[openstack-dev] [Keystone] Trust Specification Updated

Dolph Mathews dolph.mathews at gmail.com
Tue Dec 4 11:23:04 UTC 2012


+1


-Dolph


On Tue, Dec 4, 2012 at 4:48 AM, David Chadwick <d.w.chadwick at kent.ac.uk>wrote:

> Hi Adam
>
> in terms of delegation duration, it is more common to specify a start time
> (defaults to now) and an end time (defaults to infinity) rather than a
> delta (which implies a start time of now in every case)
>
> regards
>
> David
>
>
>
> On 04/12/2012 04:16, Adam Young wrote:
>
>> On 12/03/2012 04:19 PM, David Chadwick wrote:
>>
>>> Hi Adam
>>>
>>> yes this is nice work. I have added a few minor mods to the wiki
>>> version to pick up a few missing pieces. I have annotated these with
>>> <David> so that you can easily spot them
>>>
>>
>> Good changes all.  I took two of them pretty much as is (DELETE  and the
>> optional fields).  I also added this
>> http://wiki.openstack.org/**Keystone/Trusts#Token_Format_**Changes<http://wiki.openstack.org/Keystone/Trusts#Token_Format_Changes>to
>> account for tracking the chain of responsibility.
>>
>>
>>> regards
>>>
>>> David
>>>
>>>
>>> On 03/12/2012 16:34, Adam Young wrote:
>>>
>>>> I realize we have had a little bit of disagreement on what to call
>>>> this.  I am going to continue to call it "Trusts" as it is a subset of
>>>> the set of mechanisms for delegation.
>>>>
>>>> I've wikified the Specification.  Big thanks to David Chatwick for
>>>> making this a much better spec.
>>>>
>>>> http://wiki.openstack.org/**Keystone/Trusts<http://wiki.openstack.org/Keystone/Trusts>
>>>>
>>>> Blueprint is still at
>>>>
>>>> https://blueprints.launchpad.**net/keystone/+spec/trusts<https://blueprints.launchpad.net/keystone/+spec/trusts>
>>>>
>>>>
>>>> I will continue to work on this, to include, for example, how to
>>>> specifiy duration and start times, but there should be enough here for
>>>> people to understand.
>>>>
>>>> My initial write up:
>>>>
>>>> http://adam.younglogic.com/**2012/10/preauthorization-in-**keystone/<http://adam.younglogic.com/2012/10/preauthorization-in-keystone/>
>>>>
>>>> ______________________________**_________________
>>>> OpenStack-dev mailing list
>>>> OpenStack-dev at lists.openstack.**org <OpenStack-dev at lists.openstack.org>
>>>> http://lists.openstack.org/**cgi-bin/mailman/listinfo/**openstack-dev<http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev>
>>>>
>>>
>>
> ______________________________**_________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.**org <OpenStack-dev at lists.openstack.org>
> http://lists.openstack.org/**cgi-bin/mailman/listinfo/**openstack-dev<http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20121204/f407fc37/attachment.html>


More information about the OpenStack-dev mailing list