Updated papd man page to match current code. Added descriptions of authenticated...

diff --git a/man/man8/papd.8.tmpl b/man/man8/papd.8.tmpl
index d9d7a4ea186266ac421afe52055caf309095b36b..8176675e9154186b2f1b009a854e77a05a12634a 100644 (file)
--- a/man/man8/papd.8.tmpl
+++ b/man/man8/papd.8.tmpl
@@ -1,5 +1,5 @@
 '\" t
-.TH PAPD 8 "17 Apr 1995" "netatalk 1.3.3"
+.TH PAPD 8 "06 Mar 2001" "netatalk 1.5"
 .SH NAME
 papd \- AppleTalk print server daemon
 .SH SYNOPSIS
@@ -27,10 +27,13 @@ after accepting a job from the network to have it re-examine the
 appropriate spool directory.  The actual printing and spooling is
 handled entirely by
 .B lpd.
+.B papd
+can also pipe the print job to an external program for processing, and
+this is the preferred method to avoid compatibility problems with all
+the flavors of lpd in use.
 .LP
 .B papd
-is typically started at boot time, out of
-.B /etc/rc.
+is typically started at boot time, out of system init scripts.
 It first reads from its configuration file,
 .BR :ETCDIR:/papd.conf .
 The file is in the same format as
@@ -39,16 +42,20 @@ See
 .BR printcap (5)
 for details.  The name of the entry is registered with
 .BR NBP .
-There are currently three supported capabilities.
+The following options are supported:
 .LP
 .TS
 c c l l
 cfB l l l .
 Name   Type    Default Descripton
 .sp .5
-pd     str     ``.ppd''        Pathname to PPD file
-pr     str     ``lp''  LPD printer name (or pipe to print command)
-op     str     ``operator''    Operator name for LPD spooling
+pd     str     `.ppd'  Pathname to PPD file
+pr     str     `lp'    LPD printer name (or print command)
+op     str     `operator'      Operator name for LPD spooling
+ca     bool    false   CAP-style authentication
+sp     bool    false   PSSP-style authentication
+am     str     NULL    UAMS to use for authentication
+pa     str     NULL    Printer's AppleTalk address?
 .TE
 .LP
 If no configuration file is given, the hostname of the machine is used
@@ -77,37 +84,73 @@ instead of
 .B /etc/printcap
 for LPD configuration information.
 .SH EXAMPLE
-The following papd configuration file sets up two print spoolers for the
-.B lpd
-printers named
-.B ps
-and
-.BR lp .
+The following papd configuration file sets up three print spoolers.
 The first spooler is known by the NBP name
 .B Mac Printer Spooler,
-and uses a PPD file located in
-.B /usr/share/lib/ppd.
-In addition, the user
-.B mcs
+and uses a PPD file located in /usr/share/lib/ppd.
+In addition, the user mcs
 will be the owner of all jobs that are spooled.
 The second spooler is known as
 .B HP Printer
 and all options are the default. The third spooler is known as
-.B Other Printer
-which prints with lpr.
+.B HP 8100 .
+It pipes the print job to lpr for printing.  PSSP authenticated printing
+is enabled, as is CAP-style authenticated printing.  Both methods support
+guest and cleartext authentication as specified by the 'am' option.  The
+PPD used is /etc/atalk/ppds/hp8100.ppd.
 .sp
 .RS
 .nf
 Mac Printer Spooler:\\ 
-       :pr=ps:pd=/usr/share/lib/ppd/HPLJ_4M.PPD:op=mcs:
+       :pr=ps:\\
+       :pd=/usr/share/lib/ppd/HPLJ_4M.PPD:\\
+       :op=mcs:
 
 HP Printer:\\ 
        :
 
-Other Printer:\\
-       :pr=|/usr/bin/lpr -P Otherprinter -h:
+HP 8100:\\
+       :pr=|/usr/bin/lpr -Plp:\\
+       :sp:\\
+       :ca:\\
+       :am=uams_guest.so,uams_pam.so:\\
+       :pd=/etc/atalk/ppds/hp8100.ppd:
 .fi
 .RE
+.SH NOTES
+PSSP (Print Server Security Protocol) is an authentication protocol
+carried out through postscript printer queries to the print server.  Using
+PSSP requires LaserWriter 8.6.1 or greater on the client mac.  The user
+will be prompted to enter their username and password before they print.
+It may be necessary to re-setup the printer on each client the first time
+PSSP is enabled, so that the client can figure out that authentication is
+required to print.  You can enable PSSP on a per-printer basis.  PSSP is
+the recommended method of authenticating printers as it is more robust
+that CAP-style authentication, described below.
+.LP
+CAP-style authentication gets its name from the method the CAP (Columbia
+APpletalk) package used to authenticate its mac clients' printing.  This
+method requires that a user login to a file share before they print.
+.B afpd
+records the username in a temporary file named after the clients
+Appletalk address, and it deletes the temporary file when the user
+disconnects.
+.B papd
+gets the username from the file with the same Appletalk address as the
+machine connecting to it.  CAP-style authentication will work with any
+mac client.  CAP-style authenticated printing is a compile-time option for 
+netatalk.  If both CAP and PSSP are enabled for a particular printer, CAP
+will be tried first, then it will fall back to PSSP.
+.LP
+
+The list of UAMS to use for authentication (specified with the 'am'
+option) applies to all printers.  It is not possible to define different
+authentication methods on each printer. You can specify the list of UAMS
+multiple times, but only the last setting will be used.  Currently only
+uams_guest.so, uams_passwd.so, and uams_pam.so are supported as printer
+authentication methods.  The guest method requires a valid username, but
+not a password. The passwd and pam methods require both a valid username
+and the correct password.
 .SH FILES
 .TP 16
 .B :ETCDIR:/papd.conf