...
Listing domain tokens
| Code Block |
|---|
curl -iL -u admin:datacore -XGET "http://{domain}/.TOKEN/?format=json" |
| Code Block | ||
|---|---|---|
| ||
GET http://{domain}/.TOKEN/?format=json
Cookie: token=d9f8378f71e79b77831f65d9e6891af6
HTTP/1.1 200 OK
Gateway-Request-Id: F48303758301E570
Castor-Object-Count: 3
Content-Type: application/json; charset=utf-8
Content-Length: 651
[
{"x_token_domain_meta":"{domain}", "x_owner_meta":"john",
"last_modified":"2012-06-22T05:39:44.854100Z",
"lifepoint":"[Sat, 23 Jun 2012 05:39:44 GMT] reps=2,[] delete",
"name":"7e742e12fb7e070b44266df1a1bf2efe"},
...
] |
Listing tenant tokens
| Code Block |
|---|
curl -iL-u admin:datacore -X GET "http://{domain}/_admin/manage/tenants/{tenant}/tokens/" |
| Code Block |
|---|
GET http://{domain}/_admin/manage/tenants/tenant256/tokens/
Authorization: Basic Z2NhcmxpbjpmdW5ueQ== |
...
Perform a DELETE on the full token path and authenticate the request with a token or with HTTP basic authentication to logout and remove an authentication token.
Deleting a domain token
| Code Block |
|---|
curl -iL-u admin:datacore -X DELETE "http://{domain}/.TOKEN/53dfb96dc6d5b9cacd174e3649cba6d5" |
| Code Block | ||
|---|---|---|
| ||
DELETE http://{domain}/.TOKEN/53dfb96dc6d5b9cacd174e3649cba6d5
Cookie: token=22f57e203c10cf86d2dfd9564b1413f5
|
Deleting a tenant token
| Code Block |
|---|
curl -iL -u admin:datacore -X DELETE "http://{domain}/_admin/manage/tenants/{tenant}/53dfb96dc6d5b9cacd174e3649cba6d5" |
| Code Block |
|---|
DELETE http://{domain}/_admin/manage/tenants/tenant256/tokens/53dfb96dc6d5b9cacd174e3649cba6d5
Authorization: Basic Z2NhcmxpbjpmdW5ueQ== |
...
This method is for those using a PAM as a front-end for traditional Unix authentication.
Lock the user account by change the password:
passwd -l USERNAMEChange the username:
zzzUSERNAME
LDAP Authentication:
Standardize an attribute within one of the schemas that apply to the user record for which enabled user accounts always have set to a known value.
Design a test for the value.
| Info |
|---|
Tip Although negative test can be used to find disabled accounts, there is less risk of mistakes with the affirmative method: attribute is value. |
...