LCMAPS_BAN_FQAN.MOD(8)

💅 LCMAPS_BAN_FQAN.MOD — the ban-hammer bestie 💅

okay so welcome to lcmaps_ban_fqan.mod, section 8 of the manual (Site Access Control vibes ✨). this is the LCMAPS plugin that bans a user based on any of its FQANs. yes. it's giving bouncer-at-the-club energy and honestly? iconic.

---

✨ SYNOPSIS ✨

lcmaps_ban_fqan.mod [-banmapfile banning file]
                    [-no_wildcard|-disablewildcard]

like. that's the whole shape of it. two optional flags, one job. 🎀

---

🌸 DESCRIPTION 🌸

so here's the tea, bestie 🍓 — this plugin is a banning plugin. its whole personality is giving LCMAPS a credential banning feature based on VOMS FQANs.

what it does: it reads a gridmapfile 📖 and checks whether any of the registered FQANs shows up on it. if even one of them is on the list?

boom. the plug-in fails with LCMAPS_MOD_FAIL. that's a ban, bestie. no cap. 💀

and if the plugin succeeds and no FQAN appears in the banning file? then it wraps up with LCMAPS_MOD_SUCCESS. slay. ✨

also important, and this is the part people get wrong: when there are no FQANs at all (and yes, that includes the case when the VOMS credentials have expired), the plugin also finishes with LCMAPS_MOD_SUCCESS. 🫶

lowkey a glow-up note: versions before 1.6.2 would incorrectly fail in those cases. so if you're on something ancient, that's on you, not on the plugin. 🙈

---

💖 OPTIONS 💖

• -banmapfile ban-mapfile — sets the path to the banning file, aka the list of FQANs that this plugin has to ban. and listen, it is strongly advised to set an absolute path to the ban-mapfile so you don't accidentally use the wrong file (or the wrong file path, iykyk 😭). and in a (setuid-)root application, relative paths get taken with respect to /etc/grid-security/. so. yeah. absolute path. do it. 💅
• -no_wildcard, -disablewildcard — flip this on and the plug-in will only match exact FQANs. translation: /dteam* will not match. periodt. 👑

---

⭐ RETURN VALUES ⭐

• LCMAPS_MOD_SUCCESS — success. we love to see it. 🎀
• LCMAPS_MOD_FAIL — failure, or banned. either way, not the vibe. 🚫

---

🙈 BUGS 🙈

found something cursed? please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>. they wanna know. fr fr. 🫶

---

🌈 SEE ALSO 🌈

• lcmaps.db(5)
• lcmaps(3)

---

👑 AUTHORS 👑

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>. absolute main characters. respect. 💜

---

and that's the whole page, bestie 🦋 — brought to you by Stichting FOM/Nikhef, dated February 9, 2015, living in section 8 of the manual as LCMAPS_BAN_FQAN.MOD(8). mwah. go ban responsibly. 💅✨