[openstack-dev] default keyring use to False?

Chris Behrens cbehrens at codestud.com
Fri Dec 7 06:46:42 UTC 2012


I am in favor of this change and the suggested replacement option and env variable.  I've been bitten numerous times by the caching one way or another.  It's not something I would expect to be the default and I'd rather things not automatically use my keyring unless I explicitly said it was okay to do so.

On Dec 6, 2012, at 9:36 PM, Dan Prince <dprince at redhat.com> wrote:

> What are thoughts on disabling keyring use in our clients by default?
> 
> Some background:
> 
> If you have python-keyring installed and try to use the most recent versions of novaclient and keystoneclient you'll end up with a prompt like this:
> 
>  Please set a password for your new keyring
>  Warning: Password input may be echoed.
>  Password (again):
> 
> To work around this many of us set --no-cache or even export an environment variable OS_NO_CACHE. It seems like most people are doing this by default... so why not cut our losses here and change our keyring settings to be disabled by default.
> 
> Now that this is included in keystoneclient this also effects other clients (which make use of it for auth) as well. I hit this today with glanceclient... and it would presumably effect swiftclient as well.
> 
> To avoid the double negative perhaps changing the option to be called --os-cache (which would be defaulting to False) would make sense as well? We could call the environment variable OS_CACHE as well.
> 
> Dan
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list