Reply via email to