kerberos is also a udp service

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index f4abeb198277b1dd81ae9d05ccddd57bd8a3e1e5..193d701c3175a397885c33498081bc68e3253210 100644 (file)
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -132,7 +132,7 @@ class ferm::per-host {
             @ferm::rule { "dsa-krb-kdc":
                 domain          => "(ip ip6)",
                 description  => "kerberos KDC",
-                rule         => "&SERVICE(tcp, kerberos)"
+                rule         => "&TCP_UDP_SERVICE(kerberos)"
             }
         }
     }