how to share printer on the network? about puppet-cups HOT 5 CLOSED

Just to clarify on the Allow all use case: we are trying to set up printing from a central CUPS system (with just generic PostScript queues) to remote offices connected via VPN and let each remote office manage the actual printer configuration and drivers on their local cups server.

The "office CUPS" needs to accept print jobs from the central one and they come through a routed VPN network with a source subnet different from the local office subnet that CUPS is listening on, so we need either an Allow all or to explicitly allow the remote subnet of the central CUPS server.

from puppet-cups.

This is a known shortcoming since #27 and currently in development.

from puppet-cups.

I'll confess, I've found configuring CUPS frustrating, but this module did enough of the work for me that I think I can contribute to making it work for a shareable printing system.

Although CUPS security is fine-grained and a little mysterious, I think that there are 2 primary levels of interest:

1. Allowing users to submit jobs from other machines.
2. Allowing remote administration of the system via the IPP web interface.

To which at the next level one could add the ability to control print jobs, but for most of us, that's something we'd expect if we had submit rights.

To that end, I'd propose the following server-level parameters:

print_from => [ allow-from list ],
admin_from => [ allow-from list ],
browseable  => yes/no,

The allow-from list is the usual stuff for Apache-style "Allow from" elements. e.g., '192.168.12.0/24', "mynetwork.com" and so forth. Extra points if you can change it to a "Deny from" by prefixing the source with a "!".

I think I can make these options work without a whole lot of effort if you're interested.

from puppet-cups.

Follow-up. Yes, I have made this work. Virtually as conceived, including the "!" prefix to create a Deny. The only alteration is that since "browseable" is Boolean, the valid options are true and false.

Purists might prefer a closer correspondence with the generated config file. It's no big deal to change from "browseable" to "browsing=on/off", if preferred.

from puppet-cups.

Sorry for following up so late @lesinigo. The next release of the module will make this possible by setting

class { '::cups':
  location      => 'share-printers'
}

from puppet-cups.