How to ban users with quattor

From PDP/Grid Wiki
Revision as of 17:29, 8 May 2009 by Ronalds@nikhef.nl (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Unfortunately, there is no universal method to ban grid users from using gLite services. Below is the summary (to be completed) of services and the method of banning:

  • lcg-CE, classic-SE: the banned user DNs need to be stored in /opt/edg/etc/lcas/ban_users.db and /opt/glite/etc/lcas/ban_users.db. The template $L/cfg/sites/ndpf/site/banned_users.tpl takes care of this.
  • WMS: To be completed
  • DPM: the banned user DNs need to be mapped to a non-existing Unix account in /opt/lcg/etc/lcgdm-mapfile-local. This cannot yet be accomplished via our quattor setup.
  • MyProxy (PX): To be completed