LCMAPS_BAN_DN.MOD(8)

πŸ’– LCMAPS_BAN_DN.MOD πŸ’–

okay bestie, welcome to the lcmaps_ban_dn.mod(8) page β€” it lives in the Site Access Control section of the manual, and it is literally the bouncer of the LCMAPS world. no cap. let's get into it 🫢


✨ NAME ✨

lcmaps_ban_dn.mod β€” an LCMAPS plugin that bans a user based on the Subject DN. yes, the DN. the whole vibe check is about the DN. πŸ’…


🌸 SYNOPSIS 🌸

lcmaps_ban_dn.mod [-banmapfile banning file]
                  [-no_wildcard|-disablewildcard]

πŸ¦‹ DESCRIPTION πŸ¦‹

so this plugin? it's a banning plugin. its whole job is to hand the LCMAPS system a credential banning feature based on the Distinguished Name (DN). iconic behavior honestly.

here's the tea: it reads a grid-mapfile and checks whether the DN appears on it.

  • if the DN is on there β†’ the plug-in fails with a LCMAPS_MOD_FAIL. banned. blocked. not on the list. πŸ’€
  • if the plugin succeeds and the DN does not appear in the banning file β†’ the plugin finishes with a LCMAPS_MOD_SUCCESS. come on in, bestie, you're on the guest list ✨

πŸ’… OPTIONS πŸ’…

  • -banmapfile ban-mapfile β€” this option sets the path to the banning file, aka the file holding the list of DNs that must be banned by the plugin. strongly advised to set an absolute path to the ban-mapfile so you don't accidentally grab the wrong file(path). and listen β€” in a (setuid-)root application, relative paths are taken with respect to /etc/grid-security/. so like, know where you're pointing, fr fr πŸ™ˆ
  • -no_wildcard, -disablewildcard β€” when this option is set, the plug-in will only match exact DNs. meaning /DC=org/DC=terena/DC=tcs/C=NL/* will not match. no fuzzy matching, no vibes-based guessing. periodt.

🌈 RETURN VALUES 🌈

  • LCMAPS_MOD_SUCCESS β€” Success. πŸŽ€
  • LCMAPS_MOD_FAIL β€” Failure or banned. 😭

πŸ“ BUGS πŸ“

found something broken? please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>. they're the ones who handle this. don't @ me, @ them πŸ’œ


⭐ SEE ALSO ⭐


πŸ‘‘ AUTHORS πŸ‘‘

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>. absolute icons, no notes. 🫢


and that's the whole page bestie!! now go forth and ban responsibly πŸ’–βœ¨

written by Stichting FOM/Nikhef, dated February 9, 2015 β€” and yes, that's the version and date, cute lil sign-off, mwah πŸ’…πŸŒΈ