Hola Arnau,
> our LFC atlas is being "attacked" by some atlas user, and lfcdaemon can
> not handle so many queries. If we restart the daemon, it keeps up
> for only a couple of seconds.
>
> We have 2 lfcatlas and today we had lot of queries from user:
>
> # grep -c Kors /var/log/lfc/log.23_05_2009
> 63734
>
> # grep -c Kors /var/log/lfc/log
> 104956
>
> I was looking for how to ban that user, but it's not clear:
> https://twiki.cern.ch/twiki/bin/view/EGEE/GliteLFC#How_to_block_ban_a_user
> and
> https://savannah.cern.ch/bugs/?43710
>
> I changed user mapping but he still reaches the daemon.
Indeed, currently there is no correct way to ban a user on the LFC.
Since a VOMS proxy is being used, the least harmful method may be to
install an expired CRL (attached) for the CA of the DN in question...
Certificate Revocation List (CRL):
Version 1 (0x0)
Signature Algorithm: sha1WithRSAEncryption
Issuer: /C=NL/O=NIKHEF/CN=NIKHEF medium-security certification auth
Last Update: Feb 8 13:25:41 2008 GMT
Next Update: Mar 9 13:25:41 2008 GMT
Revoked Certificates:
Serial Number: 1C
Revocation Date: Jan 9 07:45:33 2002 GMT
Serial Number: 1D
Revocation Date: Jan 9 08:52:59 2002 GMT
Serial Number: 37
Revocation Date: Oct 22 07:59:35 2002 GMT
Serial Number: 48
Revocation Date: May 1 10:06:16 2002 GMT
Serial Number: 58
Revocation Date: May 3 14:10:57 2002 GMT
Serial Number: 72
Revocation Date: Jul 16 10:34:47 2003 GMT
Serial Number: A5
Revocation Date: Mar 10 14:26:04 2003 GMT
Serial Number: A9
Revocation Date: Oct 29 09:19:38 2003 GMT
Serial Number: C9
Revocation Date: Apr 10 13:48:11 2003 GMT
Serial Number: CA
Revocation Date: Apr 10 13:48:18 2003 GMT
Serial Number: CB
Revocation Date: Apr 10 13:48:26 2003 GMT
Serial Number: CD
Revocation Date: Jul 16 10:35:06 2003 GMT
Serial Number: D6
Revocation Date: Apr 11 11:33:30 2003 GMT
Serial Number: DF
Revocation Date: Jul 16 10:34:30 2003 GMT
Serial Number: E9
Revocation Date: Jun 19 16:20:44 2003 GMT
Serial Number: EE
Revocation Date: Sep 12 13:29:17 2003 GMT
Serial Number: EF
Revocation Date: Jul 16 10:33:37 2003 GMT
Serial Number: F8
Revocation Date: Mar 1 08:52:25 2004 GMT
Serial Number: 0110
Revocation Date: Oct 23 10:40:01 2003 GMT
Serial Number: 01B0
Revocation Date: Jul 6 08:24:30 2004 GMT
Serial Number: 01D1
Revocation Date: Oct 4 15:39:37 2004 GMT
Serial Number: 01D3
Revocation Date: Oct 1 12:20:05 2004 GMT
Serial Number: 01E3
Revocation Date: Oct 1 12:20:17 2004 GMT
Serial Number: 01F1
Revocation Date: Oct 1 12:40:35 2004 GMT
Serial Number: 0236
Revocation Date: Jan 19 17:25:15 2005 GMT
Serial Number: 0271
Revocation Date: Jul 7 16:08:29 2005 GMT
Serial Number: 0291
Revocation Date: Jun 2 14:42:33 2005 GMT
Serial Number: 0298
Revocation Date: Apr 5 13:36:50 2005 GMT
Serial Number: 0299
Revocation Date: Apr 5 13:36:59 2005 GMT
Serial Number: 02E5
Revocation Date: Jul 29 17:35:06 2005 GMT
Serial Number: 0305
Revocation Date: Dec 1 20:49:15 2005 GMT
Serial Number: 033D
Revocation Date: Oct 23 11:36:02 2006 GMT
Serial Number: 033E
Revocation Date: Oct 23 11:36:12 2006 GMT
Serial Number: 0367
Revocation Date: Jun 7 09:52:14 2006 GMT
Serial Number: 03E7
Revocation Date: Jun 28 10:53:38 2006 GMT
Serial Number: 03F3
Revocation Date: Jul 11 12:28:50 2006 GMT
Serial Number: 0474
Revocation Date: Oct 2 07:20:52 2007 GMT
Serial Number: 0484
Revocation Date: Dec 18 14:31:17 2006 GMT
Serial Number: 04B0
Revocation Date: Dec 5 08:05:00 2007 GMT
Serial Number: 04BE
Revocation Date: Dec 11 17:03:43 2007 GMT
Serial Number: 04C0
Revocation Date: Dec 11 17:04:01 2007 GMT
Serial Number: 04C6
Revocation Date: Dec 11 17:04:01 2007 GMT
Serial Number: 04CB
Revocation Date: Dec 11 17:07:46 2007 GMT
Serial Number: 04D1
Revocation Date: Dec 11 17:07:46 2007 GMT
Serial Number: 04D8
Revocation Date: Dec 11 17:07:46 2007 GMT
Serial Number: 04DC
Revocation Date: Dec 11 17:07:46 2007 GMT
Serial Number: 04E8
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 04E9
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 04EB
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 04EC
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 04F0
Revocation Date: Aug 9 15:07:33 2007 GMT
Serial Number: 04F3
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 04F8
Revocation Date: May 25 13:59:53 2007 GMT
Serial Number: 04FC
Revocation Date: May 24 16:01:25 2007 GMT
Serial Number: 04FD
Revocation Date: Dec 11 17:07:47 2007 GMT
Serial Number: 0513
Revocation Date: Dec 11 17:09:15 2007 GMT
Serial Number: 0521
Revocation Date: Dec 11 17:09:15 2007 GMT
Serial Number: 0529
Revocation Date: Dec 11 17:09:15 2007 GMT
Serial Number: 0534
Revocation Date: Dec 11 17:09:15 2007 GMT
Serial Number: 0538
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 0554
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 055B
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 0563
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 0575
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 0576
Revocation Date: Dec 11 17:09:16 2007 GMT
Serial Number: 057A
Revocation Date: Dec 11 17:09:17 2007 GMT
Serial Number: 0582
Revocation Date: Dec 11 17:09:17 2007 GMT
Serial Number: 0585
Revocation Date: Jul 13 14:32:41 2007 GMT
Serial Number: 0586
Revocation Date: Dec 11 17:09:17 2007 GMT
Serial Number: 0589
Revocation Date: Dec 11 17:09:17 2007 GMT
Serial Number: 058E
Revocation Date: Dec 11 17:10:46 2007 GMT
Serial Number: 0596
Revocation Date: Dec 11 17:10:46 2007 GMT
Serial Number: 0599
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05B9
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05BF
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05C6
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05D5
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05DC
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05DD
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05DE
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05DF
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05E0
Revocation Date: Dec 11 17:10:47 2007 GMT
Serial Number: 05E2
Revocation Date: Dec 11 17:10:48 2007 GMT
Serial Number: 05E4
Revocation Date: Dec 11 17:10:48 2007 GMT
Serial Number: 05EB
Revocation Date: Dec 11 17:10:48 2007 GMT
Serial Number: 05EC
Revocation Date: Dec 11 17:10:48 2007 GMT
Serial Number: 05ED
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 05F3
Revocation Date: Sep 28 16:06:28 2007 GMT
Serial Number: 05F4
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 05FF
Revocation Date: Sep 28 07:21:35 2007 GMT
Serial Number: 0622
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 0624
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 0628
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 062D
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 0639
Revocation Date: Dec 11 17:11:37 2007 GMT
Serial Number: 0642
Revocation Date: Dec 21 16:50:11 2007 GMT
Serial Number: 064D
Revocation Date: Dec 11 17:11:38 2007 GMT
Serial Number: 0662
Revocation Date: Dec 11 17:11:38 2007 GMT
Serial Number: 069D
Revocation Date: Jan 14 16:04:45 2008 GMT
Signature Algorithm: sha1WithRSAEncryption
7b:68:85:7b:21:da:13:a3:16:bc:2a:98:16:98:2d:c9:f9:2a:
1d:2e:61:88:4d:a0:61:73:09:17:ff:c0:3a:3b:f7:06:37:d4:
36:38:ad:9d:14:5b:58:ae:be:f0:43:4f:57:0b:af:7f:73:df:
b9:a4:fa:39:49:3e:5b:99:2e:3a:dc:f0:29:68:68:84:8b:af:
bd:a0:80:b8:82:04:f2:d3:99:5a:0a:89:ab:1c:13:95:70:40:
d3:7e:ed:3d:37:de:c1:57:c9:39:84:fd:d6:f2:c0:c0:40:cd:
1b:69:76:24:6d:05:d4:72:50:48:28:af:2d:94:2f:3f:8c:b7:
51:87:61:b3:a9:5d:b1:02:1a:eb:25:1b:8b:62:14:2c:56:c3:
8d:d1:c8:51:36:8b:ee:7f:98:f7:83:42:e6:7c:65:76:19:4c:
4c:e3:a7:95:34:5c:2a:3d:b8:be:17:77:b4:90:d1:08:bc:b5:
1b:7f:1d:55:de:14:1e:c6:24:41:5d:f1:bc:9c:77:22:85:49:
0a:57:28:bc:9c:03:f1:9f:e3:71:31:ff:9a:1a:91:29:e1:7d:
26:2d:3c:cb:81:9b:68:36:5e:e0:c7:0a:65:42:b4:43:bc:6f:
50:f4:c8:9c:01:9e:e9:1c:04:eb:07:77:3a:8a:18:95:76:f1:
6f:b6:59:9a
-----BEGIN X509 CRL-----
MIIJtjCCCJ4wDQYJKoZIhvcNAQEFBQAwUjELMAkGA1UEBhMCTkwxDzANBgNVBAoT
Bk5JS0hFRjEyMDAGA1UEAxMpTklLSEVGIG1lZGl1bS1zZWN1cml0eSBjZXJ0aWZp
Y2F0aW9uIGF1dGgXDTA4MDIwODEzMjU0MVoXDTA4MDMwOTEzMjU0MVowgggZMBIC
ARwXDTAyMDEwOTA3NDUzM1owEgIBHRcNMDIwMTA5MDg1MjU5WjASAgE3Fw0wMjEw
MjIwNzU5MzVaMBICAUgXDTAyMDUwMTEwMDYxNlowEgIBWBcNMDIwNTAzMTQxMDU3
WjASAgFyFw0wMzA3MTYxMDM0NDdaMBMCAgClFw0wMzAzMTAxNDI2MDRaMBMCAgCp
Fw0wMzEwMjkwOTE5MzhaMBMCAgDJFw0wMzA0MTAxMzQ4MTFaMBMCAgDKFw0wMzA0
MTAxMzQ4MThaMBMCAgDLFw0wMzA0MTAxMzQ4MjZaMBMCAgDNFw0wMzA3MTYxMDM1
MDZaMBMCAgDWFw0wMzA0MTExMTMzMzBaMBMCAgDfFw0wMzA3MTYxMDM0MzBaMBMC
AgDpFw0wMzA2MTkxNjIwNDRaMBMCAgDuFw0wMzA5MTIxMzI5MTdaMBMCAgDvFw0w
MzA3MTYxMDMzMzdaMBMCAgD4Fw0wNDAzMDEwODUyMjVaMBMCAgEQFw0wMzEwMjMx
MDQwMDFaMBMCAgGwFw0wNDA3MDYwODI0MzBaMBMCAgHRFw0wNDEwMDQxNTM5Mzda
MBMCAgHTFw0wNDEwMDExMjIwMDVaMBMCAgHjFw0wNDEwMDExMjIwMTdaMBMCAgHx
Fw0wNDEwMDExMjQwMzVaMBMCAgI2Fw0wNTAxMTkxNzI1MTVaMBMCAgJxFw0wNTA3
MDcxNjA4MjlaMBMCAgKRFw0wNTA2MDIxNDQyMzNaMBMCAgKYFw0wNTA0MDUxMzM2
NTBaMBMCAgKZFw0wNTA0MDUxMzM2NTlaMBMCAgLlFw0wNTA3MjkxNzM1MDZaMBMC
AgMFFw0wNTEyMDEyMDQ5MTVaMBMCAgM9Fw0wNjEwMjMxMTM2MDJaMBMCAgM+Fw0w
NjEwMjMxMTM2MTJaMBMCAgNnFw0wNjA2MDcwOTUyMTRaMBMCAgPnFw0wNjA2Mjgx
MDUzMzhaMBMCAgPzFw0wNjA3MTExMjI4NTBaMBMCAgR0Fw0wNzEwMDIwNzIwNTJa
MBMCAgSEFw0wNjEyMTgxNDMxMTdaMBMCAgSwFw0wNzEyMDUwODA1MDBaMBMCAgS+
Fw0wNzEyMTExNzAzNDNaMBMCAgTAFw0wNzEyMTExNzA0MDFaMBMCAgTGFw0wNzEy
MTExNzA0MDFaMBMCAgTLFw0wNzEyMTExNzA3NDZaMBMCAgTRFw0wNzEyMTExNzA3
NDZaMBMCAgTYFw0wNzEyMTExNzA3NDZaMBMCAgTcFw0wNzEyMTExNzA3NDZaMBMC
AgToFw0wNzEyMTExNzA3NDdaMBMCAgTpFw0wNzEyMTExNzA3NDdaMBMCAgTrFw0w
NzEyMTExNzA3NDdaMBMCAgTsFw0wNzEyMTExNzA3NDdaMBMCAgTwFw0wNzA4MDkx
NTA3MzNaMBMCAgTzFw0wNzEyMTExNzA3NDdaMBMCAgT4Fw0wNzA1MjUxMzU5NTNa
MBMCAgT8Fw0wNzA1MjQxNjAxMjVaMBMCAgT9Fw0wNzEyMTExNzA3NDdaMBMCAgUT
Fw0wNzEyMTExNzA5MTVaMBMCAgUhFw0wNzEyMTExNzA5MTVaMBMCAgUpFw0wNzEy
MTExNzA5MTVaMBMCAgU0Fw0wNzEyMTExNzA5MTVaMBMCAgU4Fw0wNzEyMTExNzA5
MTZaMBMCAgVUFw0wNzEyMTExNzA5MTZaMBMCAgVbFw0wNzEyMTExNzA5MTZaMBMC
AgVjFw0wNzEyMTExNzA5MTZaMBMCAgV1Fw0wNzEyMTExNzA5MTZaMBMCAgV2Fw0w
NzEyMTExNzA5MTZaMBMCAgV6Fw0wNzEyMTExNzA5MTdaMBMCAgWCFw0wNzEyMTEx
NzA5MTdaMBMCAgWFFw0wNzA3MTMxNDMyNDFaMBMCAgWGFw0wNzEyMTExNzA5MTda
MBMCAgWJFw0wNzEyMTExNzA5MTdaMBMCAgWOFw0wNzEyMTExNzEwNDZaMBMCAgWW
Fw0wNzEyMTExNzEwNDZaMBMCAgWZFw0wNzEyMTExNzEwNDdaMBMCAgW5Fw0wNzEy
MTExNzEwNDdaMBMCAgW/Fw0wNzEyMTExNzEwNDdaMBMCAgXGFw0wNzEyMTExNzEw
NDdaMBMCAgXVFw0wNzEyMTExNzEwNDdaMBMCAgXcFw0wNzEyMTExNzEwNDdaMBMC
AgXdFw0wNzEyMTExNzEwNDdaMBMCAgXeFw0wNzEyMTExNzEwNDdaMBMCAgXfFw0w
NzEyMTExNzEwNDdaMBMCAgXgFw0wNzEyMTExNzEwNDdaMBMCAgXiFw0wNzEyMTEx
NzEwNDhaMBMCAgXkFw0wNzEyMTExNzEwNDhaMBMCAgXrFw0wNzEyMTExNzEwNDha
MBMCAgXsFw0wNzEyMTExNzEwNDhaMBMCAgXtFw0wNzEyMTExNzExMzdaMBMCAgXz
Fw0wNzA5MjgxNjA2MjhaMBMCAgX0Fw0wNzEyMTExNzExMzdaMBMCAgX/Fw0wNzA5
MjgwNzIxMzVaMBMCAgYiFw0wNzEyMTExNzExMzdaMBMCAgYkFw0wNzEyMTExNzEx
MzdaMBMCAgYoFw0wNzEyMTExNzExMzdaMBMCAgYtFw0wNzEyMTExNzExMzdaMBMC
AgY5Fw0wNzEyMTExNzExMzdaMBMCAgZCFw0wNzEyMjExNjUwMTFaMBMCAgZNFw0w
NzEyMTExNzExMzhaMBMCAgZiFw0wNzEyMTExNzExMzhaMBMCAgadFw0wODAxMTQx
NjA0NDVaMA0GCSqGSIb3DQEBBQUAA4IBAQB7aIV7IdoToxa8KpgWmC3J+SodLmGI
TaBhcwkX/8A6O/cGN9Q2OK2dFFtYrr7wQ09XC69/c9+5pPo5ST5bmS463PApaGiE
i6+9oIC4ggTy05laComrHBOVcEDTfu09N97BV8k5hP3W8sDAQM0baXYkbQXUclBI
KK8tlC8/jLdRh2GzqV2xAhrrJRuLYhQsVsON0chRNovuf5j3g0LmfGV2GUxM46eV
NFwqPbi+F3e0kNEIvLUbfx1V3hQexiRBXfG8nHcihUkKVyi8nAPxn+NxMf+aGpEp
4X0mLTzLgZtoNl7gxwplQrRDvG9Q9MicAZ7pHATrB3c6ihiVdvFvtlma
-----END X509 CRL-----
|
