Description of problem: I’m able to query user access to Satellite using /api/v2/users and able to get last_login_on value, however, this only seems to record when a user accesses the GUI. I’m looking to see if there is a way to record when a user accesses API as well. Expected results: Run a report to track which user accounts are accessing the API. Additional info: Customer is looking to implement a "use it or lose it" policy for accessing the API.
Created redmine issue https://projects.theforeman.org/issues/28168 from this bug
*** Bug 1765052 has been marked as a duplicate of this bug. ***
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/28168 has been resolved.
Verified with Sat 6.8 snap 3.0. Created a new user. Last login was empty. Then, with this user: 1) Logged in in WebUI 2) Listed hosts through Hammer 3) Listed hosts through API After each action, last login got updated to current time in the "User - Registered Users" report.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Satellite 6.8 release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:4366