[openstack-dev] Expired tokens in Keystone

Jay Pipes jaypipes at gmail.com
Wed Jun 12 18:04:01 UTC 2013


On 06/12/2013 12:54 PM, Craig E. Ward wrote:
> I am working with a Folsom installation of OpenStack. The Keystone
> database (mysql) gets very large. The token table has millions of rows
> of expired tokens. Is there a reason not to delete these from the table?

Not unless you need them for some security auditing purpose... and if 
you don't, I recommend switching to the memcache token driver. It's 
faster and doesn't have the drawback of filling up your identity 
database will millions of token records.

best,
-jay




More information about the OpenStack-dev mailing list