Google Admin Console - Log IP Addresses - google-admin-sdk

I have created a project for GAM using their instructions and it works. I can access our G Suite and print OS and User information to csv on the command line.
I need to do something very similar, but I need the Chrome devices' IP address at the time it last logged in.
I have found a 'LAN IP Address' under each devices 'System and Activity Troubleshooting' section, but our devices do not seem to be logging this information.
I would certainly provide example of what I have tried to far, but I am not sure where to begin. My objectives are:
Start logging the wireless LAN IP address each time a device logs into G Suite
Be able to access that information on a command line similar to GAM functionality
If anyone can offer guidance I would be very grateful. I thought the Login Report API would help, but it only logs the internet address from the device to Google, as far as I can tell.

Related

Can you restrict ip address on google sign in module?

So basically i have a website where people can login via google sign in api, i've configured the api purely. The software is made out of php and twig. But i wanted to know if i can restrict sign in from google. Like, 2 people can't log in to the website simultaneously at a moment. Suppose, i have an email logged in via google named email#gmail.com and im gonna log in to the same email from another place with another ip address. Can i restrict that?

Links in e-mail are opened by someone else (Django)

I'm running Django on an Apache server on Ubuntu and the activation of a new account via a link in an e-mail fails sometimes. I've checked my access logs and I can see that the activation link is opened by an EC2 server (whois lookup gives an AWS resource, IP is not the public IP of my own server). Any ideas who/what this could be? I have TLS enabled in settings.py for sending emails: EMAIL_USE_TLS = True.
So the reason for failing the activiation is because the link is already openend, but I'm worried what happens there. I've seen this happening 3 times with completely different user agents for 3 completely different account-activations but from the same IP address.
The first thing that came to my mind is that maybe an e-mail client is opening the links to generate a preview? Like, to show a screenshot when the user hovers the link.
Why do you make links usable once? You can use a token that is valid until the account is actually activated (and disable the link if the account is not activated for a certain amount of time).

Check if Per User Outbound Gateway is in use via Admin SDK

Recently discovered in our Google Admin Portal that: Per User outbound Gateway is turned on, checking with other people I work with, no one knows why its turned on and when it was turned on.
I have been digging through the Google admin sdk and have not found a way to check to see if any users is using this setting.
In short, does anyone know how I can check to see if a user in our domain has a secondary smtp connection or a "Send Mail As" option in use?
So, the setting 'allow per user outbound gateway' does indeed give users permissions to add a 'From' address external to your domain. However if anyone is using this, they'll likely need to configure it as a send-mail as address inside Gmail.
You can list all 'Send as addresses' via the Email settings API as per https://developers.google.com/admin-sdk/email-settings/#retrieving_send-as_alias_settings. Note that the code examples provided will not work as they're out of date and showing client Login which has been disabled for months now. I'd be advising you to Auth with Oauth 2.0, call the endpoint with wget or CURL(probably wget since recursive)

AppFog - Unauthorized source IP address

I host an Facebook application (https://apps.facebook.com/igoaltip/) on AppFog. Suddenly it stopped working. When I try to get information about the user using user access token (https://graph.facebook.com/me), Facebook returns OAuthException (#5) Unauthorized source IP.
I use Node.JS on server with facebook-node-sdk.
I do not specify IPs in server IP whitelist.
In Heroku, i've had the same issue, and a simple restart solved my problem!
Currently experiencing the same issues on Appfog regarding Facebook requests. AppFog might have received a block from Facebook.
We added the US east IP's of appfog to our whitelist, but for more then half an hour we still receive the same error. Stangely enough we can still use the apps tokens from other IP's. This causes me to believe it takes quite a while for Facebook to enforce the whitelist
Send a support ticket to support#appfog.com and they will help you with getting your app whitelisted with Facebook. Put Facebook and Whitelist in the subject.
According to appfog, it's something they need to take care of, you can only work around it by cloning apps, which for me isn't a solution for SoA architectured app
Source: https://groups.google.com/forum/m/#!topic/appfog-users/K4UCWhvxGZU

WSO2 VMware image - validate email address?

I'm running the WSO2 Stratos VMware image, and I have it to the point where it's running, I've got the browser open, it's at my internal deployment of WSO2, and I've created an account for myself. The problem is, the VM isn't networked to anything, so when it tells me it sent an email to my account and would I please validate it, I can't validate it because it never actually sent an email. I thought maybe there'd be a local mail server on the Linux guest, but I couldn't find one.
Am I missing something? Do I even need to validate the account? I can't seem to access any of the Stratos services, and I suspect that the account validation has something to do with that.
You can log in as an administrator (with the default username/password: admin/admin) and activate the tenant/account you created.