<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body class="" style="word-wrap:break-word">
It is still mentioned in the Juno installation docs:
<div class=""><br class="">
</div>
<div class="">
<div class="" style="margin:0px; font-size:10.5px">By default, the Identity service stores expired tokens in the database indefinitely. The</div>
<div class="" style="margin:0px; font-size:10.5px">accumulation of expired tokens considerably increases the database size and might degrade</div>
<div class="" style="margin:0px; font-size:10.5px">service performance, particularly in environments with limited resources.</div>
<div class="" style="margin:0px; font-size:10.5px">We recommend that you use <span class="" style="font-size:10.5px; font-family:Courier">
cron </span>to configure a periodic task that purges expired tokens</div>
<div class="" style="margin:0px; font-size:10.5px">hourly:</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier"># (crontab -l -u keystone 2>&1 | grep -q token_flush) || \</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier">echo '@hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier">keystone-tokenflush.log 2>&1' \</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier">>> /var/spool/cron/keystone</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier"><br class="">
</div>
<div class="" style="margin:0px; font-size:9px; font-family:Courier"><br class="">
</div>
<div class=""><br class="">
Mike Smith<br class="">
Principal Engineer, Website Systems<br class="">
<a href="http://Overstock.com" class="">Overstock.com</a><br class="">
<br class="">
<br class="">
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jan 24, 2015, at 10:03 AM, Daniel Comnea <<a href="mailto:comnea.dani@gmail.com" class="">comnea.dani@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="">Hi all,<br class="">
<br class="">
<br class="">
</div>
<div class="">I just bumped into Sebastien's blog where he suggested a cron job should run in production to tidy up expired tokens - see blog[1]<br class="">
<br class="">
</div>
<div class="">Could you please remind me if this is still required in IceHouse/ Juno? (i kind of remember i've seen some work being done in this direction but i can't find the emails)<br class="">
<br class="">
<br class="">
</div>
<div class="">Thanks,<br class="">
Dani<br class="">
<br class="">
[1] <a href="http://www.sebastien-han.fr/blog/2014/08/18/a-must-have-cron-job-on-your-openstack-cloud/" class="">
http://www.sebastien-han.fr/blog/2014/08/18/a-must-have-cron-job-on-your-openstack-cloud/</a>
<br class="">
</div>
</div>
_______________________________________________<br class="">
OpenStack-operators mailing list<br class="">
<a href="mailto:OpenStack-operators@lists.openstack.org" class="">OpenStack-operators@lists.openstack.org</a><br class="">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators<br class="">
</div>
</blockquote>
</div>
<br class="">
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
CONFIDENTIALITY NOTICE: This message is intended only for the use and review of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this message is not the intended recipient, or
 the employee or agent responsible for delivering the message solely to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in
 error, please notify sender immediately by telephone or return email. Thank you.<br>
</font>
</body>
</html>