allow read to anyone, block unwanted with iptables

HEP-Puppet · Jan 29, 2016 · ca5595e · ca5595e
1 parent 7590abe
commit ca5595e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/templates/10_security.config.erb b/templates/10_security.config.erb
@@ -32,7 +32,8 @@ HOSTALLOW_NEGOTIATOR = $(COLLECTOR_HOST)
 HOSTALLOW_ADMINISTRATOR = $(COLLECTOR_HOST)
 HOSTALLOW_NEGOTIATOR_SCHEDD = $(COLLECTOR_HOST)
 
-ALLOW_READ = */*.$(UID_DOMAIN)
+# allow read to anyone, block unwanted with iptables
+ALLOW_READ = *
 ALLOW_WRITE = $(CMS), $(CES), $(WNS)
 
 #if the CE has a private NIC, it needs to be included here as well