Dear experts,
We have tried to ban a user by adding its quoted DN in the following
files :
/opt/glite/etc/glite-ce-cream/banned.lst
/opt/glite/etc/lcas/ban_users.db
but it didn't work, the user is still able to submit jobs. The only
visible effect of banning in CREAM logs is the following :
------------------
7 Jun 2011 12:06:37,141 org.glite.ce.commonj.authz.BlackListServicePDP -
Identity banned: /C=BE/O=BEGRID/OU=IIHE/OU=ULB/CN=Stephane GERARD
27 Jun 2011 12:06:37,141 org.glite.ce.commonj.authz.GridMapServicePDP -
Identity authorized: /C=BE/O=BEGRID/OU=IIHE/OU=ULB/CN=Stephane
GERARD(1735476047)
27 Jun 2011 12:06:37,141 org.glite.ce.commonj.authz.AuthorizationHandler
- request for operation=QueryEvent;
REMOTE_REQUEST_ADDRESS=193.190.113.142;
USER_DN=C=BE,O=BEGRID,OU=IIHE,OU=ULB,CN=Stephane GERARD;
USER_FQAN={ /beapps/Role=NULL/Capability=NULL; }; AUTHORIZED!
------------------
Cheers,
Stéphane
|