3 * This generates printcaps and other files for Athena print servers
5 * Copyright (C) 1992-1998 by the Massachusetts Institute of Technology.
6 * For copying and distribution information, please see the file
10 #include <mit-copyright.h>
12 #include <moira_site.h>
15 #include <sys/types.h>
29 EXEC SQL INCLUDE sqlca;
33 char *whoami = "cups-print.gen";
34 char *db = "moira/moira";
36 /* OMG, I hate this, but it's cleaner, I guess? */
38 const char *alterjob = "<Limit Hold-Job Release-Job\
39 Restart-Job Purge-Jobs Reprocess-Job Set-Job-Attributes\
40 Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>";
41 const char *submitjob = "<Limit Create-Job Print-Job Print-URI Send-Document\
42 Set-Job-Attributes Send-URI Create-Job-Subscription Renew-Subscription\
43 Cancel-Subscription Get-Notifications CUPS-Move-Job>";
44 const char *alterpntr = "<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer\
45 CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>";
46 const char *lpcpntr = "<Limit Pause-Printer Resume-Printer Enable-Printer\
47 Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs\
48 Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer\
49 Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After\
50 CUPS-Accept-Jobs CUPS-Reject-Jobs>";
51 const char *canceljob = "<Limit Cancel-Job CUPS-Authenticate-Job>";
52 const char *catchall = "<Limit All>";
53 const char *phost = "printers.MIT.EDU";
55 void do_host(char *host);
58 #define MAX(a, b) ( (a) > (b) ? (a) : (b) )
61 int main(int argc, char **argv)
63 EXEC SQL BEGIN DECLARE SECTION;
64 char name[MACHINE_NAME_SIZE];
65 EXEC SQL END DECLARE SECTION;
71 EXEC SQL WHENEVER SQLERROR DO sqlerr();
73 EXEC SQL DECLARE csr_hosts CURSOR FOR
74 SELECT m.name FROM machine m, serverhosts sh
75 WHERE m.mach_id = sh.mach_id AND sh.service = 'CUPS-PRINT' AND sh.enable = 1;
76 EXEC SQL OPEN csr_hosts;
79 EXEC SQL FETCH csr_hosts INTO :name;
86 EXEC SQL CLOSE csr_hosts;
91 void printer_user_list(FILE *out, char *type, int id, char *str)
93 struct save_queue *sq;
96 sq = get_acl(type, id, NULL);
97 while (sq_remove_data(sq, &m))
100 fprintf(out, "%s %s\n", str, m->name);
108 void do_host(char *host)
110 EXEC SQL BEGIN DECLARE SECTION;
111 char rp[PRINTERS_RP_SIZE], name[PRINTERS_NAME_SIZE];
112 char duplexname[PRINTERS_DUPLEXNAME_SIZE], location[PRINTERS_LOCATION_SIZE];
113 char hwtype[PRINTERS_HWTYPE_SIZE], lowerhwtype[PRINTERS_HWTYPE_SIZE];
114 char modtime[PRINTERS_MODTIME_SIZE], lmodtime[LIST_MODTIME_SIZE];
115 char contact[PRINTERS_CONTACT_SIZE], hostname[MACHINE_NAME_SIZE];
116 char cupshosts[MACHINE_NAME_SIZE], prtype [PRINTERS_TYPE_SIZE];
117 char *spoolhost = host, *unixtime_fmt = UNIXTIME_FMT, *p;
119 int ka, pc, ac, lpc_acl, top_lpc_acl, banner, rm;
120 EXEC SQL END DECLARE SECTION;
123 char filename[MAXPATHLEN], *duptc;
124 time_t mtime, now = time(NULL);
126 lhost = (char *) strdup (host);
127 for (p = lhost; *p; p++)
130 EXEC SQL SELECT mach_id INTO :rm FROM machine
131 WHERE name = :spoolhost;
133 sprintf(filename, "%s/cups-print/%s", DCM_DIR, host);
134 tf = tarfile_open(filename);
137 out = tarfile_start(tf, "/etc/cups/printers.conf", 0644, 0, 0,
140 EXEC SQL DECLARE csr_printers CURSOR FOR
141 SELECT pr.rp, pr.name, pr.duplexname, pr.hwtype,
142 m.name, pr.banner, pr.location, pr.contact, pr.ka,
144 FROM printers pr, machine m
145 WHERE pr.rm = :rm AND m.mach_id = pr.mach_id
146 AND pr.type != 'ALIAS';
147 EXEC SQL OPEN csr_printers;
150 EXEC SQL FETCH csr_printers INTO :rp, :name, :duplexname,
151 :hwtype, :hostname, :banner, :location, :contact, :ka, :ac;
162 strcpy(lowerhwtype, hwtype);
163 for (p = lowerhwtype; *p; p++)
166 fprintf(out, "<Printer %s>\n",rp);
167 fprintf(out, "Info %s:%s\n", rp, hwtype);
168 /* Note the use of "beh" to keep the CUPS from disabling print queues
169 * should they not respond versus discarding the job.
170 * See the "beh" page for details.
171 * The 1/0/60 says "don't disable/try 20 times/try every 60s */
172 if (!strncmp(hwtype, "HP", 2))
173 fprintf(out, "DeviceURI beh:/1/20/60/socket://%s:9100\n", hostname);
175 fprintf(out, "DeviceURI beh:/1/20/60/socket://%s\n", hostname);
176 fprintf(out, "State Idle\n"); // Always with the Idle
177 fprintf(out, "StateTime %ld\n", (long)time(NULL));
178 fprintf(out, "Accepting Yes\n");
179 fprintf(out, "Shared Yes\n");
180 fprintf(out, "QuotaPeriod 0\n");
181 fprintf(out, "PageLimit 0\n");
182 fprintf(out, "Klimit 0\n");
183 fprintf(out, "Option sides one-sided\n");
185 fprintf(out, "Location %s\n", location);
186 fprintf(out, "ErrorPolicy abort-job\n");
187 if (! ka || ! lpc_acl)
188 fprintf(out, "OpPolicy default\n");
190 fprintf(out, "OpPolicy %s-policy\n", rp);
192 /* Access-control list. */
196 fprintf(out, "AuthType Negotiate\n");
198 fprintf(out, "AuthType Negotiate\n");
199 printer_user_list(out, "LIST", ac, "AllowUser");
202 if (banner == PRN_BANNER_NONE)
203 fprintf(out, "JobSheets none none\n");
205 fprintf(out, "JobSheets athena none\n");
206 fprintf(out, "</Printer>\n");
209 EXEC SQL CLOSE csr_printers;
213 /* aliases are in classes.conf */
214 out = tarfile_start(tf, "/etc/cups/classes.conf", 0644, 0, 0,
216 EXEC SQL DECLARE csr_duplexqs CURSOR FOR
217 SELECT pr.rp, pr.name, pr.duplexname, pr.hwtype,
218 m.name, pr.banner, pr.location, pr.contact, pr.ka,
219 pr.type as prtype, pr.ac
220 FROM printers pr, machine m
221 WHERE pr.rm = :rm AND m.mach_id = pr.mach_id;
222 EXEC SQL OPEN csr_duplexqs;
225 EXEC SQL FETCH csr_duplexqs INTO :rp, :name, :duplexname,
226 :hwtype, :hostname, :banner, :location, :contact, :ka, :prtype, :ac;
236 /* Define alias queues as classes to the regular queues for
237 * accounting reasons. Annoyingly, classes don't always inherit
238 * their printer definitions.
240 if (!strcmp(prtype,"ALIAS"))
243 fprintf(out, "<Class %s>\n",name);
244 fprintf(out, "Info Alias Queue to %s:%s\n", rp, hwtype);
245 fprintf(out, "Printer %s\n", rp);
246 fprintf(out, "Option sides one-sided\n");
247 fprintf(out, "State Idle\n"); // Always with the Idle
248 fprintf(out, "StateTime %ld\n", (long)time(NULL));
249 fprintf(out, "Accepting Yes\n");
250 fprintf(out, "Shared Yes\n");
251 fprintf(out, "QuotaPeriod 0\n");
252 fprintf(out, "PageLimit 0\n");
254 fprintf(out, "Location %s\n", location);
255 fprintf(out, "ErrorPolicy abort-job\n");
256 if (! ka || ! lpc_acl)
257 fprintf(out, "OpPolicy default\n");
259 fprintf(out, "OpPolicy %s-policy\n", rp);
261 /* Access-control list. */
265 fprintf(out, "AuthType Negotiate\n");
267 fprintf(out, "AuthType Negotiate\n");
268 printer_user_list(out, "LIST", ac, "AllowUser");
271 if (banner == PRN_BANNER_NONE)
272 fprintf(out, "JobSheets none none\n");
274 fprintf(out, "JobSheets athena none\n");
275 fprintf(out, "</Class>\n");
278 /* Define duplex queues as aliases to the regular queues for
279 * accounting reasons. Annoyingly, classes don't always inherit
280 * their printer definitions.
285 fprintf(out, "<Class %s>\n",duplexname);
286 if (!strcmp(prtype,"ALIAS"))
287 fprintf(out, "Info Duplex Alias Queue to %s:%s\n", rp, hwtype);
289 fprintf(out, "Info Duplex Queue for %s:%s\n", rp, hwtype);
290 fprintf(out, "Option sides two-sided-long-edge\n"); // duplex
291 fprintf(out, "Printer %s\n", rp);
292 fprintf(out, "State Idle\n"); // Always with the Idle
293 fprintf(out, "StateTime %ld\n", (long)time(NULL));
294 fprintf(out, "Accepting Yes\n");
295 fprintf(out, "Shared Yes\n");
296 fprintf(out, "QuotaPeriod 0\n");
297 fprintf(out, "PageLimit 0\n");
299 fprintf(out, "Location %s\n", location);
300 fprintf(out, "ErrorPolicy abort-job\n");
301 if (! ka || ! lpc_acl)
302 fprintf(out, "OpPolicy default\n");
304 fprintf(out, "OpPolicy %s-policy\n", rp);
306 /* Access-control list. */
310 fprintf(out, "AuthType Negotiate\n");
312 fprintf(out, "AuthType Negotiate\n");
313 printer_user_list(out, "LIST", ac, "AllowUser");
316 if (banner == PRN_BANNER_NONE)
317 fprintf(out, "JobSheets none none\n");
318 else if (banner == PRN_BANNER_LAST)
319 fprintf(out, "JobSheets athena none\n");
320 fprintf(out, "</Class>\n");
323 EXEC SQL CLOSE csr_duplexqs;
327 out = tarfile_start(tf, "/etc/cups/cupsd.conf", 0755, 1, 1,
330 fprintf(out, "LogLevel info\n");
331 fprintf(out, "SystemGroup sys root ops-group\n");
332 fprintf(out, "Port 631\n");
333 fprintf(out, "Listen /var/run/cups/cups.sock\n");
334 fprintf(out, "Browsing On\n");
335 fprintf(out, "BrowseOrder allow,deny\n");
336 fprintf(out, "BrowseAllow all\n");
337 fprintf(out, "BrowseAddress @LOCAL\n");
338 fprintf(out, "DefaultAuthType Negotiate\n");
339 fprintf(out, "ServerCertificate /etc/cups/ssl/%s-ipp-crt.pem\n", lhost);
340 fprintf(out, "ServerKey /etc/cups/ssl/%s-ipp-key.pem\n", lhost);
341 fprintf(out, "ServerName %s\n", lhost);
342 fprintf(out, "ServerAlias %s\n", phost);
343 fprintf(out, "Krb5Keytab /etc/krb5-ipp.keytab\n");
345 /* The other CUPS servers should be aware of the other hosts'
346 queues, so we'll let them browse each other. */
347 fprintf(out, "Include cups.local.conf\n");
348 fprintf(out, "Include cups.locations.conf\n");
349 fprintf(out, "Include cups.policies.conf\n");
352 /* cups.hosts.conf */
353 out = tarfile_start(tf, "/etc/cups/cups.hosts.conf", 0755, 1, 1,
355 EXEC SQL DECLARE csr_cupshosts CURSOR FOR
356 SELECT m.name AS cupshosts FROM machine m, printservers ps
357 WHERE m.mach_id = ps.mach_id AND ps.kind = 'CUPS';
358 EXEC SQL OPEN csr_cupshosts;
361 EXEC SQL FETCH csr_cupshosts INTO :cupshosts;
367 /* Don't poll yourself looking for answers! */
368 if (strcmp(cupshosts,host))
369 fprintf(out, "BrowsePoll %s\n", cupshosts);
371 EXEC SQL CLOSE csr_cupshosts;
375 /* cups.policies.conf */
376 out = tarfile_start(tf, "/etc/cups/cups.policies.conf", 0755, 1, 1,
378 fprintf(out, "# Printer-specific LPC and LPR ACLs\n");
380 EXEC SQL SELECT ps.lpc_acl INTO :top_lpc_acl
381 FROM printservers ps, machine m
382 WHERE m.name = :spoolhost AND m.mach_id = ps.mach_id;
383 if (!sqlca.sqlcode && lpc_acl)
385 fprintf (out, "<Policy default>\n");
386 fprintf (out, "%s\n", alterjob);
387 fprintf (out, "AuthType Default\n");
388 fprintf (out, "Require user @OWNER @SYSTEM\n");
389 printer_user_list(out, "LIST", top_lpc_acl, "Require user");
390 fprintf (out, "Order deny,allow\n");
391 fprintf (out, "</Limit>\n");
392 fprintf (out, "%s\n", submitjob);
393 fprintf (out, "AuthType None\n");
394 fprintf (out, "Order deny,allow\n");
395 fprintf (out, "Allow from all\n");
396 fprintf (out, "</Limit>\n");
397 fprintf (out, "%s\n", alterpntr);
398 fprintf (out, "AuthType Default\n");
399 fprintf (out, "Require user @SYSTEM\n");
400 fprintf (out, "Order deny,allow\n");
401 fprintf (out, "</Limit>\n");
402 fprintf (out, "%s\n", lpcpntr);
403 fprintf (out, "AuthType Default\n");
404 fprintf (out, "Require user @SYSTEM\n");
405 printer_user_list(out, "LIST", top_lpc_acl, "Require user");
406 fprintf (out, "Order deny,allow\n");
407 fprintf (out, "</Limit>\n");
408 fprintf (out, "%s\n", canceljob);
409 fprintf (out, "AuthType Default\n");
410 fprintf (out, "Require user @OWNER @SYSTEM\n");
411 printer_user_list(out, "LIST", top_lpc_acl, "Require user");
412 fprintf (out, "Order deny,allow\n");
413 fprintf (out, "Allow from all\n");
414 fprintf (out, "</Limit>\n");
415 fprintf (out, "%s\n", catchall);
416 fprintf (out, "AuthType None\n");
417 fprintf (out, "Order deny,allow\n");
418 fprintf (out, "Allow from all\n");
419 fprintf (out, "</Limit>\n");
420 fprintf (out, "</Policy>\n");
423 /* restrict lists and lpcaccess policies. Sadly, we have to put the
424 top level for each new policy since CUPS doesn't have a way of
425 doing it otherwise (well, Unix groups, but not moira) */
426 EXEC SQL DECLARE csr_lpc CURSOR FOR
427 SELECT UNIQUE rp, ka, ac, lpc_acl
429 WHERE rm = :rm AND ( ac != 0 OR lpc_acl != 0);
430 EXEC SQL OPEN csr_lpc;
433 EXEC SQL FETCH csr_lpc INTO :name, :ka, :ac, :lpc_acl;
439 fprintf (out, "<Policy %s-policy>\n", name);
440 fprintf (out, "%s\n", alterjob);
441 fprintf (out, "AuthType Default\n");
442 fprintf (out, "Require user @OWNER @SYSTEM\n");
443 printer_user_list(out, "LIST", lpc_acl, "Require user");
444 fprintf (out, "Order deny,allow\n");
445 fprintf (out, "Allow from all\n");
446 fprintf (out, "</Limit>\n");
447 fprintf (out, "%s\n", submitjob);
448 /* If the printer is Kerberized? */
450 fprintf (out, "AuthType Negotiate\n");
452 fprintf (out, "AuthType None\n");
453 /* Access-control list. */
455 printer_user_list(out, "LIST", ac, "Require user");
457 fprintf (out, "Require valid-user\n");
458 fprintf (out, "Order deny,allow\n");
459 fprintf (out, "Allow from all\n");
460 fprintf (out, "</Limit>\n");
461 fprintf (out, "%s\n", alterpntr);
462 fprintf (out, "AuthType Default\n");
463 fprintf (out, "Require user @SYSTEM\n");
464 fprintf (out, "Order deny,allow\n");
465 fprintf (out, "</Limit>\n");
466 fprintf (out, "%s\n", lpcpntr);
467 fprintf (out, "AuthType Default\n");
468 fprintf (out, "Require user @SYSTEM\n");
469 /* printer-specific lpc access. */
471 printer_user_list(out, "LIST", lpc_acl, "Require user");
472 printer_user_list(out, "LIST", top_lpc_acl, "Require user");
473 fprintf (out, "Order deny,allow\n");
474 fprintf (out, "</Limit>\n");
475 fprintf (out, "%s\n", canceljob);
476 fprintf (out, "AuthType Default\n");
477 fprintf (out, "Require user @OWNER @SYSTEM\n");
478 printer_user_list(out, "LIST", lpc_acl, "Require user");
479 printer_user_list(out, "LIST", top_lpc_acl, "Require user");
480 fprintf (out, "Order deny,allow\n");
481 fprintf (out, "Allow from all\n");
482 fprintf (out, "</Limit>\n");
483 fprintf (out, "%s\n", catchall);
484 fprintf (out, "AuthType None\n");
485 fprintf (out, "Order deny,allow\n");
486 fprintf (out, "Allow from all\n");
487 fprintf (out, "</Limit>\n");
488 fprintf (out, "</Policy>\n");
490 EXEC SQL CLOSE csr_lpc;
498 db_error(sqlca.sqlcode);