[Openstack] Keystone Token expiration on long Swift operations.

Forrest Townsend forrest.town18 at gmail.com
Wed Apr 22 20:56:19 UTC 2015


I am using the jClouds Java api 1.8. I found this while doing some research
[https://issues.apache.org/jira/browse/JCLOUDS-615]  Seems as though they
know about it, just don't have the correct fix for it.

Tempurl is a neat feature but is something that I could not leverage.

Thanks for your information though Clint and Adam, looks like I need to
talking to the jClouds community!

-Forrest T.

On Wed, Apr 22, 2015 at 1:24 PM Adam Young <ayoung at redhat.com> wrote:

> On 04/22/2015 02:38 PM, Clay Gerrard wrote:
> >
> > I thought the default token lifetime was 24 hours, it's curious they
> > only last 1hr for you.
> We cut the default time down to an hour.  24 hours is s huge attack
> surface.  I'd like to make tokens 5 minutes long, with all longer
> operations done using some form of delegation (Trust, OAuth etc).
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150422/bb6a29d0/attachment.html>


More information about the Openstack mailing list