Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow token janitor to run token owner queries #3830

Open
Tracked by #3955
stavros-souvatzis opened this issue Dec 7, 2023 · 2 comments
Open
Tracked by #3955

Allow token janitor to run token owner queries #3830

stavros-souvatzis opened this issue Dec 7, 2023 · 2 comments
Labels
Type: Feature request A change requested or proposed by a user which is not on the default roadmap

Comments

@stavros-souvatzis
Copy link

In certain cases, shared user accounts may get to have a big number of assigned tokens. I've seen cases with more than 50 tokens per account.

By leveraging the existing functionality, to be able to find tokens that haven't been used for more than XXX, we could also add owner information to the query.

There is already the tokeninfo query, adding a tokenowner query would greatly improve this functionality.

For example

privacyidea-token-janitor find --tokenowner-key user_id --tokenowner-value 642cf598-d9cf-1037-8083-a1df7d38c897 --last_auth 180d --action disable
@stavros-souvatzis stavros-souvatzis added the Type: Feature request A change requested or proposed by a user which is not on the default roadmap label Dec 7, 2023
Copy link

github-actions bot commented Dec 7, 2023

Thank you for filing an issue and sharing your observations or ideas. Please be sure to provide as much information as possible to help us to work on this issue.

@cornelinux
Copy link
Member

We would also need the resolver, to find the corresponding valu ein the tokenowner table.
However, when specifiying the user_id this is fine, since we would not need a resolver-request to e.g. LDAP.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Feature request A change requested or proposed by a user which is not on the default roadmap
Projects
None yet
Development

No branches or pull requests

2 participants