WAM: How to Clean OIDC Token in WAM?
SUBJECT / PROBLEM DESCRIPTION
How to Clean OIDC Token in WAM?
ANSWER / SOLUTION
Yes , there is a possibility to removed/cleaned expired tokens on Evidian WAM via Command Line or automatic way.
Verify the default configuration Clean Expired Tokens under $LPF_ROOT_DIR/config/lpf.conf
Default validity duration for tokens used for authentication,
in seconds (Default value: 600 seconds).
DEFAULT_AUTH_TOKENS_VALIDITY=600
Expired tokens clean frequency, in minutes
(Defaut value: 15 minutes).
EXPIRED_TOKENS_CLEAN_FREQUENCY=15
Remove/Clean Tokens via CLI :
- Go to the WAM installation Directory $LPF_ROOT_DIR/bin
./lpfldaputil -u
cleantokens: to remove tokens that are older than
- Execute below command to clean token and this command will clean older than 1 day.
./lpfldaputil -u cleantokens
[root@rocky bin]# ./lpfldaputil -u cleantokens
Removing expired authentication tokens ...
0 authentication tokens have been removed
Removing authentication tokens that are older than 1 day(s) ...
Success: Authentication tokens older than 1 days have been successfully removed
- Clean Token more than 10 days older
[root@rocky bin]# ./lpfldaputil -u cleantokens -D 10
Removing expired authentication tokens ...
0 authentication tokens have been removed
Removing authentication tokens that are older than 10 day(s) ...
Success: Authentication tokens older than 10 days have been successfully removed
There is also a possibility to Export WAM config without authentication tokens
- Execute below command to have WAM config without Tokens
[root@rocky bin]# ./lpfldaputil -u export -g
Exporting the branch 'o=lpfRoot' of the WAM Directory ...
Exporting the branch 'o=lpfuserroot' of the WAM Directory ...
Success: The WAM Directory has been successfully exported to file '/usr/evidian/lpf/tmp/pxpbackup_22_Oct_2024_15_16_33'
[root@rocky bin]#
Where :
-D
-g: for the 'export' utility, ignore authentication tokens
If you would like to clean OpenID Expired Tokens automatic way , please refers to below FAQ : How to Activate OpenID Expired Tokens Clean on WAM Node?
PRODUCT VERSION(S)
WAM 9.0.8 , WAM 9.0.9 , WAM 9.0.10
KEYWORDS
Clean Tokens , OIDC Clean Tokens , OIDC , Expired Tokens
Knowledge Base Id: | Q0xxxxx | |
---|---|---|
Article Type: | Technical Note | |
Last Reviewed: |