Denying users to login based on pattern in multiple auth flows

[Simon Lundström]

Hi!

We have multiple auth flows enabled (RemoteUser|SPNEGO|Password to be
exact) and we would like to be able to disallow users whos username
matches a list of patterns to login, preferably via RegExps.

Allowed:
simlu

Denied:
simlu/root
prefix-automatically-generated-1234

RemoteUserInternal already has matchExpression but sadly we're not using
it and it wouldn't solve the other two flows.

Is it possible to use some kind of Activation Condition? Or Subject
Canonicalization?

Have a great weekend!

BR,
- Simon

____________________________________

Simon Lundström
Section for Infrastructure

IT Services
Stockholm University
SE-106 91 Stockholm, Sweden

www.su.se/english/staff-info/it