On Mon, Jun 13, 2005 at 04:49:31PM +0100 or thereabouts, owen maroney wrote:
> Hi,
>
> Hmm.
>
> Just checked the CE here and found that at 12:43 today someone copied
> ssh keys into ~/.ssh
>
> This seems fairly clearly an abuse of someones certificate.
>
> I am entirely happen to 'name' this person. I suggest other sites may
> want to check ls -latrh /home/*/.ssh
I don't think this user was doing anything that bad and was not in
anyway exploiting anything that has not already been known about for
ages. Don't give him a hard time. He just wanted to run jobs and was
making use of what he could do.
Steve
>
> Owen.
>
> Dan Schrager wrote:
>
> >I could give you the details of the certificate.
> >There is someone that had tried to bypass the certificate authentication
> >by inserting ssh keys into the ~/.ssh directory to which it had been
> >mapped on our public CE.
> >
> >Until further checks I will postpone the "name and shame" policy...
> >
> >
> >
> >Bly, MJ (Martin) wrote:
> >
> >>I suppose it is politic to ask: if you feel the need to urgently
> >>blacklist a user, should we all be doing the same?
> >>Martin.
> >>
> >>-----Original Message-----
> >>From: LHC Computer Grid - Rollout
> >>[mailto:[log in to unmask]] On Behalf Of Dan Schrager
> >>Sent: Monday, June 13, 2005 3:57 PM
> >>To: [log in to unmask]
> >>Subject: [LCG-ROLLOUT] How to blacklist a certificate at site level ??
> >>
> >>
> >>Hi everybody,
> >>
> >>There is an urgent need at our site to blacklist a certificate.
> >>
> >>Please advice how can this be done at local, gatekeeper(?) level.
> >>
> >>Regards,
> >>Dan
> >>
> >>
>
> --
> =======================================================
> Dr O J E Maroney # London Tier 2 Technical Co-ordinator
>
> Tel. (+44)20 759 47802
>
> Imperial College London
> High Energy Physics Department
> The Blackett Laboratory
> Prince Consort Road, London, SW7 2BW
> ====================================
> begin:vcard
> fn:Owen Maroney
> n:Maroney;Owen
> org:Imperial College London;High Energy Physics Department
> adr:Prince Consort Road;;The Blackett Laboratory;London;;SW7 2BW;United Kingdom
> email;internet:[log in to unmask]
> title:London Tier 2 Technical Co-ordinator
> tel;work:(+44)2075947802
> x-mozilla-html:FALSE
> version:2.1
> end:vcard
>
--
Steve Traylen
[log in to unmask]
http://www.gridpp.ac.uk/
|