I agree :)
Oscar Koeroo a écrit :
> I think this is a bad procedure.
>
> Removing a DN from the automaticly refreshing gridmapfile at time X
> can let you think you have removed the user but the cron could have
> refreshed the grid-mapfile.
> Also the revoking the cert takes time and so does removing the DN from
> the VO.
>
> good luck shielding your site :-)
>
> cheers,
>
> Oscar
>
>
> Frederic Schaer wrote:
>
>> Hi,
>>
>> If it's urgent : you can remove the user DN from your CE (SE)
>> gridmapfile(s) and ask the user's CA to revoke this certificate if
>> he's trying to abuse...
>>
>> Cheers,
>> Frederic
>>
>> Dan Schrager a écrit :
>>
>>> Hi everybody,
>>>
>>> There is an urgent need at our site to blacklist a certificate.
>>>
>>> Please advice how can this be done at local, gatekeeper(?) level.
>>>
>>> Regards,
>>> Dan
>>>
>
|