root / pykota / trunk / conf / pykota.conf.sample @ 1105

Revision 1105, 11.1 kB (checked in by jalet, 21 years ago)

PyKota now tries to add its attributes intelligently in existing LDAP
directories.

  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
Line 
1# PyKota sample configuration file
2#
3# Copy this file into the /etc/pykota/ directory
4# under the name /etc/pykota/pykota.conf
5#
6# PyKota - Print Quotas for CUPS and LPRng
7#
8# (c) 2003 Jerome Alet <alet@librelogiciel.com>
9# This program is free software; you can redistribute it and/or modify
10# it under the terms of the GNU General Public License as published by
11# the Free Software Foundation; either version 2 of the License, or
12# (at your option) any later version.
13#
14# This program is distributed in the hope that it will be useful,
15# but WITHOUT ANY WARRANTY; without even the implied warranty of
16# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17# GNU General Public License for more details.
18#
19# You should have received a copy of the GNU General Public License
20# along with this program; if not, write to the Free Software
21# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307, USA.
22#
23# $Id$
24#
25
26[global]
27# Storage backend for quotas
28# only PGStorage (PostgreSQL) and LDAPStorage (OpenLDAP) are supported.
29# MySQL and BerkeleyDB are planned.
30
31# the 'postgresql' value is deprecated, use 'pgstorage' instead.
32storagebackend: pgstorage
33
34# Quota Storage Server hostname (and optional port)
35# e.g. db.mydomain.com:5432
36storageserver: localhost
37
38#
39# name of the Quota Storage Database
40storagename: pykota
41
42#
43# Quota Storage normal user's name and password
44# These two fields contain a username and optional password
45# which may give readonly access to your print quota database.
46#
47# PLEASE ENSURE THAT THIS USER CAN'T WRITE TO YOUR PRINT QUOTA
48# DATABASE, OTHERWISE ANY USER WHO COULD READ THIS CONFIGURATION
49# FILE COULD CHANGE HIS PRINT QUOTA.
50#
51storageuser: pykotauser
52# storageuserpw: Comment out if unused, or set to Quota Storage user password
53
54# LDAP example, uncomment and adapt it to your own configuration :
55#storagebackend: ldapstorage
56#storageserver: ldap://ldap.librelogiciel.com:389
57#storagename: dc=librelogiciel,dc=com
58#storageuser: cn=notadmin,dc=librelogiciel,dc=com
59#storageuserpw: abc.123
60#
61# Here we define some helpers to know where
62# to plug into an existing LDAP directory
63#userbase: ou=People,dc=librelogiciel,dc=com
64#userrdn: uid
65#balancebase: ou=People,dc=librelogiciel,dc=com
66#balancerdn: uid
67#groupbase: ou=Groups,dc=librelogiciel,dc=com
68#grouprdn: cn
69#printerbase: ou=Printers,ou=PyKota,dc=librelogiciel,dc=com
70#printerrdn: cn
71#jobbase: ou=Jobs,ou=PyKota,dc=librelogiciel,dc=com
72#userquotabase: ou=UQuotas,ou=PyKota,dc=librelogiciel,dc=com
73#groupquotabase: ou=GQuotas,ou=PyKota,dc=librelogiciel,dc=com
74#lastjobbase: ou=LastJobs,ou=PyKota,dc=librelogiciel,dc=com
75#
76# How to create new accounts and groups
77# authorized values are "below" and "attach(objectclass name)"
78#
79# "below" creates the new accounts/groups as standalone entries
80# below the above defined 'userbase' ou
81#
82# attach(objectclass name) tries to find some existing user/group
83# using the above defined 'userrdn' or 'grouprdn' and 'userbase'
84# 'groupbase', and attach the PyKota specific entries to it.
85#
86# a possible value:  newuser: attach(posixAccount)
87newuser : below
88newgroup : below
89
90#
91# Choose what attribute contains the list of group members
92# common values are : memberUid, uniqueMember, member
93#groupmembers: memberUid
94
95# Where to log ?
96# supported values : stderr, system (system means syslog, but don't use 'syslog' here)
97# if the value is not set then the default SYSTEM applies.
98logger: system
99
100# Enable debugging ? Put YES instead here,
101# but only if something went wrong and you want
102# to learn from where the problem comes from.
103# Actually only database queries are logged.
104debug : No
105
106# Mail server to use to warn users
107# If the value is not set then localhost is used.
108smtpserver: localhost
109
110# What is the accounting backend to use
111#
112# supported values :
113#
114#    - querying : asks the printer for its lifetime page counter
115#                 via either SNMP, AppleTalk, or any external
116#                 command. This method is the method used by
117#                 default in PyKota since its beginning.
118#
119#    - external : delegates the job's size computation to any
120#                 external command of your choice. A stupid and
121#                 completely unreliable example, but which
122#                 shows what this command may be is :
123#
124#                   accounter: external(/bin/grep -c showpage)
125#
126#                 Another one, which should work with all DSC
127#                 compliant Postscript files :
128#
129#                   accounter: external(/bin/grep -c "%%Page:")
130#
131#    - stupid : counts the occurences of the 'showpage' postscript
132#               statement in the document to be printed.
133#               THIS IS NOT RELIABLE. This is just to serve as
134#               an example on how to implement your own accounting
135#               method.
136#
137# This value can be set either globally or on a per printer basis
138# If both are defined, the printer option has priority.
139# if not set it defaults to 'querying'.
140#
141# A script which seems to be accurate, copy it from the
142# untested/postscript directory to another place.
143# accounter: external(/usr/local/bin/pagecount.sh)
144# WARNING : it may not work when multiple copies are asked.
145#           this breaks ghostscript, I don't know why yet.
146#
147# default value
148accounter: querying
149
150# Print Quota administrator
151# These values can be set either globally or per printer or both.
152# If both are defined, the printer option has priority.
153# If these values are not set, the default admin root
154# and the default adminmail root@localhost are used.
155admin: Jerome Alet
156adminmail: alet@librelogiciel.com
157
158#
159# Who should we send an email to in case a quota is reached ?
160# possible values are : DevNull, User, Admin, Both
161# The Both value means that the User and the Admin will receive
162# an email message.
163# The DevNull value means no email message will be sent.
164# This value can be set either globally or per printer or both.
165# If both are defined, the printer option has priority.
166# If the value is not set, then the default BOTH applies.
167mailto: both
168
169#
170# Grace delay in days
171# This value can be set either globally or per printer or both.
172# If both are defined, the printer option has priority.
173# If the value is not set then the default seven (7) days applies.
174gracedelay: 7
175
176#
177# Poor man's threshold
178# If account balance reaches below this amount,
179# a warning message is sent by email
180#
181# If unset, default poor man's threshold is 1.0.
182# This option can only appear in the global section
183poorman: 2.0
184
185# Poor man's warning message
186# The warning message that is sent if the "poorman" value is reached
187# Again this must appear in the global section
188poorwarn: Your Print Quota account balance is low.
189 Soon you'll not be allowed to print anymore.
190
191# Soft limit reached warning message
192# The warning message that is sent if the soft quota limit is reached
193# May appear either globally or on a per-printer basis
194softwarn: Your Print Quota Soft Limit is reached.
195 This means that you may still be allowed to print for some
196 time, but you must contact your administrator to purchase
197 more print quota.
198 
199# Hard limit reached error message
200# The error message that is sent if the hard quota limit is reached
201# May appear either globally or on a per-printer basis
202hardwarn: Your Print Quota Hard Limit is reached.
203 This means that you are not allowed to print anymore.
204 Please contact your administrator at root@localhost
205 as soon as possible to solve the problem.
206
207# one section per printer, or no other section at all if all options
208# are defined globally.
209# Each section's name must be the same as the printer's queue name as defined
210# in your printing system, be it CUPS or LPRng.
211# If you don't want any special printer section, just comment out
212# the line below so that following options are global.
213[hpmarketing]
214
215# How to query the hpmarketing printer for its page counter.
216# THIS IS ONLY USED IF YOU HAVE SET 'accounter' TO 'querying'
217# JUST COMMENT IT OUT IF YOU USE ANY OTHER ACCOUNTING METHOD.
218# (it would be ignored anyway)
219#
220# In the lines below "%(printer)s" is automatically replaced
221# at run time with your printer's Fully Qualified Domain Name
222# e.g. myprinter.domain.com
223#
224# Only snmp(community, oid) and external(command) are supported
225#
226# Example :
227#     requester: external(/usr/bin/snmpget -v1 -c public -Ov %(printer)s mib-2.43.10.2.1.4.1.1 | cut -f 2,2 -d " ")
228# and :
229#     requester: snmp(public, mib-2.43.10.2.1.4.1.1)
230# are equivalent
231#
232# Another untested example, using npadmin :
233#     requester: external(/usr/bin/npadmin --pagecount %(printer)s)
234#
235# Another example, for AppleTalk printers which works fine :
236# (You may need the pap CUPS backend installed, and copy the
237# pagecount.ps file from untested/netatalk into /etc or any
238# appropriate location)
239#     requester: external(/usr/bin/pap -p "%(printer)s:LaserWriter" /etc/pagecount.ps  2>/dev/null | grep -v status | grep -v Connect | tail -1)
240#
241# This value can be set either globally or per printer or both.
242# If both are defined, the printer option has priority.
243#
244# NB : The SNMP oid mib-2.43.10.2.1.4.1.1 works on HP Laserjet Printers, but it may
245#      be different with other brands, refer to your printer's documentation
246#      for details. Also you may have to specify -v2c or -v3 depending on your
247#      printer's support for different versions of the SNMP specification.
248#
249#
250# Some examples and comments provided by Bob Martel from csuohio.edu
251#
252# For several printers I could not get the page count using snmpget.  I
253# resorted to snmpwalk:
254#
255# requester: external(/opt/local/net-snmp/bin/snmpwalk -v 1 -Cc -c public %(printer)s | grep mib-2.43.10.2.1.4.1.1 | cut -d " " -f4)
256#
257# The last example is still more ugly, some of the printers only provided
258# their counters without names, but at least always on the same line:
259#
260# requester: external(/opt/local/net-snmp/bin/snmpwalk -v 1 -Cc -c public -Ov %(printer)s | grep Counter32 | tail -2 | head -1 | cut -d " " -f2)
261#
262#
263# An example using netcat and a preformatted PJL job which you can find
264# in the untested/pjl directory, which is sent to a JetDirect print
265# server on port 9100 :
266#
267# requester: external(/bin/nc -w 2 %(printer)s 9100 <pagecount.pjl | /usr/bin/tail -2)
268#
269#
270# WARNING : In any case, when using an external requester, please test the command line outside
271#           of PyKota before. This will save you some headaches in case it doesn't work as expected.
272#
273# The waitprinter.sh is there to wait until the printer is idle again.
274# This should prevent a job to be sent to the printer while another one is
275# not yet finished (not all pages are printed, but the complete job is in
276# the printer)
277requester: external(/usr/bin/waitprinter.sh %(printer)s && /usr/bin/snmpget -v1 -c public -Ov %(printer)s mib-2.43.10.2.1.4.1.1 | cut -f 2,2 -d " ")
278
279# Default policy for inexistant users (e.g. root)
280# either allow or deny
281# This value can be set either globally or per printer or both.
282# If both are defined, the printer option has priority.
283# If the value is not set then the default policy DENY applies.
284# ATTENTION :
285#     Before 1.04 the default value was ALLOW, but unknown users
286#     allowed to print causes accuracy problems : their jobs are
287#     charged to the next person who prints on the same printer.
288# There's no policy wrt inexistant groups, they are ignored.
289policy: deny
Note: See TracBrowser for help on using the browser.