set ALLOW_DAEMON to a more general value

HEP-Puppet · Jan 29, 2016 · 1df9a63 · 1df9a63
1 parent 1eeea45
commit 1df9a63
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/templates/10_security.config.erb b/templates/10_security.config.erb
@@ -42,7 +42,11 @@ COLLECTOR.ALLOW_ADVERTISE_STARTD = $(WNS)
 
 SCHEDD.ALLOW_WRITE = $(USERS), $(CES)
 
-ALLOW_DAEMON = condor@$(UID_DOMAIN)/*.$(UID_DOMAIN), condor_pool@$(UID_DOMAIN)/*.$(UID_DOMAIN), $(FULL_HOSTNAME)
+ALLOW_DAEMON = condor@$(UID_DOMAIN), \
+               condor@$(UID_DOMAIN)/*.$(UID_DOMAIN), \
+               condor_pool@$(UID_DOMAIN), \
+               condor_pool@$(UID_DOMAIN)/*.$(UID_DOMAIN), \
+               $(FULL_HOSTNAME)
 ALLOW_ADMINISTRATOR = root@$(UID_DOMAIN)/$(IP_ADDRESS), condor_pool@$(UID_DOMAIN)/$(IP_ADDRESS), $(CMS)
 ALLOW_CONFIG = root@$(FULL_HOSTNAME)