<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 11/18/2015 03:40 AM, ESWAR RAO
wrote:<br>
</div>
<blockquote
cite="mid:CAA0WQjxk3LhPc4kz+YzEegG3WZCrmV3z1_Dqz9AtQ5gp2CTTEQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi All,
<div><br>
</div>
<div>I have an application which does some HEAT transactions of
creating stack,polling for it and updating stack in a loop.</div>
<div><br>
</div>
<div>
<p class=""><span class="">In my setup,
/etc/keystone/keystone.conf has below settings:</span></p>
<p class="">expiration=3600</p>
<p class="">But my transaction loop takes more than 1 hr and
AUTH token is expired in between and I am getting :</p>
<p class=""><span class=""> Exception in heat start task for
stack </span>jsm-e08dceac-71fe-48e8-817e-93ec78881827 of
network service e08dceac-71fe-48e8-817e-93ec78881827 due to</p>
<p class=""> ERROR: Authentication failed.Please try again
with option --include-password or export
HEAT_INCLUDE_PASSWORD=1</p>
<p class="">Is there any means of making the auth-token not
getting expired instead of changing expiration time in
keystone conf ??</p>
</div>
</div>
</blockquote>
<br>
No. It has been a long lived discussion, and the solution is still
not agreed on. The goal is to avoid long lived tokens, but properly
scope delegation across long workflow.<br>
<br>
<blockquote
cite="mid:CAA0WQjxk3LhPc4kz+YzEegG3WZCrmV3z1_Dqz9AtQ5gp2CTTEQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<p class="">Thanks</p>
<p class="">Eswar</p>
<p class=""><br>
</p>
<p class=""><br>
</p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
</blockquote>
<br>
</body>
</html>