<div dir="ltr">Thanks, will look forward forĀ <a href="https://review.openstack.org/#/c/454897/">https://review.openstack.org/#/c/454897/</a><div><br></div><div>Regards,</div><div>Kanthi Pavuluri</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 11, 2017 at 7:46 PM, Lance Bragstad <span dir="ltr"><<a href="mailto:lbragstad@gmail.com" target="_blank">lbragstad@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
This sounds like something that was discussed during the PTG. The
oslo team was exploring ways to implement this, which would be
consumable to keystonemiddleware as a library [0].<br>
<br>
[0] <a class="m_-5523617763048949723moz-txt-link-freetext" href="https://etherpad.openstack.org/p/oslo-ptg-queens" target="_blank">https://etherpad.openstack.<wbr>org/p/oslo-ptg-queens</a><div><div class="h5"><br>
<br>
<div class="m_-5523617763048949723moz-cite-prefix">On 10/11/2017 07:43 AM, pnkk wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">Hi,
<div><br>
</div>
<div>We have our API server(based on pyramid) integrated with
keystone for AuthN/AuthZ.</div>
<div>So our service has a *.conf file which has
[keystone_authtoken] section that defines all the stuff needed
for registering to keystone.</div>
<div><br>
</div>
<div>WSGI pipeline will first get filtered with keystone auth
token and then get into our application functionality.</div>
<div><br>
</div>
<div>Now as part of hardening, we want to save an encrypted
password(admin password) in the conf file.</div>
<div>Where should I put the decryption logic so it gets passed
to the middleware in the needed format?</div>
<div><br>
</div>
<div>Appreciate your help!</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Kanthi</div>
</div>
<br>
<fieldset class="m_-5523617763048949723mimeAttachmentHeader"></fieldset>
<br>
</div></div><pre>______________________________<wbr>______________________________<wbr>______________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="m_-5523617763048949723moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.<wbr>openstack.org?subject:<wbr>unsubscribe</a>
<a class="m_-5523617763048949723moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack-dev</a>
</pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div>