Description

A REMOTE_CONFIG_ACCESS entry authorizes update access to the product configuration files and setting of the configuration managed mode of the Broker.

Universal Enterprise Controller requests this access when it needs to configure a product using its remote configuration capabilities.

There are two forms of the REMOTE_CONFIG_ACCESS entry:

• remote_config_access is based on the host name and user ID of the client.
• remote_config_cert_access is based on a certificate map of the client.

Usage

Values

host specifies an IP address of a Universal Agent component.

remote_user is the user identifier with which Universal Enterprise Controller is executing on the remote system.

(See Client Identification for details on host and remote_user specification syntax.)

update_access specifies whether or not configuration file updates are allowed.

Valid values for update_access are:

• deny
  Access is denied to the update request.
• allow
  Access is allowed to the update request.

control_access specifies whether or not the Broker can be placed into managed mode or taken out of managed mode.

Valid values for control_access are:

• deny
  Access is denied to the managed mode request.
• allow
  Access is allowed to the managed mode request.

Defaults

remote_config_access ALL,*,deny,deny

remote_config_cert_access *,deny,deny

Examples

remote_config_access 10.20.30.40,uecprod,allow,allow

remote_config_access ALL,*,deny,deny

remote_config_cert_access uecprod,allow,allow

remote_config_cert_access *,deny,deny