![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
diff --git a/doc/rrdcached.txt b/doc/rrdcached.txt
index f2091de9c0309936b43c3af8437be656f4b806a7..34262a0f475c8f13e49c90d7d2830d470e4ac6f0 100644 (file)
--- a/doc/rrdcached.txt
+++ b/doc/rrdcached.txt
"[\b[_\ba_\bd_\bd_\br_\be_\bs_\bs]\b]:\b:_\bp_\bo_\br_\bt_\b". If the address is an IPv4 address or a fully
qualified domain name (i. e. the address contains at least one dot
(".")), the square brackets can be omitted, resulting in the
"[\b[_\ba_\bd_\bd_\br_\be_\bs_\bs]\b]:\b:_\bp_\bo_\br_\bt_\b". If the address is an IPv4 address or a fully
qualified domain name (i. e. the address contains at least one dot
(".")), the square brackets can be omitted, resulting in the
- (simpler) "_\ba_\bd_\bd_\br_\be_\bs_\bs:\b:_\bp_\bo_\br_\bt_\b" pattern. The default port is 4\b42\b22\b21\b17\b7/\b/u\bud\bdp\bp. If
+ (simpler) "_\ba_\bd_\bd_\br_\be_\bs_\bs:\b:_\bp_\bo_\br_\bt_\b" pattern. The default port is 4\b42\b22\b21\b17\b7/\b/t\btc\bcp\bp. If
you specify a network socket, it is mandatory to read the "SECURITY
CONSIDERATIONS" section.
you specify a network socket, it is mandatory to read the "SECURITY
CONSIDERATIONS" section.
permission context of the web server).
This option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg UNIX socket addresses (the
permission context of the web server).
This option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg UNIX socket addresses (the
- following -\b-l\bl options), i.e., you may specify different settings for
+ following -\b-l\bl options) or the default socket (if no -\b-l\bl options have
+ been specified), i.e., you may specify different settings for
different sockets.
The default is not to change ownership or permissions of the socket
different sockets.
The default is not to change ownership or permissions of the socket
sockets. See _\bu_\bn_\bi_\bx(7) for details.
This option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg UNIX socket addresses (the
sockets. See _\bu_\bn_\bi_\bx(7) for details.
This option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg UNIX socket addresses (the
- following -\b-l\bl options), i.e., you may specify different settings for
+ following -\b-l\bl options) or the default socket (if no -\b-l\bl options have
+ been specified), i.e., you may specify different settings for
different sockets.
The default is not to change ownership or permissions of the socket
different sockets.
The default is not to change ownership or permissions of the socket
rrdcached -P FLUSH,PENDING $MORE_ARGUMENTS
The -\b-P\bP option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg socket addresses (the following
rrdcached -P FLUSH,PENDING $MORE_ARGUMENTS
The -\b-P\bP option affects the _\bf_\bo_\bl_\bl_\bo_\bw_\bi_\bn_\bg socket addresses (the following
- -\b-l\bl options). In the following example, only the IPv4 network socket
+ -\b-l\bl options) or the default socket (if no -\b-l\bl options have been
+ specified). In the following example, only the IPv4 network socket
(address 10.0.0.1) will be restricted to the "FLUSH" and "PENDING"
commands:
(address 10.0.0.1) will be restricted to the "FLUSH" and "PENDING"
commands:
S\bSE\bEC\bCU\bUR\bRI\bIT\bTY\bY C\bCO\bON\bNS\bSI\bID\bDE\bER\bRA\bAT\bTI\bIO\bON\bNS\bS
A\bAu\but\bth\bhe\ben\bnt\bti\bic\bca\bat\bti\bio\bon\bn
S\bSE\bEC\bCU\bUR\bRI\bIT\bTY\bY C\bCO\bON\bNS\bSI\bID\bDE\bER\bRA\bAT\bTI\bIO\bON\bNS\bS
A\bAu\but\bth\bhe\ben\bnt\bti\bic\bca\bat\bti\bio\bon\bn
- There is no authentication.
+ If your rrdtool installation was built without libwrap there is no form
+ of authentication for clients connecting to the rrdcache daemon!
- The client/server protocol does not yet have any authentication
- mechanism. It is likely that authentication and encryption will be
- added in a future version, but for the time being it is the
- administrator's responsibility to secure the traffic from/to the
- daemon!
+ If your rrdtool installation was built with libwrap then you can use
+ hosts_access to restrict client access to the rrdcache daemon
+ (rrdcached). For more information on how to use hosts_access to
+ restrict access to the rrdcache daemon you should read the
+ _\bh_\bo_\bs_\bt_\bs_\b__\ba_\bc_\bc_\be_\bs_\bs(5) man pages.
- It is highly recommended to install a packet filter or similar
+ It is still highly recommended to install a packet filter or similar
mechanism to prevent unauthorized connections. Unless you have a
dedicated VLAN or VPN for this, using network sockets is probably a bad
idea!
mechanism to prevent unauthorized connections. Unless you have a
dedicated VLAN or VPN for this, using network sockets is probably a bad
idea!
-1.4.3 2010-03-22 RRDCACHED(1)
+1.4.7 2011-03-15 RRDCACHED(1)