 |
 |
On Mon, Jun 13, 2005 at 04:49:31PM +0100 or thereabouts, owen maroney wrote: > Hi, > > Hmm. > > Just checked the CE here and found that at 12:43 today someone copied > ssh keys into ~/.ssh > > This seems fairly clearly an abuse of someones certificate. > > I am entirely happen to 'name' this person. I suggest other sites may > want to check ls -latrh /home/*/.ssh I don't think this user was doing anything that bad and was not in anyway exploiting anything that has not already been known about for ages. Don't give him a hard time. He just wanted to run jobs and was making use of what he could do. Steve > > Owen. > > Dan Schrager wrote: > > >I could give you the details of the certificate. > >There is someone that had tried to bypass the certificate authentication > >by inserting ssh keys into the ~/.ssh directory to which it had been > >mapped on our public CE. > > > >Until further checks I will postpone the "name and shame" policy... > > > > > > > >Bly, MJ (Martin) wrote: > > > >>I suppose it is politic to ask: if you feel the need to urgently > >>blacklist a user, should we all be doing the same? > >>Martin. > >> > >>-----Original Message----- > >>From: LHC Computer Grid - Rollout > >>[mailto:[log in to unmask]] On Behalf Of Dan Schrager > >>Sent: Monday, June 13, 2005 3:57 PM > >>To: [log in to unmask] > >>Subject: [LCG-ROLLOUT] How to blacklist a certificate at site level ?? > >> > >> > >>Hi everybody, > >> > >>There is an urgent need at our site to blacklist a certificate. > >> > >>Please advice how can this be done at local, gatekeeper(?) level. > >> > >>Regards, > >>Dan > >> > >> > > -- > ======================================================= > Dr O J E Maroney # London Tier 2 Technical Co-ordinator > > Tel. (+44)20 759 47802 > > Imperial College London > High Energy Physics Department > The Blackett Laboratory > Prince Consort Road, London, SW7 2BW > ==================================== > begin:vcard > fn:Owen Maroney > n:Maroney;Owen > org:Imperial College London;High Energy Physics Department > adr:Prince Consort Road;;The Blackett Laboratory;London;;SW7 2BW;United Kingdom > email;internet:[log in to unmask] > title:London Tier 2 Technical Co-ordinator > tel;work:(+44)2075947802 > x-mozilla-html:FALSE > version:2.1 > end:vcard > -- Steve Traylen [log in to unmask] http://www.gridpp.ac.uk/