LCMAPS_BAN_DN.MOD(8)
π LCMAPS_BAN_DN.MOD π
okay bestie, welcome to the lcmaps_ban_dn.mod(8) page β it lives in the Site Access Control section of the manual, and it is literally the bouncer of the LCMAPS world. no cap. let's get into it π«Ά
β¨ NAME β¨
lcmaps_ban_dn.mod β an LCMAPS plugin that bans a user based on the Subject DN. yes, the DN. the whole vibe check is about the DN. π
πΈ SYNOPSIS πΈ
lcmaps_ban_dn.mod [-banmapfile banning file]
[-no_wildcard|-disablewildcard]
π¦ DESCRIPTION π¦
so this plugin? it's a banning plugin. its whole job is to hand the LCMAPS system a credential banning feature based on the Distinguished Name (DN). iconic behavior honestly.
here's the tea: it reads a grid-mapfile and checks whether the DN appears on it.
- if the DN is on there β the plug-in fails with a
LCMAPS_MOD_FAIL. banned. blocked. not on the list. π - if the plugin succeeds and the DN does not appear in the banning file β the plugin finishes with a
LCMAPS_MOD_SUCCESS. come on in, bestie, you're on the guest list β¨
π OPTIONS π
-banmapfileban-mapfile β this option sets the path to the banning file, aka the file holding the list of DNs that must be banned by the plugin. strongly advised to set an absolute path to the ban-mapfile so you don't accidentally grab the wrong file(path). and listen β in a (setuid-)root application, relative paths are taken with respect to/etc/grid-security/. so like, know where you're pointing, fr fr π-no_wildcard,-disablewildcardβ when this option is set, the plug-in will only match exact DNs. meaning/DC=org/DC=terena/DC=tcs/C=NL/*will not match. no fuzzy matching, no vibes-based guessing. periodt.
π RETURN VALUES π
LCMAPS_MOD_SUCCESSβ Success. πLCMAPS_MOD_FAILβ Failure or banned. π
π BUGS π
found something broken? please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>. they're the ones who handle this. don't @ me, @ them π
β SEE ALSO β
lcmaps.db(5)lcmaps(3)
π AUTHORS π
LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>. absolute icons, no notes. π«Ά
and that's the whole page bestie!! now go forth and ban responsibly πβ¨
written by Stichting FOM/Nikhef, dated February 9, 2015 β and yes, that's the version and date, cute lil sign-off, mwah π πΈ
π¦ where this page comes from
- debian bookworm: lcmaps-plugins-basic-bandn 1.7.1-1+b3 Β· Apache-2.0
- debian trixie: lcmaps-plugins-basic-bandn 1.7.1-2+b1 Β· Apache-2.0
- ubuntu jammy: lcmaps-plugins-basic-bandn 1.7.1-1build1 Β· Apache-2.0
- ubuntu noble: lcmaps-plugins-basic-bandn 1.7.1-1ubuntu2 Β· Apache-2.0
- ubuntu questing: lcmaps-plugins-basic-bandn 1.7.1-2
- ubuntu resolute: lcmaps-plugins-basic-bandn 1.7.1-3 Β· Apache-2.0
- ubuntu stonking: lcmaps-plugins-basic-bandn 1.7.1-3 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms