NAME

       lcmaps_ban_dn.mod - LCMAPS plugin to ban a user based on the Subject DN

SYNOPSIS

       lcmaps_ban_dn.mod [-banmapfile banning file] [-no_wildcard|-disablewildcard]

DESCRIPTION

       This  plugin  is  a  banning  plugin and will provide the LCMAPS system with a credential banning feature
       based on the Distinguished Name (DN).  It will read a grid-mapfile and check whether the  DN  appears  on
       it.  If  that  is  the case, the plug-in will fail with a LCMAPS_MOD_FAIL.  If the plugin succeeds and DN
       does not appear in the banning file the plugin will finish with a LCMAPS_MOD_SUCCESS

OPTIONS

       -banmapfile ban-mapfile
              This option sets the path to the banning file which contains the list of DNs which must be  banned
              by  the  plugin.  It is strongly advised to set an absolute path to the ban-mapfile to avoid usage
              of the wrong file(path). In a (setuid-)root application, relative paths are taken with respect  to
              /etc/grid-security/.

       -no_wildcard, -disablewildcard
              When    this    option    is    set    the    plug-in    will   only   match   exact   DNs,   i.e.
              /DC=org/DC=terena/DC=tcs/C=NL/* will not match.

RETURN VALUES

       LCMAPS_MOD_SUCCESS
              Success.

       LCMAPS_MOD_FAIL
              Failure or banned.

BUGS

       Please  report  any  errors  to   the   Nikhef   Grid   Middleware   Security   Team   <grid-mw-security-
       support@nikhef.nl>.

SEE ALSO

       lcmaps.db(5), lcmaps(3).

AUTHORS

       LCMAPS   and   the  LCMAPS  plug-ins  were  written  by  the  Grid  Middleware  Security  Team  <grid-mw-
       security@nikhef.nl>.