Re: [pcp] PMCD Access control question

[Chandana De Silva <chandana@xxxxxxxxxxxxx>]

Lukas and Frank,

Thanks for your response. I guess I did not read the man page carefully enough.

Regards
Chandana

On Fri, 2015-08-07 at 09:19 -0400, Lukas Berk wrote:
> Hi,
>
> Chandana De Silva <chandana@xxxxxxxxxxxxx> writes:
> [...]
> > disallow ".*" : store;
> > disallow ":*" : store;
> > allow "local:*" : all;
> >
> > Does this mean that fetch is restricted to localhost, or is fetch
> > allowed from anywhere. In other words is ".* fetch" the default ?
> > I can currently access this particular host from any where, which
> > suggests ".*" 
>
> Fetch operations are not restricted to the localhost with this
> configuation.  In cases where there is no specific allow or disallow
> control statements applied to an operation (remote fetch's in this
> case), the default is to allow it.  The first two lines disallow store
> operation from any IPv4 and IPv6 address, and then the third overrides
> that for the localhost case.
>
> I would suggest taking a look at man pmcd(1) for more details,
> specifically the 'Access Control Specification' section.
>
> Cheers,
>
> Lukas