Open Stack

On Fri, Aug 23, 2013 at 10:51 AM, Miller, Mark M (EB SW Cloud - R&D -
Corvallis) <mark.m.miller at hp.com> wrote:

>  Hello,****
>
> ** **
>
> I would think you would want to reuse the same token but update the
> expiration time as if it were the first time the token had been generated.
>

That wouldn't work for PKI tokens, as the resulting signature would have to
change.


> ****
>
> ** **
>
> Mark****
>
> ** **
>
> *From:* Yongsheng Gong [mailto:gongysh at unitedstack.com]
> *Sent:* Friday, August 23, 2013 12:40 AM
> *To:* OpenStack Development Mailing List
> *Subject:* [openstack-dev] [keystone] Two BPs for managing the tokens****
>
> ** **
>
> Hi,****
>
> Talked with Henry Nash and Jamie Lennox on IRC, I have created two BPs to
> manage the keystone tokens:****
>
> 1.
> https://blueprints.launchpad.net/keystone/+spec/periodically-flush-expired-token
> ****
>
> which is used to delete expired token****
>
> 2.  https://blueprints.launchpad.net/keystone/+spec/reuse-token****
>
> which will re-use valid token****
>
> ** **
>
> These two BPs will help us to reduce the token records in token table
> enormously.****
>
> ** **
>
> I have put some ideas on the BP description.****
>
> ** **
>
> Any comments are welcome.****
>
> ** **
>
> ** **
>
> Regards,****
>
> Yong Sheng Gong****
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>


-- 

-Dolph
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130823/f5b49ce1/attachment.html>