NAME

       lcmaps_ban_fqan.mod - LCMAPS plugin to ban a user based on any of its FQANs

SYNOPSIS

       lcmaps_ban_fqan.mod [-banmapfile banning file] [-disablewildcard]

DESCRIPTION

       This plugin is an Banning Plugin and will provide the LCMAPS system a credential banning feature based on
       VOMS  FQANs.   A  Gridmapfile  will be read, if the FQAN is listed, this means the FQAN is banned and the
       plug-in will register a negative result, this means an LCMAPS_MOD_FAIL.  The plugin will finish  its  run
       with  a  LCMAPS_MOD_SUCCESS  when the FQAN is not banned.  When there are no FQANs (including in the case
       when the VOMS credentials have expired), the plugin also finishes with  an  LCMAPS_MOD_SUCCESS  (versions
       before  1.6.2 would incorrectly fail in those cases).  This result will be reported to the Plugin Manager
       which started this plugin and it will forward this result to the  Evaluation  Manager,  which  will  take
       appropriate actions for the next plugin to run.

OPTIONS

       -banmapfile "banmapfile"
              When  this  option  is set the plug-in will use the path to the banning gridmapfile as a ban file.
              It is advised to use an absolute path to the gridmapfile to avoid usage of the wrong file(path).

       -disablewildcard
              When this option is set the plug-in will only match exact FQANs, i.e. /dteam* will not match.

RETURN VALUES

       LCMAPS_MOD_SUCCESS
              Success.

       LCMAPS_MOD_FAIL
              Failure or banned.

BUGS

       Please  report  any  errors  to   the   Nikhef   Grid   Middleware   Security   Team   <grid-mw-security-
       support@nikhef.nl>.

SEE ALSO

       lcmaps.db(5), lcmaps(3).

AUTHORS

       LCMAPS   and   the  LCMAPS  plug-ins  were  written  by  the  Grid  Middleware  Security  Team  <grid-mw-
       security@nikhef.nl>.

                                                  June 5, 2012                            LCMAPS_BAN_FQAN.MOD(8)