Open Stack

On 1/30/15 1:33 PM, Everett Toews wrote:
> Once I have the token from Keystone, I’ll be talking directly to the
> services. So either something goes wrong with Keystone and I get no
> token or I get a token and talk directly to a service. Either way a
> client knows who it's talking to.

That's only true if you are using PKI tokens, and you already have the 
ca files from keystone. If you're using UUID, then the service takes 
your token and validates it with keystone.

-- 
-jlk