Access management and authentication Red Hat Ansible Automation Platform 2.5 Configure role based access control, authenticators and authenticator maps in Ansible Automation Platform Red Hat Customer Content Services

Commands:
sudo subscription-manager register --username <USDINSERT_USERNAME_HERE> --password <USDINSERT_PASSWORD_HERE>
sudo subscription-manager list --available --all | grep "Ansible Automation Platform" -B 3 -A 6
Subscription Name: Red Hat Ansible Automation, Premium (5000 Managed Nodes) Provides: Red Hat Ansible Engine Red Hat Ansible Automation Platform SKU: MCT3695 Contract: ```` Pool ID: <pool_id> Provides Management: No Available: 4999 Suggested: 1
sudo subscription-manager attach --pool=<pool_id>
sudo subscription-manager remove --pool=<pool_id>
sudo subscription-manager list --consumed
sudo subscription-manager repos --enable ansible-automation-platform-2.5-for-rhel-8-x86_64-rpms
sudo subscription-manager repos --enable ansible-automation-platform-2.5-for-rhel-9-x86_64-rpms
CN=josie,CN=users,DC=website,DC=com
name_attr: cn
member_attr: member
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 3650 -nodes
GET_ALL_EXTRA_DATA: true
{ "en-US": { "url": "http://www.example.com", "displayname": "Example", "name": "example" } }
givenName: Some User
emailAddress: suser@example.com
givenName: Some User
emailAddress: suser@example.com
sign_request: yes
// Indicates whether the <samlp:AuthnRequest> messages sent by this SP // will be signed. [Metadata of the SP will offer this info] "authnRequestsSigned": false, // Indicates a requirement for the <samlp:Response>, <samlp:LogoutRequest> // and <samlp:LogoutResponse> elements received by this SP to be signed. "wantMessagesSigned": false, // Indicates a requirement for the <saml:Assertion> elements received by // this SP to be signed. [Metadata of the SP will offer this info] "wantAssertionsSigned": false, // Authentication context. // Set to false and no AuthContext will be sent in the AuthNRequest, // Set true or don't present this parameter and you will get an AuthContext 'exact' 'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport' // Set an array with the possible auth context values: array ('urn:oasis:names:tc:SAML:2.0:ac:classes:Password', 'urn:oasis:names:tc:SAML:2.0:ac:classes:X509'), "requestedAuthnContext": true,
- Department - UserType - Organization
CORS_ORIGIN_ALLOW_ALL = True CORS_ALLOWED_ORIGIN_REGEXES = [ r"http://django-oauth-toolkit.herokuapp.com*", r"http://www.example.com*" ]
id: 35
type: access_token
user: 1
token: omMFLk7UKpB36WN2Qma9H3gbwEBSOc
refresh_token: AL0NK9TTpv0qp54dGbC4VUZtsZ9r8z
application: 6
expires: 2017-12-06T03:46:17.087022Z
scope: read write
curl -X POST -d "grant_type=refresh_token&refresh_token=AL0NK9TTpv0qp54dGbC4VUZtsZ9r8z" -u "gwSPoasWSdNkMDtBN3Hu2WYQpPWCO9SwUEsKK22l:fI6ZpfocHYBGfm1tP92r0yIgCyfRdDQt0Tos9L8a4fNsJjQQMwp9569eIaUBsaVDgt2eiwOGe0bg5m5vCSstClZmtdy359RVx2rQK5YlIWyPlrolpt2LEpVeKXWaiybo" http://<gateway>/o/token/ -i
HTTP/1.1 200 OK Server: nginx/1.12.2 Date: Tue, 05 Dec 2017 17:54:06 GMT Content-Type: application/json Content-Length: 169 Connection: keep-alive Content-Language: en Vary: Accept-Language, Cookie Pragma: no-cache Cache-Control: no-store Strict-Transport-Security: max-age=15768000 {"access_token": "NDInWxGJI4iZgqpsreujjbvzCfJqgR", "token_type": "Bearer", "expires_in": 315360000000, "refresh_token": "DqOrmz8bx3srlHkZNKmDpqA86bnQkT", "scope": "read write"}
curl -X POST -d "token=rQONsve372fQwuc2pn76k3IHDCYpi7" -u "gwSPoasWSdNkMDtBN3Hu2WYQpPWCO9SwUEsKK22l:fI6ZpfocHYBGfm1tP92r0yIgCyfRdDQt0Tos9L8a4fNsJjQQMwp9569eIaUBsaVDgt2eiwOGe0bg5m5vCSstClZmtdy359RVx2rQK5YlIWyPlrolpt2LEpVeKXWaiybo" http://<gateway>/o/revoke_token/ -i
aap-gateway-manage create_oauth2_token --user example_user New OAuth2 token for example_user: j89ia8OO79te6IAZ97L7E8bMgXCON2
aap-gateway-manage revoke_oauth2_tokens
aap-gateway-manage revoke_oauth2_tokens --revoke_refresh
aap-gateway-manage revoke_oauth2_tokens --user example_user
aap-gateway-manage revoke_oauth2_tokens --user example_user --revoke_refresh
You have already reached the maximum number of 1 hosts allowed for your organization. Contact your System Administrator for assistance.