cupsd.conf

ServerName XXX
Listen /var/run/cups/cups.sock
Listen 0.0.0.0:631

ServerTokens ProductOnly
WebInterface On
KeepAlive On
KeepAliveTimeout 60
Timeout 15
DirtyCleanInterval 0

LogLevel debug
AccessLogLevel all
MaxLogSize 0
HostNameLookups Off
PageLogFormat %p %u %j %T %P %C %{job-billing} %{job-originating-host-name} %{job-name} %{media} %{sides}
PreserveJobHistory On

# Specifies whether or not shared printers should be advertised.
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseRemoteProtocols CUPS DNSSD
# Specifies a broadcast address for outgoing printer information packets.
BrowseAddress @LOCAL
BrowseLocalProtocols CUPS DNSSD
BrowseWebIF Off

DefaultAuthType Basic
MaxJobsPerUser 3
PreserveJobFiles 52w

DefaultPaperSize A4
DefaultPolicy authenticated
DefaultShared Yes
ErrorPolicy stop-printer
JobRetryInterval 5
JobRetryLimit 5

<Location />
	Order allow,deny
	Allow all
	Require valid-user
	Satisfy all
</Location>

<Location /admin>
	Order deny,allow
	Allow all
	Require group lpadmin
	Satisfy all
</Location>


<Policy authenticated>
	JobPrivateAccess @OWNER @SYSTEM @lpadmin
	JobPrivateValues job-name job-originating-host-name job-originating-user-name
	#JobPrivateValues all
	SubscriptionPrivateAccess @OWNER @SYSTEM @lpadmin
	SubscriptionPrivateValues notify-events notify-pull-method notify-recipient-uri notify-subscriber-user-name notify-user-data

	<Limit Create-Job Print-Job Print-URI>
		AuthType Default
		Order deny,allow
	</Limit>
	<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job CUPS-Get-Document Cancel-My-Jobs>
		AuthType Default
		Require user @OWNER @SYSTEM
		Order deny,allow
	</Limit>
	<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
		AuthType Default
		Require user @SYSTEM
		Order deny,allow
	</Limit>
	<Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
		AuthType Default
		Require user @SYSTEM
		Order deny,allow
	</Limit>
	<Limit Cancel-Job Cancel-Jobs CUPS-Authenticate-Job Close-Job Validate-Job>
		AuthType Default
		Require user @OWNER @SYSTEM
		Order deny,allow
	</Limit>
	<Limit All>
		AuthType Default
		Order deny,allow
	</Limit>
</Policy>