As I have just said to Mona, you should ban a user in this way:
In the file
/opt/edg/etc/grid-mapfile-local
you should place Heinz's DN and map him to a non-existent pool account.
"<Heinz's DN>" nonexistent001
then rebuild the grid-mapfile by
/opt/edg/sbin/edg-mkgridmap --output=/etc/grid-security/grid-mapfile --safe
If you are running a DPM, you could also map his DN to a different VO by
modifying the file
/opt/lcg/etc/lcgdm-mapfile-local
to have
"<Heinz's DN>" nonexistentvo
and then rebuilding the lcgdm-mapfile by running,
/opt/edg/libexec/edg-mkgridmap/edg-mkgridmap.pl
--conf=/opt/lcg/etc/lcgdm-mkgridmap.conf
--output=/opt/lcg/etc/lcgdm-mapfile --safe
Hope that helps.
Cheers,
Greig
On 07/11/07 14:41, Jens Jensen wrote:
> [sent to gridpp-storage and tb-support and cc'ed to Mingchao]
>
> Looking through the information system, these are the SEs which are
> accessible to biomed in the UK:
>
> dcache.gridpp.rl.ac.uk
> srm.epcc.ed.ac.uk
> wn3.epcc.ed.ac.uk
> dgc-grid-34.brunel.ac.uk
> gfe02.hep.ph.ic.ac.uk
> se01.esc.qmul.ac.uk
> se1.pp.rhul.ac.uk
> gw-3.ccc.ucl.ac.uk
> fal-pygrid-20.lancs.ac.uk
> segrid1.ph.liv.ac.uk
> dcache01.tier2.hep.manchester.ac.uk
> dcache02.tier2.hep.manchester.ac.uk
> lcgse1.shef.ac.uk
> gallows.dur.scotgrid.ac.uk
> svr018.gla.scotgrid.ac.uk
> epgse1.ph.bham.ac.uk
> serv02.hep.phy.cam.ac.uk
> t2se01.physics.ox.ac.uk
> heplnx204.pp.rl.ac.uk
>
> Can people please check whether Heinz has any files in them and whether
> access has been blocked?
>
> Cheers
> --jens
|