# Print-Job: 提交单个文档
ipptool -tv ipp://localhost/printers/myprinter \
  -d file:///path/to/document.pdf \
  print-job.test

# Create-Job: 创建空任务
ipptool -tv ipp://localhost/printers/myprinter \
  create-job.test

# Send-Document: 向已创建的任务添加文档
ipptool -tv ipp://localhost/printers/myprinter \
  -d file:///path/to/document.pdf \
  -o job-id=123 \
  send-document.test

# 关闭任务（标记任务完成）
ipptool -tv ipp://localhost/printers/myprinter \
  -o job-id=123 \
  -o last-document=true \
  send-document.test

# Get-Printer-Attributes: 查询打印机属性
ipptool -tv ipp://localhost/printers/myprinter \
  get-printer-attributes.test

# 输出示例:
# printer-uri-supported = ipp://localhost/printers/myprinter
# printer-name = myprinter
# printer-state = idle (3)
# printer-state-reasons = none
# printer-is-accepting-jobs = true
# queued-job-count = 0
# printer-make-model = HP LaserJet Pro M404

# Get-Job-Attributes: 查询任务属性
ipptool -tv ipp://localhost/printers/myprinter \
  -o job-id=123 \
  get-job-attributes.test

# Get-Jobs: 获取任务列表
ipptool -tv ipp://localhost/printers/myprinter \
  get-jobs.test

# 获取所有打印机列表
ipptool -tv ipp://localhost \
  cups-get-printers.test

# Cancel-Job: 取消任务
ipptool -tv ipp://localhost/printers/myprinter \
  -o job-id=123 \
  cancel-job.test

# Hold-Job: 暂停任务
ipptool -tv ipp://localhost/printers/myprinter \
  -o job-id=123 \
  hold-job.test

# Release-Job: 恢复任务
ipptool -tv ipp://localhost/printers/myprinter \
  -o job-id=123 \
  release-job.test

# Pause-Printer: 暂停打印机
ipptool -tv ipp://localhost/printers/myprinter \
  pause-printer.test

# Resume-Printer: 恢复打印机
ipptool -tv ipp://localhost/printers/myprinter \
  resume-printer.test

# Purge-Jobs: 清除所有任务
ipptool -tv ipp://localhost/printers/myprinter \
  purge-jobs.test

# 创建自定义测试文件
cat << 'EOF' > /tmp/ipp-test.test
{
  # 测试打印机状态
  NAME "Check Printer Status"
  OPERATION Get-Printer-Attributes
  GROUP operation-attributes-tag
  ATTR charset attributes-charset utf-8
  ATTR language attributes-natural-language en
  ATTR uri printer-uri $uri
  EXPECT printer-state WITH-VALUE >0
  EXPECT printer-is-accepting-jobs WITH-VALUE true
  STATUS successful-ok
}
EOF

# 运行测试
ipptool -tv ipp://localhost/printers/myprinter /tmp/ipp-test.test

# 方法 1: 使用 ippfind
ippfind
# 输出: ipp://HP-LaserJet-Pro.local:631/ipp/print

# 方法 2: 使用 avahi
avahi-browse -t -r _ipp._tcp
# 输出: + eth0 IPv4 HP LaserJet Pro M404 Internet Printer local

# 方法 3: 使用 nmap
nmap -p 631 192.168.1.0/24 --open

# 方法 4: 使用 cups-browsed
sudo systemctl status cups-browsed
# cups-browsed 会自动发现并添加 IPP Everywhere 打印机

# 方法 1: 使用 -m everywhere（推荐）
sudo lpadmin -p MyPrinter -E \
  -v "ipp://HP-LaserJet-Pro.local/ipp/print" \
  -m "everywhere"

# 方法 2: 使用 DNS-SD URI
sudo lpadmin -p MyPrinter -E \
  -v "dnssd://HP%20LaserJet%20Pro%20M404._ipp._tcp.local./" \
  -m "everywhere"

# 方法 3: 使用 ipptool 查询后手动添加
# 获取打印机支持的文档格式
ipptool -tv ipp://192.168.1.100/ipp/print get-printer-attributes.test | \
  grep "document-format-supported"

# 选择合适的格式
sudo lpadmin -p MyPrinter -E \
  -v "ipp://192.168.1.100/ipp/print" \
  -m "everywhere"

# 检查打印机是否支持 IPP Everywhere
ipptool -tv ipp://192.168.1.100/ipp/print get-printer-attributes.test | \
  grep -E "ipp-features-supported|document-format-supported"

# 输出示例:
# ipp-features-supported = ...
# document-format-supported = application/pdf,image/jpeg,...

# 检查 URF 标签（Apple AirPrint 兼容）
ipptool -tv ipp://192.168.1.100/ipp/print get-printer-attributes.test | \
  grep "urf-supported"

# URF 标签含义:
# DM3  - 双面打印，3边距
# RS300 - 光栅，300 DPI
# RS600 - 光栅，600 DPI
# W8   - 基本功能

# 安装必要组件
sudo apt install -y cups avahi-daemon

# 确保 CUPS 启用共享
sudo cupsctl --share-printers

# 配置 CUPS 发布 DNS-SD 记录
# 编辑 cupsd.conf
sudo vim /etc/cups/cupsd.conf

# 添加或修改:
# BrowseLocalProtocols dnssd
# DefaultShared Yes

# 重启服务
sudo systemctl restart cups
sudo systemctl restart avahi-daemon

# 自动创建 AirPrint 服务文件
sudo tee /etc/avahi/services/airprint-myprinter.service << 'EOF'
<?xml version="1.0" standalone="no"?>
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
  <name replace-wildcards="yes">My Printer on %h</name>
  <service>
    <type>_ipp._tcp</type>
    <subtype>_universal._sub._ipp._tcp</subtype>
    <port>631</port>
    <txt-record>rp=ipp/print</txt-record>
    <txt-record>txtvers=1</txt-record>
    <txt-record>qtotal=1</txt-record>
    <txt-record>Transparent=T</txt-record>
    <txt-record>URF=DM3</txt-record>
    <txt-record>kind=document,envelope,photo</txt-record>
    <txt-record>product=(CUPS Printer)</txt-record>
    <txt-record>pdl=application/pdf,image/jpeg</txt-record>
    <txt-record>Color=T</txt-record>
    <txt-record>Duplex=T</txt-record>
  </service>
</service-group>
EOF

# 重启 Avahi
sudo systemctl restart avahi-daemon

#!/bin/bash
# 自动生成 AirPrint 服务文件

PRINTER_NAME="$1"
PRINTER_URI="$2"

if [ -z "$PRINTER_NAME" ] || [ -z "$PRINTER_URI" ]; then
    echo "用法: $0 <打印机名> <打印机URI>"
    echo "示例: $0 MyPrinter ipp://192.168.1.100/ipp/print"
    exit 1
fi

# 查询打印机能力
printer_info=$(ipptool -tv "$PRINTER_URI" get-printer-attributes.test 2>/dev/null)

# 检测颜色支持
color_support="F"
if echo "$printer_info" | grep -q "ColorModel.*RGB"; then
    color_support="T"
fi

# 检测双面支持
duplex_support="F"
if echo "$printer_info" | grep -q "sides-supported.*two-sided"; then
    duplex_support="T"
fi

# 获取支持的文档格式
pdl_formats="application/pdf,image/jpeg"

# 生成服务文件
cat << EOF | sudo tee /etc/avahi/services/airprint-${PRINTER_NAME}.service
<?xml version="1.0" standalone="no"?>
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
  <name replace-wildcards="yes">${PRINTER_NAME} on %h</name>
  <service>
    <type>_ipp._tcp</type>
    <subtype>_universal._sub._ipp._tcp</subtype>
    <port>631</port>
    <txt-record>rp=ipp/print</txt-record>
    <txt-record>txtvers=1</txt-record>
    <txt-record>qtotal=1</txt-record>
    <txt-record>Transparent=T</txt-record>
    <txt-record>URF=DM3</txt-record>
    <txt-record>pdl=${pdl_formats}</txt-record>
    <txt-record>Color=${color_support}</txt-record>
    <txt-record>Duplex=${duplex_support}</txt-record>
  </service>
</service-group>
EOF

echo "AirPrint 服务文件已创建: /etc/avahi/services/airprint-${PRINTER_NAME}.service"
sudo systemctl restart avahi-daemon

# Mopria 是 Android 的打印标准
# 基于 IPP Everywhere

# 确保配置正确
# 1. 启用 CUPS 共享
sudo cupsctl --share-printers

# 2. 确保 Avahi 运行
sudo systemctl status avahi-daemon

# 3. 配置防火墙
sudo ufw allow 631/tcp
sudo ufw allow 5353/udp  # mDNS

# Android 设备配置:
# 设置 → 连接 → 打印 → 默认打印服务
# 系统会自动发现网络中的 IPP 打印机

# Windows 使用 Mopria 或 IPP 协议
# 确保 CUPS 配置正确

# 在 Windows 上添加 IPP 打印机
# 设置 → 设备 → 打印机和扫描仪 → 添加打印机
# 选择 "我需要的打印机不在列表中"
# 选择 "按名称选择共享打印机"
# 输入: http://<服务器IP>:631/printers/<打印机名>

# 创建移动打印配置脚本
cat << 'SCRIPT' > /usr/local/bin/setup-mobile-printing
#!/bin/bash

echo "=== 配置移动打印 ==="

# 安装必要组件
apt install -y avahi-daemon cups

# 启用 CUPS 共享
cupsctl --share-printers
cupsctl BrowseLocalProtocols=dnssd

# 配置防火墙
ufw allow 631/tcp
ufw allow 5353/udp

# 重启服务
systemctl restart cups
systemctl restart avahi-daemon

echo "=== 移动打印配置完成 ==="
echo "iOS/Android 设备现在可以发现并使用打印机"
SCRIPT

sudo chmod +x /usr/local/bin/setup-mobile-printing

# 在 CUPS 服务器上配置远程访问
sudo vim /etc/cups/cupsd.conf

# 修改监听地址
Listen 0.0.0.0:631
# 或指定 IP
# Listen 192.168.1.100:631

# 配置访问控制
<Location />
  Order allow,deny
  Allow localhost
  Allow 192.168.1.0/24
  Allow 10.0.0.0/8
</Location>

<Location /admin>
  Order allow,deny
  Allow localhost
  Allow 192.168.1.0/24
  AuthType Default
  Require user @SYSTEM
</Location>

# 共享所有打印机
DefaultShared Yes

# 重启 CUPS
sudo systemctl restart cups

# 方法 1: 使用 lpadmin 连接
sudo lpadmin -p RemotePrinter -E \
  -v "ipp://192.168.1.100/printers/myprinter" \
  -m "everywhere"

# 方法 2: 使用 cups-browsed 自动发现
sudo apt install -y cups-browsed
sudo systemctl enable cups-browsed

# 编辑 cups-browsed 配置
sudo vim /etc/cups/cups-browsed.conf

# 添加远程 CUPS 服务器
BrowsePoll 192.168.1.100
BrowseRemoteProtocols cups

# 重启服务
sudo systemctl restart cups-browsed

# 方法 3: 使用 Web 界面
# 访问 http://localhost:631/admin
# 添加打印机 → Internet Printing Protocol (ipp)
# 输入: ipp://192.168.1.100/printers/myprinter

# 使用加密的 IPP 连接
sudo lpadmin -p SecurePrinter -E \
  -v "ipps://192.168.1.100/printers/myprinter" \
  -m "everywhere"

# 配置 CUPS 服务器支持 TLS
# 1. 生成 SSL 证书
sudo openssl req -new -x509 -keyout /etc/cups/ssl/server.key \
  -out /etc/cups/ssl/server.crt -days 365 -nodes

# 2. 配置 cupsd.conf
# ServerCertificate /etc/cups/ssl/server.crt
# ServerKey /etc/cups/ssl/server.key

# 3. 重启 CUPS
sudo systemctl restart cups

# 4. 强制使用 TLS
# DefaultEncryption Required

# ipptool 是 IPP 协议的命令行测试工具

# 基本语法
ipptool [选项] ipp://URI 测试文件.test

# 常用选项
# -t        测试模式（不发送实际请求）
# -v        详细输出
# -d name=value  设置属性
# -f file   从文件读取数据

# 测试打印机是否在线
ipptool -tv ipp://192.168.1.100/ipp/print get-printer-attributes.test

# 获取打印机支持的格式
ipptool -tv ipp://192.168.1.100/ipp/print get-printer-attributes.test | \
  grep "document-format-supported"

# 测试打印作业
ipptool -tv ipp://192.168.1.100/ipp/print \
  -d file:///tmp/test.pdf \
  print-job.test

# CUPS 自带的测试文件位置
ls /usr/share/cups/ipptool/

# 常用测试文件:
# get-printer-attributes.test  - 获取打印机属性
# print-job.test               - 测试打印
# create-job.test              - 创建任务
# cancel-job.test              - 取消任务
# get-jobs.test                - 获取任务列表
# cups-get-printers.test       - 获取打印机列表
# identify-printer.test        - 识别打印机（闪烁指示灯）

# 创建完整的 IPP 测试套件
cat << 'EOF' > /tmp/ipp-comprehensive.test
{
  # 测试 1: 检查打印机是否在线
  NAME "Printer is online"
  OPERATION Get-Printer-Attributes
  GROUP operation-attributes-tag
  ATTR charset attributes-charset utf-8
  ATTR language attributes-natural-language en
  ATTR uri printer-uri $uri
  EXPECT printer-state WITH-VALUE >0
  EXPECT printer-is-accepting-jobs WITH-VALUE true
  STATUS successful-ok
}

{
  # 测试 2: 检查打印队列
  NAME "Check print queue"
  OPERATION Get-Jobs
  GROUP operation-attributes-tag
  ATTR charset attributes-charset utf-8
  ATTR language attributes-natural-language en
  ATTR uri printer-uri $uri
  STATUS successful-ok
}

{
  # 测试 3: 测试打印
  NAME "Test print job"
  OPERATION Print-Job
  GROUP operation-attributes-tag
  ATTR charset attributes-charset utf-8
  ATTR language attributes-natural-language en
  ATTR uri printer-uri $uri
  ATTR name requesting-user-name $user
  FILE "/usr/share/cups/data/testprint"
  STATUS successful-ok
  EXPECT job-id WITH-VALUE >0
}
EOF

# 运行测试
ipptool -tv ipp://localhost/printers/myprinter /tmp/ipp-comprehensive.test

# IPP 支持多种通知方式:
# - ipp-get: 轮询获取通知
# - in-band: 通过 IPP 连接接收
# - mailto: 邮件通知
# - rss: RSS 订阅

# 创建订阅
ipptool -tv ipp://localhost/printers/myprinter \
  -o notify-events=job-completed \
  -o notify-recipient-uri=mailto:admin@example.com \
  create-printer-subscription.test

# 查询订阅
ipptool -tv ipp://localhost/printers/myprinter \
  get-subscriptions.test

# 删除订阅
ipptool -tv ipp://localhost/printers/myprinter \
  -o subscription-id=1 \
  cancel-subscription.test

# 安全级别配置
# cupsd.conf 配置

# 1. 基本认证
# DefaultAuthType Basic

# 2. 摘要认证（更安全）
# DefaultAuthType Digest

# 3. TLS 加密
# DefaultEncryption Required
# ServerCertificate /etc/cups/ssl/server.crt
# ServerKey /etc/cups/ssl/server.key

# 4. 客户端证书认证
# DefaultAuthType ClientCertificate

# 步骤 1: 生成 CA 证书
openssl genrsa -out /etc/cups/ssl/ca.key 4096
openssl req -new -x509 -days 3650 -key /etc/cups/ssl/ca.key \
  -out /etc/cups/ssl/ca.crt

# 步骤 2: 生成服务器证书
openssl genrsa -out /etc/cups/ssl/server.key 2048
openssl req -new -key /etc/cups/ssl/server.key \
  -out /etc/cups/ssl/server.csr
openssl x509 -req -days 365 \
  -in /etc/cups/ssl/server.csr \
  -CA /etc/cups/ssl/ca.crt \
  -CAkey /etc/cups/ssl/ca.key \
  -out /etc/cups/ssl/server.crt

# 步骤 3: 配置 CUPS 使用 TLS
cat << 'EOF' >> /etc/cups/cupsd.conf
# TLS 配置
ServerCertificate /etc/cups/ssl/server.crt
ServerKey /etc/cups/ssl/server.key
DefaultEncryption Required
EOF

# 步骤 4: 重启 CUPS
sudo systemctl restart cups

# 步骤 5: 测试 TLS 连接
openssl s_client -connect localhost:631 -brief

# 需求：员工在家办公时能够打印到公司打印机

# 方案 1: VPN + IPP
# 1. 员工连接公司 VPN
# 2. 通过 VPN 访问 CUPS 服务器
sudo lpadmin -p OfficePrinter -E \
  -v "ipps://cups.company.com/printers/main" \
  -m "everywhere"

# 方案 2: 云打印
# 使用 Google Cloud Print 或类似服务
# 需要在公司 CUPS 服务器上配置云打印桥接

# 方案 3: SSH 隧道
ssh -L 631:localhost:631 user@cups.company.com
# 然后在本地添加打印机
sudo lpadmin -p OfficePrinter -E \
  -v "ipp://localhost:631/printers/main" \
  -m "everywhere"

# 需求：多个办公站点共享打印服务

# 在中心站点配置 CUPS 服务器
# /etc/cups/cupsd.conf
Listen 0.0.0.0:631

<Location />
  Order allow,deny
  Allow 192.168.1.0/24  # 站点 A
  Allow 192.168.2.0/24  # 站点 B
  Allow 10.0.0.0/8      # VPN
</Location>

# 在各站点配置 cups-browsed
# /etc/cups/cups-browsed.conf
BrowsePoll cups-central.company.com
BrowseRemoteProtocols cups

# 客户端自动发现所有打印机

# 需求：高安全性打印环境

# 1. 强制 TLS
DefaultEncryption Required

# 2. 客户端证书认证
DefaultAuthType ClientCertificate

# 3. IP 白名单
<Location />
  Order deny,allow
  Deny all
  Allow 192.168.1.100
  Allow 192.168.1.101
</Location>

# 4. 审计日志
AccessLog /var/log/cups/access_log
LogLevel info

# 5. 限制管理操作
<Location /admin>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
  Allow 192.168.1.100
</Location>