diff --git a/dirac.cfg b/dirac.cfg index ef53df92d4c..094549be395 100644 --- a/dirac.cfg +++ b/dirac.cfg @@ -602,6 +602,8 @@ Operations { # This will globally enable ES based monitoring for Service and AgentModule. EnableActivityMonitoring = yes + # Flag for globally disabling the use of the SecurityLogging service + EnableSecurityLogging = False DataManagement { # see http://dirac.readthedocs.io/en/latest/AdministratorGuide/Resources/Catalog/index.html#multi-protocol diff --git a/docs/source/AdministratorGuide/Configuration/ConfReference/Systems/Framework/Services/SecurityLogging/index.rst b/docs/source/AdministratorGuide/Configuration/ConfReference/Systems/Framework/Services/SecurityLogging/index.rst deleted file mode 100644 index 0e635e3be21..00000000000 --- a/docs/source/AdministratorGuide/Configuration/ConfReference/Systems/Framework/Services/SecurityLogging/index.rst +++ /dev/null @@ -1,11 +0,0 @@ -Systems / Framework / / Service / SecurityLogging - Sub-subsection -============================================================================= - -SecurityLogging service can be used by all services to log all connections, for security-related purpose. -It can be disabled globally via flag ``/Operations///EnableSecurityLogging``, or per-service. - -+-----------------+------------------------------------------+---------------------------------+ -| **Name** | **Description** | **Example** | -+-----------------+------------------------------------------+---------------------------------+ -| *DataLocation* | Directory where log info is kept | DataLocation = data/securityLog | -+-----------------+------------------------------------------+---------------------------------+ diff --git a/src/DIRAC/FrameworkSystem/ConfigTemplate.cfg b/src/DIRAC/FrameworkSystem/ConfigTemplate.cfg index 77dc1e07924..356d39ee7d2 100644 --- a/src/DIRAC/FrameworkSystem/ConfigTemplate.cfg +++ b/src/DIRAC/FrameworkSystem/ConfigTemplate.cfg @@ -48,6 +48,8 @@ Services SecurityLogging { Port = 9153 + # Directory where log info is kept + DataLocation = data/securityLog Authorization { Default = authenticated